$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer File: 3db33a74-4bfb-4717-906c-95b172456bd9.cer (raw, json) Hash identifier: GwDLZazS+un045q8obNXYbExwBXw7psh3VsIm4ygP1M= Subject key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CCF1E954573AA0343A2A5F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 19:48:35 +0000 Certificate not after: Sun 14 May 2028 18:48:35 +0000 Subordinate resources: AS: 401671 IP: 136.175.105.0/24 IP: 2604:c20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:1e:95:45:73:aa:03:43:a2:a5:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 9 19:48:35 2026 GMT Not After : May 14 18:48:35 2028 GMT Subject: CN=3db33a74-4bfb-4717-906c-95b172456bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c5:7c:50:fc:a4:01:a7:73:09:f6:e1:92:65: c7:f4:2c:6c:e9:e9:ef:02:b1:66:84:b5:c1:c1:0b: 55:d1:92:43:38:02:1d:df:ae:82:71:5b:92:f6:10: a0:65:74:21:58:c9:c5:86:4f:34:01:cb:d0:be:44: d2:66:33:2a:5f:cf:0a:33:81:34:fb:2a:58:c1:f4: f4:0f:06:15:2e:ee:1f:a0:df:b8:08:f7:b1:f0:84: ed:ea:c2:e3:a6:0c:3e:0d:89:41:80:5b:1e:75:2f: 28:1b:f9:c6:a7:a2:b7:e8:6b:8e:b0:3c:6c:d1:46: 99:d6:45:aa:4e:27:2b:94:a6:da:83:d1:21:a2:43: 5f:25:9f:19:a9:bb:ed:9e:bd:8c:c2:63:6a:d1:53: 3d:30:b5:6c:5c:96:f3:1e:c7:e4:1a:5e:7b:c8:3c: 87:ee:97:f8:f4:af:55:73:9f:97:a0:22:56:a0:c9: 37:29:b9:24:d4:cb:b6:1a:8d:57:45:23:b1:77:fb: 79:27:f8:a2:b1:93:6a:84:01:3e:11:5b:3e:fb:43: 76:de:6f:0a:f1:5f:de:b4:f3:63:70:07:c0:d7:3d: f4:6d:f7:93:2c:57:53:98:d4:d0:2d:a3:ff:9d:17: b4:cf:3e:d5:73:11:35:cf:a7:26:ba:5a:6b:69:ec: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 136.175.105.0/24 IPv6: 2604:c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401671 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e6:d3:a2:e3:23:1d:d4:c4:34:32:32:bf:64:08:3c:1c:27: 3e:9c:f9:4f:6f:4e:a2:65:b1:2d:06:24:73:3d:80:81:86:64: 6b:d8:ec:e9:ba:d8:e6:51:c4:1d:40:c4:a3:01:e1:3c:e7:79: 92:db:c2:5f:18:e9:b9:38:f2:d0:7d:c5:e0:38:54:ae:80:ac: 5a:be:42:7d:ee:51:66:30:75:72:61:51:3c:e4:16:39:e7:24: 8e:32:55:76:c9:73:a7:4f:38:61:ce:26:c3:93:00:f4:44:e0: e5:cd:24:d9:d5:26:ad:4f:c0:6d:8b:c9:c1:5e:da:3d:d9:98: 24:21:3d:33:80:33:0b:b6:16:0c:b2:55:61:43:50:50:ad:ab: d7:a9:b6:f0:8e:a2:9b:98:cc:9c:2d:ac:cb:c4:17:97:6c:a9: 99:17:8e:db:b6:cc:b9:22:02:cb:e0:f9:e1:0f:82:a4:28:a3: b5:5e:12:00:c4:1c:3a:1a:25:67:24:15:42:15:9a:5b:e5:34: b8:08:44:e3:e5:45:76:38:d3:33:b4:b9:3b:18:38:0a:2e:ef: 62:6b:6f:e9:80:f8:0d:c9:49:4e:1b:7f:bf:22:a9:a5:c3:af: 83:5f:15:fd:0c:28:1b:2f:c9:e4:e7:16:5b:70:0e:eb:8e:93: e0:7d:2c:0d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEzPHpVFc6oDQ6Kl9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwOTE5NDgzNVoXDTI4MDUxNDE4NDgzNVowLzEtMCsGA1UEAxMk M2RiMzNhNzQtNGJmYi00NzE3LTkwNmMtOTViMTcyNDU2YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicV8UPykAadzCfbhkmXH9Cxs6envArFmhLXB wQtV0ZJDOAId366CcVuS9hCgZXQhWMnFhk80AcvQvkTSZjMqX88KM4E0+ypYwfT0 DwYVLu4foN+4CPex8ITt6sLjpgw+DYlBgFsedS8oG/nGp6K36GuOsDxs0UaZ1kWq TicrlKbag9EhokNfJZ8Zqbvtnr2MwmNq0VM9MLVsXJbzHsfkGl57yDyH7pf49K9V c5+XoCJWoMk3Kbkk1Mu2Go1XRSOxd/t5J/iisZNqhAE+EVs++0N23m8K8V/etPNj cAfA1z30bfeTLFdTmNTQLaP/nRe0zz7VcxE1z6cmulpraewfPwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGkuy3VF7tdCsZdRh+gUotiDS4h1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z ZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0NTZiZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzNkYjMzYTc0LTRiZmItNDcxNy05 MDZjLTk1YjE3MjQ1NmJkOS8zZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0 NTZiZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBACIr2kwDQQCAAIwBwMFACYEDCAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiEHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGLm06LjIx3UxDQyMr9kCDwcJz6c +U9vTqJlsS0GJHM9gIGGZGvY7Om62OZRxB1AxKMB4TzneZLbwl8Y6bk48tB9xeA4 VK6ArFq+Qn3uUWYwdXJhUTzkFjnnJI4yVXbJc6dPOGHOJsOTAPRE4OXNJNnVJq1P wG2LycFe2j3ZmCQhPTOAMwu2FgyyVWFDUFCtq9eptvCOopuYzJwtrMvEF5dsqZkX jtu2zLkiAsvg+eEPgqQoo7VeEgDEHDoaJWckFUIVmlvlNLgIROPlRXY40zO0uTsY OAou72Jrb+mA+A3JSU4bf78iqaXDr4NfFf0MKBsvyeTnFltwDuuOk+B9LA0= -----END CERTIFICATE-----Generated at Sun Mar 1 16:22:07 2026 by rpki-client