$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer File: ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer (raw, json) Hash identifier: ZGbrQJAQcZq1B9wbGDqe6sss0bf6sYUiNV+a0Fhsdps= Subject key identifier: FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D20A7B6163B0258717E7F9800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Mar 2026 00:45:21 +0000 Certificate not after: Tue 13 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 399136 IP: 23.172.112.0 -- 23.172.114.255 IP: 2602:fcc8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:a7:b6:16:3b:02:58:71:7e:7f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 11 00:45:21 2026 GMT Not After : Jun 13 00:45:21 2028 GMT Subject: CN=ed8de71a-67d9-43ce-bbb9-c7974f6f8b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:5e:7c:06:98:41:76:d1:22:f9:dd:a4:4a: 4f:cf:55:77:ee:8d:05:19:97:b5:ad:84:63:32:f3: ec:fc:31:35:8a:07:ce:9b:9a:e0:62:45:7b:7c:e5: 96:6e:cb:3b:ac:a7:32:74:78:97:c1:0b:b1:1e:df: 22:19:ec:31:a9:70:94:f3:8e:56:ad:a3:ba:4a:d0: 80:6a:f1:0e:81:cb:46:75:f5:a5:81:94:37:79:3b: 01:82:6c:1f:93:7c:35:3b:1e:9c:b5:bd:5c:69:71: f2:1a:5d:e5:54:17:f0:8f:4b:0a:e7:80:e2:25:d0: 12:48:7c:63:06:e3:af:bd:1c:cf:cc:12:b0:fe:9b: ce:e7:56:23:06:2b:ce:59:8c:6b:14:d0:ab:56:f3: db:41:0e:29:af:d6:9f:52:22:14:4c:96:1b:b9:69: 7d:e0:5d:a9:b9:ec:bf:4f:bf:ca:ec:50:ee:cb:6b: 67:05:f5:80:84:4b:ae:69:00:f6:17:d0:f1:98:f3: 37:49:1d:a8:68:62:fd:f2:85:a9:38:10:2e:f3:bd: c0:16:7c:c5:0e:26:4e:94:ee:60:0f:5d:43:46:b4: b0:8d:8e:21:3e:b9:ae:fb:0c:41:61:da:64:fd:69: 81:cb:d3:fa:19:15:a6:b0:4b:ef:d6:c9:ac:08:67: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.172.112.0-23.172.114.255 IPv6: 2602:fcc8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399136 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:79:f4:bb:c7:2b:31:f1:9d:75:c4:da:54:91:0b:08:bd:0e: 44:a7:1e:c4:c8:e2:f3:97:89:78:28:7a:52:da:6d:0f:7c:95: 19:7f:eb:70:61:dd:0c:66:af:a7:ed:2c:60:8b:f8:15:21:2f: 20:e9:9b:5e:eb:81:27:09:af:4c:76:48:08:40:dc:bd:3f:57: 2b:f4:b6:de:5b:67:84:de:ec:a6:7b:b9:8a:7d:f8:19:8d:6e: 41:51:c2:62:80:b9:cf:83:8e:f6:ac:63:bc:a9:d8:27:e4:a2: 55:f7:9a:00:08:49:98:19:9e:0b:96:28:ec:67:64:ba:e6:f0: 1a:9d:60:32:84:79:b3:1e:5a:60:b9:91:80:31:95:98:f0:0a: 82:cf:5f:7b:3c:25:24:fe:24:f1:90:8e:95:8d:50:3a:5b:f2: e1:a8:3e:8a:78:5e:30:8f:ff:51:3f:5a:5e:8d:7c:e8:dc:39: e1:31:fa:b8:f5:10:ac:61:1b:cf:3b:64:a8:3f:57:88:04:65: f5:e4:5d:6b:2c:fc:73:77:f9:0a:66:29:46:81:99:88:56:e9: 2d:23:b4:96:3d:a1:bc:49:38:99:c1:fd:47:87:3a:80:ed:23: 9a:78:5a:20:ca:e5:e2:b4:92:50:77:55:90:98:c9:e0:69:11: 6c:61:37:aa -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWE0gp7YWOwJYcX5/mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMTAwNDUyMVoXDTI4MDYxMzAwNDUyMVowLzEtMCsGA1UEAxMk ZWQ4ZGU3MWEtNjdkOS00M2NlLWJiYjktYzc5NzRmNmY4YjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/hefAaYQXbRIvndpEpPz1V37o0FGZe1rYRj MvPs/DE1igfOm5rgYkV7fOWWbss7rKcydHiXwQuxHt8iGewxqXCU845WraO6StCA avEOgctGdfWlgZQ3eTsBgmwfk3w1Ox6ctb1caXHyGl3lVBfwj0sK54DiJdASSHxj BuOvvRzPzBKw/pvO51YjBivOWYxrFNCrVvPbQQ4pr9afUiIUTJYbuWl94F2puey/ T7/K7FDuy2tnBfWAhEuuaQD2F9DxmPM3SR2oaGL98oWpOBAu873AFnzFDiZOlO5g D11DRrSwjY4hPrmu+wxBYdpk/WmBy9P6GRWmsEvv1smsCGecawIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFP68SMXFZ99vUPL3O1zNTZAni+duMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l ZDhkZTcxYS02N2Q5LTQzY2UtYmJiOS1jNzk3NGY2ZjhiMjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2VkOGRlNzFhLTY3ZDktNDNjZS1i YmI5LWM3OTc0ZjZmOGIyMy9lZDhkZTcxYS02N2Q5LTQzY2UtYmJiOS1jNzk3NGY2 ZjhiMjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEBBescAMEABescjAOBAIAAjAIAwYEJgL8yAAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhcgMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACF59LvHKzHxnXXE 2lSRCwi9DkSnHsTI4vOXiXgoelLabQ98lRl/63Bh3Qxmr6ftLGCL+BUhLyDpm17r gScJr0x2SAhA3L0/Vyv0tt5bZ4Te7KZ7uYp9+BmNbkFRwmKAuc+DjvasY7yp2Cfk olX3mgAISZgZnguWKOxnZLrm8BqdYDKEebMeWmC5kYAxlZjwCoLPX3s8JST+JPGQ jpWNUDpb8uGoPop4XjCP/1E/Wl6NfOjcOeEx+rj1EKxhG887ZKg/V4gEZfXkXWss /HN3+QpmKUaBmYhW6S0jtJY9obxJOJnB/UeHOoDtI5p4WiDK5eK0klB3VZCYyeBp EWxhN6o= -----END CERTIFICATE-----Generated at Wed Mar 25 23:11:31 2026 by rpki-client