$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer File: aed2676f-2a52-4e10-9b06-0b423a5503c5.cer (raw, json) Hash identifier: 2G6qGsmrbhyA2SySKIxMdboCJaXtwURQFUtiQ9lvFv8= Subject key identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584D6672C7C2AB814BA53B67A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Apr 2026 00:45:17 +0000 Certificate not after: Sat 08 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 11452 IP: 146.203.0.0/16 IP: 2620:12b:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:72:c7:c2:ab:81:4b:a5:3b:67:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 5 00:45:17 2026 GMT Not After : Jul 8 00:45:17 2028 GMT Subject: CN=aed2676f-2a52-4e10-9b06-0b423a5503c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6b:2b:13:1c:28:b0:94:f7:62:bf:27:d5:1b: 79:d1:36:d8:ee:e9:cb:0f:15:1f:24:a7:36:7d:8d: 8e:93:43:87:11:bd:c7:ea:69:13:07:91:90:71:83: 63:d9:4d:11:38:a5:ed:49:8a:6d:0a:3f:09:e2:30: a0:e7:01:6f:e0:76:59:df:3c:3b:8c:29:0c:9e:8c: 63:fa:9a:12:79:9d:2d:13:41:c5:fb:1f:02:f1:49: ea:53:61:94:6d:9d:04:06:64:9f:37:15:41:bd:57: 04:7f:08:30:ba:ae:91:d6:6d:64:a9:df:dc:8e:63: ca:7a:e4:90:b1:0f:7d:35:d8:b2:c6:87:64:82:ce: a7:f1:95:ab:9d:c9:eb:4f:b6:a7:b9:a9:56:56:9c: c6:75:af:a4:f5:55:d9:b7:00:78:de:fd:5d:23:20: fb:ed:44:87:f5:4e:46:c9:51:35:72:82:78:da:d0: 46:39:ba:12:d6:05:6b:da:79:c8:23:ce:9d:58:54: 85:9b:af:3d:9b:99:26:3d:71:e7:5b:01:ce:d8:ea: 42:b8:29:9c:bf:d2:d7:8c:11:a9:71:bd:55:c5:dd: 90:ac:51:f5:1c:9a:6c:f6:35:17:2a:07:e1:22:90: 46:a9:c7:5b:38:72:90:30:2a:94:83:6d:3c:96:f9: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 146.203.0.0/16 IPv6: 2620:12b:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:16:bd:fa:1b:50:80:92:fa:92:f1:be:16:c9:40:ca:1e:e5: e7:09:d1:c8:3e:64:9e:2d:52:a9:a5:af:ca:c2:10:a7:72:1b: 56:16:85:3c:b4:b1:c7:b1:7f:7c:57:4e:c3:b7:42:59:37:7f: 8f:6e:1b:e3:68:40:b2:d2:f5:86:ab:6a:73:11:54:03:79:9b: 30:fc:61:dc:5e:30:55:3b:c2:72:6b:51:57:c1:d0:87:07:4e: e7:21:e3:74:bc:05:0a:83:ae:53:53:2c:30:1f:f2:22:69:67: 31:ef:ab:5e:95:c3:09:ca:c0:57:36:c1:d2:64:53:47:80:ad: 3c:1b:21:e9:eb:01:11:2a:17:2c:e4:d0:d2:06:fa:31:77:41: 15:e8:1d:33:33:7a:c0:7c:eb:1c:62:71:55:42:ca:21:db:9f: 00:f0:6f:94:8d:d2:92:61:c5:01:f2:76:ab:6a:aa:64:16:67: 82:7c:c8:77:fe:b1:5b:08:23:6a:46:77:8c:2b:a2:e7:b7:eb: 4e:fd:08:e2:4f:bf:02:aa:43:3f:d4:43:fb:0f:6f:16:cf:b0: db:2c:de:96:4e:7f:14:f5:17:1e:a8:94:a8:ed:85:2f:85:0c: f0:8f:f9:ca:af:3d:17:39:49:b3:25:96:49:ac:30:f0:35:dc: ff:61:8f:9f -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE1mcsfCq4FLpTtnqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDQwNTAwNDUxN1oXDTI4MDcwODAwNDUxN1owLzEtMCsGA1UEAxMk YWVkMjY3NmYtMmE1Mi00ZTEwLTliMDYtMGI0MjNhNTUwM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72srExwosJT3Yr8n1Rt50TbY7unLDxUfJKc2 fY2Ok0OHEb3H6mkTB5GQcYNj2U0ROKXtSYptCj8J4jCg5wFv4HZZ3zw7jCkMnoxj +poSeZ0tE0HF+x8C8UnqU2GUbZ0EBmSfNxVBvVcEfwgwuq6R1m1kqd/cjmPKeuSQ sQ99Ndiyxodkgs6n8ZWrncnrT7anualWVpzGda+k9VXZtwB43v1dIyD77USH9U5G yVE1coJ42tBGOboS1gVr2nnII86dWFSFm689m5kmPXHnWwHO2OpCuCmcv9LXjBGp cb1Vxd2QrFH1HJps9jUXKgfhIpBGqcdbOHKQMCqUg208lvlvUQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMEZJdqyuwXBt3WWwScW/Gx3r3Z+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h ZWQyNjc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQyM2E1NTAzYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2FlZDI2NzZmLTJhNTItNGUxMC05 YjA2LTBiNDIzYTU1MDNjNS9hZWQyNjc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQyM2E1 NTAzYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAsEAgABMAUDAwCSyzAOBAIAAjAIAwYAJiABK8AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLLwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAixa9+htQgJL6kvG+FslAyh7l5wnR yD5kni1SqaWvysIQp3IbVhaFPLSxx7F/fFdOw7dCWTd/j24b42hAstL1hqtqcxFU A3mbMPxh3F4wVTvCcmtRV8HQhwdO5yHjdLwFCoOuU1MsMB/yImlnMe+rXpXDCcrA VzbB0mRTR4CtPBsh6esBESoXLOTQ0gb6MXdBFegdMzN6wHzrHGJxVULKIdufAPBv lI3SkmHFAfJ2q2qqZBZngnzId/6xWwgjakZ3jCui57frTv0I4k+/AqpDP9RD+w9v Fs+w2yzelk5/FPUXHqiUqO2FL4UM8I/5yq89FzlJsyWWSaww8DXc/2GPnw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:35 2026 by rpki-client