$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead.cer File: dd81569f-1124-486c-94a7-7956a67b6ead.cer (raw, json) Hash identifier: 0u3XZ4pVtlay0l2ZIGqweBx7SFGhjgCFPakKuDxzK7I= Subject key identifier: DD:7A:1A:EC:1B:97:F2:78:1F:43:6D:80:D3:70:00:68:DA:3E:A0:BF Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0ED664FFB2DA53DBF841D1B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/dd81569f-1124-486c-94a7-7956a67b6ead.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 15:34:52 +0000 Certificate not after: Tue 06 Jun 2028 14:34:52 +0000 Subordinate resources: AS: 6336 IP: 50.116.192.0/18 IP: 69.194.240.0/20 IP: 74.120.140.0/22 IP: 192.208.192.0/19 IP: 2620:112:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:d6:64:ff:b2:da:53:db:f8:41:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 4 15:34:52 2026 GMT Not After : Jun 6 14:34:52 2028 GMT Subject: CN=dd81569f-1124-486c-94a7-7956a67b6ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:f2:e4:5d:20:de:34:0c:39:3f:09:8e:36: 6b:70:41:74:74:0f:c0:2e:af:9c:e3:68:9a:4e:db: 0e:5e:b8:58:fd:57:2a:60:69:c4:a3:37:f3:05:c7: 18:2d:1e:f4:fd:3b:af:d4:71:1d:1e:d2:f9:59:15: 29:2b:2a:1e:14:bc:6e:8d:cb:3b:62:d8:c5:98:48: 0e:cf:c1:e3:6c:35:6b:00:10:0a:fa:36:1b:ee:3d: c4:ee:e1:81:eb:50:1c:cb:bf:ae:de:42:1b:f1:79: 6e:52:bd:87:66:8b:72:60:c3:3f:46:ed:60:71:d7: f0:3e:81:44:ab:28:b8:ed:3e:14:2b:39:54:c1:a7: 74:d7:8c:5c:95:7b:89:22:67:30:f4:89:b5:d8:81: a6:50:43:b9:37:6e:99:cb:b2:4f:d9:81:52:4c:4f: fb:55:5e:b1:0d:fb:8a:87:38:cb:5e:a2:7b:9c:bc: 39:1d:1b:ff:6a:68:67:74:a6:7d:7d:6f:c5:6d:66: 48:d1:5b:b4:b3:f4:13:85:6b:cc:66:d5:35:44:14: 30:58:b0:17:a2:74:bd:f6:6e:c4:1f:d4:76:d2:c8: a2:df:2b:ac:be:61:ed:02:58:84:4f:9d:e2:94:7f: 94:87:6b:9f:b6:02:1c:69:93:f1:f5:e6:c9:fa:c6: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7A:1A:EC:1B:97:F2:78:1F:43:6D:80:D3:70:00:68:DA:3E:A0:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/dd81569f-1124-486c-94a7-7956a67b6ead.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 50.116.192.0/18 69.194.240.0/20 74.120.140.0/22 192.208.192.0/19 IPv6: 2620:112:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6336 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8a:b8:ee:fc:de:a2:68:fd:67:67:6f:c7:d7:ec:e5:e5:e9: 22:b8:c8:74:e7:9c:43:04:b8:1a:0c:45:b2:e6:c6:e4:88:f1: c1:08:83:97:08:4e:29:2d:94:a9:e2:8f:63:3a:47:3b:20:83: c5:d1:47:77:a5:2c:b0:cc:80:70:fa:04:ac:63:24:d0:3a:d1: 84:80:5b:29:cb:5a:d0:d6:9d:b8:2f:06:24:50:bb:ab:d3:c8: 81:7f:f4:88:17:e3:fb:c7:b0:29:53:03:93:50:2b:e6:1a:cc: 6f:29:8d:d4:3d:83:db:97:cd:6e:cb:01:23:5d:b9:a5:bb:31: ed:e0:30:ea:dd:6c:e4:e9:18:e4:fb:80:26:38:cc:5d:85:7c: 53:e4:74:2b:0a:7f:57:3e:c3:c3:e9:ce:3b:8a:3e:f3:9c:f2: 08:7d:d5:72:b9:62:b7:de:79:53:c0:7e:be:36:d9:90:76:19: 7f:73:d9:43:5b:2b:7c:20:6d:24:40:92:ea:2c:90:cd:37:2b: b1:99:2f:9f:42:33:3e:90:3b:fb:83:e8:31:db:da:f0:b4:4c: 0d:a3:df:f1:45:4b:05:a1:5a:54:6a:75:3d:05:66:87:b7:80: 48:63:9a:cd:6e:0c:c4:21:0e:d6:c9:4f:95:cd:b1:17:f1:0d: dc:05:bf:b8 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWE0O1mT/stpT2/hB0bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNDE1MzQ1MloXDTI4MDYwNjE0MzQ1MlowLzEtMCsGA1UEAxMk ZGQ4MTU2OWYtMTEyNC00ODZjLTk0YTctNzk1NmE2N2I2ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr3y5F0g3jQMOT8JjjZrcEF0dA/ALq+c42ia TtsOXrhY/VcqYGnEozfzBccYLR70/Tuv1HEdHtL5WRUpKyoeFLxujcs7YtjFmEgO z8HjbDVrABAK+jYb7j3E7uGB61Acy7+u3kIb8XluUr2HZotyYMM/Ru1gcdfwPoFE qyi47T4UKzlUwad014xclXuJImcw9Im12IGmUEO5N26Zy7JP2YFSTE/7VV6xDfuK hzjLXqJ7nLw5HRv/amhndKZ9fW/FbWZI0Vu0s/QThWvMZtU1RBQwWLAXonS99m7E H9R20sii3yusvmHtAliET53ilH+Uh2uftgIcaZPx9ebJ+sbH7QIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFN16Guwbl/J4H0NtgNNwAGjaPqC/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k ZDgxNTY5Zi0xMTI0LTQ4NmMtOTRhNy03OTU2YTY3YjZlYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2RkODE1NjlmLTExMjQtNDg2Yy05 NGE3LTc5NTZhNjdiNmVhZC9kZDgxNTY5Zi0xMTI0LTQ4NmMtOTRhNy03OTU2YTY3 YjZlYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMB4EAgABMBgDBAYydMADBARFwvADBAJKeIwDBAXA0MAwDwQCAAIw CQMHBCYgARLwADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIYwDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1 irju/N6iaP1nZ2/H1+zl5ekiuMh055xDBLgaDEWy5sbkiPHBCIOXCE4pLZSp4o9j Okc7IIPF0Ud3pSywzIBw+gSsYyTQOtGEgFspy1rQ1p24LwYkULur08iBf/SIF+P7 x7ApUwOTUCvmGsxvKY3UPYPbl81uywEjXbmluzHt4DDq3Wzk6Rjk+4AmOMxdhXxT 5HQrCn9XPsPD6c47ij7znPIIfdVyuWK33nlTwH6+NtmQdhl/c9lDWyt8IG0kQJLq LJDNNyuxmS+fQjM+kDv7g+gx29rwtEwNo9/xRUsFoVpUanU9BWaHt4BIY5rNbgzE IQ7WyU+VzbEX8Q3cBb+4 -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:59 2026 by rpki-client