$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab.cer File: 63c85387-a763-41a8-af51-40ad5f5da8ab.cer (raw, json) Hash identifier: mCqPu1OjP/Y87ZJBJPpL2kh+BGIMEzzKnZF4xPInWo4= Subject key identifier: 50:F2:8D:FC:47:EC:09:6A:70:C2:79:45:15:84:47:07:B9:58:A3:F2 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D760786BA8000006343A65900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/63c85387-a763-41a8-af51-40ad5f5da8ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Apr 2026 14:42:07 +0000 Certificate not after: Thu 13 Jul 2028 14:42:07 +0000 Subordinate resources: AS: 26416 IP: 192.139.140.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:76:07:86:ba:80:00:00:63:43:a6:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 10 14:42:07 2026 GMT Not After : Jul 13 14:42:07 2028 GMT Subject: CN=63c85387-a763-41a8-af51-40ad5f5da8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:62:b9:ad:40:a2:9a:af:36:43:1e:ed:bc: bc:0c:42:2a:63:42:99:17:ab:46:28:52:9b:15:7d: e5:39:d7:6c:70:35:ba:3f:f3:e2:04:fd:c2:65:53: e8:42:87:fa:2f:45:aa:25:27:d3:1c:e2:4f:cd:e0: 90:d8:be:11:a2:f1:0d:0e:9e:8f:20:9a:5c:ea:11: 12:c0:c4:87:a5:35:61:3f:90:64:ec:43:f7:8c:76: bf:5d:79:a4:42:38:4d:32:61:54:b3:71:30:18:9c: 21:53:f6:d0:67:71:c1:2f:f1:79:c2:19:5f:67:3a: cd:25:25:20:77:3d:9a:16:a1:65:7f:8a:c5:76:38: 9a:e8:23:38:72:bf:ac:06:c4:51:5c:6c:6f:30:1d: b9:a6:f2:3f:c2:0f:74:14:78:f1:16:97:a3:d9:61: 63:5c:25:63:0a:4e:93:5f:85:ba:10:90:42:3c:6c: 31:00:a3:39:cc:2c:19:c4:91:0c:0f:1f:65:b8:ac: 36:e9:ef:c1:a5:92:d7:ca:bc:50:5e:46:d5:9f:db: 47:ba:0b:9c:8c:26:0a:c5:39:e4:90:ce:0c:76:fd: 8b:ef:5d:43:1c:b7:76:4c:5a:7d:75:54:60:bd:eb: 29:ff:75:07:f5:86:1d:bc:35:c2:15:c4:69:55:8c: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F2:8D:FC:47:EC:09:6A:70:C2:79:45:15:84:47:07:B9:58:A3:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/63c85387-a763-41a8-af51-40ad5f5da8ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.139.140.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26416 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8d:e8:f7:3f:7d:1a:af:8b:03:1e:2e:9d:da:55:7d:bb:25: 25:3b:fe:b4:58:f7:92:5b:82:88:8f:96:15:55:68:4f:33:f4: bd:84:f2:c2:2e:09:09:06:52:03:a5:1d:a6:3d:8f:5a:b5:83: 1e:2a:96:8c:99:c3:f1:40:81:bc:ad:03:51:38:8e:74:27:99: 71:55:dc:0c:cf:a2:fd:01:0f:91:41:0c:b9:32:b4:e7:d5:aa: 02:ca:d2:ff:9f:b7:e1:d6:f1:ce:70:1a:44:0c:4b:d5:a9:57: 92:00:54:4f:23:34:6d:7c:1a:dd:f7:ae:ca:0c:a9:a5:ed:d1: 12:2d:87:12:35:f6:d3:6d:3a:8f:fc:86:f8:c9:8a:f2:92:8f: 51:92:ac:91:e5:04:48:8d:33:48:6c:bf:0f:a5:bb:2a:4f:ca: b1:ff:73:7e:ff:58:10:fa:83:48:fb:03:4f:e4:f5:5c:10:99: ac:c0:c3:93:02:bb:31:2d:e5:57:3d:39:eb:2f:f1:9f:f8:ba: 96:3a:b7:68:8d:96:eb:a3:2c:fb:a6:88:98:d4:9b:f3:d6:1b: d0:3a:90:63:65:f4:90:dd:ed:6e:de:0e:db:3e:33:75:ec:38: d8:bb:69:03:5c:c3:9d:f2:a4:23:a2:0d:67:7b:fe:ef:93:1f: 48:30:d4:46 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE12B4a6gAAAY0OmWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxMDE0NDIwN1oXDTI4MDcxMzE0NDIwN1owLzEtMCsGA1UEAxMk NjNjODUzODctYTc2My00MWE4LWFmNTEtNDBhZDVmNWRhOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA259iua1AopqvNkMe7by8DEIqY0KZF6tGKFKb FX3lOddscDW6P/PiBP3CZVPoQof6L0WqJSfTHOJPzeCQ2L4RovENDp6PIJpc6hES wMSHpTVhP5Bk7EP3jHa/XXmkQjhNMmFUs3EwGJwhU/bQZ3HBL/F5whlfZzrNJSUg dz2aFqFlf4rFdjia6CM4cr+sBsRRXGxvMB25pvI/wg90FHjxFpej2WFjXCVjCk6T X4W6EJBCPGwxAKM5zCwZxJEMDx9luKw26e/BpZLXyrxQXkbVn9tHugucjCYKxTnk kM4Mdv2L711DHLd2TFp9dVRgvesp/3UH9YYdvDXCFcRpVYxpsQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFDyjfxH7AlqcMJ5RRWERwe5WKPyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 M2M4NTM4Ny1hNzYzLTQxYTgtYWY1MS00MGFkNWY1ZGE4YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzYzYzg1Mzg3LWE3NjMtNDFhOC1h ZjUxLTQwYWQ1ZjVkYThhYi82M2M4NTM4Ny1hNzYzLTQxYTgtYWY1MS00MGFkNWY1 ZGE4YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAi4wwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZzAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAFY3o9z99Gq+LAx4undpVfbslJTv+tFj3kluCiI+WFVVoTzP0 vYTywi4JCQZSA6Udpj2PWrWDHiqWjJnD8UCBvK0DUTiOdCeZcVXcDM+i/QEPkUEM uTK059WqAsrS/5+34dbxznAaRAxL1alXkgBUTyM0bXwa3feuygyppe3REi2HEjX2 0206j/yG+MmK8pKPUZKskeUESI0zSGy/D6W7Kk/Ksf9zfv9YEPqDSPsDT+T1XBCZ rMDDkwK7MS3lVz056y/xn/i6ljq3aI2W66Ms+6aImNSb89Yb0DqQY2X0kN3tbt4O 2z4zdew42LtpA1zDnfKkI6INZ3v+75MfSDDURg== -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:43 2026 by rpki-client