$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.cer File: 975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.cer (raw, json) Hash identifier: dloFmQdKMzN8EVKZBMM5wvdenNHLsqlbqbbP3dmOXoI= Subject key identifier: 79:F9:27:27:57:91:6B:D4:34:B4:53:48:57:CC:F2:58:A6:12:90:91 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CB34063ABA2A9A0FB19C967C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 20:14:04 +0000 Certificate not after: Thu 04 May 2028 19:14:04 +0000 Subordinate resources: AS: 398641 IP: 141.193.141.0/24 IP: 2602:807:7000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:40:63:ab:a2:a9:a0:fb:19:c9:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 30 20:14:04 2026 GMT Not After : May 4 19:14:04 2028 GMT Subject: CN=975c10fb-9cfd-42ba-a4ae-5c3cc54e4876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:c8:ad:4e:7a:6d:1b:90:19:7a:4f:f6:e4: 93:31:c5:cb:e5:e2:d9:89:ce:8a:11:82:12:f1:a7: 46:38:9e:03:c9:e1:36:98:10:d2:44:bf:d6:c2:dc: 5a:f4:84:1b:a4:6b:b1:00:7d:04:ff:f8:8c:0e:f0: 98:58:f7:ab:8b:67:ec:7f:b5:dd:d3:0b:ba:90:6d: 8e:c8:b5:bd:fb:b3:69:13:47:cc:98:45:62:06:ad: 48:3a:71:3f:5a:b7:f9:de:a3:1c:89:02:e5:bb:b8: 5d:22:d5:7b:37:67:09:a0:bf:da:60:d1:92:f8:bb: db:96:4b:0a:83:e9:8a:ea:ec:67:6d:b4:a8:77:d1: 43:52:c8:b5:b7:de:d2:ec:f5:4c:d0:94:f9:31:7d: f5:d4:a6:37:07:6e:2b:4f:71:c0:5c:1b:1f:87:15: f1:67:07:59:82:cb:e8:bc:8a:ef:be:e9:cf:5f:53: a4:d6:5c:fd:1b:d7:35:f9:8e:85:9c:77:e2:fb:05: e9:8b:ec:9d:5b:6a:9b:62:16:0b:ac:13:c1:97:38: bc:f5:d6:2a:20:66:40:e3:75:98:0d:da:43:2a:7f: 79:c2:60:09:50:49:78:ba:31:af:0f:9c:99:32:63: cf:ba:87:68:e8:78:a2:a1:b7:ba:73:dc:bc:28:c8: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F9:27:27:57:91:6B:D4:34:B4:53:48:57:CC:F2:58:A6:12:90:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 141.193.141.0/24 IPv6: 2602:807:7000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398641 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:44:a7:8e:79:7e:67:89:91:66:7c:4e:b3:19:dc:bd:96:28: 1a:e1:ae:c4:41:05:be:f9:27:23:af:a1:11:c7:93:25:49:a9: a2:44:ea:99:21:b6:ee:cd:5c:bf:d0:d3:ce:08:d3:07:50:9f: 90:29:ff:49:cd:ae:49:55:1c:b7:ac:69:3d:3a:5c:50:5d:9c: a7:08:fb:79:73:f8:43:fa:d1:4c:29:7f:54:f1:f1:74:3e:a0: 98:54:17:3c:83:bc:2a:00:19:00:ef:6a:ef:42:a0:01:c2:cd: c4:26:54:84:a3:13:7f:89:d0:7b:76:2f:dd:5c:1d:76:59:a7: 32:95:10:67:74:28:22:ac:6b:5d:e4:8b:a1:65:eb:63:6a:50: f3:b7:c4:cf:04:6f:77:69:f8:0a:0f:fd:5a:33:a4:a6:13:fe: f8:c9:b1:85:ca:49:7f:21:f2:3d:f2:60:12:33:00:95:cd:06: cd:77:18:4a:f6:25:ed:4e:cd:b8:4a:77:2d:50:72:16:5b:81: 23:4b:59:2a:63:e5:61:d7:a4:d5:af:cb:6b:08:1b:0a:0c:b1: aa:90:14:2b:f7:2f:49:48:22:b1:49:ac:a5:57:37:16:75:1d: 29:ba:eb:61:f8:bd:15:4a:13:72:98:28:0a:26:40:6c:9a:8e: 37:0d:3b:8c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEyzQGOroqmg+xnJZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEzMDIwMTQwNFoXDTI4MDUwNDE5MTQwNFowLzEtMCsGA1UEAxMk OTc1YzEwZmItOWNmZC00MmJhLWE0YWUtNWMzY2M1NGU0ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvTIrU56bRuQGXpP9uSTMcXL5eLZic6KEYIS 8adGOJ4DyeE2mBDSRL/Wwtxa9IQbpGuxAH0E//iMDvCYWPeri2fsf7Xd0wu6kG2O yLW9+7NpE0fMmEViBq1IOnE/Wrf53qMciQLlu7hdItV7N2cJoL/aYNGS+LvblksK g+mK6uxnbbSod9FDUsi1t97S7PVM0JT5MX311KY3B24rT3HAXBsfhxXxZwdZgsvo vIrvvunPX1Ok1lz9G9c1+Y6FnHfi+wXpi+ydW2qbYhYLrBPBlzi89dYqIGZA43WY DdpDKn95wmAJUEl4ujGvD5yZMmPPuodo6Hiiobe6c9y8KMgtKwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHn5JydXkWvUNLRTSFfM8limEpCRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 NzVjMTBmYi05Y2ZkLTQyYmEtYTRhZS01YzNjYzU0ZTQ4NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzk3NWMxMGZiLTljZmQtNDJiYS1h NGFlLTVjM2NjNTRlNDg3Ni85NzVjMTBmYi05Y2ZkLTQyYmEtYTRhZS01YzNjYzU0 ZTQ4NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACNwY0wDgQCAAIwCAMGACYCCAdwMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYVMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxRKeOeX5niZFmfE6zGdy9liga 4a7EQQW++Scjr6ERx5MlSamiROqZIbbuzVy/0NPOCNMHUJ+QKf9Jza5JVRy3rGk9 OlxQXZynCPt5c/hD+tFMKX9U8fF0PqCYVBc8g7wqABkA72rvQqABws3EJlSEoxN/ idB7di/dXB12WacylRBndCgirGtd5IuhZetjalDzt8TPBG93afgKD/1aM6SmE/74 ybGFykl/IfI98mASMwCVzQbNdxhK9iXtTs24SnctUHIWW4EjS1kqY+Vh16TVr8tr CBsKDLGqkBQr9y9JSCKxSaylVzcWdR0puuth+L0VShNymCgKJkBsmo43DTuM -----END CERTIFICATE-----Generated at Sun Mar 1 16:20:51 2026 by rpki-client