$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer File: 6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer (raw, json) Hash identifier: sucD53wIvSLPfVxDyQGpVEZIO8dv4M6vMXrdZBRnl5Q= Subject key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D5CAD61511E77E42428749F74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Apr 2026 12:45:17 +0000 Certificate not after: Tue 04 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 3738 AS: 36102 IP: 147.141.0.0/16 IP: 155.108.0.0/16 IP: 161.194.0.0/16 IP: 192.250.32.0 -- 192.250.191.255 IP: 2620:13a:a000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:ad:61:51:1e:77:e4:24:28:74:9f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 1 12:45:17 2026 GMT Not After : Jul 4 12:45:17 2028 GMT Subject: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:87:ef:85:e1:44:46:74:f1:0b:02:4f:88:8b: 3c:34:55:d5:8b:a7:2d:0a:b2:bc:74:c9:5d:54:1f: 5d:f6:e2:12:d0:1f:5f:80:eb:76:04:fd:27:11:d6: 76:7e:1c:db:9e:af:44:2f:1a:21:9f:38:d4:86:fa: 19:d5:b5:e4:64:eb:1c:d7:a3:ff:38:e9:12:b4:1c: 85:89:78:73:ef:93:0e:0c:d9:ea:7b:e1:9d:2b:70: 59:47:ab:2c:9c:32:32:22:5c:42:16:35:96:8b:cf: 55:c5:ff:3e:e7:fb:a4:7d:f3:8c:56:9c:c7:f0:2a: 53:d0:2d:cb:19:84:22:79:9c:76:12:e7:c5:b7:b9: 73:82:97:ce:ce:bf:df:db:ca:98:0b:01:34:c6:6f: 4b:8a:03:6b:53:01:5d:4e:2c:40:b6:8a:0c:06:64: f8:9b:d1:47:0d:88:c4:d4:33:13:7c:0f:9c:cc:d0: d3:2a:1d:85:04:ec:4f:d8:f3:59:8f:7e:6a:7a:d4: 2d:45:a7:1b:7e:1c:7f:61:0c:27:b2:4f:d7:df:1c: 8c:24:0c:41:89:12:77:79:0f:35:30:58:17:45:f3: 66:a7:9b:6e:59:f0:4f:0d:6f:1d:24:5d:23:77:33: 8e:cc:de:2f:97:36:ab:44:57:4c:fd:ba:76:29:f5: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 147.141.0.0/16 155.108.0.0/16 161.194.0.0/16 192.250.32.0-192.250.191.255 IPv6: 2620:13a:a000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3738 36102 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bc:00:08:46:47:fb:72:97:b2:44:f7:08:b1:18:d8:9b:05: f6:54:0d:6b:20:61:ee:67:40:12:51:4d:45:2b:3b:db:9a:c3: 9a:21:94:c0:10:38:7b:46:a5:82:b4:ec:d2:d8:18:cf:9a:2e: 6e:9e:14:7d:28:89:44:69:cf:37:84:8b:de:b4:d9:55:0e:0b: ca:6b:55:ca:0d:82:57:41:f0:c2:c0:ee:29:13:69:24:ba:c9: 90:61:32:d7:66:1e:50:8c:73:82:d1:3f:82:7a:6c:69:e3:43: 10:4b:cd:61:e7:e6:f2:65:e2:b6:54:cd:fc:a2:80:da:05:91: d8:1d:6e:ba:08:24:a3:ab:b6:e1:90:96:fe:f6:cc:32:16:72: f5:06:5d:d8:93:5d:d2:51:d8:b9:4c:74:ed:81:ac:77:4b:bd: a1:4b:bc:4e:18:f9:30:73:44:95:4d:aa:7a:0d:8e:68:a0:80: 02:b0:ea:2a:1e:af:06:95:9f:d2:22:bd:db:d7:d5:62:a0:78: c6:0a:bc:8e:d0:01:85:c3:de:c6:41:3d:ce:1b:8f:8a:21:7e: 4e:63:e1:5f:d4:19:33:3f:5a:92:f4:7d:87:8d:4b:97:c2:d0: 08:c8:b2:f3:c5:9d:04:44:88:b1:89:50:69:5e:24:c5:6a:a1: 71:8b:92:cd -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWE1crWFRHnfkJCh0n3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDQwMTEyNDUxN1oXDTI4MDcwNDEyNDUxN1owLzEtMCsGA1UEAxMk NmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhlYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04fvheFERnTxCwJPiIs8NFXVi6ctCrK8dMld VB9d9uIS0B9fgOt2BP0nEdZ2fhzbnq9ELxohnzjUhvoZ1bXkZOsc16P/OOkStByF iXhz75MODNnqe+GdK3BZR6ssnDIyIlxCFjWWi89Vxf8+5/ukffOMVpzH8CpT0C3L GYQieZx2EufFt7lzgpfOzr/f28qYCwE0xm9LigNrUwFdTixAtooMBmT4m9FHDYjE 1DMTfA+czNDTKh2FBOxP2PNZj35qetQtRacbfhx/YQwnsk/X3xyMJAxBiRJ3eQ81 MFgXRfNmp5tuWfBPDW8dJF0jdzOOzN4vlzarRFdM/bp2KfURXwIDAQABo4IERjCC BEIwHQYDVR0OBBYEFIcU5UX2bVyIPYZL2OFMELF2RBMnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZiYmMwMTBlLWEzZjctNGY2ZS05 ZDZjLWRhZTU1YTY4ZWMwMC82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2 OGVjMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCMEAgABMB0DAwCTjQMDAJtsAwMAocIwDAMEBcD6IAMEBsD6gDAO BAIAAjAIAwYAJiABOqAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICDpoCAwCNBjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAavAAIRkf7cpeyRPcIsRjYmwX2VA1rIGHuZ0ASUU1FKzvbmsOaIZTA EDh7RqWCtOzS2BjPmi5unhR9KIlEac83hIvetNlVDgvKa1XKDYJXQfDCwO4pE2kk usmQYTLXZh5QjHOC0T+Cemxp40MQS81h5+byZeK2VM38ooDaBZHYHW66CCSjq7bh kJb+9swyFnL1Bl3Yk13SUdi5THTtgax3S72hS7xOGPkwc0SVTap6DY5ooIACsOoq Hq8GlZ/SIr3b19VioHjGCryO0AGFw97GQT3OG4+KIX5OY+Ff1BkzP1qS9H2HjUuX wtAIyLLzxZ0ERIixiVBpXiTFaqFxi5LN -----END CERTIFICATE-----Generated at Fri Apr 17 16:31:19 2026 by rpki-client