$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer File: b676c353-1e86-47cb-b6c0-e0f33199eecd.cer (raw, json) Hash identifier: 0YgiE16a7m4uIVlMnrCb4l5OI3j3hyoVySixzxNSCmM= Subject key identifier: 3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D7F92EE722BF3B74B1CD1ADB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 00:45:17 +0000 Certificate not after: Mon 17 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 401564 IP: 63.247.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:92:ee:72:2b:f3:b7:4b:1c:d1:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 14 00:45:17 2026 GMT Not After : Jul 17 00:45:17 2028 GMT Subject: CN=b676c353-1e86-47cb-b6c0-e0f33199eecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:89:38:cf:c4:f5:f4:52:b0:41:92:81:6c: 80:24:f2:4b:55:45:b4:80:9d:f1:bb:79:8f:57:f6: 40:41:29:4a:64:c6:ca:48:90:31:9f:43:64:3e:91: 40:df:70:31:7f:b9:62:3e:89:02:e4:cf:e9:ef:ee: 09:d5:00:fa:f7:f2:06:e5:36:18:d8:db:bb:72:9e: ed:e1:58:a4:81:54:9f:61:b3:64:ab:df:56:30:29: 95:22:6f:89:9a:db:aa:09:f9:c2:d7:60:de:51:ce: 4d:98:69:96:0f:57:d4:ef:65:67:a6:79:09:68:e0: 87:18:83:e8:13:ed:ab:b2:45:3e:1f:56:21:b5:e7: f2:f1:64:8f:de:b8:e1:46:82:60:b1:17:a7:11:89: 72:59:6b:24:0d:30:76:ce:3c:72:71:ec:aa:8f:fc: 59:8b:4d:90:e5:31:30:aa:a8:c9:46:99:43:f9:e3: dd:5a:21:3a:8b:49:69:1a:d4:37:0a:4a:ab:cd:75: 96:ae:e3:65:4b:44:a4:fc:20:28:14:02:42:06:94: d0:87:cc:b6:fc:c8:ff:94:64:f8:61:7f:51:db:4a: 5d:b7:43:44:f4:f7:c7:80:12:21:e9:d1:3e:8e:cc: b0:60:2b:79:b7:39:87:c2:75:63:b7:50:fb:f1:19: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 63.247.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401564 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:db:29:85:34:ad:95:b1:24:0a:bf:05:26:c5:05:ba:64:2f: 1d:e7:7e:c8:8b:e4:1a:ce:3f:bc:1e:95:17:50:63:7c:48:98: 55:4e:eb:41:3a:ac:84:6c:1a:d6:fc:c2:17:d7:52:9c:c6:c3: 79:ec:d3:cb:46:1a:cd:a6:5a:9d:a9:66:77:27:51:3b:a1:f9: 76:26:08:4f:53:9f:cb:a8:d2:c0:7e:c7:b5:e8:e9:8b:76:be: 15:ea:8d:4d:71:64:2e:76:69:01:21:2e:92:34:a3:f0:09:98: 0c:b5:07:5b:42:32:66:f7:5d:cc:2a:62:98:68:31:97:b2:3b: 70:27:28:03:55:ef:bd:c4:5d:d1:c1:a0:cb:4e:9a:03:88:bd: f9:4f:f8:a8:13:c2:4d:01:54:94:f6:33:a7:ee:b7:90:81:41: 00:f5:84:71:83:1a:3d:15:44:4f:ae:95:38:33:cc:87:65:4a: 1a:2f:7c:de:16:43:fc:8f:b8:a0:b0:ae:48:53:77:3b:2e:64: 2a:cf:d1:86:78:fe:ed:b2:73:63:f6:d3:7e:06:5c:33:6d:b0: 55:0e:b1:eb:f3:69:17:a4:a0:12:e1:06:1c:4c:0c:8e:f8:71: ac:7c:6d:6c:02:85:61:de:04:22:44:43:e6:ce:66:a9:df:d3: d1:71:ec:3e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1/ku5yK/O3SxzRrbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNDAwNDUxN1oXDTI4MDcxNzAwNDUxN1owLzEtMCsGA1UEAxMk YjY3NmMzNTMtMWU4Ni00N2NiLWI2YzAtZTBmMzMxOTllZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7uJOM/E9fRSsEGSgWyAJPJLVUW0gJ3xu3mP V/ZAQSlKZMbKSJAxn0NkPpFA33Axf7liPokC5M/p7+4J1QD69/IG5TYY2Nu7cp7t 4VikgVSfYbNkq99WMCmVIm+JmtuqCfnC12DeUc5NmGmWD1fU72VnpnkJaOCHGIPo E+2rskU+H1Yhtefy8WSP3rjhRoJgsRenEYlyWWskDTB2zjxyceyqj/xZi02Q5TEw qqjJRplD+ePdWiE6i0lpGtQ3CkqrzXWWruNlS0Sk/CAoFAJCBpTQh8y2/Mj/lGT4 YX9R20pdt0NE9PfHgBIh6dE+jsywYCt5tzmHwnVjt1D78Rn6PQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDzsjugPT2d0xFCNMynwP4jU6C/wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Njc2YzM1My0xZTg2LTQ3Y2ItYjZjMC1lMGYzMzE5OWVlY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I2NzZjMzUzLTFlODYtNDdjYi1i NmMwLWUwZjMzMTk5ZWVjZC9iNjc2YzM1My0xZTg2LTQ3Y2ItYjZjMC1lMGYzMzE5 OWVlY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAU/9+AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiCcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEjbKYU0rZWxJAq/BSbFBbpkLx3nfsiL5BrOP7welRdQY3xI mFVO60E6rIRsGtb8whfXUpzGw3ns08tGGs2mWp2pZncnUTuh+XYmCE9Tn8uo0sB+ x7Xo6Yt2vhXqjU1xZC52aQEhLpI0o/AJmAy1B1tCMmb3XcwqYphoMZeyO3AnKANV 773EXdHBoMtOmgOIvflP+KgTwk0BVJT2M6fut5CBQQD1hHGDGj0VRE+ulTgzzIdl ShovfN4WQ/yPuKCwrkhTdzsuZCrP0YZ4/u2yc2P2034GXDNtsFUOsevzaRekoBLh BhxMDI74cax8bWwChWHeBCJEQ+bOZqnf09Fx7D4= -----END CERTIFICATE-----Generated at Fri Apr 17 06:17:14 2026 by rpki-client