$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee.cer File: 96a33eac-0605-4cfb-a30c-9ec72258a7ee.cer (raw, json) Hash identifier: 5Kj7uel0MsTEt61NymDBd8SN8GnH+5rpvVZG08SzDso= Subject key identifier: 23:51:7E:C9:8D:CE:C0:3C:C2:9F:14:34:EA:0C:08:D9:D3:A9:27:23 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D7F92EEB7097501FAE7564880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/96a33eac-0605-4cfb-a30c-9ec72258a7ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 00:45:17 +0000 Certificate not after: Mon 17 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 399872 IP: 104.250.230.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:92:ee:b7:09:75:01:fa:e7:56:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 14 00:45:17 2026 GMT Not After : Jul 17 00:45:17 2028 GMT Subject: CN=96a33eac-0605-4cfb-a30c-9ec72258a7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:16:c6:d7:24:bd:08:d5:80:93:c5:f7:7b: 07:7c:ab:35:31:43:27:b8:0c:18:4e:fd:b8:1f:81: c5:6b:05:66:5f:99:9e:28:f1:73:9c:af:1e:09:3e: ff:10:b2:81:67:f3:40:ca:3e:ce:3e:b3:c5:20:6b: 66:82:b5:f8:52:82:a2:3f:fb:c2:61:ca:a5:5f:33: d9:42:40:da:d7:7d:67:6d:5c:c4:22:2c:3f:bd:02: fe:d8:91:d9:90:0e:92:8c:21:10:f6:85:5b:55:7b: a4:03:c6:3a:42:b9:b6:ba:26:c4:fd:d2:ea:e7:33: 7b:44:03:29:09:bd:76:50:80:bf:4a:52:7a:7b:c5: 90:38:71:61:85:86:9a:a1:89:cc:75:4e:de:db:cb: 99:65:25:f3:2c:27:0c:d0:e3:d6:ef:01:98:14:29: f7:dc:e8:a4:9d:0a:3b:8b:e1:a7:d8:c6:27:67:2a: c4:7c:93:fa:7c:06:90:f9:55:69:9b:5f:01:46:b3: df:16:48:a3:4c:a1:2d:42:5c:ad:aa:0f:c3:d2:ab: 42:5f:cc:f8:bd:3b:da:e6:5d:56:80:03:14:1a:c9: 6a:fe:68:8e:2d:83:46:a8:a1:8e:17:0f:b1:89:94: 5a:bf:e6:ef:06:1f:3d:7b:02:10:4f:79:4f:d9:0a: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:51:7E:C9:8D:CE:C0:3C:C2:9F:14:34:EA:0C:08:D9:D3:A9:27:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/96a33eac-0605-4cfb-a30c-9ec72258a7ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.250.230.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399872 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ae:9c:e6:91:b2:31:47:90:8e:74:08:cb:65:6d:37:1b:2c: 20:cc:f2:31:67:6c:af:75:a3:a4:0f:08:2e:3e:47:e8:1a:68: 0c:63:91:98:82:91:bd:0d:82:28:3e:d5:0e:a7:fc:ff:9e:d5: cf:1a:c0:f6:fc:9c:89:ef:34:27:93:2d:cd:be:ff:6d:23:30: 34:91:23:14:6c:fb:4b:23:9d:e7:da:a7:1b:e3:70:7c:d3:5e: 6c:f7:d5:64:13:ad:59:02:d6:1d:a4:30:b9:fe:6c:3a:f8:d5: 05:bb:39:13:c2:ca:fe:7b:86:20:9c:50:b2:d6:03:df:66:3e: a3:c9:71:00:5e:4f:df:90:1e:a7:6e:ac:6c:4b:d4:45:29:68: cf:38:3a:4d:5d:cd:8a:8c:bb:f4:49:d7:95:75:ee:50:e3:fc: d5:9e:2a:a0:94:77:e4:99:da:f5:9b:df:6b:99:9f:2a:fa:10: 40:b9:77:42:5a:4f:31:de:cd:fc:42:60:15:af:7b:69:45:8c: 50:85:6a:6b:59:c9:6e:c1:cd:12:85:2a:60:01:4b:5f:3d:fd: 98:91:83:ae:9b:7f:2b:89:a3:ba:ba:f0:50:09:8a:ad:e5:9b: 98:af:c1:d8:79:d8:a1:08:a9:86:3e:a1:ce:94:f9:10:6e:95: 36:a6:27:67 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1/ku63CXUB+udWSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNDAwNDUxN1oXDTI4MDcxNzAwNDUxN1owLzEtMCsGA1UEAxMk OTZhMzNlYWMtMDYwNS00Y2ZiLWEzMGMtOWVjNzIyNThhN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQWxtckvQjVgJPF93sHfKs1MUMnuAwYTv24 H4HFawVmX5meKPFznK8eCT7/ELKBZ/NAyj7OPrPFIGtmgrX4UoKiP/vCYcqlXzPZ QkDa131nbVzEIiw/vQL+2JHZkA6SjCEQ9oVbVXukA8Y6Qrm2uibE/dLq5zN7RAMp Cb12UIC/SlJ6e8WQOHFhhYaaoYnMdU7e28uZZSXzLCcM0OPW7wGYFCn33OiknQo7 i+Gn2MYnZyrEfJP6fAaQ+VVpm18BRrPfFkijTKEtQlytqg/D0qtCX8z4vTva5l1W gAMUGslq/miOLYNGqKGOFw+xiZRav+bvBh89ewIQT3lP2QrFSwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCNRfsmNzsA8wp8UNOoMCNnTqScjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 NmEzM2VhYy0wNjA1LTRjZmItYTMwYy05ZWM3MjI1OGE3ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk2YTMzZWFjLTA2MDUtNGNmYi1h MzBjLTllYzcyMjU4YTdlZS85NmEzM2VhYy0wNjA1LTRjZmItYTMwYy05ZWM3MjI1 OGE3ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABo+uYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhoAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEmunOaRsjFHkI50CMtlbTcbLCDM8jFnbK91o6QPCC4+R+ga aAxjkZiCkb0Ngig+1Q6n/P+e1c8awPb8nInvNCeTLc2+/20jMDSRIxRs+0sjnefa pxvjcHzTXmz31WQTrVkC1h2kMLn+bDr41QW7ORPCyv57hiCcULLWA99mPqPJcQBe T9+QHqdurGxL1EUpaM84Ok1dzYqMu/RJ15V17lDj/NWeKqCUd+SZ2vWb32uZnyr6 EEC5d0JaTzHezfxCYBWve2lFjFCFamtZyW7BzRKFKmABS189/ZiRg66bfyuJo7q6 8FAJiq3lm5ivwdh52KEIqYY+oc6U+RBulTamJ2c= -----END CERTIFICATE-----Generated at Sun Apr 19 11:50:13 2026 by rpki-client