$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer File: 464cd0d4-6da8-497c-b270-cb658d45f4e8.cer (raw, json) Hash identifier: yaiFCAlvINvFBS6AYA98B5WfoGeCah3ml3uj70Wtugk= Subject key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D7F92ED8208E8C70A45A805C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 00:45:17 +0000 Certificate not after: Mon 17 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 23.92.128.0/20 IP: 24.53.96.0/19 IP: 24.140.240.0/20 IP: 24.143.128.0/19 IP: 108.170.128.0/18 IP: 162.247.224.0/21 IP: 173.247.128.0/19 IP: 216.212.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:92:ed:82:08:e8:c7:0a:45:a8:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 14 00:45:17 2026 GMT Not After : Jul 17 00:45:17 2028 GMT Subject: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d9:2e:3d:e8:b3:96:c1:e3:7c:c8:9e:fa:5d: 98:4f:6a:42:bf:41:35:04:3f:8a:2e:b4:30:5f:e5: 64:b0:56:5b:2f:e3:e8:4e:76:ea:12:04:ae:8b:de: f6:46:f2:4d:74:5a:0d:b3:d4:3c:1f:d3:39:d7:a7: c6:fb:56:79:86:da:f7:97:be:3f:1b:b8:fb:c0:8e: 62:53:d0:ca:23:ff:f8:21:ec:69:b1:f2:a8:70:f2: 2b:ae:bb:c7:2d:06:cc:2e:ba:24:c1:5b:06:47:c8: 3e:13:42:55:6c:bf:d0:cb:d1:48:84:eb:03:2d:ca: 9f:53:39:54:38:3b:8e:c5:e7:cb:2b:2d:75:35:17: 90:ef:5c:bf:d7:14:50:48:7b:b8:f9:2b:f3:22:56: 10:3f:81:eb:29:34:88:9f:cb:e4:a1:a3:74:0b:c2: 42:d8:ee:8a:9c:ce:6b:d4:68:62:83:1c:30:24:5a: fb:c2:32:19:13:72:9d:48:11:06:c8:c5:67:e8:8c: 36:c5:7d:1b:c2:5f:30:23:30:ee:05:42:16:b4:c6: 61:f4:db:7b:eb:17:ba:69:0d:72:3a:0b:4e:c6:63: 0d:44:2b:fd:7d:50:49:b0:9d:81:88:db:83:bc:61: 42:93:ea:b3:86:28:07:13:cc:ed:3d:d1:19:f9:f5: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.92.128.0/20 24.53.96.0/19 24.140.240.0/20 24.143.128.0/19 108.170.128.0/18 162.247.224.0/21 173.247.128.0/19 216.212.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:15:cf:66:eb:04:e8:7a:67:95:a2:28:7a:23:7d:2e:05:ec: 15:6b:88:be:65:31:43:7d:a2:90:f2:8f:3a:f2:1a:6a:59:d8: dd:8c:91:4b:7c:2c:5c:60:6f:be:d4:09:d4:bd:a2:11:c7:c6: ea:df:d1:8c:5c:21:be:4e:80:ce:8b:4c:ca:d6:8b:60:43:16: 90:c9:06:93:36:55:33:05:af:25:4f:b9:f7:d3:4d:7c:c9:0b: c3:59:fd:3e:c7:37:31:73:24:87:6d:2a:b3:f7:e1:29:79:33: d4:be:e6:76:c6:bc:9f:e2:8b:55:5f:7c:b3:a8:88:e7:a6:b1: 46:15:39:89:99:c0:22:27:99:55:43:21:3e:4c:9a:d2:78:15: e3:91:62:57:6b:01:c4:eb:6d:ee:65:39:ec:94:94:4c:28:65: 36:f5:3e:4e:20:5c:76:99:32:55:7f:73:08:db:ee:4f:4e:ba: ba:5c:38:9a:0d:95:d5:df:de:02:12:d4:b4:dc:e0:68:fe:21: 1c:9a:15:d2:8e:54:63:91:cf:ad:38:0b:20:d7:84:2d:64:e4: 9c:5a:47:d6:92:35:a8:53:bb:a5:d6:d1:dd:77:5b:80:ff:0e: a2:36:28:2e:6a:e3:7b:2b:ad:b6:7a:a2:d7:b3:8f:ff:9b:1e: d1:05:85:ce -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE1/ku2CCOjHCkWoBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNDAwNDUxN1oXDTI4MDcxNzAwNDUxN1owLzEtMCsGA1UEAxMk NDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVmNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtkuPeizlsHjfMie+l2YT2pCv0E1BD+KLrQw X+VksFZbL+PoTnbqEgSui972RvJNdFoNs9Q8H9M516fG+1Z5htr3l74/G7j7wI5i U9DKI//4IexpsfKocPIrrrvHLQbMLrokwVsGR8g+E0JVbL/Qy9FIhOsDLcqfUzlU ODuOxefLKy11NReQ71y/1xRQSHu4+SvzIlYQP4HrKTSIn8vkoaN0C8JC2O6KnM5r 1GhigxwwJFr7wjIZE3KdSBEGyMVn6Iw2xX0bwl8wIzDuBUIWtMZh9Nt76xe6aQ1y OgtOxmMNRCv9fVBJsJ2BiNuDvGFCk+qzhigHE8ztPdEZ+fVejwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFEt/X0oQ7SMJgIuTiNervFch8G+iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQ2NGNkMGQ0LTZkYTgtNDk3Yy1i MjcwLWNiNjU4ZDQ1ZjRlOC80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0 NWY0ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBAQXXIADBAUYNWADBAQYjPADBAUYj4ADBAZsqoAD BAOi9+ADBAWt94ADBAXY1MAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApBXPZusE6HpnlaIoeiN9LgXsFWuI vmUxQ32ikPKPOvIaalnY3YyRS3wsXGBvvtQJ1L2iEcfG6t/RjFwhvk6AzotMytaL YEMWkMkGkzZVMwWvJU+599NNfMkLw1n9Psc3MXMkh20qs/fhKXkz1L7mdsa8n+KL VV98s6iI56axRhU5iZnAIieZVUMhPkya0ngV45FiV2sBxOtt7mU57JSUTChlNvU+ TiBcdpkyVX9zCNvuT066ulw4mg2V1d/eAhLUtNzgaP4hHJoV0o5UY5HPrTgLINeE LWTknFpH1pI1qFO7pdbR3XdbgP8OojYoLmrjeyuttnqi17OP/5se0QWFzg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:17:29 2026 by rpki-client