$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840.cer File: 34cf8eea-bcc0-4832-9847-b1c5cd531840.cer (raw, json) Hash identifier: KRho8uMTPvRkZw55oe7AnaL0MZa20OCc4GsjeY1VIg8= Subject key identifier: 72:74:9A:65:55:95:2D:1F:EF:F0:74:4F:47:D2:21:BA:6D:BA:D3:A5 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC6444BE0108E3056BD7C8D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/34cf8eea-bcc0-4832-9847-b1c5cd531840.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Feb 2026 15:42:18 +0000 Certificate not after: Thu 11 May 2028 14:42:18 +0000 Subordinate resources: AS: 23092 IP: 69.57.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:44:4b:e0:10:8e:30:56:bd:7c:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 6 15:42:18 2026 GMT Not After : May 11 14:42:18 2028 GMT Subject: CN=34cf8eea-bcc0-4832-9847-b1c5cd531840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:0d:db:1d:5c:9d:12:61:95:e6:f1:bb:10: 37:8f:01:bb:f1:8a:be:2d:59:a9:2b:06:da:21:aa: ae:99:6f:ef:71:78:f8:71:56:bd:f1:e6:e4:54:c2: 05:50:84:5d:14:7e:65:3a:7b:e9:ab:a1:63:9d:cf: 4f:5d:1d:13:2d:f6:58:c3:29:01:dc:a7:00:d3:89: 54:97:14:f9:6b:e0:1c:7a:8f:ad:9d:9d:54:93:50: f0:50:a5:62:a5:75:47:d3:df:e3:46:2c:dc:eb:af: 68:5a:d9:e2:e4:2c:37:f6:a3:cd:b8:19:58:11:b3: 23:a2:37:de:7c:0d:25:9c:a9:7a:a8:48:db:60:c9: 50:d8:87:08:3f:e8:b7:a9:03:07:4c:c0:4d:c3:ac: ba:1a:87:59:67:70:22:cc:fb:27:ff:98:33:00:9f: a7:be:88:f5:62:25:71:a3:65:8b:65:3b:8a:65:cc: 0b:57:39:d3:7f:0f:ab:fe:7c:05:5f:47:f6:5e:a9: c1:71:a2:cb:44:dd:3e:ba:93:7a:55:6e:07:03:eb: a2:01:f1:37:3b:82:c1:74:ab:27:63:90:a2:c6:e7: e5:5a:79:90:7d:24:76:fa:22:b3:59:25:77:32:a1: d3:e5:b7:96:63:1a:8d:9d:45:0e:98:f0:fd:88:23: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:74:9A:65:55:95:2D:1F:EF:F0:74:4F:47:D2:21:BA:6D:BA:D3:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/34cf8eea-bcc0-4832-9847-b1c5cd531840.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 69.57.32.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23092 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:72:77:72:14:f8:c3:52:b5:56:18:a5:39:3b:c4:b1:99:8e: 07:c7:d9:15:be:55:8f:c8:a6:e8:a9:07:03:7c:75:51:90:18: 8d:e4:50:b5:60:89:3c:f5:a8:9a:9a:8c:e5:5f:67:cb:45:44: 2e:92:8d:b1:a9:20:fa:91:ca:e8:41:1b:c0:ac:2e:dc:c5:dd: 74:5d:95:50:2d:0a:10:8c:51:c4:8f:c1:c3:f1:90:69:90:d5: b3:57:f9:64:5c:09:95:44:8a:96:29:3a:e0:c5:d4:27:bd:77: 5d:93:ec:de:ed:77:45:6d:7c:d1:34:3b:9e:b5:af:27:cc:7e: cf:fa:4e:0e:b6:90:4a:84:e4:d9:cb:6e:0c:ab:a3:bc:24:67: 8d:13:38:ee:f7:f8:c4:f8:11:62:e2:3b:88:e8:1d:0d:13:52: 8d:dc:b1:78:c0:3c:6b:81:dd:83:8e:4e:75:fa:05:f9:ec:ab: f5:b8:a9:a6:6e:75:0e:bb:f5:2d:74:4c:8e:f6:a5:1d:f9:65: 27:1f:7e:7e:aa:da:94:63:3b:d8:da:ae:84:75:f7:a5:31:99: 3a:b9:96:6a:c7:69:22:bc:62:fc:78:ae:ec:e4:64:a7:43:fb: 54:a9:3f:00:c4:52:36:28:eb:6a:2c:66:8c:97:82:f4:67:b5: a3:82:95:fa -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEzGREvgEI4wVr18jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNjE1NDIxOFoXDTI4MDUxMTE0NDIxOFowLzEtMCsGA1UEAxMk MzRjZjhlZWEtYmNjMC00ODMyLTk4NDctYjFjNWNkNTMxODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk0N2x1cnRJhlebxuxA3jwG78Yq+LVmpKwba IaqumW/vcXj4cVa98ebkVMIFUIRdFH5lOnvpq6Fjnc9PXR0TLfZYwykB3KcA04lU lxT5a+Aceo+tnZ1Uk1DwUKVipXVH09/jRizc669oWtni5Cw39qPNuBlYEbMjojfe fA0lnKl6qEjbYMlQ2IcIP+i3qQMHTMBNw6y6GodZZ3AizPsn/5gzAJ+nvoj1YiVx o2WLZTuKZcwLVznTfw+r/nwFX0f2XqnBcaLLRN0+upN6VW4HA+uiAfE3O4LBdKsn Y5CixuflWnmQfSR2+iKzWSV3MqHT5beWYxqNnUUOmPD9iCMogQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHJ0mmVVlS0f7/B0T0fSIbptutOlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z NGNmOGVlYS1iY2MwLTQ4MzItOTg0Ny1iMWM1Y2Q1MzE4NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzM0Y2Y4ZWVhLWJjYzAtNDgzMi05 ODQ3LWIxYzVjZDUzMTg0MC8zNGNmOGVlYS1iY2MwLTQ4MzItOTg0Ny1iMWM1Y2Q1 MzE4NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARFOSAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WjQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADHJ3chT4w1K1VhilOTvEsZmOB8fZFb5Vj8im6KkHA3x1UZAY jeRQtWCJPPWompqM5V9ny0VELpKNsakg+pHK6EEbwKwu3MXddF2VUC0KEIxRxI/B w/GQaZDVs1f5ZFwJlUSKlik64MXUJ713XZPs3u13RW180TQ7nrWvJ8x+z/pODraQ SoTk2ctuDKujvCRnjRM47vf4xPgRYuI7iOgdDRNSjdyxeMA8a4Hdg45OdfoF+eyr 9bippm51Drv1LXRMjvalHfllJx9+fqralGM72NquhHX3pTGZOrmWasdpIrxi/Hiu 7ORkp0P7VKk/AMRSNijraixmjJeC9Ge1o4KV+g== -----END CERTIFICATE-----Generated at Mon Mar 2 00:01:01 2026 by rpki-client