$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7.cer File: b3319b60-b13b-4456-ba8f-8bd3105bedc7.cer (raw, json) Hash identifier: QD+LwJOUfcRtfyyRnKdsG2/Zo64wG82CAqTWKoIwNx0= Subject key identifier: 21:74:D9:2A:68:5E:F3:AB:54:8B:30:73:31:0A:15:59:8A:6B:18:0E Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D7A3E2B3ADC863F8ECFC7AA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b3319b60-b13b-4456-ba8f-8bd3105bedc7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Apr 2026 02:55:27 +0000 Certificate not after: Sat 15 Jul 2028 02:55:27 +0000 Subordinate resources: AS: 53572 IP: 23.158.168.0/24 IP: 23.158.184.0/24 IP: 2602:292::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:3e:2b:3a:dc:86:3f:8e:cf:c7:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 12 02:55:27 2026 GMT Not After : Jul 15 02:55:27 2028 GMT Subject: CN=b3319b60-b13b-4456-ba8f-8bd3105bedc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:0c:a9:bf:7c:41:9d:e2:10:57:5e:3d:a7: cd:18:1b:e9:64:72:16:2b:85:65:c9:f9:50:bf:6d: 32:16:b2:c4:64:70:9d:e4:c9:65:c8:eb:5e:0e:83: 3a:87:97:95:05:0f:25:42:17:24:eb:45:af:d2:06: 0f:17:dc:54:d1:f5:0a:d9:de:71:2d:2e:8d:66:f3: 5e:4b:95:a3:46:a4:7d:3c:5c:29:8b:c7:1c:b6:b3: a3:16:94:c7:34:05:cc:06:8d:03:82:59:ec:ee:4e: 90:d3:31:e4:61:94:94:da:46:13:0d:61:0b:a9:a6: b4:c3:ae:d6:95:42:d3:88:4b:a4:e7:0d:c0:ef:49: 5c:64:86:7e:92:32:f0:2a:02:85:27:e7:14:51:a0: 78:99:52:77:f5:83:62:3f:6f:30:40:1a:e4:84:53: 5b:38:e1:2e:7f:9a:12:cd:c1:5e:34:fb:c6:2b:ed: fd:85:2b:ad:e2:5a:bf:bb:11:1a:b8:3c:bf:39:9a: d9:42:77:af:36:3c:5a:27:21:ce:7d:6f:ae:a7:42: fe:9d:60:15:0c:43:83:56:16:0e:e6:ca:6e:db:c1: 01:d0:68:d4:ba:00:f0:6d:54:b8:85:c0:cf:35:de: a8:8a:6c:a6:87:a7:15:0a:b5:da:5a:35:bc:89:4e: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:74:D9:2A:68:5E:F3:AB:54:8B:30:73:31:0A:15:59:8A:6B:18:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b3319b60-b13b-4456-ba8f-8bd3105bedc7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.158.168.0/24 23.158.184.0/24 IPv6: 2602:292::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53572 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:29:28:1f:92:30:ac:c4:9f:97:43:64:54:df:d6:7a:b5:07: 64:e0:29:40:81:33:5d:61:f9:e2:82:bd:85:e7:de:ed:dc:e1: df:4d:3e:82:7d:25:0c:54:6a:ee:b9:27:80:8c:0e:1e:10:7a: dc:30:16:42:5a:2a:94:37:a3:6b:6b:04:2a:62:36:f1:31:b9: 78:4a:1c:c8:27:95:22:3a:25:5f:15:50:92:18:b3:93:0b:94: b9:60:d9:99:15:21:be:14:87:3b:e1:2e:38:5d:4a:de:26:64: f9:b7:7b:13:82:bf:ac:4e:55:65:02:21:d5:49:ee:e7:69:2b: 98:9f:ba:87:10:28:98:a6:8d:18:ca:fb:bc:96:66:05:31:f8: 46:4d:52:c8:3d:fd:99:58:d4:16:fb:33:74:2b:2b:35:56:d2: 81:01:a9:20:e9:14:ec:98:18:2b:2d:a2:ba:b5:af:ee:d1:f9: 29:05:73:86:77:89:fd:2b:a0:73:ff:0b:cb:31:58:fa:de:d7: fa:36:e5:ce:06:eb:17:a7:71:3b:f6:8f:4c:2c:9f:1a:5b:98: ee:ac:a2:79:34:4d:f0:e5:bf:29:b0:27:b2:95:0a:dc:81:18: 35:8f:e6:41:f6:46:64:ef:57:a3:0e:d5:6b:98:97:12:31:7d: 72:24:9e:7a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE16Pis63IY/js/HqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxMjAyNTUyN1oXDTI4MDcxNTAyNTUyN1owLzEtMCsGA1UEAxMk YjMzMTliNjAtYjEzYi00NDU2LWJhOGYtOGJkMzEwNWJlZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnswMqb98QZ3iEFdePafNGBvpZHIWK4VlyflQ v20yFrLEZHCd5MllyOteDoM6h5eVBQ8lQhck60Wv0gYPF9xU0fUK2d5xLS6NZvNe S5WjRqR9PFwpi8cctrOjFpTHNAXMBo0Dglns7k6Q0zHkYZSU2kYTDWELqaa0w67W lULTiEuk5w3A70lcZIZ+kjLwKgKFJ+cUUaB4mVJ39YNiP28wQBrkhFNbOOEuf5oS zcFeNPvGK+39hSut4lq/uxEauDy/OZrZQnevNjxaJyHOfW+up0L+nWAVDEODVhYO 5spu28EB0GjUugDwbVS4hcDPNd6oimymh6cVCrXaWjW8iU6uBQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCF02SpoXvOrVIswczEKFVmKaxgOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i MzMxOWI2MC1iMTNiLTQ0NTYtYmE4Zi04YmQzMTA1YmVkYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2IzMzE5YjYwLWIxM2ItNDQ1Ni1i YThmLThiZDMxMDViZWRjNy9iMzMxOWI2MC1iMTNiLTQ0NTYtYmE4Zi04YmQzMTA1 YmVkYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXnqgDBAAXnrgwDgQCAAIwCAMGACYCApIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDRRDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChKSgfkjCsxJ+XQ2RU 39Z6tQdk4ClAgTNdYfnigr2F597t3OHfTT6CfSUMVGruuSeAjA4eEHrcMBZCWiqU N6NrawQqYjbxMbl4ShzIJ5UiOiVfFVCSGLOTC5S5YNmZFSG+FIc74S44XUreJmT5 t3sTgr+sTlVlAiHVSe7naSuYn7qHECiYpo0Yyvu8lmYFMfhGTVLIPf2ZWNQW+zN0 Kys1VtKBAakg6RTsmBgrLaK6ta/u0fkpBXOGd4n9K6Bz/wvLMVj63tf6NuXOBusX p3E79o9MLJ8aW5jurKJ5NE3w5b8psCeylQrcgRg1j+ZB9kZk71ejDtVrmJcSMX1y JJ56 -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:25 2026 by rpki-client