$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer File: 3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer (raw, json) Hash identifier: wR4SRD/c13rTnkw2jHhwiNi7e/s+X2tHZ2Aemq7mQRU= Subject key identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D224A15B877E2F04A76033000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Mar 2026 14:48:20 +0000 Certificate not after: Mon 05 Jun 2028 22:22:11 +0000 Subordinate resources: AS: 20012 IP: 23.154.100.0/24 IP: 168.158.0.0/16 IP: 2605:4b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:4a:15:b8:77:e2:f0:4a:76:03:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 11 14:48:20 2026 GMT Not After : Jun 5 22:22:11 2028 GMT Subject: CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:aa:f1:50:87:d2:60:15:5b:12:9b:95:c7: 8c:44:68:51:03:16:1d:6e:2d:cd:e6:92:69:49:24: 2c:50:63:aa:73:85:f2:c9:0a:ae:54:33:71:29:ae: b9:3b:db:bc:4c:26:35:8c:eb:f6:f6:28:46:3f:c5: b9:17:e5:ab:ad:33:cc:66:71:33:c2:8a:b5:41:95: 51:ca:e8:75:6b:2e:f5:67:76:d7:21:85:dc:9f:89: 90:5c:eb:2b:0f:a1:4b:d5:e6:98:f0:fa:73:ac:09: c8:1f:eb:58:e3:a9:be:3d:98:0c:27:0f:9d:82:9c: 49:1d:c2:f7:fc:76:37:77:16:60:6d:d1:11:ea:a5: e8:b9:74:d2:1a:f4:8a:0e:2e:82:09:ba:b9:d9:6c: 97:91:21:eb:b3:56:b0:32:e3:c7:bc:8e:76:f8:07: c9:fd:51:9c:14:44:08:65:80:b2:62:73:e7:b4:84: 31:eb:3d:b8:a0:96:2e:ca:92:15:27:23:9b:46:6e: 63:2e:d6:06:6e:26:80:79:fb:49:f7:1a:7b:16:b7: da:ef:76:0f:6b:1c:b5:3d:79:99:09:8c:1b:0d:7e: 4a:51:6c:99:45:57:43:64:4c:77:46:cd:e3:ba:34: 98:ef:47:ef:2a:88:2e:eb:9c:83:e1:4c:17:88:58: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.154.100.0/24 168.158.0.0/16 IPv6: 2605:4b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20012 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:86:d2:63:7e:0f:8b:07:e3:62:21:90:11:9d:da:9f:88:6c: 24:89:8b:59:56:66:ff:b5:f8:24:64:44:75:7d:24:1b:fe:e8: 02:e5:6c:d7:ba:0c:d1:2c:de:4a:c8:4b:97:ed:4a:49:35:c4: c5:79:2f:74:24:2b:33:11:11:bd:3d:57:58:60:e1:98:03:97: e2:71:8f:30:e0:5c:3f:9c:73:46:53:83:b1:8f:1d:dc:c8:e4: 1a:dd:4d:9e:75:6f:f1:a2:b4:47:49:44:31:3c:36:fd:dd:4a: 37:ce:cf:84:e7:36:39:03:fe:43:28:9e:1c:98:0d:51:ca:7b: 67:90:d0:1a:4d:90:e7:ab:0a:98:c5:3e:ed:d5:65:1f:4f:ad: 51:40:38:6f:04:cc:d4:77:58:6b:89:c5:b7:55:ba:57:69:e7: c8:de:1b:56:a8:38:30:15:17:97:95:b4:85:7f:a8:38:35:ab: 5a:fb:dd:70:96:c0:df:d3:4d:0b:7e:7c:c5:52:8e:cc:f6:97: 78:dc:d7:8d:81:84:6e:ed:2a:06:b7:fb:26:be:96:02:72:3c: aa:70:8d:19:cc:3b:3f:fc:be:43:12:bc:d3:10:2b:c1:65:29: 01:b3:20:35:cc:3d:a3:7a:f5:5c:4f:08:2f:1a:dc:f3:dd:a1: 94:3a:e4:5a -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWE0iShW4d+LwSnYDMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMTE0NDgyMFoXDTI4MDYwNTIyMjIxMVowLzEtMCsGA1UEAxMk M2M3YjZlMTgtMDBkYS00ZGExLTlmMmMtMTk0MjFmYTZhNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZaq8VCH0mAVWxKblceMRGhRAxYdbi3N5pJp SSQsUGOqc4XyyQquVDNxKa65O9u8TCY1jOv29ihGP8W5F+WrrTPMZnEzwoq1QZVR yuh1ay71Z3bXIYXcn4mQXOsrD6FL1eaY8PpzrAnIH+tY46m+PZgMJw+dgpxJHcL3 /HY3dxZgbdER6qXouXTSGvSKDi6CCbq52WyXkSHrs1awMuPHvI52+AfJ/VGcFEQI ZYCyYnPntIQx6z24oJYuypIVJyObRm5jLtYGbiaAeftJ9xp7Frfa73YPaxy1PXmZ CYwbDX5KUWyZRVdDZEx3Rs3jujSY70fvKogu65yD4UwXiFiNjQIDAQABo4IELjCC BCowHQYDVR0OBBYEFN97VGBNtODKqEbCUtSrtSIrjynlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z YzdiNmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQyMWZhNmE1NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzNjN2I2ZTE4LTAwZGEtNGRhMS05 ZjJjLTE5NDIxZmE2YTU3NS8zYzdiNmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQyMWZh NmE1NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMBEEAgABMAsDBAAXmmQDAwConjANBAIAAjAHAwUAJgVLADAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJOLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAShtJjfg+LB+NiIZARndqf iGwkiYtZVmb/tfgkZER1fSQb/ugC5WzXugzRLN5KyEuX7UpJNcTFeS90JCszERG9 PVdYYOGYA5ficY8w4Fw/nHNGU4Oxjx3cyOQa3U2edW/xorRHSUQxPDb93Uo3zs+E 5zY5A/5DKJ4cmA1RyntnkNAaTZDnqwqYxT7t1WUfT61RQDhvBMzUd1hricW3VbpX aefI3htWqDgwFReXlbSFf6g4Nata+91wlsDf000LfnzFUo7M9pd43NeNgYRu7SoG t/smvpYCcjyqcI0ZzDs//L5DErzTECvBZSkBsyA1zD2jevVcTwgvGtzz3aGUOuRa -----END CERTIFICATE-----Generated at Fri Mar 20 10:58:39 2026 by rpki-client