$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer File: db08c0ba-423d-4547-9dee-8ed97f061fff.cer (raw, json) Hash identifier: 7g9H3FkToVydI7xmk4F2LC7+6jGsc4AtAOrqBoNmuh4= Subject key identifier: 55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CA808DC0852DDB41FB97DFC60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 19:48:17 +0000 Certificate not after: Thu 24 Feb 2028 19:36:17 +0000 Subordinate resources: AS: 400268 IP: 66.129.32.0/21 IP: 140.106.32.0/20 IP: 152.55.128.0/20 IP: 160.79.96.0/21 IP: 2606:79c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a8:08:dc:08:52:dd:b4:1f:b9:7d:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 26 19:48:17 2026 GMT Not After : Feb 24 19:36:17 2028 GMT Subject: CN=db08c0ba-423d-4547-9dee-8ed97f061fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:01:76:f0:cb:94:d9:34:6b:83:f4:33:fd: e5:f9:96:41:3e:f6:d3:f7:4a:8a:5f:2c:29:dc:97: d8:14:f8:b5:28:c0:96:93:4c:07:d1:62:96:88:2d: 1d:76:c1:0a:38:7c:4e:58:c1:51:ca:79:f9:ee:b8: 6e:a7:29:95:e3:44:c1:a6:96:9f:b4:f4:4f:2a:ad: b1:a5:cf:55:92:cc:b9:84:01:ce:af:2e:c8:81:96: a4:0f:2f:12:0b:08:98:09:66:38:35:91:53:e9:a7: c3:79:df:a1:9d:ad:05:75:4d:4b:24:4b:4d:77:49: e2:2c:1a:0e:f8:1e:75:92:68:ff:2a:7f:57:95:e1: b8:f7:13:d3:e6:c4:c5:53:bf:b3:e6:a1:74:8e:8a: 12:58:99:ed:de:f9:06:1c:c4:5c:82:dc:ee:a9:84: 9d:13:12:c0:2d:32:7e:af:c1:b7:b1:d0:23:54:1d: 9e:f3:56:ef:e4:f6:1e:a2:af:54:08:80:0b:9a:b6: 7b:d1:55:1a:98:57:df:ff:3b:cf:8e:c5:26:7a:ea: 9a:b6:e7:43:79:b1:cb:79:67:79:76:17:3e:53:5c: b7:dc:23:83:81:41:b2:b6:72:41:b0:e4:73:9b:62: 8d:3a:4f:89:42:7d:c0:cc:5a:12:b4:33:18:e8:f3: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.129.32.0/21 140.106.32.0/20 152.55.128.0/20 160.79.96.0/21 IPv6: 2606:79c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400268 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:80:98:f6:60:d8:ad:86:25:a7:f9:5a:46:f7:e7:28:c7:c8: 7a:3b:91:1b:65:d9:c1:e3:bd:2a:95:c8:e5:22:f9:d8:d7:74: ca:8a:d5:94:6b:72:a4:52:e8:ed:97:db:e4:49:49:7e:ea:e6: 45:94:54:af:08:bf:59:a1:36:6d:bf:70:a3:39:8f:04:07:db: 5d:ea:a1:83:48:51:69:a3:ba:ed:40:0d:5b:ef:d4:a9:c2:06: 0a:e0:3b:df:b0:19:64:07:ca:be:2b:c4:16:8d:5e:0a:4c:79: 6b:92:9e:de:6e:b4:9b:cf:d8:7f:77:fd:ba:9f:27:cb:50:e7: ae:83:61:0f:af:a1:b8:f7:af:8b:8d:d4:e7:b3:62:fd:38:02: 1a:02:9b:ca:62:be:61:84:52:f9:a0:2a:28:13:ca:98:d9:5b: 23:38:60:eb:a6:65:2f:32:6a:01:fb:5a:6b:bb:8e:71:32:f6: b2:19:6e:8c:fc:10:20:46:fc:df:ce:33:97:ab:92:68:06:4e: 8a:d0:9b:27:d4:48:ab:18:ee:1e:de:c1:a3:cc:bf:5c:06:1a: c4:d7:7b:cd:2e:fb:2f:ed:15:83:af:88:82:5f:11:5d:d4:9d: 01:17:ae:da:d1:30:91:cf:cf:f6:d5:f1:0f:85:27:c1:5f:59: 4a:d0:31:b9 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEyoCNwIUt20H7l9/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDEyNjE5NDgxN1oXDTI4MDIyNDE5MzYxN1owLzEtMCsGA1UEAxMk ZGIwOGMwYmEtNDIzZC00NTQ3LTlkZWUtOGVkOTdmMDYxZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pIBdvDLlNk0a4P0M/3l+ZZBPvbT90qKXywp 3JfYFPi1KMCWk0wH0WKWiC0ddsEKOHxOWMFRynn57rhupymV40TBppaftPRPKq2x pc9Vksy5hAHOry7IgZakDy8SCwiYCWY4NZFT6afDed+hna0FdU1LJEtNd0niLBoO +B51kmj/Kn9XleG49xPT5sTFU7+z5qF0jooSWJnt3vkGHMRcgtzuqYSdExLALTJ+ r8G3sdAjVB2e81bv5PYeoq9UCIALmrZ70VUamFff/zvPjsUmeuqatudDebHLeWd5 dhc+U1y33CODgUGytnJBsORzm2KNOk+JQn3AzFoStDMY6PNs2QIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFFUH+hVMLQdfIqenrZTXU7nv4rNAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k YjA4YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5N2YwNjFmZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2RiMDhjMGJhLTQyM2QtNDU0Ny05 ZGVlLThlZDk3ZjA2MWZmZi9kYjA4YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5N2Yw NjFmZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBANCgSADBASMaiADBASYN4ADBAOgT2AwDQQCAAIw BwMFACYGecAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhuMMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADCA mPZg2K2GJaf5Wkb35yjHyHo7kRtl2cHjvSqVyOUi+djXdMqK1ZRrcqRS6O2X2+RJ SX7q5kWUVK8Iv1mhNm2/cKM5jwQH213qoYNIUWmjuu1ADVvv1KnCBgrgO9+wGWQH yr4rxBaNXgpMeWuSnt5utJvP2H93/bqfJ8tQ566DYQ+vobj3r4uN1OezYv04AhoC m8pivmGEUvmgKigTypjZWyM4YOumZS8yagH7Wmu7jnEy9rIZboz8ECBG/N/OM5er kmgGTorQmyfUSKsY7h7ewaPMv1wGGsTXe80u+y/tFYOviIJfEV3UnQEXrtrRMJHP z/bV8Q+FJ8FfWUrQMbk= -----END CERTIFICATE-----Generated at Mon Mar 2 02:15:10 2026 by rpki-client