$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea4e4557-4b81-46d9-aaa1-319915729b03.cer File: ea4e4557-4b81-46d9-aaa1-319915729b03.cer (raw, json) Hash identifier: Hk/C34lqRkExehhAaRFbna8jWsN5KIznIIGjKsckEO8= Subject key identifier: 14:14:C4:98:C1:C6:D7:1A:7B:9C:9D:EC:B2:C3:EB:E8:F6:64:D0:4E Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D87C510C0D330D9C254C77400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea4e4557-4b81-46d9-aaa1-319915729b03/ea4e4557-4b81-46d9-aaa1-319915729b03.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea4e4557-4b81-46d9-aaa1-319915729b03/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Apr 2026 23:12:46 +0000 Certificate not after: Wed 19 Jul 2028 23:12:46 +0000 Subordinate resources: AS: 402316 IP: 192.231.20.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:c5:10:c0:d3:30:d9:c2:54:c7:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 16 23:12:46 2026 GMT Not After : Jul 19 23:12:46 2028 GMT Subject: CN=ea4e4557-4b81-46d9-aaa1-319915729b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:91:76:a0:f7:2e:c2:d4:33:37:b3:d6:26:6a: 47:21:60:3a:e4:50:90:cb:f0:05:4a:8d:2f:3c:5d: 25:a7:a8:82:17:ab:8c:f0:0d:3a:74:14:d6:87:b9: 0f:6e:f2:60:2e:45:06:f7:08:f2:aa:b1:c2:c6:ed: d3:46:be:cd:99:58:a0:2f:4e:46:e3:da:26:38:a8: 08:04:a8:a8:0b:81:ea:ba:02:7e:c7:6c:f0:7a:a4: 29:f6:50:60:19:fe:8c:8a:f7:e9:1e:15:ee:ec:4d: ae:c2:69:3d:10:83:70:6e:85:62:66:6b:97:d8:1c: 84:ce:19:a6:25:c1:3e:1d:0b:16:69:be:13:ef:7b: 7d:41:ac:05:c0:03:99:1a:20:78:bf:ac:de:76:be: 78:60:5f:1c:59:3c:ff:6c:b1:7f:01:36:1c:be:bf: 81:ab:ea:69:83:f7:1c:8e:59:44:1f:70:a4:e4:f1: cd:ce:c9:51:8e:48:6d:9e:ac:6e:25:7f:39:df:d1: 8c:43:aa:50:42:60:dd:ec:c9:88:a2:ab:5e:54:1e: a0:37:41:1a:53:a6:c8:56:68:ec:4c:f9:21:a2:1b: 78:28:f4:39:c1:a2:5f:cd:84:a4:53:c2:f0:e7:5e: 14:fc:32:9f:40:da:78:ee:c7:60:3e:b5:7a:c9:d8: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:14:C4:98:C1:C6:D7:1A:7B:9C:9D:EC:B2:C3:EB:E8:F6:64:D0:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea4e4557-4b81-46d9-aaa1-319915729b03/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea4e4557-4b81-46d9-aaa1-319915729b03/ea4e4557-4b81-46d9-aaa1-319915729b03.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.231.20.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402316 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b7:21:95:25:ce:8a:bf:a1:6d:cd:a3:5d:9a:3b:0c:40:e9: 31:02:c5:ef:54:f7:8d:93:46:37:1e:24:f6:41:49:6a:a0:de: 82:65:11:13:88:7d:0d:48:35:2e:3d:5c:d6:b6:21:83:0b:54: e5:3a:d2:6c:82:11:1e:76:6a:e8:ad:1c:21:d2:7a:4e:b3:8e: 84:0e:9e:bc:bd:8e:a8:8a:99:56:62:ee:d2:a0:3e:e8:2c:47: 56:d3:0e:54:ca:9d:05:a9:ff:88:8f:8b:c2:81:bc:37:07:9e: b4:a0:93:66:dc:f2:ca:26:33:df:a1:d4:4a:7a:08:cd:37:c8: cb:5b:4f:79:79:f1:31:ff:25:b6:98:a5:fe:a7:ba:19:11:e2: 45:e2:a7:02:f6:0e:e3:eb:97:3a:92:be:ca:53:d8:5c:66:31: db:19:f8:d5:5d:ea:5a:30:87:66:fd:95:a8:99:b6:35:ee:8b: b4:b1:6b:dd:fc:6e:99:2b:b6:10:c2:01:4f:74:bc:ee:89:3a: 34:3d:a1:5a:17:8c:1a:78:72:50:60:04:e7:20:bd:c5:66:a7: 90:0d:69:17:f1:3f:98:0d:30:5c:d5:62:92:21:fa:24:aa:7c: d9:c5:c3:85:9e:39:7f:5a:2d:7d:6e:23:74:e3:eb:26:9f:fa: ab:05:90:29 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2HxRDA0zDZwlTHdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxNjIzMTI0NloXDTI4MDcxOTIzMTI0NlowLzEtMCsGA1UEAxMk ZWE0ZTQ1NTctNGI4MS00NmQ5LWFhYTEtMzE5OTE1NzI5YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJF2oPcuwtQzN7PWJmpHIWA65FCQy/AFSo0v PF0lp6iCF6uM8A06dBTWh7kPbvJgLkUG9wjyqrHCxu3TRr7NmVigL05G49omOKgI BKioC4HqugJ+x2zweqQp9lBgGf6MivfpHhXu7E2uwmk9EINwboViZmuX2ByEzhmm JcE+HQsWab4T73t9QawFwAOZGiB4v6zedr54YF8cWTz/bLF/ATYcvr+Bq+ppg/cc jllEH3Ck5PHNzslRjkhtnqxuJX8539GMQ6pQQmDd7MmIoqteVB6gN0EaU6bIVmjs TPkhoht4KPQ5waJfzYSkU8Lw514U/DKfQNp47sdgPrV6ydh8hwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBQUxJjBxtcae5yd7LLD6+j2ZNBOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l YTRlNDU1Ny00YjgxLTQ2ZDktYWFhMS0zMTk5MTU3MjliMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2VhNGU0NTU3LTRiODEtNDZkOS1h YWExLTMxOTkxNTcyOWIwMy9lYTRlNDU1Ny00YjgxLTQ2ZDktYWFhMS0zMTk5MTU3 MjliMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA5xQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiOMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIS3IZUlzoq/oW3No12aOwxA6TECxe9U942TRjceJPZBSWqg 3oJlEROIfQ1INS49XNa2IYMLVOU60myCER52auitHCHSek6zjoQOnry9jqiKmVZi 7tKgPugsR1bTDlTKnQWp/4iPi8KBvDcHnrSgk2bc8somM9+h1Ep6CM03yMtbT3l5 8TH/JbaYpf6nuhkR4kXipwL2DuPrlzqSvspT2FxmMdsZ+NVd6lowh2b9laiZtjXu i7Sxa938bpkrthDCAU90vO6JOjQ9oVoXjBp4clBgBOcgvcVmp5ANaRfxP5gNMFzV YpIh+iSqfNnFw4WeOX9aLX1uI3Tj6yaf+qsFkCk= -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:47 2026 by rpki-client