$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733.cer File: 0e02cfee-5059-46c1-94a4-fb948d32f733.cer (raw, json) Hash identifier: +avinKdNJHZkXIxT4flVEwxXmVL+2zu/olshVYYPXXI= Subject key identifier: C0:B3:04:21:09:55:24:F5:3D:66:F2:23:52:D9:78:87:34:AE:80:54 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D8CB567B2142473E6FE0F5380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Apr 2026 17:40:15 +0000 Certificate not after: Fri 21 Jul 2028 17:40:15 +0000 Subordinate resources: AS: 401111 IP: 23.152.20.0/24 IP: 2602:f483::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:b5:67:b2:14:24:73:e6:fe:0f:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 18 17:40:15 2026 GMT Not After : Jul 21 17:40:15 2028 GMT Subject: CN=0e02cfee-5059-46c1-94a4-fb948d32f733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:80:7e:ab:ec:f6:47:d4:d7:bb:ed:5c:e5:ef: e2:b1:bd:c5:9d:c8:7f:74:bc:0d:a4:5f:71:a3:7b: b4:2a:9f:e7:95:b1:98:23:39:84:0f:e0:b7:6e:e1: e3:ad:2c:d4:36:4a:37:f9:31:cd:d3:b4:ce:9a:ea: 68:38:fb:f4:42:25:75:84:65:3b:3b:50:c2:c2:33: 64:f6:77:42:91:50:5a:09:41:ae:d8:96:74:12:e7: 72:d5:51:d6:02:6e:98:41:68:44:e5:e9:80:c4:cc: fc:f9:ed:0f:3a:e5:a3:ec:b3:49:1c:dc:8b:d9:3c: 5c:7c:07:98:58:34:6d:9d:bd:2e:0c:14:96:36:d2: 7f:98:22:c6:f4:59:9a:e4:a0:28:0d:47:c5:5e:cf: ec:00:b4:8c:ea:d1:ae:a8:76:b3:ba:f9:43:51:0c: e7:c0:ed:66:0d:6d:fc:f2:4f:64:1c:2a:a7:26:b2: 39:ff:2d:a6:9b:20:cc:08:37:71:bd:d9:82:a6:b2: 73:77:6e:7e:5f:b0:d9:58:a9:16:47:0d:fb:a1:f0: 81:23:6f:ff:ac:29:4f:98:e4:e5:a8:3f:59:17:6c: f2:3a:42:ec:e4:60:d7:63:99:60:73:9f:37:ef:47: c9:3f:90:d0:89:ae:a3:04:88:ec:9f:5c:15:8d:af: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B3:04:21:09:55:24:F5:3D:66:F2:23:52:D9:78:87:34:AE:80:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.152.20.0/24 IPv6: 2602:f483::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401111 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5a:5c:59:cf:4c:98:a2:af:a0:9c:c4:10:4b:03:56:72:c2: 19:6b:d0:04:91:7a:47:e8:bb:94:28:14:d4:5f:3e:71:7b:bc: f7:7f:59:26:a0:07:a6:80:9f:96:b1:b6:13:77:37:9b:45:2b: b0:53:c9:ae:53:56:a4:85:e6:cb:48:55:d7:6e:a1:f1:ee:12: 89:71:dc:c9:66:91:b8:0b:eb:d7:10:0a:b4:37:82:fa:a2:1c: 30:7f:36:b2:f9:f8:fe:54:38:84:07:51:5a:bb:3f:2b:cf:4a: 8b:60:c1:cf:56:11:75:74:f3:67:99:27:19:d7:0d:2e:f5:68: c1:1c:38:1c:85:05:05:ef:d1:29:c0:7a:5a:02:19:bd:a7:a1: ba:69:d1:29:77:5f:4b:fd:40:15:ab:c7:5b:3c:3f:e5:e7:94: f3:06:92:5e:b7:d1:c8:8d:df:74:57:eb:02:a8:07:8a:ad:1b: a2:73:d7:6e:e4:9d:66:f0:3e:e3:a8:f2:e3:9a:26:4e:01:65: e9:1c:de:c2:83:e6:71:75:6e:aa:5f:90:50:fd:cc:26:3e:ec: 06:72:46:36:a7:2f:3b:df:36:56:7f:46:97:a8:74:bd:0e:bb: 7c:17:1d:f6:f7:6a:45:56:30:97:e4:54:54:b2:dd:ce:d6:61: ec:1f:98:70 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2MtWeyFCRz5v4PU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxODE3NDAxNVoXDTI4MDcyMTE3NDAxNVowLzEtMCsGA1UEAxMk MGUwMmNmZWUtNTA1OS00NmMxLTk0YTQtZmI5NDhkMzJmNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIB+q+z2R9TXu+1c5e/isb3Fnch/dLwNpF9x o3u0Kp/nlbGYIzmED+C3buHjrSzUNko3+THN07TOmupoOPv0QiV1hGU7O1DCwjNk 9ndCkVBaCUGu2JZ0Eudy1VHWAm6YQWhE5emAxMz8+e0POuWj7LNJHNyL2TxcfAeY WDRtnb0uDBSWNtJ/mCLG9Fma5KAoDUfFXs/sALSM6tGuqHazuvlDUQznwO1mDW38 8k9kHCqnJrI5/y2mmyDMCDdxvdmCprJzd25+X7DZWKkWRw37ofCBI2//rClPmOTl qD9ZF2zyOkLs5GDXY5lgc58370fJP5DQia6jBIjsn1wVja/Y5QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMCzBCEJVST1PWbyI1LZeIc0roBUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w ZTAyY2ZlZS01MDU5LTQ2YzEtOTRhNC1mYjk0OGQzMmY3MzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzBlMDJjZmVlLTUwNTktNDZjMS05 NGE0LWZiOTQ4ZDMyZjczMy8wZTAyY2ZlZS01MDU5LTQ2YzEtOTRhNC1mYjk0OGQz MmY3MzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmBQwDgQCAAIwCAMGACYC9IMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYe1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGWlxZz0yYoq+gnMQQSwNWcsIZ a9AEkXpH6LuUKBTUXz5xe7z3f1kmoAemgJ+WsbYTdzebRSuwU8muU1akhebLSFXX bqHx7hKJcdzJZpG4C+vXEAq0N4L6ohwwfzay+fj+VDiEB1Fauz8rz0qLYMHPVhF1 dPNnmScZ1w0u9WjBHDgchQUF79EpwHpaAhm9p6G6adEpd19L/UAVq8dbPD/l55Tz BpJet9HIjd90V+sCqAeKrRuic9du5J1m8D7jqPLjmiZOAWXpHN7Cg+ZxdW6qX5BQ /cwmPuwGckY2py873zZWf0aXqHS9Drt8Fx3292pFVjCX5FRUst3O1mHsH5hw -----END CERTIFICATE-----Generated at Sun Apr 19 14:39:23 2026 by rpki-client