$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer File: 438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer (raw, json) Hash identifier: nlu+tvY5paBWoe8LTyA67TR0Ws205tdmFfBhBOKgyuU= Subject key identifier: 96:13:B9:CB:40:A9:91:8A:34:0B:1B:A1:DF:28:EE:59:CB:4E:95:C1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D866A9D56DC314D043F13FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Apr 2026 11:34:43 +0000 Certificate not after: Wed 19 Jul 2028 11:34:43 +0000 Subordinate resources: AS: 402415 IP: 23.156.132.0/24 IP: 2602:f3fa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:6a:9d:56:dc:31:4d:04:3f:13:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 16 11:34:43 2026 GMT Not After : Jul 19 11:34:43 2028 GMT Subject: CN=438dc0e7-cfde-42a3-8d42-dbe8a5100cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cd:64:64:e5:67:d6:38:f9:45:3e:89:9d:4f: 2f:9f:aa:fd:4f:c7:83:18:17:b9:12:c7:30:08:25: 26:4a:43:08:a6:90:8b:4b:f1:b7:e0:da:80:59:1a: 41:12:06:3f:dc:96:bb:3d:9d:71:15:5e:ee:61:14: c9:54:3f:40:c7:40:e3:74:18:8a:e9:09:9e:2b:f8: 10:6e:6e:1e:03:98:f7:a6:49:85:55:3c:28:70:04: e3:11:5b:bb:8f:60:88:38:1f:29:ee:c7:b8:7b:8e: d4:98:4a:33:87:4d:cd:fc:62:c6:ba:c5:19:d2:a6: 0f:1a:d7:2d:74:0b:e9:af:b8:99:5b:2a:a9:cc:c8: 67:0c:45:b7:73:58:e7:70:78:a6:6a:2d:f4:5f:a4: 66:4d:5a:66:3e:ae:3e:98:aa:41:a9:5e:2b:23:41: a5:d4:2c:09:60:9a:7f:d8:26:68:0a:d6:62:24:1c: 1d:66:3d:bf:f7:a8:b9:46:f2:9d:af:c0:09:ef:25: 31:b2:d4:0c:47:68:4a:45:27:28:1c:8c:3f:9b:ff: ef:22:80:b5:90:d1:bf:d0:15:63:e0:0a:c1:af:4e: 9a:e3:dc:69:66:3f:40:9f:cd:0f:09:bf:b8:3b:81: 0b:3e:cb:13:ab:60:63:76:b6:68:60:d9:de:e4:22: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:13:B9:CB:40:A9:91:8A:34:0B:1B:A1:DF:28:EE:59:CB:4E:95:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.156.132.0/24 IPv6: 2602:f3fa::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402415 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:82:75:ce:eb:2d:9e:c2:bf:bc:68:64:fc:22:11:82:0c:62: d4:24:26:66:da:ed:bd:6d:12:41:14:a7:a8:8d:37:76:3b:26: da:89:3e:29:98:7b:ea:e5:a5:1e:34:83:1c:aa:e2:59:1a:59: 4f:fa:e2:90:91:f9:ac:f1:65:58:e4:5f:6f:5f:fc:3f:a6:b4: bb:a4:3b:0c:1d:51:d0:40:0e:1d:99:23:e1:08:1b:11:72:d3: 3f:ed:d3:8a:39:7f:1d:e1:77:70:68:6e:79:e4:f7:ef:c5:ef: c8:f4:e1:bc:4e:81:7e:38:74:1a:48:12:bb:55:11:3a:eb:5a: 0b:d0:95:ec:98:e7:a9:bb:7f:1c:c1:48:13:98:fb:21:a9:af: e8:48:41:ed:9f:74:23:d9:48:23:02:03:b2:f9:15:90:50:9e: 3a:30:df:9e:ef:83:ae:ef:f1:c5:6c:5d:91:02:cb:8b:ae:86: 1d:09:dc:7c:4d:eb:ad:36:8b:5a:15:8e:f5:a6:e9:d2:98:44: da:b6:87:8d:f3:8f:0a:6c:1c:13:f8:b6:10:3a:69:5e:98:61: 7f:55:96:7f:bb:d0:98:e8:d7:ca:bb:ab:a8:8b:a3:d8:b5:fb: 1c:64:59:d4:54:f1:89:5a:18:4b:22:db:90:18:a7:25:4c:33: ed:a1:89:e4 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2Gap1W3DFNBD8T/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDQxNjExMzQ0M1oXDTI4MDcxOTExMzQ0M1owLzEtMCsGA1UEAxMk NDM4ZGMwZTctY2ZkZS00MmEzLThkNDItZGJlOGE1MTAwY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM1kZOVn1jj5RT6JnU8vn6r9T8eDGBe5Escw CCUmSkMIppCLS/G34NqAWRpBEgY/3Ja7PZ1xFV7uYRTJVD9Ax0DjdBiK6QmeK/gQ bm4eA5j3pkmFVTwocATjEVu7j2CIOB8p7se4e47UmEozh03N/GLGusUZ0qYPGtct dAvpr7iZWyqpzMhnDEW3c1jncHimai30X6RmTVpmPq4+mKpBqV4rI0Gl1CwJYJp/ 2CZoCtZiJBwdZj2/96i5RvKdr8AJ7yUxstQMR2hKRScoHIw/m//vIoC1kNG/0BVj 4ArBr06a49xpZj9An80PCb+4O4ELPssTq2BjdrZoYNne5CInawIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJYTuctAqZGKNAsbod8o7lnLTpXBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MzhkYzBlNy1jZmRlLTQyYTMtOGQ0Mi1kYmU4YTUxMDBjZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQzOGRjMGU3LWNmZGUtNDJhMy04 ZDQyLWRiZThhNTEwMGNkOS80MzhkYzBlNy1jZmRlLTQyYTMtOGQ0Mi1kYmU4YTUx MDBjZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnIQwDgQCAAIwCAMGACYC8/oAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYj7zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzgnXO6y2ewr+8aGT8IhGCDGLU JCZm2u29bRJBFKeojTd2OybaiT4pmHvq5aUeNIMcquJZGllP+uKQkfms8WVY5F9v X/w/prS7pDsMHVHQQA4dmSPhCBsRctM/7dOKOX8d4XdwaG555Pfvxe/I9OG8ToF+ OHQaSBK7VRE661oL0JXsmOepu38cwUgTmPshqa/oSEHtn3Qj2UgjAgOy+RWQUJ46 MN+e74Ou7/HFbF2RAsuLroYdCdx8TeutNotaFY71punSmETatoeN848KbBwT+LYQ OmlemGF/VZZ/u9CY6NfKu6uoi6PYtfscZFnUVPGJWhhLItuQGKclTDPtoYnk -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:11 2026 by rpki-client