$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22babcde-970b-4f51-a0b3-45d8fc962838.cer File: 22babcde-970b-4f51-a0b3-45d8fc962838.cer (raw, json) Hash identifier: 8twc7YvDvk9wE+UaMZl+dMqk796B7Yvk/bdoDM11dXA= Subject key identifier: 99:2C:7B:93:68:01:44:FD:A3:F6:46:95:C5:EE:45:44:43:26:03:6C Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D433E829CADFACA8D4CCA46C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22babcde-970b-4f51-a0b3-45d8fc962838/22babcde-970b-4f51-a0b3-45d8fc962838.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22babcde-970b-4f51-a0b3-45d8fc962838/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 10:06:41 +0000 Certificate not after: Sun 25 Jun 2028 10:06:41 +0000 Subordinate resources: IP: 23.183.56.0/24 IP: 2602:fec7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:3e:82:9c:ad:fa:ca:8d:4c:ca:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 23 10:06:41 2026 GMT Not After : Jun 25 10:06:41 2028 GMT Subject: CN=22babcde-970b-4f51-a0b3-45d8fc962838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:3a:eb:d5:4a:98:dc:33:61:19:37:7a:94: 08:a7:95:30:fc:46:b3:dd:3c:cf:3e:1c:e6:65:a3: 38:a0:62:f2:ce:73:f0:a8:d3:30:51:01:49:78:6b: 7a:27:74:1c:95:c9:c7:9d:45:54:7e:e5:04:bf:0e: 96:1b:c8:eb:0d:68:eb:cc:41:87:81:6e:fd:bf:8a: 56:c3:9c:9b:16:19:25:32:65:cb:58:bc:cc:66:f9: 77:b7:2d:ac:00:83:22:a1:26:c8:6e:75:60:ee:c9: f1:98:d0:e1:90:29:a3:c7:cb:bb:1a:4f:e5:5e:ab: 6c:2b:4a:75:bf:00:e9:17:53:96:58:d9:93:78:1e: 9f:8a:11:da:49:8d:1a:06:4f:59:ce:c4:e5:56:ca: d3:1a:56:be:be:a0:21:1f:af:b2:aa:31:dc:61:fc: e8:19:d0:1c:74:c5:83:68:8a:74:cf:14:02:87:70: b9:94:40:23:92:6c:2b:41:c6:e3:e7:67:30:fa:1d: 32:2b:9e:8a:7f:08:d3:33:94:9c:58:5b:8b:aa:c6: 0d:5c:47:b4:16:fb:32:9f:01:0b:ca:ca:5b:04:c6: 8b:a4:50:84:d5:98:24:10:51:10:6e:fe:de:0a:ca: 11:e5:3d:d8:9d:65:7b:62:83:71:6f:20:56:e6:15: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2C:7B:93:68:01:44:FD:A3:F6:46:95:C5:EE:45:44:43:26:03:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22babcde-970b-4f51-a0b3-45d8fc962838/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22babcde-970b-4f51-a0b3-45d8fc962838/22babcde-970b-4f51-a0b3-45d8fc962838.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.183.56.0/24 IPv6: 2602:fec7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b3:c8:46:aa:90:a9:e8:00:02:05:f7:7f:63:31:82:d3:dc: 9d:d9:c5:13:65:d7:b1:1b:ed:a4:f7:61:46:ce:85:96:26:3c: 36:76:94:33:10:a7:36:e1:2b:16:15:b9:cb:1e:5c:8a:6f:e8: 4a:52:09:2c:cd:ae:ae:34:c4:50:32:1b:24:82:d8:3f:a7:1c: 5e:5c:78:3e:c4:75:14:fa:2a:cd:fd:4b:e9:80:7c:31:4b:50: 0e:22:2e:5c:47:fc:c1:cf:69:59:f2:c8:e3:57:7c:fd:a0:f3: f3:28:9e:b7:ef:89:d8:a3:a9:f9:d9:15:03:3b:14:4f:63:3e: 17:8a:0d:67:b9:62:b5:26:51:fd:44:47:d2:60:dd:b4:cc:d3: 84:33:66:8b:e3:f9:25:a6:47:2f:5f:91:ee:2c:96:db:73:69: 4b:97:27:47:27:0e:78:b3:9e:b0:8e:34:2b:44:a0:da:fc:3c: 24:c8:b3:a6:f1:81:5e:4c:eb:53:2f:0f:bc:bd:0c:6c:14:7d: b9:fd:46:5e:80:0d:bd:86:9a:65:ce:88:51:35:cf:1c:cf:d2: fc:88:e0:c2:75:c5:86:fb:23:6a:45:49:db:0b:d6:d9:87:b0: 23:aa:20:a2:f5:a6:2c:4a:ea:72:37:ef:64:c3:6c:e6:59:87: 2c:a5:6e:62 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE1DPoKcrfrKjUzKRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMzEwMDY0MVoXDTI4MDYyNTEwMDY0MVowLzEtMCsGA1UEAxMk MjJiYWJjZGUtOTcwYi00ZjUxLWEwYjMtNDVkOGZjOTYyODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaI669VKmNwzYRk3epQIp5Uw/Eaz3TzPPhzm ZaM4oGLyznPwqNMwUQFJeGt6J3QclcnHnUVUfuUEvw6WG8jrDWjrzEGHgW79v4pW w5ybFhklMmXLWLzMZvl3ty2sAIMioSbIbnVg7snxmNDhkCmjx8u7Gk/lXqtsK0p1 vwDpF1OWWNmTeB6fihHaSY0aBk9ZzsTlVsrTGla+vqAhH6+yqjHcYfzoGdAcdMWD aIp0zxQCh3C5lEAjkmwrQcbj52cw+h0yK56KfwjTM5ScWFuLqsYNXEe0FvsynwEL yspbBMaLpFCE1ZgkEFEQbv7eCsoR5T3YnWV7YoNxbyBW5hXpvQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFJkse5NoAUT9o/ZGlcXuRURDJgNsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y MmJhYmNkZS05NzBiLTRmNTEtYTBiMy00NWQ4ZmM5NjI4MzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzIyYmFiY2RlLTk3MGItNGY1MS1h MGIzLTQ1ZDhmYzk2MjgzOC8yMmJhYmNkZS05NzBiLTRmNTEtYTBiMy00NWQ4ZmM5 NjI4MzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtzgwDgQCAAIwCAMGACYC/scAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABazyEaqkKnoAAIF939jMYLT3J3ZxRNl17Eb7aT3YUbOhZYmPDZ2lDMQpzbhKxYV ucseXIpv6EpSCSzNrq40xFAyGySC2D+nHF5ceD7EdRT6Ks39S+mAfDFLUA4iLlxH /MHPaVnyyONXfP2g8/MonrfvidijqfnZFQM7FE9jPheKDWe5YrUmUf1ER9Jg3bTM 04QzZovj+SWmRy9fke4slttzaUuXJ0cnDniznrCONCtEoNr8PCTIs6bxgV5M61Mv D7y9DGwUfbn9Rl6ADb2GmmXOiFE1zxzP0vyI4MJ1xYb7I2pFSdsL1tmHsCOqIKL1 pixK6nI372TDbOZZhyylbmI= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:51 2026 by rpki-client