$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069.cer File: d46bff86-8800-464d-8b12-5b1e18a49069.cer (raw, json) Hash identifier: 3nKuqTgddYgwvqJx9zUnL2TKk8x44oM0mGU+/+vDOBE= Subject key identifier: C8:A5:79:0C:10:37:CF:92:20:88:7B:F6:69:BE:0C:B5:DA:B8:4B:4C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D7302DB0773196C915F44EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/d46bff86-8800-464d-8b12-5b1e18a49069.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Apr 2026 12:45:17 +0000 Certificate not after: Wed 12 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 20036 IP: 204.126.18.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:02:db:07:73:19:6c:91:5f:44:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 9 12:45:17 2026 GMT Not After : Jul 12 12:45:17 2028 GMT Subject: CN=d46bff86-8800-464d-8b12-5b1e18a49069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:83:a2:7f:d8:62:85:d5:88:47:47:52:df: ec:7c:7d:5f:39:7d:86:29:d6:19:6d:86:ca:80:04: 71:86:4a:0c:16:e0:2d:f9:4e:a9:65:7e:91:92:e0: f3:ca:cd:ba:9c:9c:f4:ac:f2:fa:23:3b:8f:d4:c4: 39:99:5f:a3:8f:83:79:bf:d3:db:7a:ae:3a:f3:88: 07:da:51:aa:3c:a6:c4:a1:a7:d8:2f:a7:77:9b:04: 44:bc:c6:44:fe:fb:de:94:49:3f:75:b5:ce:2a:a0: da:39:7e:3e:5d:91:57:d8:f9:c4:24:b7:fb:3d:f4: 4e:e9:13:2e:8d:d7:be:d1:2e:b4:92:4a:a4:ba:c3: 0a:dc:48:c1:e7:96:32:b9:0b:b5:8f:d8:d1:98:4b: de:9c:e2:da:a7:e9:0e:9c:c3:94:f3:8c:2e:21:24: 48:6f:e5:54:6a:7d:59:62:0e:3c:90:1a:8e:85:81: 60:da:ad:a0:81:aa:af:d9:d0:c3:84:7a:a7:b3:eb: 9b:ed:11:0e:fb:93:49:a3:ae:da:b7:9b:c0:98:35: 56:95:3f:94:20:56:ad:79:7e:ad:d1:7c:b2:e2:18: 4d:9b:78:31:b4:08:01:7f:8f:95:e5:01:82:ae:c2: 70:c1:0c:c0:cf:16:d9:72:fe:14:ff:81:32:16:6d: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A5:79:0C:10:37:CF:92:20:88:7B:F6:69:BE:0C:B5:DA:B8:4B:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46bff86-8800-464d-8b12-5b1e18a49069/d46bff86-8800-464d-8b12-5b1e18a49069.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 204.126.18.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20036 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:86:68:0d:17:7f:0c:0b:bc:c9:ee:f6:5d:0b:07:0f:e9:2a: 89:62:4c:b5:6d:96:e0:3f:3e:d3:0b:36:21:c4:99:be:41:82: f3:61:d4:d1:8f:f4:66:94:38:09:12:22:f2:4d:a5:2c:c3:6f: 2f:05:0c:ab:0a:83:f4:6c:4a:36:db:4f:f3:a3:22:f9:f7:37: 17:33:63:dc:0b:da:d3:c1:76:53:51:ac:fc:ad:9c:06:aa:b4: 3e:f5:ab:11:75:67:c5:39:99:00:99:7e:90:0d:06:df:c2:66: 02:a3:70:92:94:8d:fe:96:3d:ca:d2:29:29:b2:a2:80:a8:91: 45:a8:2b:38:42:6d:78:f4:f8:5b:92:e7:5c:d4:6c:c9:c8:b3: 2b:45:d0:bf:35:1d:d0:fb:50:90:74:61:68:f0:4b:22:d3:00: 5d:f1:e0:2c:7c:f7:78:9a:a4:60:fc:28:df:dd:a3:d9:71:ce: 41:bb:52:91:ed:9e:6b:8e:30:17:7c:30:b7:74:26:9f:3b:6c: 31:45:64:37:e4:77:44:de:e9:9c:68:2f:4b:8d:96:30:99:83: cf:67:f8:3d:9a:f1:0e:22:51:b9:23:2d:d6:b7:38:ef:ec:8c: b2:ad:a2:81:d5:99:a8:25:97:79:c7:39:3d:f9:28:9d:e2:18: ac:42:71:e0 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE1zAtsHcxlskV9E6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDQwOTEyNDUxN1oXDTI4MDcxMjEyNDUxN1owLzEtMCsGA1UEAxMk ZDQ2YmZmODYtODgwMC00NjRkLThiMTItNWIxZTE4YTQ5MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rWDon/YYoXViEdHUt/sfH1fOX2GKdYZbYbK gARxhkoMFuAt+U6pZX6RkuDzys26nJz0rPL6IzuP1MQ5mV+jj4N5v9Pbeq4684gH 2lGqPKbEoafYL6d3mwREvMZE/vvelEk/dbXOKqDaOX4+XZFX2PnEJLf7PfRO6RMu jde+0S60kkqkusMK3EjB55YyuQu1j9jRmEvenOLap+kOnMOU84wuISRIb+VUan1Z Yg48kBqOhYFg2q2ggaqv2dDDhHqns+ub7REO+5NJo67at5vAmDVWlT+UIFateX6t 0Xyy4hhNm3gxtAgBf4+V5QGCrsJwwQzAzxbZcv4U/4EyFm0dXQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFMileQwQN8+SIIh79mm+DLXauEtMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k NDZiZmY4Ni04ODAwLTQ2NGQtOGIxMi01YjFlMThhNDkwNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Q0NmJmZjg2LTg4MDAtNDY0ZC04 YjEyLTViMWUxOGE0OTA2OS9kNDZiZmY4Ni04ODAwLTQ2NGQtOGIxMi01YjFlMThh NDkwNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMfhIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TkQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAR4ZoDRd/DAu8ye72XQsHD+kqiWJMtW2W4D8+0ws2IcSZvkGC 82HU0Y/0ZpQ4CRIi8k2lLMNvLwUMqwqD9GxKNttP86Mi+fc3FzNj3Ava08F2U1Gs /K2cBqq0PvWrEXVnxTmZAJl+kA0G38JmAqNwkpSN/pY9ytIpKbKigKiRRagrOEJt ePT4W5LnXNRsycizK0XQvzUd0PtQkHRhaPBLItMAXfHgLHz3eJqkYPwo392j2XHO QbtSke2ea44wF3wwt3QmnztsMUVkN+R3RN7pnGgvS42WMJmDz2f4PZrxDiJRuSMt 1rc47+yMsq2igdWZqCWXecc5PfkoneIYrEJx4A== -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:21 2026 by rpki-client