$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer File: 1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer (raw, json) Hash identifier: BBRqDW+0VKVndo/zQ71oUQ9q+64/ZpmCLd3THJ9BR5M= Subject key identifier: AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D5245CF9DBCDAC66816B8AD20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Mar 2026 19:18:31 +0000 Certificate not after: Fri 30 Jun 2028 19:18:31 +0000 Subordinate resources: IP: 104.232.45.0/24 IP: 204.27.244.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:45:cf:9d:bc:da:c6:68:16:b8:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 28 19:18:31 2026 GMT Not After : Jun 30 19:18:31 2028 GMT Subject: CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:9b:a6:a4:a1:57:a9:52:9c:72:c0:db:1c: 6e:68:53:de:ce:02:9b:fd:64:e1:6c:b4:e7:3a:26: a8:c3:b6:54:ed:c8:79:57:ee:41:48:83:b9:36:aa: a3:c1:1c:0c:dc:99:a1:f5:9d:c3:58:74:5d:c4:78: 24:4a:d1:72:92:e6:f7:ff:af:cb:06:83:92:9c:dd: 9d:c3:07:b7:ca:74:87:b3:61:98:3c:c1:64:33:5e: a0:1f:14:ed:e8:85:62:dd:83:5a:94:01:cd:5f:0e: 2d:60:c6:f8:cd:26:b1:11:53:10:6b:37:55:13:6f: c0:4c:57:f2:99:db:aa:a9:7f:d7:bf:7a:c0:71:a2: ce:8f:a1:f7:3c:3a:e8:f0:fe:6c:93:34:09:ba:89: 58:61:00:7c:53:84:d8:af:63:4c:d3:29:7d:78:11: f0:65:ef:d4:c7:34:6a:60:25:19:d2:50:fd:df:9d: bc:f1:2c:2b:cf:c9:c2:cc:d6:74:4e:3d:13:85:27: 07:f0:14:0d:77:cc:f2:9d:67:79:38:9a:43:be:cb: dd:5e:98:7c:86:5d:c2:74:7f:34:e1:ef:4a:aa:4b: a4:7c:59:02:0f:c5:0e:38:d4:e2:24:af:c6:eb:74: cf:b6:3b:dd:bf:47:f4:0b:ec:fc:9e:ca:91:1d:2d: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.232.45.0/24 204.27.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:44:77:28:53:d5:e0:27:e4:7f:a0:50:9d:0c:99:b2:66:b6: 9a:7b:9e:b4:51:ec:32:31:9a:ce:8e:bf:89:cd:9b:d7:4f:72: b0:9e:3d:49:56:5c:57:ae:e1:88:54:a0:25:6f:db:7c:16:81: b0:3a:f1:aa:a5:ce:2a:59:06:75:51:78:ea:23:96:27:d2:c8: ae:06:61:60:88:bd:dd:51:63:ea:59:37:4a:53:2a:34:5e:04: f8:05:a5:86:68:49:c9:0e:ef:58:4b:04:6c:9c:d8:e3:38:26: b3:53:fb:28:70:ee:12:ed:34:3d:c1:27:5d:30:64:3a:fa:8d: 73:ba:f5:d3:0a:3a:8c:7a:26:34:8f:fb:f1:74:ae:8d:dc:54: 9c:bd:30:95:86:e4:7e:5f:7a:eb:f3:d7:45:13:84:c2:3d:5f: 85:fc:e6:13:1f:fc:bf:d3:a7:56:d9:9a:c1:bf:af:ce:a5:5f: 81:24:aa:c8:a7:7a:8a:1b:ce:5a:fb:35:ed:2e:89:e7:fd:1b: 1a:59:95:2d:f9:fc:6b:a0:01:dd:f0:5a:04:68:69:a0:31:59: ce:30:d1:fe:90:0d:a6:ab:d5:07:69:9a:26:ac:3a:a2:ab:52: 17:98:3f:48:c1:50:13:26:80:b4:ec:91:3a:17:34:7d:22:e6: 30:ac:a7:8f -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE1SRc+dvNrGaBa4rSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMyODE5MTgzMVoXDTI4MDYzMDE5MTgzMVowLzEtMCsGA1UEAxMk MWZjZjAzZTYtY2UwMC00NmZiLWE5NGQtYWUwMmJmYzQxMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx6bpqShV6lSnHLA2xxuaFPezgKb/WThbLTn Oiaow7ZU7ch5V+5BSIO5NqqjwRwM3Jmh9Z3DWHRdxHgkStFykub3/6/LBoOSnN2d wwe3ynSHs2GYPMFkM16gHxTt6IVi3YNalAHNXw4tYMb4zSaxEVMQazdVE2/ATFfy mduqqX/Xv3rAcaLOj6H3PDro8P5skzQJuolYYQB8U4TYr2NM0yl9eBHwZe/UxzRq YCUZ0lD935288Swrz8nCzNZ0Tj0ThScH8BQNd8zynWd5OJpDvsvdXph8hl3CdH80 4e9KqkukfFkCD8UOONTiJK/G63TPtjvdv0f0C+z8nsqRHS2jmQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFKo8M1X+9iuxUT+56fmizJyX0MLfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x ZmNmMDNlNi1jZTAwLTQ2ZmItYTk0ZC1hZTAyYmZjNDEyMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFmY2YwM2U2LWNlMDAtNDZmYi1h OTRkLWFlMDJiZmM0MTIzMi8xZmNmMDNlNi1jZTAwLTQ2ZmItYTk0ZC1hZTAyYmZj NDEyMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo6C0DBADMG/QwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO0R3KFPV4Cfk f6BQnQyZsma2mnuetFHsMjGazo6/ic2b109ysJ49SVZcV67hiFSgJW/bfBaBsDrx qqXOKlkGdVF46iOWJ9LIrgZhYIi93VFj6lk3SlMqNF4E+AWlhmhJyQ7vWEsEbJzY 4zgms1P7KHDuEu00PcEnXTBkOvqNc7r10wo6jHomNI/78XSujdxUnL0wlYbkfl96 6/PXRROEwj1fhfzmEx/8v9OnVtmawb+vzqVfgSSqyKd6ihvOWvs17S6J5/0bGlmV Lfn8a6AB3fBaBGhpoDFZzjDR/pANpqvVB2maJqw6oqtSF5g/SMFQEyaAtOyROhc0 fSLmMKynjw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:52:59 2026 by rpki-client