$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd1e9b18-2fc6-4293-b733-26583f1233f0.cer File: bd1e9b18-2fc6-4293-b733-26583f1233f0.cer (raw, json) Hash identifier: 7MFBxnDEmTCT/w0FxVl8B8XOwWT4ZWdUZIM1yYhRheU= Subject key identifier: C7:77:C6:12:A7:5F:7F:CF:96:FE:34:AA:19:3D:34:61:82:78:8D:8C Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D1F4E428D0F247D69AEE42BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd1e9b18-2fc6-4293-b733-26583f1233f0/bd1e9b18-2fc6-4293-b733-26583f1233f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd1e9b18-2fc6-4293-b733-26583f1233f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 13:09:19 +0000 Certificate not after: Sun 11 Jun 2028 17:09:20 +0000 Subordinate resources: AS: 402275 IP: 2620:a4:d820::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4e:42:8d:0f:24:7d:69:ae:e4:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 10 13:09:19 2026 GMT Not After : Jun 11 17:09:20 2028 GMT Subject: CN=bd1e9b18-2fc6-4293-b733-26583f1233f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:31:fd:6a:59:f9:50:72:76:7d:82:4e:56: 3b:1b:9d:36:0e:34:4b:dc:86:d2:e1:50:30:a4:af: 75:b4:be:c0:e8:94:22:1e:bb:e9:f8:0f:36:ee:28: 1a:3d:a6:6f:7c:ea:6b:f3:50:0f:b7:7e:2a:96:5d: 12:72:f9:a8:eb:e4:1c:36:5a:4a:08:de:1f:e5:33: 08:46:74:cb:89:77:b1:99:8b:8c:57:16:47:5f:38: 56:5c:21:36:ba:37:e4:3d:00:da:c0:67:4d:81:31: 72:a3:3f:71:95:d8:2f:68:54:9f:e6:24:3b:db:2a: 9f:d8:2a:3d:df:99:36:56:ce:e5:87:88:26:9f:78: 8a:1a:81:12:ea:00:bf:df:47:dd:8f:ab:dc:2f:aa: 1f:62:40:fa:22:62:73:a2:12:6c:76:99:3f:22:41: e8:f3:ec:f7:2d:f2:31:25:cc:93:e3:ad:59:11:c4: 0c:b2:ce:5c:39:73:b8:16:88:e7:b1:17:77:ff:fe: 4d:e4:c8:d9:1a:46:e7:c5:dd:ad:0c:94:bb:59:c1: bd:5c:3a:9f:63:69:7e:94:69:d9:24:7c:dc:44:cf: 37:1c:d5:e8:18:a7:6e:5b:09:2c:88:c1:d9:5f:54: e0:71:d9:9c:00:17:01:04:b5:d0:1e:0e:e2:ed:ee: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:C6:12:A7:5F:7F:CF:96:FE:34:AA:19:3D:34:61:82:78:8D:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd1e9b18-2fc6-4293-b733-26583f1233f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd1e9b18-2fc6-4293-b733-26583f1233f0/bd1e9b18-2fc6-4293-b733-26583f1233f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2620:a4:d820::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402275 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d7:ce:46:83:e8:da:df:e6:9f:4a:29:c2:5c:4c:e1:a4:0f: 59:3c:3d:c1:fc:63:3e:ed:f8:00:83:a8:71:d8:aa:70:96:47: 57:da:75:7c:20:aa:47:fb:45:df:59:60:7e:06:04:6d:b8:c7: 72:9b:ad:25:54:ab:56:79:68:06:18:cb:e6:fe:31:50:98:29: 4c:9d:d1:28:2a:6d:a4:5a:6c:f9:b1:7d:50:5a:cc:5c:b7:d9: c3:03:9d:06:78:0c:2b:86:14:2f:d9:0e:ed:96:a8:3c:a9:27: 83:4a:ea:1e:a8:20:22:0c:74:57:da:c6:56:4e:41:94:e0:b6: bc:2c:b5:c6:4a:3c:67:13:bc:0c:40:a7:49:92:34:60:c5:46: 7f:de:c6:a3:5e:87:2b:d7:e1:a5:84:5e:b7:e4:de:85:3d:ba: a3:9c:44:7d:b7:bb:8e:3e:be:05:4b:d5:3e:de:13:8a:99:34: 5e:38:c9:72:30:a7:ce:53:ae:ab:4f:b6:48:9a:9a:4f:f9:4b: de:9f:a9:c8:56:bf:1a:26:13:7a:01:24:ce:d0:db:b0:78:a2: a4:1a:6a:33:b6:30:f4:c8:86:51:c9:fa:6f:01:93:b1:f7:d5: 1e:ac:ab:33:d7:2b:07:3e:4d:82:06:9b:a6:d8:62:b4:60:f0: d3:06:ac:63 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE0fTkKNDyR9aa7kK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMDEzMDkxOVoXDTI4MDYxMTE3MDkyMFowLzEtMCsGA1UEAxMk YmQxZTliMTgtMmZjNi00MjkzLWI3MzMtMjY1ODNmMTIzM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC8x/WpZ+VBydn2CTlY7G502DjRL3IbS4VAw pK91tL7A6JQiHrvp+A827igaPaZvfOpr81APt34qll0Scvmo6+QcNlpKCN4f5TMI RnTLiXexmYuMVxZHXzhWXCE2ujfkPQDawGdNgTFyoz9xldgvaFSf5iQ72yqf2Co9 35k2Vs7lh4gmn3iKGoES6gC/30fdj6vcL6ofYkD6ImJzohJsdpk/IkHo8+z3LfIx JcyT461ZEcQMss5cOXO4FojnsRd3//5N5MjZGkbnxd2tDJS7WcG9XDqfY2l+lGnZ JHzcRM83HNXoGKduWwksiMHZX1TgcdmcABcBBLXQHg7i7e5LIQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFMd3xhKnX3/Plv40qhk9NGGCeI2MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i ZDFlOWIxOC0yZmM2LTQyOTMtYjczMy0yNjU4M2YxMjMzZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JkMWU5YjE4LTJmYzYtNDI5My1i NzMzLTI2NTgzZjEyMzNmMC9iZDFlOWIxOC0yZmM2LTQyOTMtYjczMy0yNjU4M2Yx MjMzZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACk2CAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiNjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAGDXzkaD6Nrf5p9KKcJcTOGkD1k8PcH8Yz7t+ACDqHHY qnCWR1fadXwgqkf7Rd9ZYH4GBG24x3KbrSVUq1Z5aAYYy+b+MVCYKUyd0SgqbaRa bPmxfVBazFy32cMDnQZ4DCuGFC/ZDu2WqDypJ4NK6h6oICIMdFfaxlZOQZTgtrws tcZKPGcTvAxAp0mSNGDFRn/exqNehyvX4aWEXrfk3oU9uqOcRH23u44+vgVL1T7e E4qZNF44yXIwp85TrqtPtkiamk/5S96fqchWvxomE3oBJM7Q27B4oqQaajO2MPTI hlHJ+m8Bk7H31R6sqzPXKwc+TYIGm6bYYrRg8NMGrGM= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:58 2026 by rpki-client