$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c1aeae84-6a4d-47df-86ce-cb83bc58581b.cer File: c1aeae84-6a4d-47df-86ce-cb83bc58581b.cer (raw, json) Hash identifier: UFaLgHB2SANdvQpIX1DxaGFFjfbUG6eVTHh72FovpyY= Subject key identifier: 55:D1:69:C2:2E:37:8E:38:89:2F:33:2F:04:BD:76:79:30:8B:6F:FD Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0CBFEC761B8E67618FA50800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c1aeae84-6a4d-47df-86ce-cb83bc58581b/c1aeae84-6a4d-47df-86ce-cb83bc58581b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c1aeae84-6a4d-47df-86ce-cb83bc58581b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Mar 2026 21:37:59 +0000 Certificate not after: Mon 05 Jun 2028 20:37:59 +0000 Subordinate resources: IP: 209.46.37.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:bf:ec:76:1b:8e:67:61:8f:a5:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 3 21:37:59 2026 GMT Not After : Jun 5 20:37:59 2028 GMT Subject: CN=c1aeae84-6a4d-47df-86ce-cb83bc58581b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:72:5b:61:b4:81:49:a2:ee:e2:a8:98:b8: b8:59:b0:20:4e:1d:1d:36:55:df:d9:97:40:e7:17: 0c:14:c8:c9:80:d4:7e:3f:e4:16:68:b4:c9:aa:89: e7:c2:75:36:75:a7:53:60:47:a6:0b:24:02:5b:f1: da:de:26:24:ba:10:fb:9b:97:97:77:4c:d6:37:39: df:23:01:90:e3:b7:8e:6f:a2:f0:1b:e3:59:43:00: 1e:0e:40:3a:d0:3a:5a:fe:9b:4a:1d:1b:7e:34:42: de:99:5e:b4:b3:4d:16:2b:e2:79:e1:d1:3f:2a:2a: 6c:5d:7d:b4:ab:df:c0:42:da:02:57:90:77:f9:41: 1d:d7:5e:c1:52:33:42:d2:dd:e5:d1:b3:a2:33:a2: 43:51:6c:42:29:97:55:93:fb:d8:3f:46:15:f0:72: 55:81:90:5b:4e:9e:0f:32:ef:31:6b:a8:af:ab:2c: 13:7a:50:9a:58:14:09:cc:48:e0:af:43:8b:f3:fe: ca:80:22:90:e1:ab:37:8a:5c:18:e2:a7:12:ae:b7: a4:95:14:08:36:58:f7:0d:2f:46:38:29:8f:38:0d: f0:1f:a2:19:eb:c6:85:38:86:cf:98:7c:64:f5:73: a8:48:0b:97:e7:97:67:8d:7b:30:50:8e:2d:ab:dc: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D1:69:C2:2E:37:8E:38:89:2F:33:2F:04:BD:76:79:30:8B:6F:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c1aeae84-6a4d-47df-86ce-cb83bc58581b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c1aeae84-6a4d-47df-86ce-cb83bc58581b/c1aeae84-6a4d-47df-86ce-cb83bc58581b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 209.46.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:be:c4:c3:4c:56:da:7c:6b:39:63:78:c1:bb:61:3e:d5:c2: 0e:da:0f:7d:cf:af:27:3a:e5:da:e8:39:2c:68:e5:94:ba:61: 1a:6c:af:c2:e0:54:8f:e2:ce:51:d0:c1:4f:ae:05:0c:d1:73: 8c:5a:2c:80:3b:bd:c2:21:b8:2e:bd:8f:89:f0:f7:a0:3e:15: 46:a7:4e:0b:2a:b0:ac:c7:85:55:5a:30:14:cd:74:1b:0d:da: 17:07:3a:0f:ac:73:c8:b0:13:18:12:cc:05:fa:5e:a5:d5:77: f8:b0:2c:82:25:14:cc:c3:81:cd:33:f4:08:91:d7:cb:e5:07: 99:97:b4:6e:8f:bd:3d:b2:d2:b8:56:97:17:4f:bc:4c:8a:cd: 43:83:78:3b:c8:40:51:36:f4:43:38:9d:60:25:fc:1a:d3:8c: 8d:a1:21:19:89:10:42:85:d5:f7:5a:3f:41:2f:54:24:ab:60: 1e:66:08:4c:b7:93:0d:e7:36:db:64:21:9d:4b:e8:12:db:23: 01:65:df:95:e6:10:46:ba:e1:f4:6f:63:7e:f9:3e:94:10:96: ee:ba:69:9a:1a:ec:48:ac:42:74:d2:c3:3a:12:43:b2:de:45: 41:3d:c5:b5:07:bf:b7:a6:cc:ea:9f:29:70:36:fa:bc:ba:66: ea:c4:8f:ae -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0Mv+x2G45nYY+lCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwMzIxMzc1OVoXDTI4MDYwNTIwMzc1OVowLzEtMCsGA1UEAxMk YzFhZWFlODQtNmE0ZC00N2RmLTg2Y2UtY2I4M2JjNTg1ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOFyW2G0gUmi7uKomLi4WbAgTh0dNlXf2ZdA 5xcMFMjJgNR+P+QWaLTJqonnwnU2dadTYEemCyQCW/Ha3iYkuhD7m5eXd0zWNznf IwGQ47eOb6LwG+NZQwAeDkA60Dpa/ptKHRt+NELemV60s00WK+J54dE/KipsXX20 q9/AQtoCV5B3+UEd117BUjNC0t3l0bOiM6JDUWxCKZdVk/vYP0YV8HJVgZBbTp4P Mu8xa6ivqywTelCaWBQJzEjgr0OL8/7KgCKQ4as3ilwY4qcSrreklRQINlj3DS9G OCmPOA3wH6IZ68aFOIbPmHxk9XOoSAuX55dnjXswUI4tq9wD5wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFXRacIuN444iS8zLwS9dnkwi2/9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j MWFlYWU4NC02YTRkLTQ3ZGYtODZjZS1jYjgzYmM1ODU4MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2MxYWVhZTg0LTZhNGQtNDdkZi04 NmNlLWNiODNiYzU4NTgxYi9jMWFlYWU4NC02YTRkLTQ3ZGYtODZjZS1jYjgzYmM1 ODU4MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRLiUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACr7Ew0xW2nxrOWN4wbth PtXCDtoPfc+vJzrl2ug5LGjllLphGmyvwuBUj+LOUdDBT64FDNFzjFosgDu9wiG4 Lr2PifD3oD4VRqdOCyqwrMeFVVowFM10Gw3aFwc6D6xzyLATGBLMBfpepdV3+LAs giUUzMOBzTP0CJHXy+UHmZe0bo+9PbLSuFaXF0+8TIrNQ4N4O8hAUTb0QzidYCX8 GtOMjaEhGYkQQoXV91o/QS9UJKtgHmYITLeTDec222QhnUvoEtsjAWXfleYQRrrh 9G9jfvk+lBCW7rppmhrsSKxCdNLDOhJDst5FQT3FtQe/t6bM6p8pcDb6vLpm6sSP rg== -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:45 2026 by rpki-client