$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253.cer File: bcb5b54f-1a4d-4baf-89e1-873ab351e253.cer (raw, json) Hash identifier: adXNgIspZGQ+m+nibgu4ddHTOADv0izX8yFBpRieou4= Subject key identifier: 1F:53:7A:B7:8B:4A:61:CD:A1:6B:D5:D1:6B:F8:C6:AA:2E:0C:C0:C2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D79FD9326EA85C8DD746121C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/bcb5b54f-1a4d-4baf-89e1-873ab351e253.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Apr 2026 00:45:18 +0000 Certificate not after: Sat 15 Jul 2028 00:45:18 +0000 Subordinate resources: AS: 396250 IP: 142.248.126.0/24 IP: 2607:e940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:79:fd:93:26:ea:85:c8:dd:74:61:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 12 00:45:18 2026 GMT Not After : Jul 15 00:45:18 2028 GMT Subject: CN=bcb5b54f-1a4d-4baf-89e1-873ab351e253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:33:f6:e5:81:3d:77:f8:93:f5:52:51:4a: 17:92:36:d8:93:4d:24:26:ad:44:6e:aa:01:66:5d: aa:73:fa:cc:05:1d:a8:1e:b8:a6:06:a1:34:71:3e: 07:88:75:2e:00:53:8b:01:53:2b:49:69:c1:69:b1: 9a:ee:01:0a:fe:30:df:b6:b9:7a:e7:3f:98:d7:ab: 63:79:03:82:eb:27:ea:eb:bd:20:f6:65:65:13:1d: 97:9c:d2:7c:93:ae:28:9a:a8:82:b1:32:89:35:02: c9:c5:0b:88:8c:62:2b:07:d4:e0:52:32:6c:2c:2d: 6e:50:0e:d8:4e:3d:db:09:52:ab:f0:41:40:a1:7b: fb:cf:f9:3d:46:18:d6:8a:fa:14:ed:e6:1c:73:f8: 86:57:87:a8:c2:57:d7:b6:df:26:7f:9f:7e:8f:66: 89:e9:c5:9d:5e:1d:6b:cb:00:fb:bd:7f:fd:75:e7: 1b:cb:b6:bd:9d:50:4f:36:7c:b9:c0:89:79:6f:ec: 97:0c:dd:1c:c5:59:ef:0f:52:fa:6f:44:19:c6:9c: 97:26:02:fe:b2:b7:21:30:89:3a:7f:e7:f1:0a:64: 72:48:e6:0a:6b:b7:d4:27:c2:aa:85:54:16:1d:6f: a0:25:5e:0e:84:18:a7:be:a4:f0:b9:68:51:d8:fb: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:7A:B7:8B:4A:61:CD:A1:6B:D5:D1:6B:F8:C6:AA:2E:0C:C0:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/bcb5b54f-1a4d-4baf-89e1-873ab351e253.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.126.0/24 IPv6: 2607:e940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396250 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a8:6d:e6:1f:ab:c5:39:31:ce:00:68:13:62:a4:d8:4b:28: 2f:9d:14:1c:11:65:f0:37:bd:d5:79:1a:69:86:d6:48:1c:4f: a6:27:52:8f:a5:fb:f1:79:ce:25:70:50:42:d6:7a:63:ff:ac: 62:b9:26:46:5f:51:01:24:7f:12:c7:d2:09:21:99:7e:ae:73: d9:3b:59:ec:76:e5:3d:51:69:f8:4a:35:a3:ef:54:9c:0f:fc: b7:b5:cf:fc:a1:f3:fa:0d:64:11:78:d5:d9:3e:f7:24:d4:12: 2f:95:1c:28:9a:2f:47:58:b4:c8:3d:66:66:b6:1b:d0:98:3c: 4e:12:64:07:73:0c:07:64:a9:39:c8:d4:fb:ed:85:1e:d5:31: 48:28:b4:8d:b9:a5:11:51:b5:ff:b7:6b:e0:34:55:1c:65:44: 81:67:a6:d5:9d:7a:3d:cc:4c:d5:3b:f1:6f:40:18:de:bc:e0: 77:c5:4f:49:e2:a0:9e:da:30:ca:56:f2:d0:a8:95:e2:61:60: 19:86:e4:08:90:54:4d:e6:5c:7c:b1:09:dc:c4:af:ab:1b:4a: 2f:b5:36:16:4b:b6:0d:73:66:32:b0:4f:8e:0e:a6:96:70:f2: 6e:89:a4:8a:00:18:a2:b6:e7:ff:2f:f3:68:ca:2a:7e:c9:7e: 6f:80:9c:ad -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE15/ZMm6oXI3XRhIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxMjAwNDUxOFoXDTI4MDcxNTAwNDUxOFowLzEtMCsGA1UEAxMk YmNiNWI1NGYtMWE0ZC00YmFmLTg5ZTEtODczYWIzNTFlMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaoz9uWBPXf4k/VSUUoXkjbYk00kJq1EbqoB Zl2qc/rMBR2oHrimBqE0cT4HiHUuAFOLAVMrSWnBabGa7gEK/jDftrl65z+Y16tj eQOC6yfq670g9mVlEx2XnNJ8k64omqiCsTKJNQLJxQuIjGIrB9TgUjJsLC1uUA7Y Tj3bCVKr8EFAoXv7z/k9RhjWivoU7eYcc/iGV4eowlfXtt8mf59+j2aJ6cWdXh1r ywD7vX/9decby7a9nVBPNny5wIl5b+yXDN0cxVnvD1L6b0QZxpyXJgL+srchMIk6 f+fxCmRySOYKa7fUJ8KqhVQWHW+gJV4OhBinvqTwuWhR2Ptu2wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFB9TereLSmHNoWvV0Wv4xqouDMDCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Y2I1YjU0Zi0xYTRkLTRiYWYtODllMS04NzNhYjM1MWUyNTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JjYjViNTRmLTFhNGQtNGJhZi04 OWUxLTg3M2FiMzUxZTI1My9iY2I1YjU0Zi0xYTRkLTRiYWYtODllMS04NzNhYjM1 MWUyNTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBACO+H4wDQQCAAIwBwMFACYH6UAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgvaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKaobeYfq8U5Mc4AaBNipNhLKC+d FBwRZfA3vdV5GmmG1kgcT6YnUo+l+/F5ziVwUELWemP/rGK5JkZfUQEkfxLH0gkh mX6uc9k7Wex25T1RafhKNaPvVJwP/Le1z/yh8/oNZBF41dk+9yTUEi+VHCiaL0dY tMg9Zma2G9CYPE4SZAdzDAdkqTnI1PvthR7VMUgotI25pRFRtf+3a+A0VRxlRIFn ptWdej3MTNU78W9AGN684HfFT0nioJ7aMMpW8tColeJhYBmG5AiQVE3mXHyxCdzE r6sbSi+1NhZLtg1zZjKwT44OppZw8m6JpIoAGKK25/8v82jKKn7Jfm+AnK0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:08:53 2026 by rpki-client