$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.cer File: ca5d839b-d64f-4e83-8f70-c4cca4144dc1.cer (raw, json) Hash identifier: 2PW9lr8JkptvuMeYklr2P2z6NeI2MEJPJ/A5d4zWVi8= Subject key identifier: 23:25:61:E2:AD:2F:59:83:6C:AA:C8:B6:9C:96:D0:39:C6:A1:31:39 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD5BFB6427AFCDC497B2A019C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Feb 2026 04:48:06 +0000 Certificate not after: Wed 17 May 2028 03:48:06 +0000 Subordinate resources: AS: 401266 IP: 23.184.136.0/24 IP: 2602:f873::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d5:bf:b6:42:7a:fc:dc:49:7b:2a:01:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 12 04:48:06 2026 GMT Not After : May 17 03:48:06 2028 GMT Subject: CN=ca5d839b-d64f-4e83-8f70-c4cca4144dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:ff:1e:27:d1:25:ab:97:7c:e3:ea:5f:23: ba:42:43:d8:dc:2d:e8:45:2f:c0:2a:d6:dd:65:59: 8e:77:4a:0c:22:19:bc:f9:17:7c:98:3f:7a:0c:2b: ea:c2:16:fa:cb:fe:8c:39:09:45:d1:bd:26:6c:31: 4e:75:ce:e4:ee:dd:c3:0e:b7:2d:d4:2c:0a:e2:90: ff:e2:cb:a5:de:e5:37:90:22:7b:df:5c:f3:01:4d: b4:64:8f:5f:7b:c1:5c:98:d9:9b:7a:a0:c4:78:46: 9b:eb:b7:63:4e:c4:21:08:41:c7:85:68:38:67:aa: d4:29:9c:e5:d9:d9:3a:6d:c6:b6:54:ba:41:02:90: 2e:2f:8a:2e:7a:99:2d:87:e3:8e:15:bb:d4:34:78: 17:17:b0:0d:a3:aa:9c:f0:b7:0e:4e:6c:30:8f:46: d3:4b:47:5c:35:a8:ee:05:25:2f:85:10:62:d6:75: a4:b5:11:18:ed:77:37:a5:13:31:c8:08:df:de:b6: 3d:37:17:ca:a1:08:57:3b:1e:ef:e1:be:8e:ff:f2: f9:e1:8f:27:61:58:15:1b:8b:b9:7e:88:1a:ef:d4: 78:f2:f1:c9:12:75:1c:bb:20:8d:9a:ec:63:6e:63: 4b:83:18:dd:4a:42:3b:3c:7e:04:6d:73:67:bf:70: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:61:E2:AD:2F:59:83:6C:AA:C8:B6:9C:96:D0:39:C6:A1:31:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.184.136.0/24 IPv6: 2602:f873::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401266 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ea:82:b1:53:11:63:6b:b6:87:f7:59:68:e8:36:c9:61:81: b4:cc:87:33:0d:5a:17:82:8f:a9:36:34:71:6d:c0:51:bb:87: 33:5d:56:85:95:0a:06:cb:24:db:37:2f:32:0a:94:5a:a5:9c: 72:d0:b0:b6:76:aa:1a:4b:7d:cb:52:e9:82:8c:fd:01:97:4e: 9e:b6:47:41:c7:13:0b:5a:ed:0e:5b:bd:3d:1b:48:b1:66:01: 35:1d:d4:4c:44:05:64:91:87:c6:17:ed:02:52:35:a7:4e:bb: 0c:7a:b8:7f:2f:b5:da:e6:e3:6a:2d:63:42:79:20:33:ad:4a: 0d:7a:98:6a:d7:c0:3d:bf:e7:3f:7e:a3:ce:37:15:ae:6c:07: cc:1e:d2:4a:27:43:b7:fb:55:7a:4f:67:09:1a:d0:10:2b:9f: ac:3e:a1:cb:dc:25:3a:61:7b:79:bf:cf:92:dc:26:28:fc:ad: 95:07:28:de:0a:eb:58:ca:3e:d5:f8:9b:bd:10:d2:14:b9:af: aa:f2:c2:a0:83:8a:a9:8b:57:18:0f:1b:9f:3e:59:6d:09:27: 36:7a:8e:5a:2d:cf:cb:97:15:bd:2b:a1:75:b1:8a:42:5c:40: ed:01:66:8c:a7:38:93:c8:0e:b4:86:fd:a6:04:50:b2:e8:8f: 32:bf:77:a8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzVv7ZCevzcSXsqAZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMjA0NDgwNloXDTI4MDUxNzAzNDgwNlowLzEtMCsGA1UEAxMk Y2E1ZDgzOWItZDY0Zi00ZTgzLThmNzAtYzRjY2E0MTQ0ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sf/HifRJauXfOPqXyO6QkPY3C3oRS/AKtbd ZVmOd0oMIhm8+Rd8mD96DCvqwhb6y/6MOQlF0b0mbDFOdc7k7t3DDrct1CwK4pD/ 4sul3uU3kCJ731zzAU20ZI9fe8FcmNmbeqDEeEab67djTsQhCEHHhWg4Z6rUKZzl 2dk6bca2VLpBApAuL4ouepkth+OOFbvUNHgXF7ANo6qc8LcOTmwwj0bTS0dcNaju BSUvhRBi1nWktREY7Xc3pRMxyAjf3rY9NxfKoQhXOx7v4b6O//L54Y8nYVgVG4u5 foga79R48vHJEnUcuyCNmuxjbmNLgxjdSkI7PH4EbXNnv3AyHwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCMlYeKtL1mDbKrItpyW0DnGoTE5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j YTVkODM5Yi1kNjRmLTRlODMtOGY3MC1jNGNjYTQxNDRkYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2NhNWQ4MzliLWQ2NGYtNGU4My04 ZjcwLWM0Y2NhNDE0NGRjMS9jYTVkODM5Yi1kNjRmLTRlODMtOGY3MC1jNGNjYTQx NDRkYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXuIgwDgQCAAIwCAMGACYC+HMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfcjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx6oKxUxFja7aH91lo6DbJYYG0 zIczDVoXgo+pNjRxbcBRu4czXVaFlQoGyyTbNy8yCpRapZxy0LC2dqoaS33LUumC jP0Bl06etkdBxxMLWu0OW709G0ixZgE1HdRMRAVkkYfGF+0CUjWnTrsMerh/L7Xa 5uNqLWNCeSAzrUoNephq18A9v+c/fqPONxWubAfMHtJKJ0O3+1V6T2cJGtAQK5+s PqHL3CU6YXt5v8+S3CYo/K2VByjeCutYyj7V+Ju9ENIUua+q8sKgg4qpi1cYDxuf PlltCSc2eo5aLc/LlxW9K6F1sYpCXEDtAWaMpziTyA60hv2mBFCy6I8yv3eo -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:17 2026 by rpki-client