$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7.cer File: 8c51fc03-881b-4bb7-a40c-ed520fa129f7.cer (raw, json) Hash identifier: h4SrUoxhfXizy6sDDipAp1EUjkTSAalGcMLRJFfMSds= Subject key identifier: 84:02:7A:A0:61:AF:E3:28:24:86:F4:D9:98:DF:DA:43:3E:4D:74:51 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D6ED2D4FC3B410F8BDD19B880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/8c51fc03-881b-4bb7-a40c-ed520fa129f7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Apr 2026 00:45:17 +0000 Certificate not after: Tue 11 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 140.235.176.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:d2:d4:fc:3b:41:0f:8b:dd:19:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 8 00:45:17 2026 GMT Not After : Jul 11 00:45:17 2028 GMT Subject: CN=8c51fc03-881b-4bb7-a40c-ed520fa129f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:fa:13:d6:40:b6:46:8d:5d:79:c9:68:6b: 7b:6c:09:a9:ad:4a:39:fa:6b:74:41:9d:7a:c0:59: e4:31:19:01:0f:9c:de:59:9e:e1:9f:20:8b:68:9b: 07:9f:47:4f:7e:85:82:b8:a7:c1:2d:34:ae:22:ff: 6a:24:9d:64:dc:1a:5e:3c:53:ce:65:b0:f0:cd:3f: 46:fb:81:fc:61:68:b8:75:14:a4:77:1d:27:1d:f2: 76:88:99:a6:ff:d4:a6:6b:b7:b1:0d:c0:94:bf:f7: 66:e7:7c:f7:47:3c:2f:af:28:b0:69:f9:c0:70:46: a6:4a:09:8d:b5:d8:c1:91:80:75:39:29:a8:77:ce: 41:fb:12:40:42:d3:0a:68:d3:ac:03:7b:71:d2:ed: 2e:c1:0a:70:b5:40:15:d0:a6:42:a0:71:27:44:d2: 23:1c:9f:a2:25:10:35:cd:44:74:c4:8f:2a:11:1a: 56:9e:b7:e3:28:fe:66:f6:54:7a:00:52:1a:46:42: ba:9e:8b:d6:5a:15:a2:40:aa:d3:ce:b5:cf:d7:34: 91:eb:82:a2:54:85:57:4a:3e:50:6c:39:e8:57:44: 0a:2f:8c:ab:ea:e4:d8:0f:49:d0:37:57:2f:54:92: 4f:4a:97:b9:5e:aa:93:fd:49:2e:2d:06:16:00:14: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:02:7A:A0:61:AF:E3:28:24:86:F4:D9:98:DF:DA:43:3E:4D:74:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/8c51fc03-881b-4bb7-a40c-ed520fa129f7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 140.235.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d7:f5:55:08:0f:58:1a:d4:58:42:0b:e1:0e:3a:25:5d:c7: f1:44:3e:49:17:bf:49:89:8f:33:5a:9f:4e:73:06:c1:7d:a3: fa:c4:e2:24:fa:34:c3:33:c0:ca:08:8d:62:9e:0a:18:0f:32: 76:61:77:cb:91:bd:ba:23:8a:2e:55:d3:44:16:42:3e:a9:9e: ab:16:7b:28:8a:b1:c4:76:f2:fa:04:ed:c4:35:ec:b8:04:87: 54:29:c4:c3:ad:9e:53:d3:d0:98:61:5b:aa:2b:dd:84:fa:fd: 57:0d:ed:a5:70:1d:a9:8c:65:f4:14:4e:08:83:48:e8:95:81: cb:c3:0a:f5:81:42:de:93:e1:6c:d0:c1:15:ab:71:c0:cd:01: 22:0d:42:f4:54:ba:06:c7:d4:78:0f:69:b1:70:e5:01:93:58: 32:ed:77:bd:64:5d:3e:8c:8c:e9:db:eb:72:50:b4:b7:cd:b1: 52:cd:93:f5:e0:1d:14:ad:7f:c1:d9:a6:de:7f:51:19:39:50: 12:e0:7b:05:a8:1e:ca:25:fc:6b:15:7d:10:78:55:0d:f0:54: 63:b5:19:c3:4b:c5:78:51:33:35:72:72:b0:59:a3:78:1b:f6: 48:13:ed:e2:98:9e:98:a6:be:89:ca:05:91:0a:14:71:8d:5a: 6d:3d:c9:06 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1u0tT8O0EPi90ZuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQwODAwNDUxN1oXDTI4MDcxMTAwNDUxN1owLzEtMCsGA1UEAxMk OGM1MWZjMDMtODgxYi00YmI3LWE0MGMtZWQ1MjBmYTEyOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAb6E9ZAtkaNXXnJaGt7bAmprUo5+mt0QZ16 wFnkMRkBD5zeWZ7hnyCLaJsHn0dPfoWCuKfBLTSuIv9qJJ1k3BpePFPOZbDwzT9G +4H8YWi4dRSkdx0nHfJ2iJmm/9Sma7exDcCUv/dm53z3RzwvryiwafnAcEamSgmN tdjBkYB1OSmod85B+xJAQtMKaNOsA3tx0u0uwQpwtUAV0KZCoHEnRNIjHJ+iJRA1 zUR0xI8qERpWnrfjKP5m9lR6AFIaRkK6novWWhWiQKrTzrXP1zSR64KiVIVXSj5Q bDnoV0QKL4yr6uTYD0nQN1cvVJJPSpe5XqqT/UkuLQYWABRhMQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIQCeqBhr+MoJIb02Zjf2kM+TXRRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 YzUxZmMwMy04ODFiLTRiYjctYTQwYy1lZDUyMGZhMTI5ZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhjNTFmYzAzLTg4MWItNGJiNy1h NDBjLWVkNTIwZmExMjlmNy84YzUxZmMwMy04ODFiLTRiYjctYTQwYy1lZDUyMGZh MTI5ZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKM67AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAENf1VQgPWBrUWEIL4Q46 JV3H8UQ+SRe/SYmPM1qfTnMGwX2j+sTiJPo0wzPAygiNYp4KGA8ydmF3y5G9uiOK LlXTRBZCPqmeqxZ7KIqxxHby+gTtxDXsuASHVCnEw62eU9PQmGFbqivdhPr9Vw3t pXAdqYxl9BROCINI6JWBy8MK9YFC3pPhbNDBFatxwM0BIg1C9FS6BsfUeA9psXDl AZNYMu13vWRdPoyM6dvrclC0t82xUs2T9eAdFK1/wdmm3n9RGTlQEuB7BageyiX8 axV9EHhVDfBUY7UZw0vFeFEzNXJysFmjeBv2SBPt4piemKa+icoFkQoUcY1abT3J Bg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:27:21 2026 by rpki-client