$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer File: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer (raw, json) Hash identifier: GFAV0MYg2JrVJZxZO+d1lxSXpbszwKmV/wCtLZVWLBw= Subject key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584D1194624E6C7758FED273BB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Mar 2026 15:09:18 +0000 Certificate not after: Mon 28 Jun 2027 18:24:46 +0000 Subordinate resources: AS: 35941 AS: 203939 IP: 23.136.116.0/24 IP: 2602:f6a7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:94:62:4e:6c:77:58:fe:d2:73:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 5 15:09:18 2026 GMT Not After : Jun 28 18:24:46 2027 GMT Subject: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:7e:8d:f9:3a:f3:3e:6e:6e:9e:f1:83:38: 90:ed:77:ed:6b:9c:be:04:24:d7:b0:29:54:a3:92: d8:6c:6a:c7:aa:47:d5:13:29:84:6d:1c:99:ea:41: 59:ef:3d:b0:5a:99:20:67:72:2f:8a:62:6e:34:b0: 5e:5f:2a:40:2e:ad:ff:c7:f5:a5:cf:7b:91:f5:f7: 48:99:52:9b:1c:69:2a:74:df:9d:41:cf:b9:26:bf: 09:b0:4b:90:4a:15:46:7f:06:f7:6c:0d:a7:28:60: 91:b4:f1:17:d1:39:58:78:68:d6:52:ad:3d:da:ff: 93:50:78:df:c2:10:81:80:d8:13:66:09:7e:e5:f0: cf:1a:92:f4:9f:0e:7b:1f:ff:66:55:e5:b8:59:01: 79:4e:c9:52:f5:ab:39:d0:88:e8:f2:ce:c9:0a:c2: ae:d3:ee:54:e4:52:96:d9:75:15:53:73:e2:04:85: d7:71:c9:80:c2:c1:ec:ac:15:c9:6e:57:fb:c6:e3: da:61:0f:9d:c2:9e:31:f3:c0:eb:fc:6b:f2:67:06: 38:47:8c:6b:e7:b8:05:a1:88:8e:35:de:9e:6a:33: 60:f9:b4:2b:be:02:9e:c9:9c:fe:ac:c1:a4:d3:eb: 0d:56:e2:32:15:d6:ff:f7:5d:a3:08:65:73:65:80: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.116.0/24 IPv6: 2602:f6a7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35941 203939 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:77:c7:18:f2:81:3a:51:19:25:0e:32:4c:88:b4:5c:10:03: 01:58:15:2b:3f:78:07:f5:82:e3:ba:51:e8:52:3d:90:24:2d: 4f:d7:fd:a8:8e:3e:4f:27:94:39:56:e8:39:3a:ed:09:fb:df: 7a:29:8e:08:70:ec:5c:ec:87:58:27:41:bf:0a:8c:04:5b:b9: 18:76:2f:00:68:fc:c8:14:58:08:d3:9f:8b:a2:2c:f4:65:b8: f0:a4:cf:ea:fb:41:89:4d:ee:37:a9:be:d3:e9:72:19:e4:d9: 66:e1:56:9a:f7:8f:77:c7:a4:2c:aa:96:6e:7e:26:0b:2d:b2: c6:ac:7c:9c:c0:47:e5:05:de:eb:cc:64:47:d0:56:88:77:24: 22:c1:87:7c:2b:c6:52:99:b6:34:83:f0:28:a4:c5:83:88:ee: a9:c0:ff:8d:a1:90:96:c6:59:cc:73:03:e5:f0:02:2a:6b:1e: e4:a4:c9:7f:38:bf:80:91:e5:d7:5c:61:c8:a9:17:c1:00:45: d3:41:85:00:db:d9:bf:a6:84:d4:ac:fd:96:c0:51:e4:58:38: 3a:92:aa:33:fa:6f:89:3a:44:24:23:d8:6d:46:cc:a7:c8:77: 3d:c3:34:be:0d:d4:8e:a5:ab:65:b0:23:ee:c7:16:43:cb:90: 03:58:ae:7c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE0RlGJObHdY/tJzu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDMwNTE1MDkxOFoXDTI3MDYyODE4MjQ0NlowLzEtMCsGA1UEAxMk NzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRhYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEh+jfk68z5ubp7xgziQ7Xfta5y+BCTXsClU o5LYbGrHqkfVEymEbRyZ6kFZ7z2wWpkgZ3IvimJuNLBeXypALq3/x/Wlz3uR9fdI mVKbHGkqdN+dQc+5Jr8JsEuQShVGfwb3bA2nKGCRtPEX0TlYeGjWUq092v+TUHjf whCBgNgTZgl+5fDPGpL0nw57H/9mVeW4WQF5TslS9as50Ijo8s7JCsKu0+5U5FKW 2XUVU3PiBIXXccmAwsHsrBXJblf7xuPaYQ+dwp4x88Dr/GvyZwY4R4xr57gFoYiO Nd6eajNg+bQrvgKeyZz+rMGk0+sNVuIyFdb/912jCGVzZYAjgwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFEVWCKlPPi4wLWqlXKLo5VD9WwQZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcwNDU5NWMzLTZkOTItNGZjMS1i N2E4LWQ4ZTgxYTA0YWE3YS83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEw NGFhN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiHQwDgQCAAIwCAMGBCYC9qcAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwCMZQIDAxyjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA93xxjygTpRGSUOMkyI tFwQAwFYFSs/eAf1guO6UehSPZAkLU/X/aiOPk8nlDlW6Dk67Qn733opjghw7Fzs h1gnQb8KjARbuRh2LwBo/MgUWAjTn4uiLPRluPCkz+r7QYlN7jepvtPpchnk2Wbh Vpr3j3fHpCyqlm5+JgstssasfJzAR+UF3uvMZEfQVoh3JCLBh3wrxlKZtjSD8Cik xYOI7qnA/42hkJbGWcxzA+XwAiprHuSkyX84v4CR5ddcYcipF8EARdNBhQDb2b+m hNSs/ZbAUeRYODqSqjP6b4k6RCQj2G1GzKfIdz3DNL4N1I6lq2WwI+7HFkPLkANY rnw= -----END CERTIFICATE-----Generated at Thu Mar 26 00:12:49 2026 by rpki-client