$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer File: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer (raw, json) Hash identifier: fLoq1bkDrb/9JAD8iSjbZ5YDIwMTZHXEU2qnNsWiNFU= Subject key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D80F847D237DE3A686163869D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 12:45:18 +0000 Certificate not after: Mon 17 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 401560 IP: 23.131.252.0/24 IP: 2602:f744::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:f8:47:d2:37:de:3a:68:61:63:86:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 14 12:45:18 2026 GMT Not After : Jul 17 12:45:18 2028 GMT Subject: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:d5:29:b9:d3:fa:54:f3:d3:55:19:e8:0e: 07:21:eb:96:c3:9a:58:c1:9a:c9:24:db:5f:a5:f0: 7f:d0:1a:9d:88:ed:ca:e3:1b:08:2d:e7:c1:79:3e: ae:4e:a2:0f:06:11:b3:0a:ee:c8:46:ca:22:a9:36: 76:ee:dd:26:06:10:21:ca:8f:2a:1f:93:50:fe:b6: c9:41:3a:23:f7:65:52:f3:6d:9c:02:d2:71:b9:f9: c3:2c:fc:39:53:fc:8c:fd:92:79:03:f9:3c:70:6c: b3:55:bc:a4:54:3e:d2:1e:15:46:28:e2:9f:cb:a6: 5c:ac:c2:c0:79:e6:46:d5:41:4f:1a:5c:2d:8f:e9: 5c:0f:35:0f:e4:f5:56:d1:3b:e1:14:a3:d7:07:3c: 62:6c:c9:7d:04:f3:01:6f:4a:33:ee:fb:76:cd:6f: 5e:bc:44:cf:f9:33:c2:16:ef:b7:52:ea:41:a9:c1: 12:9b:7d:a8:63:74:12:29:50:69:ad:b0:b0:32:72: f5:76:57:48:e7:d5:13:b3:b9:a5:06:ee:62:a6:4f: ee:fb:81:2f:f7:60:92:da:e7:15:84:ee:dc:51:59: 3b:8d:47:39:38:67:96:1d:15:00:87:f5:89:0a:e7: ad:7b:e0:64:7a:44:48:a2:e6:b2:4e:38:f7:82:91: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 IPv6: 2602:f744::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401560 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:11:4a:f5:98:e0:ad:87:90:b7:f3:eb:74:13:c5:c7:29:11: 9e:c1:33:87:f7:fe:7c:a6:6e:b3:f0:24:49:d7:89:8b:8e:6a: 94:b2:ab:ba:56:7d:94:93:29:78:88:dd:e4:da:b1:4d:4a:ca: 27:35:db:41:5e:c0:8f:23:b4:b3:c5:3f:e3:33:88:aa:2a:07: 1d:b0:b1:71:b2:c2:04:c6:07:3e:ba:ae:ef:1d:c0:c9:93:37: 36:01:df:ec:b6:21:de:79:7b:ed:f4:3a:55:57:55:bd:8a:60: 22:b7:b7:e8:bd:8a:dc:ea:02:ab:fe:12:e2:79:1f:ac:39:42: 92:51:d5:be:b5:94:3e:58:14:a2:d6:3f:6f:76:10:b8:2b:a7: 83:29:f5:fa:f8:eb:54:00:5c:0a:6a:a4:29:47:b7:64:a8:32: fe:b7:e1:1b:7e:10:6f:51:dd:fd:6f:1a:6a:ae:01:24:40:93: a6:a2:20:d6:f0:7d:0e:91:dc:c4:0c:88:32:3b:83:fa:89:f0: 22:62:f3:a6:a3:dc:b8:e1:5c:c9:bb:1e:27:2b:8b:cd:f2:f9: 76:83:40:2b:98:35:34:ef:ff:50:34:b7:fc:a0:c5:67:e9:e2: e5:ee:0e:46:42:e8:7a:cf:66:f8:58:05:a2:03:23:2b:22:23: 37:67:43:38 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2A+EfSN946aGFjhp0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNDEyNDUxOFoXDTI4MDcxNzEyNDUxOFowLzEtMCsGA1UEAxMk M2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIwY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov/VKbnT+lTz01UZ6A4HIeuWw5pYwZrJJNtf pfB/0BqdiO3K4xsILefBeT6uTqIPBhGzCu7IRsoiqTZ27t0mBhAhyo8qH5NQ/rbJ QToj92VS822cAtJxufnDLPw5U/yM/ZJ5A/k8cGyzVbykVD7SHhVGKOKfy6ZcrMLA eeZG1UFPGlwtj+lcDzUP5PVW0TvhFKPXBzxibMl9BPMBb0oz7vt2zW9evETP+TPC Fu+3UupBqcESm32oY3QSKVBprbCwMnL1dldI59UTs7mlBu5ipk/u+4Ev92CS2ucV hO7cUVk7jUc5OGeWHRUAh/WJCuete+BkekRIouayTjj3gpEN6QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIU063s7fOs3LlKrkI6fy/0+ChafMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z YjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNiNGE0NDFmLTVkMGItNDgxMy04 MzZlLTJhZWZkNTRiMGNhMS8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0 YjBjYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg/wwDgQCAAIwCAMGACYC90QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgmDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsEUr1mOCth5C38+t0E8XHKRGe wTOH9/58pm6z8CRJ14mLjmqUsqu6Vn2Ukyl4iN3k2rFNSsonNdtBXsCPI7SzxT/j M4iqKgcdsLFxssIExgc+uq7vHcDJkzc2Ad/stiHeeXvt9DpVV1W9imAit7fovYrc 6gKr/hLieR+sOUKSUdW+tZQ+WBSi1j9vdhC4K6eDKfX6+OtUAFwKaqQpR7dkqDL+ t+EbfhBvUd39bxpqrgEkQJOmoiDW8H0OkdzEDIgyO4P6ifAiYvOmo9y44VzJux4n K4vN8vl2g0ArmDU07/9QNLf8oMVn6eLl7g5GQuh6z2b4WAWiAyMrIiM3Z0M4 -----END CERTIFICATE-----Generated at Fri Apr 17 04:55:49 2026 by rpki-client