$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer File: 1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer (raw, json) Hash identifier: +LjZoKNAquA7vLbiUZR3GUcsk1T2zHHAPCb5WvO2XpE= Subject key identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D6ED2D4E5FA30E02F02971460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Apr 2026 00:45:17 +0000 Certificate not after: Tue 11 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 401557 IP: 23.132.76.0/24 IP: 142.248.62.0/24 IP: 2620:d2:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:d2:d4:e5:fa:30:e0:2f:02:97:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 8 00:45:17 2026 GMT Not After : Jul 11 00:45:17 2028 GMT Subject: CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:39:c7:2b:8e:fd:71:fb:b8:07:2c:c9:95: 82:63:85:e6:a2:24:78:7f:7a:3e:97:14:1d:62:f6: fa:e1:86:1e:e0:17:fc:48:50:8d:50:f2:8f:e8:f6: d7:a2:69:3b:bd:d7:68:ab:07:8a:5c:37:64:28:b9: 9a:d1:c2:b6:36:6e:fd:a3:2f:9a:01:d6:9a:d4:07: 63:40:dc:10:08:14:7c:d9:10:01:61:d1:9f:66:50: df:cc:d0:d3:53:2a:62:10:4d:6a:e8:44:ae:67:ff: 75:1b:2c:3a:43:3f:bb:1f:d3:52:74:f5:18:6f:44: d6:8d:a5:61:32:f5:1a:fb:31:7e:72:8d:5c:06:02: 6f:aa:1d:99:a8:6c:4c:77:66:82:1a:0b:85:76:c5: e6:52:6f:4e:ce:23:38:2e:68:9b:dc:70:32:84:0f: b1:6b:4b:58:2a:5e:19:c6:ba:43:f9:8f:77:2e:f2: 72:13:66:8c:03:71:13:66:5d:b4:ad:42:80:68:80: e5:30:78:e8:78:0c:75:f9:6c:dc:06:b6:8c:24:0b: 8a:68:fe:59:b7:d2:6d:00:49:7c:8e:55:9c:22:8b: b2:6a:b9:03:e9:21:22:cb:04:82:e5:73:10:70:a8: 37:66:d6:93:ce:0e:dc:f7:33:6b:60:5a:c7:09:16: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.76.0/24 142.248.62.0/24 IPv6: 2620:d2:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7a:09:d5:0b:c8:cf:90:c8:47:fd:4b:94:2c:43:8d:d9:e6: c3:29:5d:ed:d7:0c:ea:89:46:93:9b:66:79:9d:eb:7f:37:ba: 4a:72:05:cf:69:65:4e:c4:e6:60:ff:36:2e:b5:e3:78:4c:9a: 7c:56:7c:34:08:d5:98:2f:11:33:89:b0:dc:5f:24:d4:14:c9: 8a:55:e8:82:fa:48:53:c1:79:29:e4:90:3d:43:56:a0:d8:50: c1:41:aa:af:d6:fc:2b:49:0d:e5:62:2f:2b:93:6d:8d:a1:de: 77:3b:36:47:b8:92:c0:39:fc:27:b0:2e:94:26:c5:28:cd:dd: 71:42:12:d2:9e:4f:67:31:ec:1a:1d:5d:b1:bd:af:4b:df:36: c8:b8:21:09:c0:57:b3:0b:ee:36:c1:28:a0:a1:b4:0a:70:58: 5a:02:f2:8f:a0:d9:27:42:55:0d:09:ec:eb:db:a8:a1:50:41: 79:f5:59:33:01:ce:d5:5a:4e:0d:8e:0d:7c:64:64:cc:f5:18: b8:34:13:17:f6:aa:78:4d:9d:41:4d:fe:3d:c3:35:f0:89:24: 9d:a4:6a:9e:e3:48:5f:11:3d:8e:4c:3a:68:a0:07:a8:90:7d: 40:51:c0:28:5c:08:76:3c:d9:da:e6:6b:a4:e5:55:0e:8e:15: 18:08:f0:ce -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE1u0tTl+jDgLwKXFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQwODAwNDUxN1oXDTI4MDcxMTAwNDUxN1owLzEtMCsGA1UEAxMk MWRlOWQ4ZjAtOGIxZC00ODBkLWJjOWUtNzcwY2VjZDRjOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Q5xyuO/XH7uAcsyZWCY4XmoiR4f3o+lxQd Yvb64YYe4Bf8SFCNUPKP6PbXomk7vddoqweKXDdkKLma0cK2Nm79oy+aAdaa1Adj QNwQCBR82RABYdGfZlDfzNDTUypiEE1q6ESuZ/91Gyw6Qz+7H9NSdPUYb0TWjaVh MvUa+zF+co1cBgJvqh2ZqGxMd2aCGguFdsXmUm9OziM4Lmib3HAyhA+xa0tYKl4Z xrpD+Y93LvJyE2aMA3ETZl20rUKAaIDlMHjoeAx1+WzcBraMJAuKaP5Zt9JtAEl8 jlWcIouyarkD6SEiywSC5XMQcKg3ZtaTzg7c9zNrYFrHCRZShQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFISzrw9X3lesOm5UBW8dJoi7hymfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x ZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNkNGM4ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFkZTlkOGYwLThiMWQtNDgwZC1i YzllLTc3MGNlY2Q0YzhmMi8xZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNk NGM4ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXhEwDBACO+D4wDwQCAAIwCQMHBCYgANIgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGIJUwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADHoJ1QvIz5DIR/1L lCxDjdnmwyld7dcM6olGk5tmeZ3rfze6SnIFz2llTsTmYP82LrXjeEyafFZ8NAjV mC8RM4mw3F8k1BTJilXogvpIU8F5KeSQPUNWoNhQwUGqr9b8K0kN5WIvK5NtjaHe dzs2R7iSwDn8J7AulCbFKM3dcUIS0p5PZzHsGh1dsb2vS982yLghCcBXswvuNsEo oKG0CnBYWgLyj6DZJ0JVDQns69uooVBBefVZMwHO1VpODY4NfGRkzPUYuDQTF/aq eE2dQU3+PcM18IkknaRqnuNIXxE9jkw6aKAHqJB9QFHAKFwIdjzZ2uZrpOVVDo4V GAjwzg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:12:47 2026 by rpki-client