$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer File: 44f68f8f-fb3d-449e-a030-4b56b7a51400.cer (raw, json) Hash identifier: FehqrEdUCpzI7jyfJkuQdCwc9tnZZIGDJVxsc04SKv8= Subject key identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D309D4743F0E9D08B8D1C0DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 17:57:16 +0000 Certificate not after: Thu 15 Jun 2028 23:39:58 +0000 Subordinate resources: AS: 402274 IP: 23.154.204.0/24 IP: 2602:f427::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:9d:47:43:f0:e9:d0:8b:8d:1c:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 16 17:57:16 2026 GMT Not After : Jun 15 23:39:58 2028 GMT Subject: CN=44f68f8f-fb3d-449e-a030-4b56b7a51400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:69:ee:ab:c5:7c:ad:a6:bc:4b:2d:a9:f0: 2a:b6:be:35:93:cf:b0:5c:20:b4:79:6e:61:b4:17: 99:56:c1:4d:4f:ea:51:ef:02:d8:55:75:0e:a7:8e: dd:ce:97:5f:13:0e:ac:d9:03:06:fa:3d:81:6c:37: b8:37:c7:b8:4f:cc:bc:57:02:74:2b:f2:5c:9b:2f: b5:c8:38:73:8d:4a:98:0d:ca:c9:18:4e:bb:eb:70: 89:b7:ee:2e:74:d2:ad:c1:23:f1:6b:83:30:58:57: 24:d6:aa:f5:ef:be:b9:75:6a:a8:c3:34:ee:de:6b: db:14:60:80:79:d4:5b:d8:b8:f5:62:27:d8:d4:65: 7a:4d:e2:f5:36:8f:ee:aa:15:0d:22:4d:b2:2b:be: 56:ff:7e:fa:59:d6:63:b0:e5:be:16:39:2f:56:a1: 83:ef:bf:c9:9f:6b:df:9a:79:b6:59:e4:96:12:85: 04:fc:6e:8b:01:b2:d9:ed:4f:64:d4:10:b3:f8:2c: 9f:74:d4:d3:1f:17:e4:8a:68:33:e9:24:ce:9d:50: 70:1e:ff:e0:f8:93:42:19:58:9d:2a:7d:70:8c:6d: 45:41:52:34:63:48:61:ac:38:e5:c2:a6:85:30:24: f3:61:44:35:35:08:bf:1c:28:c0:02:4b:ad:f8:54: ca:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.154.204.0/24 IPv6: 2602:f427::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402274 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f3:2a:6c:2f:9a:14:a2:d8:cf:65:97:51:1a:af:be:fa:bc: 70:47:6c:2d:24:0c:c2:a7:a0:44:c8:09:e9:9f:de:66:c6:2c: ed:69:2a:60:3a:e3:85:e0:73:2f:3a:09:2f:18:89:8e:27:06: 4d:09:a4:d6:34:59:b7:42:d4:ba:81:71:f8:8e:52:8c:37:11: e7:dc:34:e5:ba:77:8b:88:42:e5:91:49:b4:ea:30:e0:9e:ff: a3:37:9d:03:21:77:bc:79:07:31:d6:4a:07:1d:eb:16:10:25: a3:a8:50:86:9b:00:18:ce:91:ef:24:d1:d1:07:e1:44:cc:82: 1d:36:b1:9a:90:81:7f:17:91:37:09:7b:3d:f2:45:72:1a:17: 6d:95:f8:90:84:68:1f:f0:1f:83:1f:6f:bb:5f:7a:1b:b7:0c: 42:3f:17:70:cf:eb:57:ec:25:3b:12:fa:fa:4a:3e:43:9e:a5: 7d:a0:f1:75:a7:5b:97:fd:31:9f:de:c1:e7:97:d9:64:e4:ed: 36:97:b5:e2:23:86:7c:24:81:5b:e6:54:b1:7d:a3:d8:01:89: b9:c3:b4:86:4f:6a:35:6f:e6:89:d7:4f:71:9b:92:c1:05:13: 52:6d:22:34:f8:0e:68:b0:17:e5:5c:36:25:a9:ce:f9:0e:34: 2d:3c:57:e5 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0wnUdD8OnQi40cDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxNjE3NTcxNloXDTI4MDYxNTIzMzk1OFowLzEtMCsGA1UEAxMk NDRmNjhmOGYtZmIzZC00NDllLWEwMzAtNGI1NmI3YTUxNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KVp7qvFfK2mvEstqfAqtr41k8+wXCC0eW5h tBeZVsFNT+pR7wLYVXUOp47dzpdfEw6s2QMG+j2BbDe4N8e4T8y8VwJ0K/Jcmy+1 yDhzjUqYDcrJGE6763CJt+4udNKtwSPxa4MwWFck1qr17765dWqowzTu3mvbFGCA edRb2Lj1YifY1GV6TeL1No/uqhUNIk2yK75W/376WdZjsOW+FjkvVqGD77/Jn2vf mnm2WeSWEoUE/G6LAbLZ7U9k1BCz+CyfdNTTHxfkimgz6STOnVBwHv/g+JNCGVid Kn1wjG1FQVI0Y0hhrDjlwqaFMCTzYUQ1NQi/HCjAAkut+FTKrwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLQUqX2sD0eohYAZ3c44hXXqZmUWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 NGY2OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2YjdhNTE0MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQ0ZjY4ZjhmLWZiM2QtNDQ5ZS1h MDMwLTRiNTZiN2E1MTQwMC80NGY2OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2Yjdh NTE0MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmswwDgQCAAIwCAMGACYC9CcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+8ypsL5oUotjPZZdRGq+++rxw R2wtJAzCp6BEyAnpn95mxiztaSpgOuOF4HMvOgkvGImOJwZNCaTWNFm3QtS6gXH4 jlKMNxHn3DTluneLiELlkUm06jDgnv+jN50DIXe8eQcx1koHHesWECWjqFCGmwAY zpHvJNHRB+FEzIIdNrGakIF/F5E3CXs98kVyGhdtlfiQhGgf8B+DH2+7X3obtwxC Pxdwz+tX7CU7Evr6Sj5DnqV9oPF1p1uX/TGf3sHnl9lk5O02l7XiI4Z8JIFb5lSx faPYAYm5w7SGT2o1b+aJ109xm5LBBRNSbSI0+A5osBflXDYlqc75DjQtPFfl -----END CERTIFICATE-----Generated at Wed Mar 25 22:35:34 2026 by rpki-client