$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04.cer File: 38d5b367-bb53-4c84-896e-491eb23acc04.cer (raw, json) Hash identifier: HPSWJvJYKafIrlMLzyHzhDPoep56gwEF8y4G66Phgtg= Subject key identifier: 8D:95:D1:A0:46:37:EE:75:31:AC:D6:94:A4:18:A5:8B:6C:F8:6F:7D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CADE776A65890AF446B435200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/38d5b367-bb53-4c84-896e-491eb23acc04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 22:15:51 +0000 Certificate not after: Tue 02 May 2028 21:15:51 +0000 Subordinate resources: AS: 394099 IP: 192.159.119.0/24 IP: 2620:ce:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ad:e7:76:a6:58:90:af:44:6b:43:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 28 22:15:51 2026 GMT Not After : May 2 21:15:51 2028 GMT Subject: CN=38d5b367-bb53-4c84-896e-491eb23acc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:34:c8:1a:8f:c3:59:47:9e:53:50:62:b2: ef:e8:41:2f:b3:16:69:95:b6:37:91:10:8c:65:0d: b9:ff:9a:56:26:4a:f7:4d:3f:a8:60:5a:54:6a:70: c1:11:f7:1a:33:05:13:ee:34:82:32:01:81:dd:27: 39:ab:f5:60:d0:06:e2:f4:c5:8d:74:36:24:b7:1b: e7:cd:1a:8f:29:6f:ed:27:19:9d:54:e2:11:49:66: ea:5c:1a:e7:be:b8:24:4d:d2:e9:3f:3e:a4:0a:37: 46:ce:35:bb:25:c4:10:34:8a:b1:98:21:e4:05:8d: ee:8d:65:51:24:0c:22:4d:93:28:09:f5:98:29:c0: 27:39:ff:b7:11:ae:ab:d8:6a:6a:9c:40:0a:30:79: 38:a0:24:6b:5d:af:3b:d4:5d:fa:37:01:57:82:93: 49:81:b5:cb:6e:58:a1:22:d6:45:bd:fa:d5:bb:cd: 2d:84:d4:46:cf:a2:d3:16:9c:1d:38:91:c7:83:8b: 1f:4c:ac:4a:c2:96:2b:7c:48:a2:8c:12:42:77:de: 29:20:60:5a:69:c2:22:f2:b0:b4:61:91:78:f1:91: 31:c7:64:52:a1:6b:7c:a0:70:9c:f0:7d:af:8f:5c: 76:e8:67:b4:9a:0d:59:5f:b3:33:de:f2:cd:00:ae: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:95:D1:A0:46:37:EE:75:31:AC:D6:94:A4:18:A5:8B:6C:F8:6F:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/38d5b367-bb53-4c84-896e-491eb23acc04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.159.119.0/24 IPv6: 2620:ce:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394099 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:79:a8:14:8c:d3:0b:c7:e8:f5:89:93:1a:7f:c1:07:c3:36: a3:63:14:82:20:d7:70:9b:7e:eb:e4:bb:85:68:de:a3:1b:37: 89:19:f5:83:f9:92:7f:0e:2b:09:37:b1:98:97:b8:03:73:82: bb:5f:c8:56:74:f3:f5:92:22:ce:fa:eb:ff:00:ff:6e:32:87: 9f:9c:2f:2c:24:c8:81:c4:45:6e:0b:4d:05:03:e4:2b:45:54: 4e:d3:b5:60:39:03:2c:5b:14:57:2a:03:fd:ac:e9:fb:00:fd: a5:60:cb:37:f1:b5:c9:5f:7d:73:d6:b0:92:84:69:12:52:de: e6:1b:4e:de:b4:41:23:4c:75:99:9c:eb:45:df:b4:70:a3:c4: 03:d7:ae:af:f5:73:6a:75:c3:e4:21:64:90:5d:0b:93:7c:d6: a6:15:7f:95:ba:f0:73:92:59:29:1b:1d:8a:be:df:5e:95:67: 4c:0c:88:cd:51:b9:34:6e:3a:e4:75:ba:78:c3:02:f7:3a:a3: 22:fa:d2:1e:c1:25:09:e4:40:31:82:03:6e:c4:b9:fc:5d:d6: 60:b8:f1:20:61:32:5c:54:d9:eb:50:1e:a2:f3:eb:59:61:b7: 1c:e0:01:83:d5:a4:9a:5d:e0:b1:8d:88:19:eb:3a:7d:86:e8: 4a:01:2f:59 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEyt53amWJCvRGtDUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyODIyMTU1MVoXDTI4MDUwMjIxMTU1MVowLzEtMCsGA1UEAxMk MzhkNWIzNjctYmI1My00Yzg0LTg5NmUtNDkxZWIyM2FjYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ40yBqPw1lHnlNQYrLv6EEvsxZplbY3kRCM ZQ25/5pWJkr3TT+oYFpUanDBEfcaMwUT7jSCMgGB3Sc5q/Vg0Abi9MWNdDYktxvn zRqPKW/tJxmdVOIRSWbqXBrnvrgkTdLpPz6kCjdGzjW7JcQQNIqxmCHkBY3ujWVR JAwiTZMoCfWYKcAnOf+3Ea6r2GpqnEAKMHk4oCRrXa871F36NwFXgpNJgbXLblih ItZFvfrVu80thNRGz6LTFpwdOJHHg4sfTKxKwpYrfEiijBJCd94pIGBaacIi8rC0 YZF48ZExx2RSoWt8oHCc8H2vj1x26Ge0mg1ZX7Mz3vLNAK6pkwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFI2V0aBGN+51MazWlKQYpYts+G99MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z OGQ1YjM2Ny1iYjUzLTRjODQtODk2ZS00OTFlYjIzYWNjMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzM4ZDViMzY3LWJiNTMtNGM4NC04 OTZlLTQ5MWViMjNhY2MwNC8zOGQ1YjM2Ny1iYjUzLTRjODQtODk2ZS00OTFlYjIz YWNjMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAn3cwDwQCAAIwCQMHACYgAM5AADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGA3MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWXmoFIzTC8fo9YmTGn/BB8M2 o2MUgiDXcJt+6+S7hWjeoxs3iRn1g/mSfw4rCTexmJe4A3OCu1/IVnTz9ZIizvrr /wD/bjKHn5wvLCTIgcRFbgtNBQPkK0VUTtO1YDkDLFsUVyoD/azp+wD9pWDLN/G1 yV99c9awkoRpElLe5htO3rRBI0x1mZzrRd+0cKPEA9eur/VzanXD5CFkkF0Lk3zW phV/lbrwc5JZKRsdir7fXpVnTAyIzVG5NG465HW6eMMC9zqjIvrSHsElCeRAMYID bsS5/F3WYLjxIGEyXFTZ61AeovPrWWG3HOABg9Wkml3gsY2IGes6fYboSgEvWQ== -----END CERTIFICATE-----Generated at Sun Mar 1 14:40:08 2026 by rpki-client