$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer File: 3dce7e6f-4588-4d9b-bb90-80f074656851.cer (raw, json) Hash identifier: 6oI/lOOaBB2a4y+ssxXfAFQH+DQZ3FjnQenz5gbu1BA= Subject key identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DB49DEDE3E73CE45683928460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 May 2026 00:45:17 +0000 Certificate not after: Sat 05 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 15012 IP: 23.133.52.0/24 IP: 2602:f713::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:9d:ed:e3:e7:3c:e4:56:83:92:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 3 00:45:17 2026 GMT Not After : Aug 5 00:45:17 2028 GMT Subject: CN=3dce7e6f-4588-4d9b-bb90-80f074656851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:38:91:a3:5b:5f:ad:f6:76:1d:55:2d:bf:2b: c9:e0:18:78:64:b0:4e:80:e6:0d:9e:51:a2:03:c8: 39:ba:fe:a1:83:82:d7:5e:83:5d:b5:94:05:e3:43: fb:90:60:40:39:14:0b:b3:3d:92:81:36:d5:1c:6d: 39:ae:11:a8:77:69:58:07:10:94:fd:de:e9:f9:ac: 07:bc:a5:df:39:b9:44:91:fd:f2:d2:a6:5d:b1:c1: 04:00:6a:30:40:41:82:9d:2d:69:7a:8e:b8:43:94: b9:64:f9:04:11:23:e4:9c:26:a3:d1:9f:8b:36:ee: 48:91:12:e9:77:4e:69:31:d1:39:fc:0d:de:08:1d: 82:5b:a5:f8:ed:4c:07:c3:ce:04:dc:8d:c0:60:9f: cf:33:ed:32:b5:c8:d3:42:9e:f0:35:de:f2:21:61: c8:a1:82:90:5c:79:38:37:c0:f8:32:57:31:07:d0: a5:41:e4:e7:43:e5:cd:d2:78:8f:62:02:40:03:91: b1:32:1f:c2:dd:ac:10:4a:ba:03:7c:80:02:b2:cd: 57:97:ec:74:39:a0:0d:5d:03:d7:59:aa:ff:88:f7: 28:80:61:c5:9f:d9:60:77:c8:dc:53:03:c5:f7:93: e9:ad:48:dc:6e:c4:29:ce:58:99:b7:d5:a1:6e:41: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.52.0/24 IPv6: 2602:f713::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15012 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5b:d0:94:c6:f7:2b:d4:dc:8b:7f:df:59:f9:ca:a5:0f:7d: a3:fd:45:0b:46:ea:18:f4:59:5e:bc:a7:3b:9b:cb:ed:52:0d: b5:57:fc:9d:1e:24:77:7e:31:c3:6e:05:00:64:14:52:2e:27: ec:f1:40:2a:55:b7:7a:31:39:67:25:6c:5a:8b:de:7a:3f:6a: 99:53:ba:03:7e:a5:b1:15:46:9e:27:d2:da:61:10:a2:c2:d3: 85:18:3f:14:74:b9:b5:aa:28:2a:99:3c:0d:8f:5a:9a:91:be: 26:78:2e:9c:04:08:00:db:89:4c:74:0e:c2:eb:88:f6:77:8b: 49:a9:41:52:8a:20:54:7c:9d:71:d4:cd:ca:49:08:2a:fb:ef: b0:19:37:45:8a:1d:f2:50:1e:65:b9:25:45:a1:67:ed:8c:b9: ad:a1:35:c7:01:dc:8c:cd:11:ae:32:4f:5a:1f:c7:54:05:c9: 28:c0:75:8d:f0:b3:88:d7:1a:13:2d:79:86:30:34:52:29:a3: a5:24:9b:c3:ea:e2:37:6e:6f:a8:80:93:7c:a0:e0:81:07:45: 63:02:ad:fb:3a:16:a2:6b:47:8a:ae:ef:86:94:d4:ff:7d:35: 9e:17:fc:1a:3c:e8:a3:2c:c8:20:da:a1:11:7d:39:8e:8c:ce: 11:e4:72:6a -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE20ne3j5zzkVoOShGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwMzAwNDUxN1oXDTI4MDgwNTAwNDUxN1owLzEtMCsGA1UEAxMk M2RjZTdlNmYtNDU4OC00ZDliLWJiOTAtODBmMDc0NjU2ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjiRo1tfrfZ2HVUtvyvJ4Bh4ZLBOgOYNnlGi A8g5uv6hg4LXXoNdtZQF40P7kGBAORQLsz2SgTbVHG05rhGod2lYBxCU/d7p+awH vKXfOblEkf3y0qZdscEEAGowQEGCnS1peo64Q5S5ZPkEESPknCaj0Z+LNu5IkRLp d05pMdE5/A3eCB2CW6X47UwHw84E3I3AYJ/PM+0ytcjTQp7wNd7yIWHIoYKQXHk4 N8D4MlcxB9ClQeTnQ+XN0niPYgJAA5GxMh/C3awQSroDfIACss1Xl+x0OaANXQPX War/iPcogGHFn9lgd8jcUwPF95PprUjcbsQpzliZt9WhbkGj6wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCUw6QZzkGtxVzF84/Y+ie6U0H+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z ZGNlN2U2Zi00NTg4LTRkOWItYmI5MC04MGYwNzQ2NTY4NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNkY2U3ZTZmLTQ1ODgtNGQ5Yi1i YjkwLTgwZjA3NDY1Njg1MS8zZGNlN2U2Zi00NTg4LTRkOWItYmI5MC04MGYwNzQ2 NTY4NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhTQwDgQCAAIwCAMGACYC9xMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjqkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFdb0JTG9yvU3It/31n5yqUPfaP9 RQtG6hj0WV68pzuby+1SDbVX/J0eJHd+McNuBQBkFFIuJ+zxQCpVt3oxOWclbFqL 3no/aplTugN+pbEVRp4n0tphEKLC04UYPxR0ubWqKCqZPA2PWpqRviZ4LpwECADb iUx0DsLriPZ3i0mpQVKKIFR8nXHUzcpJCCr777AZN0WKHfJQHmW5JUWhZ+2Mua2h NccB3IzNEa4yT1ofx1QFySjAdY3ws4jXGhMteYYwNFIpo6Ukm8Pq4jdub6iAk3yg 4IEHRWMCrfs6FqJrR4qu74aU1P99NZ4X/Bo86KMsyCDaoRF9OY6MzhHkcmo= -----END CERTIFICATE-----Generated at Tue May 12 21:51:01 2026 by rpki-client