$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer File: 252bb797-8be3-4178-8149-ed86949ba85a.cer (raw, json) Hash identifier: BhWlHsHDRzzUDBhzPCVSU4cZPlkx4CPnWlBnW6U4nlE= Subject key identifier: 99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D7F92EE2A12E63132A045A4C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 00:45:17 +0000 Certificate not after: Mon 17 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 24.50.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:92:ee:2a:12:e6:31:32:a0:45:a4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 14 00:45:17 2026 GMT Not After : Jul 17 00:45:17 2028 GMT Subject: CN=252bb797-8be3-4178-8149-ed86949ba85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:b5:df:9e:80:77:cb:8f:32:d8:6a:4d:b2: 2b:70:2b:9e:70:95:0d:9a:7b:34:f5:8a:d8:56:34: 3e:33:32:a6:ec:2d:b5:ce:84:81:02:1c:40:94:81: d5:83:dc:97:88:2d:43:77:56:e5:d4:40:b8:c5:25: 12:37:2c:28:ca:09:35:7b:43:00:da:14:d4:95:34: 08:36:d8:bf:5e:27:70:98:65:66:a0:d2:db:dc:4a: 83:92:b7:b7:b5:06:48:ec:5e:14:41:5a:07:cf:51: de:26:40:ff:2b:33:ce:69:97:00:65:3f:94:96:49: 01:5d:2d:68:c0:81:7a:f1:dd:20:b1:88:4d:cc:9a: ca:00:d0:b1:f6:72:66:af:83:3f:da:cb:93:58:9a: 36:13:ea:38:96:71:18:31:24:10:cb:eb:e4:3c:a4: f1:f8:19:d1:04:7f:96:62:f6:22:c2:91:3e:52:54: 87:8a:61:4f:84:c2:f9:1f:4f:99:ef:7f:c4:df:b6: 26:fa:08:d1:ae:01:17:f7:01:c0:3f:4a:cd:9c:89: ed:72:74:1c:bc:79:42:f4:e7:2d:37:e3:ee:3d:4e: f8:b8:07:e8:6a:07:c1:dd:6e:55:99:78:51:94:d5: 3c:d8:22:2a:dd:2e:01:ae:d9:e0:71:df:3b:27:f3: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 24.50.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:04:f2:7a:8c:c1:ef:66:ef:16:d1:f0:b6:60:d0:75:31:f5: c8:59:79:8b:e0:d2:21:3e:d8:13:14:a0:6e:ed:99:40:3f:a4: 33:64:c4:1f:a2:22:9c:50:f8:04:8c:88:96:f1:f6:19:ce:72: be:75:36:1b:69:97:bd:9b:2a:4f:41:fd:03:58:9c:7d:e4:1b: 22:46:82:33:13:b8:ea:d7:3a:d0:19:a0:a0:4c:52:fb:14:b2: f5:aa:a8:1b:cd:46:4e:e8:de:8c:ba:8a:61:9d:5c:14:59:e5: 4c:0d:cf:dd:8f:2e:c5:cd:92:1d:41:f5:7f:46:c2:e3:0d:05: c8:f6:d4:71:53:9e:3f:0e:b4:fa:2d:70:88:f4:cf:ec:51:41: fe:c2:cf:4c:9a:ff:3a:b3:8b:61:61:b4:62:e6:cd:98:78:a4: 04:ea:7d:51:4e:e2:9e:e9:2d:f3:b9:9f:71:45:68:9d:62:f1: 54:87:45:22:ea:ac:74:83:02:66:32:75:d5:0b:d1:ac:13:71: 4b:5f:9b:27:92:eb:1e:82:fc:5f:90:12:14:1c:7f:f9:2e:3f: 79:39:ba:32:aa:82:79:81:ce:d7:8a:75:ab:20:56:2c:8e:16: 02:27:1f:82:f9:98:96:96:50:c6:a4:00:04:da:40:1a:13:40: 1f:7e:64:2e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1/ku4qEuYxMqBFpMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNDAwNDUxN1oXDTI4MDcxNzAwNDUxN1owLzEtMCsGA1UEAxMk MjUyYmI3OTctOGJlMy00MTc4LTgxNDktZWQ4Njk0OWJhODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq521356Ad8uPMthqTbIrcCuecJUNmns09YrY VjQ+MzKm7C21zoSBAhxAlIHVg9yXiC1Dd1bl1EC4xSUSNywoygk1e0MA2hTUlTQI Nti/XidwmGVmoNLb3EqDkre3tQZI7F4UQVoHz1HeJkD/KzPOaZcAZT+UlkkBXS1o wIF68d0gsYhNzJrKANCx9nJmr4M/2suTWJo2E+o4lnEYMSQQy+vkPKTx+BnRBH+W YvYiwpE+UlSHimFPhML5H0+Z73/E37Ym+gjRrgEX9wHAP0rNnIntcnQcvHlC9Oct N+PuPU74uAfoagfB3W5VmXhRlNU82CIq3S4Brtngcd87J/PN+QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJnqgXESbkaG2T18b+HVG16WnkBAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y NTJiYjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2OTQ5YmE4NWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI1MmJiNzk3LThiZTMtNDE3OC04 MTQ5LWVkODY5NDliYTg1YS8yNTJiYjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2OTQ5 YmE4NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAUYMqAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfwTyeozB72bvFtHwtmDQ dTH1yFl5i+DSIT7YExSgbu2ZQD+kM2TEH6IinFD4BIyIlvH2Gc5yvnU2G2mXvZsq T0H9A1icfeQbIkaCMxO46tc60BmgoExS+xSy9aqoG81GTujejLqKYZ1cFFnlTA3P 3Y8uxc2SHUH1f0bC4w0FyPbUcVOePw60+i1wiPTP7FFB/sLPTJr/OrOLYWG0YubN mHikBOp9UU7inukt87mfcUVonWLxVIdFIuqsdIMCZjJ11QvRrBNxS1+bJ5LrHoL8 X5ASFBx/+S4/eTm6MqqCeYHO14p1qyBWLI4WAicfgvmYlpZQxqQABNpAGhNAH35k Lg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:44:55 2026 by rpki-client