$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer File: ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer (raw, json) Hash identifier: YXaP2zScwZ1P+jZVI+8SmisSwyuRsAOXKMqytJ8/fMA= Subject key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F69D1E8A569862CEEFFC62020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 15:18:16 +0000 Certificate not after: Fri 09 Jun 2028 17:45:44 +0000 Subordinate resources: AS: 13898 IP: 23.171.216.0/24 IP: 104.37.192.0/22 IP: 156.9.132.0/22 IP: 2602:f97c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:d1:e8:a5:69:86:2c:ee:ff:c6:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 6 15:18:16 2026 GMT Not After : Jun 9 17:45:44 2028 GMT Subject: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4d:93:71:cd:d2:92:3d:07:f6:cb:f1:d5:66: 65:df:75:4d:88:b3:02:95:c0:50:c8:58:3b:61:ed: a7:03:54:a0:68:05:c0:47:95:c2:2c:5a:cd:38:17: 1a:e2:f8:79:aa:2f:21:ee:5c:4e:0e:98:93:0a:cc: 0c:ff:1a:0d:0b:91:5a:8d:e5:6d:f2:b6:9c:e0:c7: e5:e7:fb:14:16:92:96:7b:26:21:bb:3c:5d:77:29: 2e:12:fb:60:fe:c7:be:f2:cd:95:f2:82:9a:4c:22: 5a:56:c3:53:f0:7c:29:75:2c:0a:61:53:6b:5a:7a: 28:8f:b1:fa:f4:56:9c:70:66:b7:1f:01:a4:ee:98: 95:94:bf:ad:99:cc:e1:f8:55:3a:09:52:1c:c6:4d: 30:58:b2:b9:ff:85:e0:1c:a0:0a:76:90:1b:95:be: 60:7c:d9:ce:02:2d:a5:c7:fe:bc:fd:73:9b:0d:8f: 03:81:2e:25:33:3a:ed:09:b1:4b:6b:ff:bf:e9:ad: b0:8a:c5:79:ee:a5:d7:69:c4:d7:15:ae:c7:00:c0: b2:98:b9:49:20:e3:4f:26:fd:16:e2:97:8c:3e:29: 38:9f:c4:52:69:0c:b3:25:5e:74:cc:a9:63:fd:87: 42:61:aa:7b:c1:a6:26:da:60:94:fc:80:35:64:2a: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.171.216.0/24 104.37.192.0/22 156.9.132.0/22 IPv6: 2602:f97c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13898 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:59:67:f1:29:7f:68:77:c1:77:86:35:6a:27:11:e4:b5:4a: 48:d2:33:97:9e:8e:ea:b2:cd:5c:d5:f3:f9:ce:e1:5e:61:de: eb:77:2c:64:6d:19:9c:1f:bd:7a:cb:f9:17:07:a7:a5:40:ea: 92:24:98:fa:b0:41:36:06:60:d5:70:ff:58:2a:d2:ac:9b:0f: 2e:e8:ce:30:38:e3:ad:3c:bf:e4:9f:d8:0a:a2:b8:08:6a:b8: 7f:85:f6:dc:e9:63:4a:a0:44:b6:9e:ff:e7:d3:78:55:a3:6d: 02:1f:5c:28:3e:c2:12:27:36:69:6d:fe:ce:7d:9e:f1:ab:d6: 5c:d8:7e:92:10:d8:26:25:2f:e9:eb:ea:b1:c7:57:d1:5a:8e: 35:95:b4:4f:18:6d:b6:58:39:bb:3f:10:c1:94:7f:27:9e:4a: ba:d9:1c:eb:3c:a9:85:e6:ef:11:e3:78:26:e6:d7:b4:f6:8e: d9:11:40:d1:c7:b9:55:0c:db:2c:c4:25:13:4c:56:13:9f:a9: d0:8a:0d:92:5c:44:70:63:bf:62:a0:3c:b1:07:c1:ec:56:60: bc:13:60:01:08:11:11:d3:8c:3a:a1:08:e9:38:51:cb:99:b7: 80:66:0e:76:5d:5c:19:89:f8:6d:5f:3d:64:4d:ca:b2:86:9c: 48:ca:8e:9c -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9p0eilaYYs7v/GICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAwNjE1MTgxNloXDTI4MDYwOTE3NDU0NFowLzEtMCsGA1UEAxMk YmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE2Tcc3Skj0H9svx1WZl33VNiLMClcBQyFg7 Ye2nA1SgaAXAR5XCLFrNOBca4vh5qi8h7lxODpiTCswM/xoNC5FajeVt8rac4Mfl 5/sUFpKWeyYhuzxddykuEvtg/se+8s2V8oKaTCJaVsNT8HwpdSwKYVNrWnooj7H6 9FaccGa3HwGk7piVlL+tmczh+FU6CVIcxk0wWLK5/4XgHKAKdpAblb5gfNnOAi2l x/68/XObDY8DgS4lMzrtCbFLa/+/6a2wisV57qXXacTXFa7HAMCymLlJIONPJv0W 4peMPik4n8RSaQyzJV50zKlj/YdCYap7waYm2mCU/IA1ZCqy/QIDAQABo4IENjCC BDIwHQYDVR0OBBYEFD0tYPZCKgQaoYR6hbZWvQ/KSplLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i YTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JhMzcxZGExLWNkNzQtNDZiZC04 MmE4LWRlN2I5ZjdhOWZmYS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3 YTlmZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXq9gDBAJoJcADBAKcCYQwDgQCAAIwCAMGACYC +XwAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjZKMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAExZZ/Epf2h3 wXeGNWonEeS1SkjSM5eejuqyzVzV8/nO4V5h3ut3LGRtGZwfvXrL+RcHp6VA6pIk mPqwQTYGYNVw/1gq0qybDy7ozjA44608v+Sf2AqiuAhquH+F9tzpY0qgRLae/+fT eFWjbQIfXCg+whInNmlt/s59nvGr1lzYfpIQ2CYlL+nr6rHHV9FajjWVtE8YbbZY Obs/EMGUfyeeSrrZHOs8qYXm7xHjeCbm17T2jtkRQNHHuVUM2yzEJRNMVhOfqdCK DZJcRHBjv2KgPLEHwexWYLwTYAEIERHTjDqhCOk4UcuZt4BmDnZdXBmJ+G1fPWRN yrKGnEjKjpw= -----END CERTIFICATE-----Generated at Thu Oct 15 20:51:35 2026 by rpki-client