$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer File: b8a29c46-e0f1-4edc-988a-9420affbc339.cer (raw, json) Hash identifier: lwguNerhZmb0ZdeL7k++BmLlIgQzt5UAgxyoHWc6dik= Subject key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D80F847C7EE92E72669387400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 12:45:18 +0000 Certificate not after: Mon 17 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 13598 IP: 170.2.0.0/16 IP: 2620:21:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:f8:47:c7:ee:92:e7:26:69:38:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 14 12:45:18 2026 GMT Not After : Jul 17 12:45:18 2028 GMT Subject: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:90:d7:17:c0:56:f6:e7:76:1d:06:3c:6c: 42:a9:03:e3:b6:45:2a:cd:cc:b1:24:5c:f9:4b:8a: 12:86:91:07:6a:8c:67:d6:18:ec:58:87:29:ea:85: ea:6d:21:b0:1b:67:42:19:74:ad:ef:29:6c:85:f8: 6d:d1:27:6a:71:fc:e3:76:0b:a5:2c:e4:50:23:9a: 37:3c:9c:c2:41:8b:8e:9d:bd:3d:5f:16:f3:a2:69: d5:ca:f6:3a:f9:12:90:35:ed:b3:d4:fa:8a:d7:2d: 53:99:9f:db:2d:46:1c:5a:8c:05:55:0e:95:06:e9: 90:26:8a:a1:ee:c5:cd:2e:13:d9:ff:9a:24:81:f5: 19:16:72:d1:02:be:da:af:68:0f:72:1f:79:3e:14: 5a:8b:24:0d:8c:f6:f5:3f:9f:b0:fc:81:15:fc:c9: 3d:d4:57:79:22:08:1d:37:d8:bb:69:93:4e:22:a1: 10:d8:87:79:68:46:92:dd:3c:8f:d5:88:ce:af:7a: 36:1c:35:38:a6:03:0d:b8:3a:47:c5:8f:f6:3d:b3: 3b:9e:6b:d6:92:ac:7f:ed:a4:24:7a:63:9f:96:ce: 66:eb:9a:18:eb:5b:80:b7:c7:c0:8e:04:2a:50:bf: a4:0e:10:47:de:b6:ad:b8:14:e4:db:9b:1a:93:ae: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 170.2.0.0/16 IPv6: 2620:21:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13598 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0b:a2:be:cb:8e:c6:3c:8f:70:32:7b:8d:91:f8:74:39:25: f0:28:56:db:92:bf:05:98:bf:8a:53:33:e6:f3:28:4b:65:bd: c7:6b:30:a7:ee:a3:df:64:2c:36:f7:df:20:bb:52:61:a5:e9: 82:44:fd:51:89:35:2d:90:9d:3a:5c:6a:fc:06:c7:ff:cf:62: 96:c4:97:27:54:fd:2a:5a:94:1e:1c:39:af:5f:ed:78:f6:72: 53:57:c6:ab:c4:90:71:33:2b:f7:be:dd:7d:19:56:10:e2:58: 56:78:2d:cb:a7:67:c8:6f:96:15:f3:9b:44:d6:df:e7:bb:94: 94:19:15:4d:03:f9:b6:e4:bf:9b:07:15:5a:20:7e:54:1c:20: c6:29:9a:46:db:41:c3:a3:95:ac:5a:59:eb:57:3e:ad:e1:23: 8c:4a:33:5d:73:ba:b6:66:e8:92:5a:6b:7c:e1:a7:57:e3:6d: 8d:2f:4b:3e:04:c7:92:ac:61:da:10:22:67:06:cb:71:ec:51: 81:d7:86:a6:f1:cc:73:55:97:43:30:83:fb:75:10:80:48:3e: 40:d5:6a:af:ec:5d:8e:18:6a:7b:bc:28:39:18:29:f2:15:ba: 08:e1:6c:8e:bb:26:e1:bc:88:59:0d:6d:7e:05:e4:ad:30:07: a0:2c:96:2d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2A+EfH7pLnJmk4dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDQxNDEyNDUxOFoXDTI4MDcxNzEyNDUxOFowLzEtMCsGA1UEAxMk YjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJjMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJGQ1xfAVvbndh0GPGxCqQPjtkUqzcyxJFz5 S4oShpEHaoxn1hjsWIcp6oXqbSGwG2dCGXSt7ylshfht0SdqcfzjdgulLORQI5o3 PJzCQYuOnb09XxbzomnVyvY6+RKQNe2z1PqK1y1TmZ/bLUYcWowFVQ6VBumQJoqh 7sXNLhPZ/5okgfUZFnLRAr7ar2gPch95PhRaiyQNjPb1P5+w/IEV/Mk91Fd5Iggd N9i7aZNOIqEQ2Id5aEaS3TyP1YjOr3o2HDU4pgMNuDpHxY/2PbM7nmvWkqx/7aQk emOfls5m65oY61uAt8fAjgQqUL+kDhBH3ratuBTk25sak67VLwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK5bkQoa92oK+chhurksgK5B4HkUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i OGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2I4YTI5YzQ2LWUwZjEtNGVkYy05 ODhhLTk0MjBhZmZiYzMzOS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZm YmMzMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCqAjAPBAIAAjAJAwcAJiAAIaAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjUeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACQLor7LjsY8j3Aye42R+HQ5JfAo VtuSvwWYv4pTM+bzKEtlvcdrMKfuo99kLDb33yC7UmGl6YJE/VGJNS2QnTpcavwG x//PYpbElydU/SpalB4cOa9f7Xj2clNXxqvEkHEzK/e+3X0ZVhDiWFZ4LcunZ8hv lhXzm0TW3+e7lJQZFU0D+bbkv5sHFVogflQcIMYpmkbbQcOjlaxaWetXPq3hI4xK M11zurZm6JJaa3zhp1fjbY0vSz4Ex5KsYdoQImcGy3HsUYHXhqbxzHNVl0Mwg/t1 EIBIPkDVaq/sXY4Yanu8KDkYKfIVugjhbI67JuG8iFkNbX4F5K0wB6Asli0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:07 2026 by rpki-client