$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765.cer File: c13f4003-1e3d-4d8a-aba5-a85f793d9765.cer (raw, json) Hash identifier: fGZAADubyfj6KiUnWRVlK0qpCtpgPNY9NNmdWaK+rB0= Subject key identifier: D3:7A:26:B8:A4:99:11:AA:3A:45:6A:53:D8:A7:C5:FE:58:45:19:4F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D439D3EC4223ED6F1B93C95A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/c13f4003-1e3d-4d8a-aba5-a85f793d9765.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 13:17:34 +0000 Certificate not after: Sun 25 Jun 2028 13:17:34 +0000 Subordinate resources: IP: 167.232.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:9d:3e:c4:22:3e:d6:f1:b9:3c:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 23 13:17:34 2026 GMT Not After : Jun 25 13:17:34 2028 GMT Subject: CN=c13f4003-1e3d-4d8a-aba5-a85f793d9765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:a7:4a:9e:96:c3:a4:dd:06:5b:57:63:70: ae:d0:de:c7:c4:53:d0:1e:5f:a5:11:f6:03:a8:a8: 0d:6c:ea:2b:9f:b3:d8:b8:93:ec:0f:cb:5d:c9:e3: 4e:61:83:02:18:75:83:c5:ce:bb:24:d9:c1:41:aa: 87:e8:64:1d:4e:9c:99:b4:64:cd:51:79:02:04:4e: 39:cb:03:7e:1b:24:4f:59:83:c5:f0:45:49:4f:81: 2b:83:bb:08:85:53:f6:d0:5e:cf:b6:57:d6:ab:38: 9f:1c:ef:e7:01:bd:d1:50:84:c8:fc:38:e4:43:54: 25:01:a7:9f:42:61:14:c1:84:8e:10:b8:c6:83:2d: 6b:6d:82:ad:71:68:0a:d0:38:ac:a2:e6:62:f0:11: ac:0d:92:8b:91:81:fa:82:5e:80:2e:3e:e1:7d:3c: 2d:71:d8:77:8e:a6:03:0e:23:c2:f4:1f:5b:5e:2c: a7:0e:41:ab:3d:ad:ef:58:ab:3f:da:4e:9a:b6:ab: df:62:0d:b2:aa:68:c6:68:9f:38:3c:37:f3:99:fa: f1:f3:41:ef:a9:75:af:7f:33:36:33:8f:98:97:80: 5f:00:8d:23:b0:2d:16:8c:62:35:48:67:b0:88:9a: 1e:80:a6:b7:c2:cf:1a:56:c1:05:c9:49:5e:d0:6c: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7A:26:B8:A4:99:11:AA:3A:45:6A:53:D8:A7:C5:FE:58:45:19:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/c13f4003-1e3d-4d8a-aba5-a85f793d9765.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 167.232.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:60:4d:0e:6d:65:ce:50:40:fe:61:25:0e:ae:e0:a5:ca:08: f4:04:8a:4d:40:81:29:a2:89:22:1b:8b:7b:40:06:32:3f:20: c6:31:94:ae:72:9f:7e:f0:ec:a7:8a:e0:df:f9:77:79:c1:53: aa:1f:ab:07:64:73:e4:b0:f0:5f:42:ed:f9:97:47:92:f2:6d: 15:99:a5:3c:b3:96:50:c6:33:f9:e6:0f:a6:4e:18:e3:5a:a9: 6c:07:0b:fc:da:c8:6f:e9:28:37:a5:a9:40:3c:4c:28:11:b6: c4:52:40:f7:87:55:61:39:cd:75:66:bd:c9:0d:6a:96:84:35: 22:55:d8:67:60:77:e3:4e:2b:bf:80:9d:0a:4d:ed:ab:cc:7d: 5a:d8:7d:b1:a8:5a:e7:23:bb:31:4e:a9:37:fa:ce:b1:2f:97: b0:cb:99:ce:d5:ac:39:02:d9:76:d0:4e:3e:26:f4:86:9f:cb: 0b:9f:61:17:11:94:c2:b4:fe:59:f8:ff:ef:b5:94:7f:be:8c: 9b:9d:ca:02:12:d8:ef:2a:35:27:96:6b:44:84:e4:8d:a8:f7: 1e:63:f8:9b:93:61:ad:81:a1:e3:ea:a8:73:95:93:65:62:00: 32:43:91:bb:90:a7:01:da:35:41:5d:86:0d:f7:45:bd:0c:b3: 3d:50:a0:3a -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE1DnT7EIj7W8bk8laAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMzEzMTczNFoXDTI4MDYyNTEzMTczNFowLzEtMCsGA1UEAxMk YzEzZjQwMDMtMWUzZC00ZDhhLWFiYTUtYTg1Zjc5M2Q5NzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlOnSp6Ww6TdBltXY3Cu0N7HxFPQHl+lEfYD qKgNbOorn7PYuJPsD8tdyeNOYYMCGHWDxc67JNnBQaqH6GQdTpyZtGTNUXkCBE45 ywN+GyRPWYPF8EVJT4Erg7sIhVP20F7PtlfWqzifHO/nAb3RUITI/DjkQ1QlAaef QmEUwYSOELjGgy1rbYKtcWgK0DisouZi8BGsDZKLkYH6gl6ALj7hfTwtcdh3jqYD DiPC9B9bXiynDkGrPa3vWKs/2k6atqvfYg2yqmjGaJ84PDfzmfrx80HvqXWvfzM2 M4+Yl4BfAI0jsC0WjGI1SGewiJoegKa3ws8aVsEFyUle0Gx6NQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFNN6JrikmRGqOkVqU9inxf5YRRlPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j MTNmNDAwMy0xZTNkLTRkOGEtYWJhNS1hODVmNzkzZDk3NjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2MxM2Y0MDAzLTFlM2QtNGQ4YS1h YmE1LWE4NWY3OTNkOTc2NS9jMTNmNDAwMy0xZTNkLTRkOGEtYWJhNS1hODVmNzkz ZDk3NjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCn6DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOYE0ObWXOUED+YSUOruCl ygj0BIpNQIEpookiG4t7QAYyPyDGMZSucp9+8OyniuDf+Xd5wVOqH6sHZHPksPBf Qu35l0eS8m0VmaU8s5ZQxjP55g+mThjjWqlsBwv82shv6Sg3palAPEwoEbbEUkD3 h1VhOc11Zr3JDWqWhDUiVdhnYHfjTiu/gJ0KTe2rzH1a2H2xqFrnI7sxTqk3+s6x L5ewy5nO1aw5Atl20E4+JvSGn8sLn2EXEZTCtP5Z+P/vtZR/voybncoCEtjvKjUn lmtEhOSNqPceY/ibk2GtgaHj6qhzlZNlYgAyQ5G7kKcB2jVBXYYN90W9DLM9UKA6 -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:47 2026 by rpki-client