$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c2aa976d-f3b5-48f7-85a5-caf3f3ef6497.cer File: c2aa976d-f3b5-48f7-85a5-caf3f3ef6497.cer (raw, json) Hash identifier: oSBAvDkdRDzyyNBQrMZQ5bG7lNjNw3WFYbBdEvGgVRg= Subject key identifier: 6F:56:0D:08:AA:62:6D:49:93:0C:52:DE:EC:EA:E6:81:4C:2D:1D:5D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D633FC0495A50A493EC9B81E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c2aa976d-f3b5-48f7-85a5-caf3f3ef6497/c2aa976d-f3b5-48f7-85a5-caf3f3ef6497.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c2aa976d-f3b5-48f7-85a5-caf3f3ef6497/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Apr 2026 21:15:03 +0000 Certificate not after: Thu 06 Jul 2028 21:15:03 +0000 Subordinate resources: AS: 33273 IP: 142.249.212.0/22 IP: 2602:f7fe::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:63:3f:c0:49:5a:50:a4:93:ec:9b:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 3 21:15:03 2026 GMT Not After : Jul 6 21:15:03 2028 GMT Subject: CN=c2aa976d-f3b5-48f7-85a5-caf3f3ef6497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:78:bd:2a:bc:5c:88:35:a9:69:95:52:82: e8:61:11:40:1a:51:77:bf:c5:7f:f4:ce:98:6f:d8: 75:0b:8e:5d:1c:5b:78:8d:2a:1b:2f:43:91:48:39: 14:ae:80:a7:58:bc:92:15:0a:4e:9d:c0:00:6e:63: 97:21:fd:b6:d5:2c:fa:fa:fc:7e:56:5c:8b:95:d1: 7b:0f:05:27:de:ab:c9:83:d7:20:d5:90:46:9e:7c: aa:06:35:5e:1c:40:39:49:c4:d9:aa:1a:e4:6f:d5: 95:7b:61:f3:4b:3b:0f:b4:e8:fe:27:0c:fd:1c:69: a9:84:51:3f:4a:ae:e4:5d:eb:12:7f:35:6b:07:6e: b9:d9:2d:09:b3:9c:e8:49:51:a7:97:27:5c:47:7e: b7:f4:78:39:11:11:cf:48:2b:bf:d8:2f:f2:93:23: 8a:32:1e:cf:f5:dc:37:84:c0:d8:39:b8:15:f3:3e: 33:ef:d4:aa:53:34:56:73:53:22:8c:db:a3:7d:4e: 3c:16:69:f5:bc:58:ee:58:df:d1:bd:bc:34:65:46: 3e:90:ec:87:95:6b:84:55:2b:d1:19:39:cf:d5:df: de:1b:3c:76:fb:f2:b9:ec:42:13:78:16:ac:9c:1b: be:48:ab:94:c7:a7:8d:ec:c9:6f:99:1e:c3:48:01: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:56:0D:08:AA:62:6D:49:93:0C:52:DE:EC:EA:E6:81:4C:2D:1D:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c2aa976d-f3b5-48f7-85a5-caf3f3ef6497/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c2aa976d-f3b5-48f7-85a5-caf3f3ef6497/c2aa976d-f3b5-48f7-85a5-caf3f3ef6497.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 142.249.212.0/22 IPv6: 2602:f7fe::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3a:c4:7a:92:35:80:de:ea:00:e5:e2:0c:09:50:2b:55:77: ff:f6:8f:b9:22:2e:e2:44:ba:1a:d9:75:06:82:5e:01:01:1f: 1e:37:68:bd:00:6e:f1:3f:96:0a:8f:80:dc:87:f5:d7:cb:e8: df:32:22:04:2a:9d:44:c2:18:73:01:e8:50:4b:43:44:41:91: 82:4c:2a:2a:e3:33:bd:55:14:bd:c1:46:8b:1d:47:fc:4b:31: 85:54:39:76:b5:70:b3:97:77:60:51:c0:b4:a7:0e:fa:04:c1: ce:9b:29:ac:06:3a:9c:4a:c9:4d:c5:ed:56:1d:49:bf:62:29: a5:2e:15:02:db:7f:27:b6:fa:fe:bb:24:97:0d:b4:ae:58:09: 31:73:2b:30:7a:23:21:7c:36:3d:eb:04:a9:98:24:21:a7:0e: 74:80:c2:48:20:34:16:1c:70:43:e6:9c:ce:44:d3:7b:65:ce: 94:82:07:6e:b0:6b:06:49:b6:75:08:ce:54:55:6a:3e:91:ba: cc:9c:5c:c1:16:0c:31:d6:06:77:e1:e8:5e:f0:fb:69:b0:54: 08:00:43:89:e3:5b:bc:a3:73:bd:22:5b:9e:06:61:62:01:3d: e1:55:08:e9:69:ba:c6:be:73:40:f9:2f:f4:b8:f5:61:84:2a: 24:0b:75:ae -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1jP8BJWlCkk+ybgeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMzIxMTUwM1oXDTI4MDcwNjIxMTUwM1owLzEtMCsGA1UEAxMk YzJhYTk3NmQtZjNiNS00OGY3LTg1YTUtY2FmM2YzZWY2NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvh4vSq8XIg1qWmVUoLoYRFAGlF3v8V/9M6Y b9h1C45dHFt4jSobL0ORSDkUroCnWLySFQpOncAAbmOXIf221Sz6+vx+VlyLldF7 DwUn3qvJg9cg1ZBGnnyqBjVeHEA5ScTZqhrkb9WVe2HzSzsPtOj+Jwz9HGmphFE/ Sq7kXesSfzVrB2652S0Js5zoSVGnlydcR3639Hg5ERHPSCu/2C/ykyOKMh7P9dw3 hMDYObgV8z4z79SqUzRWc1MijNujfU48Fmn1vFjuWN/Rvbw0ZUY+kOyHlWuEVSvR GTnP1d/eGzx2+/K57EITeBasnBu+SKuUx6eN7MlvmR7DSAHsawIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG9WDQiqYm1JkwxS3uzq5oFMLR1dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j MmFhOTc2ZC1mM2I1LTQ4ZjctODVhNS1jYWYzZjNlZjY0OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2MyYWE5NzZkLWYzYjUtNDhmNy04 NWE1LWNhZjNmM2VmNjQ5Ny9jMmFhOTc2ZC1mM2I1LTQ4ZjctODVhNS1jYWYzZjNl ZjY0OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKO+dQwDgQCAAIwCAMGACYC9/4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCB+TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiOsR6kjWA3uoA5eIMCVArVXf/ 9o+5Ii7iRLoa2XUGgl4BAR8eN2i9AG7xP5YKj4Dch/XXy+jfMiIEKp1EwhhzAehQ S0NEQZGCTCoq4zO9VRS9wUaLHUf8SzGFVDl2tXCzl3dgUcC0pw76BMHOmymsBjqc SslNxe1WHUm/YimlLhUC238ntvr+uySXDbSuWAkxcysweiMhfDY96wSpmCQhpw50 gMJIIDQWHHBD5pzORNN7Zc6UggdusGsGSbZ1CM5UVWo+kbrMnFzBFgwx1gZ34ehe 8PtpsFQIAEOJ41u8o3O9IlueBmFiAT3hVQjpabrGvnNA+S/0uPVhhCokC3Wu -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:21 2026 by rpki-client