$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8.cer File: 673f8401-eb52-442b-a559-532444ba5bc8.cer (raw, json) Hash identifier: jL2QDuLebcu1xV6RX2siJvgiiovuYRJ6UiZgOcBjsmQ= Subject key identifier: 78:E5:B2:D1:20:DE:A6:DC:62:1F:F3:E0:81:93:2F:4D:11:4C:02:2E Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D3B5AB025C5278F0A53A7B020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/673f8401-eb52-442b-a559-532444ba5bc8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Mar 2026 14:17:00 +0000 Certificate not after: Thu 22 Jun 2028 14:17:00 +0000 Subordinate resources: AS: 401462 IP: 172.87.44.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:5a:b0:25:c5:27:8f:0a:53:a7:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 20 14:17:00 2026 GMT Not After : Jun 22 14:17:00 2028 GMT Subject: CN=673f8401-eb52-442b-a559-532444ba5bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:89:3c:56:26:5a:aa:d3:e1:eb:95:c6:46: 93:58:22:5a:09:24:fe:05:63:7c:f3:ae:b5:a1:ce: df:e8:05:ee:96:a5:99:40:60:7e:3b:52:96:39:e1: 0b:ed:17:8d:80:c6:e9:38:c3:10:3e:bb:7a:b7:78: cc:ac:fb:75:ca:44:1f:c7:92:f9:ca:3a:d2:e9:7c: ae:f2:39:62:f6:c0:e1:bc:8c:b9:44:dc:ce:22:ae: b5:e7:43:41:58:43:a8:e4:69:64:77:9c:d0:66:7b: 63:be:33:5e:ac:61:14:bb:05:0d:51:90:31:4b:d4: 8b:2b:42:13:e4:07:c2:8d:67:c0:5a:4c:01:20:37: e7:d5:4d:9b:cf:ab:74:16:7b:41:59:02:19:61:b6: 86:7d:1d:43:06:d3:fa:af:36:70:d2:93:e4:90:ea: 47:80:9f:7f:17:b9:a3:76:0a:7c:d5:f1:45:73:24: 4a:b3:d9:92:12:c8:5e:98:6a:18:f8:ae:da:aa:c0: 18:f0:a5:0c:04:1d:6f:b7:6a:4b:81:a0:c2:40:cd: fd:17:8f:a2:d8:24:ec:79:b6:f8:f6:cb:9d:1e:ac: 3e:2c:66:dc:fd:a5:1c:f6:3f:30:f2:6a:19:0d:29: fb:aa:71:4a:a5:52:ef:a6:ba:37:c8:3c:4b:f5:fc: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E5:B2:D1:20:DE:A6:DC:62:1F:F3:E0:81:93:2F:4D:11:4C:02:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/673f8401-eb52-442b-a559-532444ba5bc8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 172.87.44.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401462 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:35:3f:49:74:cc:9f:3b:76:b8:fe:c3:0b:07:c8:79:ac:ce: e7:3d:e8:61:47:18:54:d7:20:b2:7d:fd:82:b6:9d:57:ff:df: cc:e8:fb:0f:72:35:7d:a2:45:93:07:60:98:4b:d9:d4:05:89: 29:59:dd:ff:29:02:bd:32:08:cc:de:1a:0d:95:8c:22:94:83: 48:3a:7f:bf:71:1a:b9:a3:17:41:cb:fd:90:44:62:1f:4c:12: 17:72:bf:6d:90:53:6a:63:20:db:ab:9c:a9:51:69:8a:4c:b8: 72:b0:5e:ce:3b:53:d0:90:66:b4:d9:e6:01:88:8f:4d:9f:fa: ee:7c:c8:37:f2:32:f5:02:a7:46:bc:2c:38:a1:17:77:65:5e: a1:11:d6:93:7d:f4:65:80:a0:00:02:1b:67:5d:ad:9f:fb:34: 1b:d3:9f:87:3f:b1:2e:6d:ea:fd:9a:6f:3e:ab:ac:56:a3:00: de:e3:a1:41:3e:4e:8f:84:44:f3:f8:b6:e6:f1:14:e8:34:99: e7:51:1d:f9:f9:55:b5:71:3f:35:12:60:1d:9d:f6:16:db:a7: 0c:ec:c7:a3:83:e2:53:3c:59:6b:c7:3d:8a:3b:dd:45:a1:70: 3d:ae:84:e9:90:53:99:67:1d:95:60:c7:02:03:03:fd:f2:16: c3:ec:a7:6d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE07WrAlxSePClOnsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMDE0MTcwMFoXDTI4MDYyMjE0MTcwMFowLzEtMCsGA1UEAxMk NjczZjg0MDEtZWI1Mi00NDJiLWE1NTktNTMyNDQ0YmE1YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvOJPFYmWqrT4euVxkaTWCJaCST+BWN88661 oc7f6AXulqWZQGB+O1KWOeEL7ReNgMbpOMMQPrt6t3jMrPt1ykQfx5L5yjrS6Xyu 8jli9sDhvIy5RNzOIq6150NBWEOo5Glkd5zQZntjvjNerGEUuwUNUZAxS9SLK0IT 5AfCjWfAWkwBIDfn1U2bz6t0FntBWQIZYbaGfR1DBtP6rzZw0pPkkOpHgJ9/F7mj dgp81fFFcyRKs9mSEshemGoY+K7aqsAY8KUMBB1vt2pLgaDCQM39F4+i2CTsebb4 9sudHqw+LGbc/aUc9j8w8moZDSn7qnFKpVLvpro3yDxL9fyGPQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHjlstEg3qbcYh/z4IGTL00RTAIuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 NzNmODQwMS1lYjUyLTQ0MmItYTU1OS01MzI0NDRiYTViYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzY3M2Y4NDAxLWViNTItNDQyYi1h NTU5LTUzMjQ0NGJhNWJjOC82NzNmODQwMS1lYjUyLTQ0MmItYTU1OS01MzI0NDRi YTViYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGsVywwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiA2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHQ1P0l0zJ87drj+wwsHyHmszuc96GFHGFTXILJ9/YK2nVf/ 38zo+w9yNX2iRZMHYJhL2dQFiSlZ3f8pAr0yCMzeGg2VjCKUg0g6f79xGrmjF0HL /ZBEYh9MEhdyv22QU2pjINurnKlRaYpMuHKwXs47U9CQZrTZ5gGIj02f+u58yDfy MvUCp0a8LDihF3dlXqER1pN99GWAoAACG2ddrZ/7NBvTn4c/sS5t6v2abz6rrFaj AN7joUE+To+ERPP4tubxFOg0medRHfn5VbVxPzUSYB2d9hbbpwzsx6OD4lM8WWvH PYo73UWhcD2uhOmQU5lnHZVgxwIDA/3yFsPsp20= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:53 2026 by rpki-client