$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer File: 58da445d-8c6c-4299-9e2c-45c75e8a6425.cer (raw, json) Hash identifier: XXp2V9fvauzHJeGeZ2E0PVbLsEU16+nn6H15xG23TiY= Subject key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D269E0D9A275F32B9B3562000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Mar 2026 04:00:45 +0000 Certificate not after: Thu 15 Jun 2028 04:00:45 +0000 Subordinate resources: AS: 14312 IP: 204.16.236.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:9e:0d:9a:27:5f:32:b9:b3:56:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 13 04:00:45 2026 GMT Not After : Jun 15 04:00:45 2028 GMT Subject: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:c2:ab:53:df:99:f3:e1:48:0c:fc:0b:a5: d4:fa:98:26:f7:be:d0:90:13:f6:74:e1:d5:02:92: 99:7f:26:9f:3e:f2:29:0e:ad:de:8d:82:49:9d:fe: ab:cc:7d:70:f8:28:e1:c2:0f:9d:c8:69:ca:db:a8: 60:ec:50:7d:e4:1d:a3:22:fa:4a:19:f5:be:f0:37: 6e:89:a8:df:f8:78:03:8f:73:c6:be:54:2f:f0:f5: 81:e2:85:d0:56:6a:2b:2c:5a:e8:42:dc:df:ad:19: 57:41:f8:a2:8e:ed:7a:81:da:43:25:96:62:a5:9c: 5a:7e:b5:3d:b5:ed:28:57:74:b2:77:13:99:bc:c8: 1c:7e:ce:64:99:98:1b:17:25:96:cb:77:d2:34:5d: 1d:fc:f7:12:b9:12:0b:20:2b:2a:a8:9c:60:cd:e9: 88:83:7e:15:31:57:25:89:75:c9:ac:81:db:2d:28: c4:eb:42:f5:55:9a:88:c8:ca:8b:4d:76:4a:6e:e8: d3:9e:46:7d:cb:03:06:55:bd:c5:3f:8d:66:21:16: 35:67:83:65:be:44:6a:86:bb:97:97:3a:03:d8:8c: 24:e4:f7:8c:71:e9:1a:a3:f9:81:0d:fe:88:5f:a8: 05:67:91:51:45:cf:46:38:2e:37:42:54:f0:05:e9: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 204.16.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14312 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:06:00:2d:a0:45:d8:9a:f5:31:24:02:c8:6a:c4:85:84:93: 83:ca:05:52:0a:50:d3:8c:5c:a3:c7:87:03:fa:94:60:41:f2: b6:d8:28:85:ed:a1:fe:6e:45:e9:73:42:fb:a6:32:68:b8:9e: 9e:85:d0:40:a4:6b:95:72:d0:bb:77:f3:e3:8d:80:64:b8:a3: 2a:6a:fc:d2:2f:47:dd:3f:1c:a8:87:b3:23:4a:a6:41:82:02: c6:c9:e8:db:4c:61:9a:0d:6d:f7:66:e0:7a:70:b8:69:a0:44: e7:aa:ea:c8:de:87:73:b9:ed:06:ae:24:af:55:63:17:1f:74: ae:1c:c1:5d:24:27:56:ff:a5:ba:a8:3f:d9:a9:86:ea:96:dc: 5a:f1:28:c0:d9:51:dc:c3:a7:68:f7:4a:2c:4e:d3:d3:e7:0e: 47:ce:03:b4:2b:a3:ff:fb:06:85:e8:47:dc:61:4c:1b:1f:83: 5f:26:d4:98:e7:c6:4a:ab:98:de:9f:a8:0c:e6:08:d4:48:79: d1:57:01:01:b8:65:61:ce:05:6e:85:27:70:92:a0:61:6b:90: f0:9b:b2:70:e2:7a:46:6a:0c:df:9f:53:13:41:a2:48:3e:86: ab:f9:33:ae:55:94:30:5e:63:01:f1:f5:c2:62:76:ce:42:10: 77:26:0d:c5 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0mng2aJ18yubNWIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMzA0MDA0NVoXDTI4MDYxNTA0MDA0NVowLzEtMCsGA1UEAxMk NThkYTQ0NWQtOGM2Yy00Mjk5LTllMmMtNDVjNzVlOGE2NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJPCq1PfmfPhSAz8C6XU+pgm977QkBP2dOHV ApKZfyafPvIpDq3ejYJJnf6rzH1w+Cjhwg+dyGnK26hg7FB95B2jIvpKGfW+8Ddu iajf+HgDj3PGvlQv8PWB4oXQVmorLFroQtzfrRlXQfiiju16gdpDJZZipZxafrU9 te0oV3SydxOZvMgcfs5kmZgbFyWWy3fSNF0d/PcSuRILICsqqJxgzemIg34VMVcl iXXJrIHbLSjE60L1VZqIyMqLTXZKbujTnkZ9ywMGVb3FP41mIRY1Z4NlvkRqhruX lzoD2Iwk5PeMcekao/mBDf6IX6gFZ5FRRc9GOC43QlTwBem5UwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJ8H63y+45Ql8wS5u0KweTE+Y9T6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 OGRhNDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3NWU4YTY0MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzU4ZGE0NDVkLThjNmMtNDI5OS05 ZTJjLTQ1Yzc1ZThhNjQyNS81OGRhNDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3NWU4 YTY0MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALMEOwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC N+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAiAYALaBF2Jr1MSQCyGrEhYSTg8oFUgpQ04xco8eHA/qUYEHy ttgohe2h/m5F6XNC+6YyaLienoXQQKRrlXLQu3fz442AZLijKmr80i9H3T8cqIez I0qmQYICxsno20xhmg1t92bgenC4aaBE56rqyN6Hc7ntBq4kr1VjFx90rhzBXSQn Vv+luqg/2amG6pbcWvEowNlR3MOnaPdKLE7T0+cOR84DtCuj//sGhehH3GFMGx+D XybUmOfGSquY3p+oDOYI1Eh50VcBAbhlYc4FboUncJKgYWuQ8JuycOJ6RmoM359T E0GiSD6Gq/kzrlWUMF5jAfH1wmJ2zkIQdyYNxQ== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:45 2026 by rpki-client