$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae.cer File: 0437edd1-ccab-471d-b4d5-5c78b6de78ae.cer (raw, json) Hash identifier: GF1eCWx6fyPzW3BqqpusgMpHhLICrUUmi+sDgiovvls= Subject key identifier: BE:F0:67:39:06:85:B7:94:CB:53:AE:41:6C:DD:B7:08:C2:9E:13:3C Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CE53B5370E5DEB760101B8C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/0437edd1-ccab-471d-b4d5-5c78b6de78ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Feb 2026 17:54:17 +0000 Certificate not after: Sun 21 May 2028 17:43:04 +0000 Subordinate resources: AS: 899 IP: 199.245.200.0/24 IP: 2602:f45a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e5:3b:53:70:e5:de:b7:60:10:1b:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 17 17:54:17 2026 GMT Not After : May 21 17:43:04 2028 GMT Subject: CN=0437edd1-ccab-471d-b4d5-5c78b6de78ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0a:5d:fe:22:e3:2d:25:b3:47:d4:b3:79:b2: 82:6e:e4:ac:75:be:28:f0:7e:90:76:78:d4:a7:f0: c3:d2:60:a9:32:79:04:0d:59:bf:13:1d:7f:ef:63: cf:84:51:55:eb:c2:07:2a:20:4a:86:3b:f0:1f:e7: 87:26:39:4b:89:c5:97:6b:8c:70:a1:5f:cf:24:60: e6:ac:94:3e:fd:91:20:1e:b0:d5:7f:22:d9:60:4c: a3:ca:d7:1d:1e:2c:24:0a:fd:bf:b1:10:ac:ad:92: 80:02:62:38:a6:d1:63:f1:44:c4:eb:a8:2f:64:03: d2:57:27:83:3c:3e:82:ce:69:ba:54:89:b6:b6:e4: 03:58:ec:1e:b4:06:fa:81:9d:9b:fe:0d:3e:6a:97: 34:1d:0e:b9:9d:6a:0f:06:6f:89:1b:0b:fb:f5:ef: 02:4e:b8:7a:c2:df:41:85:40:4e:b0:fa:a7:87:d8: 2f:04:27:2c:d9:6b:5b:ba:25:25:cc:b0:23:28:35: 59:d0:c0:f7:37:95:27:1d:06:89:b2:7b:a4:97:b5: 93:18:0e:0f:d1:64:e2:54:9b:6d:bb:c3:21:5f:6c: 6c:18:09:f4:d0:fb:51:f3:63:79:29:6f:5a:89:30: 48:13:09:6f:43:df:91:8c:f5:42:dd:6a:bb:60:43: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:67:39:06:85:B7:94:CB:53:AE:41:6C:DD:B7:08:C2:9E:13:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/0437edd1-ccab-471d-b4d5-5c78b6de78ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 199.245.200.0/24 IPv6: 2602:f45a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 899 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:29:a9:bf:12:32:6f:96:d9:ec:b2:4c:4c:5b:ae:a7:9f:9f: e4:c2:5c:33:e3:9f:53:ca:90:2f:ae:02:fb:f4:02:75:be:bf: e8:80:5a:d7:00:ff:dc:4e:d0:77:e2:72:41:42:fd:d5:cb:6e: 21:57:1e:0b:97:9f:d7:60:29:b5:5d:68:cb:67:f2:6e:ce:4c: 6e:cd:30:d9:40:34:24:a6:96:72:78:df:9f:7b:b4:ab:29:75: ed:3a:c7:5e:ae:f5:6b:6c:d7:ac:7e:51:55:cd:65:1c:83:e0: ea:69:f1:a5:6a:25:15:74:a3:6b:55:b8:fc:99:b5:2f:11:cb: 56:85:0d:60:da:2d:71:c4:a5:c8:a6:00:7c:cc:41:c2:c6:62: ca:4f:08:a2:a4:31:9b:67:90:65:45:c5:9f:11:7e:12:24:ad: f4:45:66:39:d1:a0:6a:3a:6e:92:d4:c8:b8:04:85:12:fc:e9: 6b:7d:d2:64:a9:9e:69:b4:b4:7b:59:ea:3e:38:c9:14:43:a1: d2:bb:26:52:06:fa:b8:45:3b:e2:2e:8f:af:0c:41:0b:c1:a2: 88:94:46:b0:57:5c:6f:96:48:94:37:4d:8b:8e:a1:64:72:6b: 43:c1:e5:06:ef:1a:8d:9a:ac:f9:b1:45:bb:5a:fa:1e:43:3e: 9a:72:74:e1 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEzlO1Nw5d63YBAbjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxNzE3NTQxN1oXDTI4MDUyMTE3NDMwNFowLzEtMCsGA1UEAxMk MDQzN2VkZDEtY2NhYi00NzFkLWI0ZDUtNWM3OGI2ZGU3OGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhApd/iLjLSWzR9SzebKCbuSsdb4o8H6QdnjU p/DD0mCpMnkEDVm/Ex1/72PPhFFV68IHKiBKhjvwH+eHJjlLicWXa4xwoV/PJGDm rJQ+/ZEgHrDVfyLZYEyjytcdHiwkCv2/sRCsrZKAAmI4ptFj8UTE66gvZAPSVyeD PD6Czmm6VIm2tuQDWOwetAb6gZ2b/g0+apc0HQ65nWoPBm+JGwv79e8CTrh6wt9B hUBOsPqnh9gvBCcs2WtbuiUlzLAjKDVZ0MD3N5UnHQaJsnukl7WTGA4P0WTiVJtt u8MhX2xsGAn00PtR82N5KW9aiTBIEwlvQ9+RjPVC3Wq7YEOh8wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFL7wZzkGhbeUy1OuQWzdtwjCnhM8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w NDM3ZWRkMS1jY2FiLTQ3MWQtYjRkNS01Yzc4YjZkZTc4YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzA0MzdlZGQxLWNjYWItNDcxZC1i NGQ1LTVjNzhiNmRlNzhhZS8wNDM3ZWRkMS1jY2FiLTQ3MWQtYjRkNS01Yzc4YjZk ZTc4YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADH9cgwDgQCAAIwCAMGACYC9FoAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAgODMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAspqb8SMm+W2eyyTExbrqefn+TC XDPjn1PKkC+uAvv0AnW+v+iAWtcA/9xO0HfickFC/dXLbiFXHguXn9dgKbVdaMtn 8m7OTG7NMNlANCSmlnJ43597tKspde06x16u9Wts16x+UVXNZRyD4Opp8aVqJRV0 o2tVuPyZtS8Ry1aFDWDaLXHEpcimAHzMQcLGYspPCKKkMZtnkGVFxZ8RfhIkrfRF ZjnRoGo6bpLUyLgEhRL86Wt90mSpnmm0tHtZ6j44yRRDodK7JlIG+rhFO+Iuj68M QQvBooiURrBXXG+WSJQ3TYuOoWRya0PB5QbvGo2arPmxRbta+h5DPppydOE= -----END CERTIFICATE-----Generated at Mon Mar 2 01:37:37 2026 by rpki-client