$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer File: a7840f46-b135-4a45-8c47-daede4b0b707.cer (raw, json) Hash identifier: b+ope48rSV0QvJ1u0s1dUNX+64gms9+cqdceUzlbO4s= Subject key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D87F2FAB404E47E6B1A332680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Apr 2026 00:45:16 +0000 Certificate not after: Thu 20 Jul 2028 00:45:16 +0000 Subordinate resources: AS: 12213 AS: 32298 AS: 398014 IP: 24.170.128.0/18 IP: 45.78.144.0/20 IP: 64.255.192.0/19 IP: 131.226.192.0/18 IP: 149.137.192.0 -- 149.137.211.255 IP: 149.137.216.0 -- 149.137.255.255 IP: 2600:cc00::/28 IP: 2604:7ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:f2:fa:b4:04:e4:7e:6b:1a:33:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 17 00:45:16 2026 GMT Not After : Jul 20 00:45:16 2028 GMT Subject: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:cd:81:2c:ea:04:45:0f:c1:55:99:10:9f: 44:f9:ce:7e:82:15:89:73:42:6b:56:78:cc:69:61: 3f:66:d4:54:b7:70:8d:57:c9:e7:6b:10:54:51:f4: c9:cc:ef:1a:41:b5:32:16:c7:00:ba:87:a0:cb:df: f1:84:a7:c0:e7:9f:1a:e9:06:bd:d4:74:c8:e3:66: d9:6b:e1:c1:56:cf:c3:23:d3:2d:16:ff:34:a3:5f: 7d:e8:01:5b:b8:9e:32:a6:8c:c8:d1:cf:a8:68:df: b3:bd:ad:ec:ed:bd:49:89:14:04:ad:bb:c6:da:25: bf:59:91:59:d0:a7:e5:81:a2:63:4b:39:a3:be:c7: 4b:fa:2d:9f:94:2c:15:fd:21:2f:ac:a7:32:88:33: f2:c9:eb:a0:bd:bf:0f:7e:52:8f:c6:12:af:d4:28: 0e:72:13:82:03:21:59:34:33:6a:ff:13:5f:fa:93: 42:62:38:0b:22:00:4d:7c:f2:19:ee:85:4a:1b:62: 1c:c4:21:9a:da:92:69:11:40:01:4f:cd:6f:03:65: 89:e8:97:76:86:50:03:3b:cb:84:83:86:80:99:c2: 8b:26:bf:19:ee:1c:00:72:11:c4:6e:31:04:d5:79: 08:11:7a:f1:9f:31:22:f5:f5:85:c2:2a:6f:9e:b9: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 45.78.144.0/20 64.255.192.0/19 131.226.192.0/18 149.137.192.0-149.137.211.255 149.137.216.0-149.137.255.255 IPv6: 2600:cc00::/28 2604:7ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12213 32298 398014 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3e:0c:3c:93:d9:ba:23:92:4b:09:a9:b2:08:1a:f5:f0:61: 6b:d5:8b:39:94:e1:69:fe:26:eb:c7:89:41:73:5b:1f:00:7a: 45:2b:db:7e:07:a5:46:a2:b7:5e:6a:b5:1e:4b:10:6e:c6:91: 0b:d0:df:73:0d:99:90:d5:8b:d4:11:07:ce:2a:91:63:18:8f: 5a:ec:19:1b:bb:8f:ef:2b:92:62:28:58:d6:8c:e3:15:90:3c: 76:e8:30:bd:bf:3a:d2:09:3c:39:d9:1d:7f:fb:da:d6:71:d4: ed:2e:c9:a4:61:3c:89:5f:09:7e:77:72:be:06:a2:f5:32:64: 9a:d9:c4:16:8b:e1:ea:c7:e0:1c:42:14:08:70:e3:ed:ce:e0: 23:14:43:18:37:65:99:9f:e0:cb:91:7a:b9:2f:c9:2a:0b:a8: 9a:d2:cc:62:1f:85:25:06:4c:81:0b:88:5f:c2:03:bd:a2:33: 27:84:eb:25:05:2f:9d:62:08:74:78:86:4a:f7:72:f4:50:ab: 9b:d9:5c:08:ba:fc:43:f3:70:2a:f0:79:23:a0:3a:05:cd:1c: d3:55:cf:60:af:07:46:66:8e:d5:5b:ee:c1:3a:3c:27:72:63: dc:56:1b:13:a1:4b:c0:ca:09:80:bb:25:65:bf:6f:b0:56:fc: f9:b5:06:46 -----BEGIN CERTIFICATE----- MIIHVDCCBjygAwIBAgIUAQ0Mn0MoWE2H8vq0BOR+axozJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNzAwNDUxNloXDTI4MDcyMDAwNDUxNlowLzEtMCsGA1UEAxMk YTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBiNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst3NgSzqBEUPwVWZEJ9E+c5+ghWJc0JrVnjM aWE/ZtRUt3CNV8nnaxBUUfTJzO8aQbUyFscAuoegy9/xhKfA558a6Qa91HTI42bZ a+HBVs/DI9MtFv80o1996AFbuJ4ypozI0c+oaN+zva3s7b1JiRQErbvG2iW/WZFZ 0KflgaJjSzmjvsdL+i2flCwV/SEvrKcyiDPyyeugvb8PflKPxhKv1CgOchOCAyFZ NDNq/xNf+pNCYjgLIgBNfPIZ7oVKG2IcxCGa2pJpEUABT81vA2WJ6Jd2hlADO8uE g4aAmcKLJr8Z7hwAchHEbjEE1XkIEXrxnzEi9fWFwipvnrkitQIDAQABo4IEZjCC BGIwHQYDVR0OBBYEFJF8GepWbe3eoHvZMeYNLsNaFhPOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Nzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E3ODQwZjQ2LWIxMzUtNGE0NS04 YzQ3LWRhZWRlNGIwYjcwNy9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRi MGI3MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwYgYIKwYBBQUH AQcBAf8EUzBRMDkEAgABMDMDBAYYqoADBAQtTpADBAVA/8ADBAaD4sAwDAMEBpWJ wAMEApWJ0DALAwQDlYnYAwMBlYgwFAQCAAIwDgMFBCYAzAADBQAmBHrAMCIGCCsG AQUFBwEIAQH/BBMwEaAPMA0CAi+1AgJ+KgIDBhK+MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIg+DDyT2boj kksJqbIIGvXwYWvVizmU4Wn+JuvHiUFzWx8AekUr234HpUait15qtR5LEG7GkQvQ 33MNmZDVi9QRB84qkWMYj1rsGRu7j+8rkmIoWNaM4xWQPHboML2/OtIJPDnZHX/7 2tZx1O0uyaRhPIlfCX53cr4GovUyZJrZxBaL4erH4BxCFAhw4+3O4CMUQxg3ZZmf 4MuRerkvySoLqJrSzGIfhSUGTIELiF/CA72iMyeE6yUFL51iCHR4hkr3cvRQq5vZ XAi6/EPzcCrweSOgOgXNHNNVz2CvB0ZmjtVb7sE6PCdyY9xWGxOhS8DKCYC7JWW/ b7BW/Pm1BkY= -----END CERTIFICATE-----Generated at Fri Apr 17 08:02:21 2026 by rpki-client