$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.cer File: e871808f-d4e7-40d3-a9bf-6fb419ae00a0.cer (raw, json) Hash identifier: 3Bsgenviws+xE7aWeehhtaDQTDNyc4DKrO8WiWxuR/k= Subject key identifier: 97:8D:04:97:76:50:71:6B:CC:F9:DD:46:FF:02:E6:13:53:CA:D5:9F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CF5CAB25DAAF98B8C41266200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Feb 2026 16:16:06 +0000 Certificate not after: Sun 28 May 2028 15:16:06 +0000 Subordinate resources: AS: 889 IP: 23.138.82.0/23 IP: 2606:de40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:ca:b2:5d:aa:f9:8b:8c:41:26:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 23 16:16:06 2026 GMT Not After : May 28 15:16:06 2028 GMT Subject: CN=e871808f-d4e7-40d3-a9bf-6fb419ae00a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:8e:b2:95:5c:43:18:47:e7:01:93:6e:2e: d6:d4:da:34:d2:c8:c3:c7:a4:04:d3:f2:f8:9c:0d: 3e:bd:0c:6c:97:c6:29:6e:8e:87:fe:95:ec:ca:eb: 0f:69:63:74:95:40:5e:be:bf:46:95:0a:f9:54:51: 75:56:44:2e:39:ab:be:92:98:80:7e:8c:93:83:48: 2b:65:ca:63:09:67:6e:8b:67:81:4c:88:5b:1a:04: 16:09:99:93:c7:b8:b9:fb:25:0b:dd:90:d2:5e:d0: 44:59:5f:c4:2c:f3:fa:ea:fe:fd:cd:e3:4a:73:9a: 5d:f1:fd:53:1b:6d:a1:57:be:a1:d7:56:5f:ba:20: 12:59:db:70:32:52:d2:68:73:9c:1f:7a:90:2c:6c: 9f:ab:ff:64:43:0e:4e:61:bd:94:cf:25:e2:82:47: b2:de:1e:4f:9c:77:c8:9d:af:23:20:bf:03:93:60: 6a:98:1a:d0:9e:41:50:e8:6f:39:aa:1b:be:59:56: bb:81:2a:57:ba:1e:4e:d7:81:17:d5:53:b3:1d:27: 4d:f3:58:6b:38:5e:83:d7:b0:df:0e:6f:d7:9e:89: 3a:3f:3b:5e:ba:fd:9c:53:5b:bc:1a:54:ed:02:f6: b8:33:7a:27:b8:27:c8:9c:86:ea:05:5c:d5:e8:d7: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8D:04:97:76:50:71:6B:CC:F9:DD:46:FF:02:E6:13:53:CA:D5:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.138.82.0/23 IPv6: 2606:de40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 889 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:38:31:a2:42:c7:f9:39:5b:c0:b5:03:cb:e8:0b:b3:b9:9b: 8e:d3:a7:74:e2:68:9d:18:e2:cd:d0:29:c4:64:15:64:28:1c: 2a:0b:ee:0d:bd:69:2a:48:12:b4:02:64:de:d5:8e:49:5c:cc: f4:38:9c:17:b3:ab:49:d6:34:f3:fd:53:4d:46:0a:6f:9e:90: 86:02:90:2b:5a:da:a6:0f:f7:4d:67:78:ae:16:22:26:9b:b7: ae:6e:53:58:50:79:80:52:36:9e:df:a1:e7:4c:e4:8c:16:f6: c9:92:03:c3:bd:9f:19:54:4e:9b:76:b1:4f:dc:ac:9b:10:9f: 6f:86:4c:7c:94:97:a5:9c:c8:27:79:f2:46:74:1a:02:79:b4: 88:47:27:84:6f:5a:ba:ae:f9:0a:39:3e:74:ac:e1:2d:00:26: 0a:56:52:dd:b3:08:53:98:67:1e:1f:22:86:f6:8a:12:7f:76: 4f:00:06:c6:a4:12:b6:55:aa:8f:f0:79:6f:e3:2a:0e:23:52: 17:75:a4:b5:e9:11:67:d8:22:e0:a9:f7:e1:b3:d9:a3:0a:80: 4c:7a:2e:4f:90:8c:4c:02:2f:11:9f:da:cf:f9:6a:03:0f:b0: 98:8d:d0:cc:3b:59:e5:02:8a:82:b6:ac:9e:26:86:b3:45:a8: 8c:ad:03:4a -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEz1yrJdqvmLjEEmYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyMzE2MTYwNloXDTI4MDUyODE1MTYwNlowLzEtMCsGA1UEAxMk ZTg3MTgwOGYtZDRlNy00MGQzLWE5YmYtNmZiNDE5YWUwMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzWOspVcQxhH5wGTbi7W1No00sjDx6QE0/L4 nA0+vQxsl8Ypbo6H/pXsyusPaWN0lUBevr9GlQr5VFF1VkQuOau+kpiAfoyTg0gr ZcpjCWdui2eBTIhbGgQWCZmTx7i5+yUL3ZDSXtBEWV/ELPP66v79zeNKc5pd8f1T G22hV76h11ZfuiASWdtwMlLSaHOcH3qQLGyfq/9kQw5OYb2UzyXigkey3h5PnHfI na8jIL8Dk2BqmBrQnkFQ6G85qhu+WVa7gSpXuh5O14EX1VOzHSdN81hrOF6D17Df Dm/Xnok6Pzteuv2cU1u8GlTtAva4M3onuCfInIbqBVzV6NfS2QIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFJeNBJd2UHFrzPndRv8C5hNTytWfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l ODcxODA4Zi1kNGU3LTQwZDMtYTliZi02ZmI0MTlhZTAwYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2U4NzE4MDhmLWQ0ZTctNDBkMy1h OWJmLTZmYjQxOWFlMDBhMC9lODcxODA4Zi1kNGU3LTQwZDMtYTliZi02ZmI0MTlh ZTAwYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAEXilIwDQQCAAIwBwMFACYG3kAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICA3kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALzgxokLH+TlbwLUDy+gLs7mbjtOn dOJonRjizdApxGQVZCgcKgvuDb1pKkgStAJk3tWOSVzM9DicF7OrSdY08/1TTUYK b56QhgKQK1rapg/3TWd4rhYiJpu3rm5TWFB5gFI2nt+h50zkjBb2yZIDw72fGVRO m3axT9ysmxCfb4ZMfJSXpZzIJ3nyRnQaAnm0iEcnhG9auq75Cjk+dKzhLQAmClZS 3bMIU5hnHh8ihvaKEn92TwAGxqQStlWqj/B5b+MqDiNSF3WktekRZ9gi4Kn34bPZ owqATHouT5CMTAIvEZ/az/lqAw+wmI3QzDtZ5QKKgrasniaGs0WojK0DSg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:31 2026 by rpki-client