$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer File: a2839383-af07-436e-89af-5453510b6546.cer (raw, json) Hash identifier: o8HQDIMRWrhcA5SErLzG4IcusBR40mNCG+ulT3oLyn0= Subject key identifier: 00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D1DDD08D3C60BA26A5A4105A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 00:45:22 +0000 Certificate not after: Mon 12 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 401487 IP: 23.129.84.0/24 IP: 2602:f7a1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:dd:08:d3:c6:0b:a2:6a:5a:41:05:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 10 00:45:22 2026 GMT Not After : Jun 12 00:45:22 2028 GMT Subject: CN=a2839383-af07-436e-89af-5453510b6546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:e3:ec:ce:98:ed:12:e8:fc:09:f9:53:32: 6c:0f:de:b3:5b:b9:45:bf:30:18:12:ad:2a:44:f7: 44:84:83:d0:12:26:22:c6:4b:0a:7e:a4:90:68:17: b9:81:50:9e:1d:db:89:12:6a:30:71:97:81:89:a6: 14:14:c2:03:27:f4:2b:f6:d9:ec:74:34:d9:29:8a: 74:bf:71:eb:de:87:b9:ee:22:06:1b:0b:d8:8d:a4: 3d:98:f4:ec:2a:f9:7a:71:7a:ea:00:f8:d4:61:d8: c1:31:65:a5:de:79:2b:85:79:ec:39:a2:86:62:91: a3:19:d7:ff:ac:32:4a:35:8d:25:3f:a0:56:77:3c: 59:1e:4b:73:d4:de:70:1a:ef:05:ca:50:dd:d9:b5: 7e:2e:1e:a9:59:5b:13:a3:70:79:79:cc:8c:19:d5: 1e:4b:99:51:8f:33:6d:da:b0:10:7c:3f:0e:68:54: 25:ea:bf:aa:77:98:74:7c:32:96:85:0d:52:db:16: b3:3c:7a:2a:81:fc:09:43:f8:60:8b:e1:2d:7b:53: 16:5d:c1:db:cb:cc:09:c2:7d:b2:85:ed:55:be:b0: 07:f7:38:a4:af:cb:d0:6c:7f:2f:fb:58:5b:e4:c3: f5:26:eb:eb:fc:a8:dd:8a:32:a3:72:38:2c:b3:be: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.84.0/24 IPv6: 2602:f7a1::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401487 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:53:d5:1f:db:23:e5:1f:19:78:37:ac:f8:94:74:d2:95:95: 82:3e:45:57:ae:a7:c2:ba:29:6f:e9:56:d2:ec:f8:9d:90:38: 6b:79:dd:81:55:16:9a:e9:5f:cf:65:6d:b2:45:72:9b:df:fd: 60:8a:e9:08:20:8a:e7:04:5c:bf:ac:8c:04:ce:6b:06:dd:d4: 91:d2:e7:7a:4f:98:ff:f1:c1:bf:52:4d:05:87:3e:ef:02:f0: 64:fb:74:0e:4a:f3:18:6a:fc:ff:28:9f:02:00:fa:58:6b:2f: 31:91:2b:26:7d:dd:b1:0e:09:8f:14:cc:b0:dd:c2:a6:5a:4e: 4d:c3:c1:33:d1:cf:64:e9:87:92:63:17:40:34:f7:46:94:9f: d9:66:71:c2:00:3d:c7:23:3b:2e:24:85:03:74:50:f2:0c:16: 2e:b1:ab:28:89:1d:2b:b0:91:6e:44:0d:7b:f1:56:ce:9a:d6: 0a:4b:95:7a:f4:ab:44:fe:28:bb:0c:31:de:d7:65:3c:b3:62: 18:a0:13:d6:70:06:06:2b:35:30:9e:c4:7e:38:75:ae:01:bc: 16:e5:04:7e:9a:69:d4:41:1d:4f:74:b9:44:9b:e6:e6:9f:5a: eb:b0:48:56:1a:5b:a0:ab:d5:86:36:60:b7:2c:cf:e3:c9:23: ac:0e:d1:dc -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0d3QjTxguialpBBaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMDAwNDUyMloXDTI4MDYxMjAwNDUyMlowLzEtMCsGA1UEAxMk YTI4MzkzODMtYWYwNy00MzZlLTg5YWYtNTQ1MzUxMGI2NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1vj7M6Y7RLo/An5UzJsD96zW7lFvzAYEq0q RPdEhIPQEiYixksKfqSQaBe5gVCeHduJEmowcZeBiaYUFMIDJ/Qr9tnsdDTZKYp0 v3Hr3oe57iIGGwvYjaQ9mPTsKvl6cXrqAPjUYdjBMWWl3nkrhXnsOaKGYpGjGdf/ rDJKNY0lP6BWdzxZHktz1N5wGu8FylDd2bV+Lh6pWVsTo3B5ecyMGdUeS5lRjzNt 2rAQfD8OaFQl6r+qd5h0fDKWhQ1S2xazPHoqgfwJQ/hgi+Ete1MWXcHby8wJwn2y he1VvrAH9zikr8vQbH8v+1hb5MP1Juvr/KjdijKjcjgss77F8wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFABmwgqnNQ1V7DmABha1xTw8bosjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h MjgzOTM4My1hZjA3LTQzNmUtODlhZi01NDUzNTEwYjY1NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2EyODM5MzgzLWFmMDctNDM2ZS04 OWFmLTU0NTM1MTBiNjU0Ni9hMjgzOTM4My1hZjA3LTQzNmUtODlhZi01NDUzNTEw YjY1NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgVQwDgQCAAIwCAMGACYC96EAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgTzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcU9Uf2yPlHxl4N6z4lHTSlZWC PkVXrqfCuilv6VbS7PidkDhred2BVRaa6V/PZW2yRXKb3/1giukIIIrnBFy/rIwE zmsG3dSR0ud6T5j/8cG/Uk0Fhz7vAvBk+3QOSvMYavz/KJ8CAPpYay8xkSsmfd2x DgmPFMyw3cKmWk5Nw8Ez0c9k6YeSYxdANPdGlJ/ZZnHCAD3HIzsuJIUDdFDyDBYu sasoiR0rsJFuRA178VbOmtYKS5V69KtE/ii7DDHe12U8s2IYoBPWcAYGKzUwnsR+ OHWuAbwW5QR+mmnUQR1PdLlEm+bmn1rrsEhWGlugq9WGNmC3LM/jySOsDtHc -----END CERTIFICATE-----Generated at Wed Mar 25 23:19:58 2026 by rpki-client