$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer File: 817b315d-32a3-4ee9-ba5d-557007a627ae.cer (raw, json) Hash identifier: 9ctiitO18l/HNa64x1S7ywvFNflXOBJjFH7dWQUvivI= Subject key identifier: FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D14356A963CF017710A2A5D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 13:45:22 +0000 Certificate not after: Thu 08 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 62836 IP: 23.129.124.0/24 IP: 2602:f79d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:35:6a:96:3c:f0:17:71:0a:2a:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 6 13:45:22 2026 GMT Not After : Jun 8 12:45:22 2028 GMT Subject: CN=817b315d-32a3-4ee9-ba5d-557007a627ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:48:a4:88:1a:8c:71:c1:e6:ee:3f:41:8f: 9f:c3:76:6c:67:14:ea:02:77:be:06:45:71:61:fe: 86:10:ba:5c:4e:2e:fb:ef:f5:0b:54:e5:39:a5:c2: 42:48:25:3d:64:5c:78:4e:9b:2d:75:ac:7d:9f:5b: 51:de:95:c5:98:c9:9e:43:39:6b:6c:d3:40:dc:ef: 7e:2f:e2:2e:fe:cc:63:fc:18:e8:27:fa:18:97:9b: f7:8f:59:f1:f7:6c:6b:53:50:36:22:96:cf:8c:16: 17:32:f8:a7:8c:e6:da:de:1a:e3:0f:88:f5:9e:b8: 9c:f2:d9:5e:43:29:17:c5:12:5a:f6:f2:2b:a6:cb: 63:c1:46:94:1a:cb:b1:08:d5:c7:03:d0:33:ca:36: a1:b1:0b:3d:d9:bd:7b:82:5f:18:4d:04:fc:fa:80: 5a:28:31:2b:ce:fc:93:7d:9d:69:37:68:95:62:b3: 85:e6:3f:cc:81:a2:17:df:ea:bf:01:1d:9e:75:df: 30:16:57:b3:9c:e0:39:9a:b8:c7:25:61:f7:a4:b2: f2:26:d9:09:c8:c2:9a:4a:22:02:35:54:3c:d2:cd: 57:98:90:e2:73:f8:a1:1f:4e:84:51:23:b8:f1:20: c3:57:09:29:f1:5f:68:c7:d0:4d:16:f0:e0:2b:98: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.124.0/24 IPv6: 2602:f79d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62836 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:af:7c:64:3d:2e:5a:75:87:df:e8:eb:d3:ce:5c:3d:57:84: 71:2b:4f:7c:19:5b:ed:46:c4:65:e2:b0:38:de:cb:65:1e:7a: 8b:5f:8b:38:6d:9a:be:cc:ea:05:82:a5:01:eb:cc:6b:e0:b9: ab:9d:d8:d2:bb:b2:1a:f5:58:c6:dd:a1:5e:db:2e:28:4e:8a: f1:4d:ad:fa:a4:a8:ff:3e:9d:b1:f8:75:7f:8a:ec:56:81:ba: c0:e1:55:73:6d:da:79:d9:99:29:4b:03:63:25:09:64:82:bb: 65:e4:59:91:3d:6b:18:dc:a3:56:cd:76:f9:bf:ea:1f:32:5d: 53:49:c4:86:71:2d:56:d1:61:92:39:3a:0a:f9:c8:83:33:09: ba:eb:d4:31:27:7b:ac:ed:f2:a6:10:39:31:c0:1f:34:0f:44: dd:de:6f:e4:0d:c5:2d:b6:18:c0:0f:c4:2d:a8:54:8a:db:84: e2:76:78:39:a1:c9:a0:2b:eb:14:bb:dc:98:10:0e:a7:7f:93: cd:fb:94:19:e4:20:42:47:0f:eb:bd:dd:18:74:71:25:23:61: ba:b4:49:2e:d0:55:12:30:5a:e9:3a:79:32:7f:1e:ba:c6:20: 98:6a:f7:16:d2:89:76:be:04:5d:01:9a:7c:b4:2e:46:a2:4e: a0:b2:18:26 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0UNWqWPPAXcQoqXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwNjEzNDUyMloXDTI4MDYwODEyNDUyMlowLzEtMCsGA1UEAxMk ODE3YjMxNWQtMzJhMy00ZWU5LWJhNWQtNTU3MDA3YTYyN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpIpIgajHHB5u4/QY+fw3ZsZxTqAne+BkVx Yf6GELpcTi777/ULVOU5pcJCSCU9ZFx4Tpstdax9n1tR3pXFmMmeQzlrbNNA3O9+ L+Iu/sxj/BjoJ/oYl5v3j1nx92xrU1A2IpbPjBYXMvinjOba3hrjD4j1nric8tle QykXxRJa9vIrpstjwUaUGsuxCNXHA9AzyjahsQs92b17gl8YTQT8+oBaKDErzvyT fZ1pN2iVYrOF5j/MgaIX3+q/AR2edd8wFleznOA5mrjHJWH3pLLyJtkJyMKaSiIC NVQ80s1XmJDic/ihH06EUSO48SDDVwkp8V9ox9BNFvDgK5gB+wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPpfVS1240j666mRKgQUqlckN1hRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 MTdiMzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcwMDdhNjI3YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzgxN2IzMTVkLTMyYTMtNGVlOS1i YTVkLTU1NzAwN2E2MjdhZS84MTdiMzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcwMDdh NjI3YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgXwwDgQCAAIwCAMGBCYC950AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD1dDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzr3xkPS5adYff6OvTzlw9V4Rx K098GVvtRsRl4rA43stlHnqLX4s4bZq+zOoFgqUB68xr4LmrndjSu7Ia9VjG3aFe 2y4oTorxTa36pKj/Pp2x+HV/iuxWgbrA4VVzbdp52ZkpSwNjJQlkgrtl5FmRPWsY 3KNWzXb5v+ofMl1TScSGcS1W0WGSOToK+ciDMwm669QxJ3us7fKmEDkxwB80D0Td 3m/kDcUtthjAD8QtqFSK24Tidng5ocmgK+sUu9yYEA6nf5PN+5QZ5CBCRw/rvd0Y dHElI2G6tEku0FUSMFrpOnkyfx66xiCYavcW0ol2vgRdAZp8tC5Gok6gshgm -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:13 2026 by rpki-client