$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer File: f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer (raw, json) Hash identifier: 6mfqMzZKqm1a0tgoV8A+a90jVIxgMj2BrLnwFC5D4js= Subject key identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D04DAA80012A20AB6099AA680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Mar 2026 01:45:22 +0000 Certificate not after: Sat 03 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 399340 IP: 23.180.48.0/24 IP: 2602:fc7f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:da:a8:00:12:a2:0a:b6:09:9a:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 1 01:45:22 2026 GMT Not After : Jun 3 00:45:22 2028 GMT Subject: CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:99:85:e0:1a:c7:bb:c7:e5:63:e9:b8:a6: b7:1d:47:2a:70:ad:23:01:9a:4a:b8:33:37:1e:61: 11:b2:55:43:ce:d0:d8:02:32:35:77:15:36:c0:d6: b6:62:fb:b7:ef:d5:23:14:cf:b6:6e:67:4d:16:2b: c9:f1:34:e8:29:17:b0:73:74:19:9c:5d:67:5b:78: 66:bb:86:9c:05:b8:46:00:07:62:b8:97:8d:51:d6: 2b:42:a5:05:6e:70:02:d7:67:82:2b:5a:aa:96:eb: 3c:73:c6:36:e1:96:34:8f:6e:7a:e0:32:21:89:59: fd:99:71:f2:7f:c9:d1:ba:b9:d7:29:6d:8e:b4:6d: 2e:a9:98:30:77:9c:a2:d8:87:d3:b3:5f:bc:f2:2f: b9:26:c5:b8:13:52:bc:ea:7a:45:56:80:fa:ce:b0: 24:20:b8:e3:0a:5d:79:36:97:30:fd:e4:61:34:53: 75:c2:be:ea:e9:1b:e8:dc:8c:36:35:41:8e:0d:df: 78:10:0e:dd:d6:82:ac:da:c6:cf:e6:9e:aa:69:e4: f2:af:26:3f:3c:fb:7d:2b:9c:0f:1a:9a:9f:40:dc: 56:c4:4a:6a:de:a1:0e:2e:a1:04:94:32:9c:5e:16: 9e:c5:37:a6:17:dd:02:2b:f0:ae:29:c9:94:92:51: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.180.48.0/24 IPv6: 2602:fc7f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399340 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:42:58:a5:d4:20:3e:04:cf:d3:c1:c2:3a:da:d6:c9:8d:e2: bc:57:2b:13:e2:92:6b:80:be:d7:33:ad:94:f3:3f:95:a5:19: c5:71:b6:e8:de:2a:ea:e6:00:3a:5c:e5:8c:ce:f1:88:02:51: 18:28:f5:fe:5e:70:ca:5f:3b:81:18:a7:2c:64:7f:ac:71:b4: b6:fe:09:9a:18:a8:22:11:78:77:c0:18:e2:ab:0f:97:e2:49: 1b:1f:05:f1:5e:7d:e6:bb:7f:1f:64:78:3f:8e:ea:3a:2e:90: 6b:d1:74:86:6b:cb:5e:04:7e:69:cf:a8:a2:8c:43:ab:7e:fe: c2:0f:e0:93:c2:42:d0:ca:fe:02:56:cb:02:ed:4a:a6:f7:8a: 7a:3d:f5:9c:e3:23:2d:38:5a:c1:ee:67:e8:02:1d:47:07:e7: 23:6c:a8:93:d4:2a:16:7b:6f:fd:69:69:fc:0e:1d:6e:31:a7: 81:23:f5:72:66:54:17:e2:4f:5c:99:47:7e:dc:2b:1f:47:67: 4a:1d:3a:4d:84:b3:ef:62:8a:e1:41:4d:97:fa:9c:2b:87:46: fd:de:1f:64:02:24:5b:aa:e3:e4:a9:e0:3c:16:b1:0f:ee:e7: f1:01:c7:9a:48:33:57:55:f0:21:4c:0d:6b:87:61:39:ab:19: b5:b5:2b:81 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0E2qgAEqIKtgmapoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMTAxNDUyMloXDTI4MDYwMzAwNDUyMlowLzEtMCsGA1UEAxMk ZjhmYTg1MWYtMGM2Zi00NGEyLTgwMTctN2IwNjJmNGQ4ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqZheAax7vH5WPpuKa3HUcqcK0jAZpKuDM3 HmERslVDztDYAjI1dxU2wNa2Yvu379UjFM+2bmdNFivJ8TToKRewc3QZnF1nW3hm u4acBbhGAAdiuJeNUdYrQqUFbnAC12eCK1qqlus8c8Y24ZY0j2564DIhiVn9mXHy f8nRurnXKW2OtG0uqZgwd5yi2IfTs1+88i+5JsW4E1K86npFVoD6zrAkILjjCl15 Npcw/eRhNFN1wr7q6Rvo3Iw2NUGODd94EA7d1oKs2sbP5p6qaeTyryY/PPt9K5wP GpqfQNxWxEpq3qEOLqEElDKcXhaexTemF90CK/CuKcmUklHTQQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN+uKdxII6B09eY4eSZ3huis0GueMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m OGZhODUxZi0wYzZmLTQ0YTItODAxNy03YjA2MmY0ZDhlNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y4ZmE4NTFmLTBjNmYtNDRhMi04 MDE3LTdiMDYyZjRkOGU3NC9mOGZhODUxZi0wYzZmLTQ0YTItODAxNy03YjA2MmY0 ZDhlNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtDAwDgQCAAIwCAMGBCYC/H8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYX7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDQlil1CA+BM/TwcI62tbJjeK8 VysT4pJrgL7XM62U8z+VpRnFcbbo3irq5gA6XOWMzvGIAlEYKPX+XnDKXzuBGKcs ZH+scbS2/gmaGKgiEXh3wBjiqw+X4kkbHwXxXn3mu38fZHg/juo6LpBr0XSGa8te BH5pz6iijEOrfv7CD+CTwkLQyv4CVssC7Uqm94p6PfWc4yMtOFrB7mfoAh1HB+cj bKiT1CoWe2/9aWn8Dh1uMaeBI/VyZlQX4k9cmUd+3CsfR2dKHTpNhLPvYorhQU2X +pwrh0b93h9kAiRbquPkqeA8FrEP7ufxAceaSDNXVfAhTA1rh2E5qxm1tSuB -----END CERTIFICATE-----Generated at Mon Mar 2 03:42:19 2026 by rpki-client