$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer File: f59a5af4-2483-44fd-8539-cacfd54edc45.cer (raw, json) Hash identifier: o3za/Cv4XoQcpmDdT1nHA4ATi6h7EEUc1lKNzA9TOhM= Subject key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CBB5E389899C5A8A9D4A1DE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 18:00:39 +0000 Certificate not after: Sun 07 May 2028 17:00:39 +0000 Subordinate resources: AS: 18534 AS: 19523 AS: 54980 AS: 394352 IP: 23.146.32.0/24 IP: 23.166.32.0/24 IP: 23.169.32.0/24 IP: 45.42.128.0/22 IP: 64.203.64.0/19 IP: 64.234.118.0/24 IP: 104.167.252.0/22 IP: 104.224.32.0/22 IP: 104.255.208.0/22 IP: 158.51.52.0/22 IP: 158.51.244.0/22 IP: 161.38.14.0/24 IP: 161.129.245.0/24 IP: 192.219.0.0/24 IP: 198.163.118.0/23 IP: 2602:fe57::/36 IP: 2604:a640::/32 IP: 2604:e3c0::/32 IP: 2604:e440::/32 IP: 2620:124:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bb:5e:38:98:99:c5:a8:a9:d4:a1:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 2 18:00:39 2026 GMT Not After : May 7 17:00:39 2028 GMT Subject: CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:24:ce:69:bd:89:35:ba:d9:92:49:d0:00: c6:6c:a0:4d:72:fa:2e:05:62:d1:78:e7:3b:81:f3: f2:94:93:2f:64:3f:0e:f3:51:13:17:9f:3a:30:f5: fd:b8:6e:d1:87:58:8e:ac:85:74:93:33:95:3e:2b: 22:50:85:3f:53:47:98:23:33:03:36:4f:67:aa:f2: 96:a5:c2:b0:bc:df:fd:4c:5b:40:c1:ed:34:e0:61: 53:1c:ff:2d:72:9e:73:b7:76:98:a4:77:21:34:9d: 21:96:d0:33:d1:0d:7a:5f:1f:95:41:cd:63:65:00: 30:7e:35:70:30:bd:1d:b1:2d:59:7d:50:e4:7a:e1: 25:89:ec:da:d7:28:56:a7:c1:b1:3f:5f:61:43:82: bd:83:1c:d5:17:42:60:77:38:ad:1c:83:f7:d5:45: 2e:0b:32:d1:f0:49:cf:24:7c:2a:e8:3d:36:aa:47: ed:09:aa:6b:b6:16:d3:f0:e9:28:02:bb:a1:c4:3f: 90:ff:a0:a6:13:76:11:0a:e6:d9:a2:48:58:9a:8c: 24:d7:42:5c:fa:70:36:aa:62:6e:07:8d:9f:1b:7d: 16:5b:11:23:22:46:b6:16:b3:79:d0:12:88:1f:a8: 0f:6c:a1:1a:af:91:e6:a4:2f:df:f1:f4:f0:3b:69: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.146.32.0/24 23.166.32.0/24 23.169.32.0/24 45.42.128.0/22 64.203.64.0/19 64.234.118.0/24 104.167.252.0/22 104.224.32.0/22 104.255.208.0/22 158.51.52.0/22 158.51.244.0/22 161.38.14.0/24 161.129.245.0/24 192.219.0.0/24 198.163.118.0/23 IPv6: 2602:fe57::/36 2604:a640::/32 2604:e3c0::/32 2604:e440::/32 2620:124:5000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18534 19523 54980 394352 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7f:1b:a8:91:e7:0c:f2:96:75:b5:29:d8:c0:d2:70:8b:56: fd:bf:55:57:68:52:73:1a:cb:10:21:19:78:b9:ac:91:6c:09: 11:91:35:01:d4:33:f6:35:13:2d:43:6e:94:37:09:06:2c:53: 2c:34:e2:f9:d6:81:af:f8:bf:cb:7b:bf:12:7d:5b:7c:70:65: ed:eb:fa:f0:71:a0:fa:dd:4d:0c:51:ad:7e:33:2f:a9:db:90: b0:14:04:98:eb:8e:7f:41:30:ef:d1:ba:55:7f:b3:08:4a:27: ab:e7:67:e8:ab:50:0d:f7:5e:79:e2:81:84:89:66:a9:c4:64: 68:e8:d8:48:a9:75:98:ec:37:6c:b3:6f:c2:fd:33:d4:e7:7b: b1:8e:99:85:1d:d2:ca:e2:c8:d1:b9:a3:2f:7d:88:c9:2f:2c: cd:31:21:e7:a1:f9:c3:cb:cd:a4:37:7d:cd:fb:d0:ba:53:16: a6:f1:66:b4:94:7c:bc:f6:dc:c8:22:7c:2c:a1:45:1d:ec:36: de:8a:70:14:8b:4f:57:63:94:19:ed:e4:6a:cc:c7:f5:60:f4: 8d:eb:77:b3:bf:85:f0:17:d5:7a:d5:14:1f:b3:f7:1d:66:de: b8:95:8b:4b:35:5e:a9:af:c3:6a:21:ff:ac:a6:bb:fe:55:12: a9:83:a2:81 -----BEGIN CERTIFICATE----- MIIHmjCCBoKgAwIBAgIUAQ0Mn0MoWEy7XjiYmcWoqdSh3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwMjE4MDAzOVoXDTI4MDUwNzE3MDAzOVowLzEtMCsGA1UEAxMk ZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVkYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Qkzmm9iTW62ZJJ0ADGbKBNcvouBWLReOc7 gfPylJMvZD8O81ETF586MPX9uG7Rh1iOrIV0kzOVPisiUIU/U0eYIzMDNk9nqvKW pcKwvN/9TFtAwe004GFTHP8tcp5zt3aYpHchNJ0hltAz0Q16Xx+VQc1jZQAwfjVw ML0dsS1ZfVDkeuElieza1yhWp8GxP19hQ4K9gxzVF0JgdzitHIP31UUuCzLR8EnP JHwq6D02qkftCaprthbT8OkoAruhxD+Q/6CmE3YRCubZokhYmowk10Jc+nA2qmJu B42fG30WWxEjIka2FrN50BKIH6gPbKEar5HmpC/f8fTwO2nBnQIDAQABo4IErDCC BKgwHQYDVR0OBBYEFGzTB4tItiHIyxh1xSNl3oRjrxu/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m NTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2Y1OWE1YWY0LTI0ODMtNDRmZC04 NTM5LWNhY2ZkNTRlZGM0NS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0 ZWRjNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwgaIGCCsGAQUF BwEHAQH/BIGSMIGPMGAEAgABMFoDBAAXkiADBAAXpiADBAAXqSADBAItKoADBAVA y0ADBABA6nYDBAJop/wDBAJo4CADBAJo/9ADBAKeMzQDBAKeM/QDBAChJg4DBACh gfUDBADA2wADBAHGo3YwKwQCAAIwJQMGBCYC/lcAAwUAJgSmQAMFACYE48ADBQAm BORAAwYAJiABJFAwJwYIKwYBBQUHAQgBAf8EGDAWoBQwEgICSGYCAkxDAgMA1sQC AwYEcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBCfxuokecM8pZ1tSnYwNJwi1b9v1VXaFJzGssQIRl4uayR bAkRkTUB1DP2NRMtQ26UNwkGLFMsNOL51oGv+L/Le78SfVt8cGXt6/rwcaD63U0M Ua1+My+p25CwFASY645/QTDv0bpVf7MISier52foq1AN91554oGEiWapxGRo6NhI qXWY7Ddss2/C/TPU53uxjpmFHdLK4sjRuaMvfYjJLyzNMSHnofnDy82kN33N+9C6 Uxam8Wa0lHy89tzIInwsoUUd7DbeinAUi09XY5QZ7eRqzMf1YPSN63ezv4XwF9V6 1RQfs/cdZt64lYtLNV6pr8NqIf+sprv+VRKpg6KB -----END CERTIFICATE-----Generated at Fri Feb 27 15:00:33 2026 by rpki-client