$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer File: d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer (raw, json) Hash identifier: WzEJp+IQyF3C+0AHbJkdudFoRHI6/W3ch1mMx1/KoCM= Subject key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D7CC84121AA81225E17748180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Apr 2026 00:45:18 +0000 Certificate not after: Sun 16 Jul 2028 00:45:18 +0000 Subordinate resources: AS: 401328 IP: 23.131.20.0/24 IP: 2602:f769::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:c8:41:21:aa:81:22:5e:17:74:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 13 00:45:18 2026 GMT Not After : Jul 16 00:45:18 2028 GMT Subject: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:23:b9:8c:34:64:15:9a:f0:d9:d9:b2:48: 38:f0:ea:46:60:0a:11:01:4a:37:0d:b6:9f:3a:66: f9:a4:0e:ee:01:43:8c:70:a7:fd:e4:db:c4:a8:42: c5:61:0a:9f:1a:c6:9b:8f:f5:31:b2:d4:b8:02:6d: 9c:46:b5:91:4c:34:f0:02:d6:61:ab:ab:8c:12:4c: 2d:0a:37:59:03:6e:97:66:33:4f:bd:d1:aa:fd:43: a5:78:30:ad:3c:e0:c0:5f:d7:bb:ab:e4:f5:b3:be: 2b:48:da:31:82:b9:d3:97:08:b5:10:e2:70:25:6d: d8:f9:28:08:78:23:9c:d4:af:da:44:c9:15:68:35: 56:00:8e:10:d9:d9:94:6b:f2:a2:a4:4f:bc:e9:80: a8:21:37:80:f0:33:32:68:61:f3:ce:f6:0f:5f:35: aa:f3:c2:13:00:0d:09:83:96:7b:96:bf:eb:17:2b: 1c:1f:79:48:16:a7:a5:c2:20:a5:ba:4b:ca:2f:f0: ed:8b:a0:73:73:d3:19:63:9c:73:5f:35:1b:64:d0: e7:4d:0c:a1:35:ee:e4:84:1c:07:c1:e6:53:8e:0e: 14:54:41:3e:be:64:d3:aa:0a:28:38:ef:7f:5f:8c: 66:14:d3:18:c0:89:63:1b:79:3b:d0:df:2f:b5:26: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.20.0/24 IPv6: 2602:f769::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c7:bb:5c:df:35:1d:f1:ca:7d:5f:c5:d2:28:20:ba:7c:72: ae:64:ea:71:e9:74:1b:d3:f3:8a:dd:9f:7f:6c:4a:90:46:fb: 68:f1:fa:8c:4c:62:de:ed:67:2e:4d:5a:52:3c:bd:ed:3b:4c: 4b:50:fb:0b:fe:eb:01:cc:61:df:e3:26:99:27:63:f8:47:ef: a2:f6:d0:f1:ed:cc:43:45:ad:fb:c1:f7:20:f3:ce:8f:b4:8f: b9:78:8c:ff:ff:ba:ab:d5:da:5c:32:44:d2:ae:de:84:3d:2e: 09:db:0a:70:e6:8c:94:c3:24:79:f2:67:b1:bb:05:76:b9:60: 3f:4d:29:f2:59:8f:9b:82:f6:5f:48:59:9b:ed:38:2a:2c:31: 7d:6f:6c:aa:54:8f:3b:14:6b:3f:03:ff:00:2c:56:38:09:44: 5b:b4:84:0f:0b:61:6c:6d:1e:2d:18:7d:f9:0d:3f:3c:7d:56: b5:df:bf:6c:34:2e:d6:79:3f:77:75:33:7c:e5:93:29:fa:57: 0b:23:54:54:dc:6a:cb:6e:b4:3e:32:90:be:5b:64:f9:6a:0f: fa:f7:9c:15:e3:2c:58:01:96:f7:09:4f:60:fe:3e:64:76:c1: 40:71:2a:50:2b:28:ee:dd:ac:b5:90:96:ab:cd:12:85:bc:2e: 77:1c:14:ab -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE18yEEhqoEiXhd0gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxMzAwNDUxOFoXDTI4MDcxNjAwNDUxOFowLzEtMCsGA1UEAxMk ZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdmMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWEjuYw0ZBWa8NnZskg48OpGYAoRAUo3Dbaf Omb5pA7uAUOMcKf95NvEqELFYQqfGsabj/UxstS4Am2cRrWRTDTwAtZhq6uMEkwt CjdZA26XZjNPvdGq/UOleDCtPODAX9e7q+T1s74rSNoxgrnTlwi1EOJwJW3Y+SgI eCOc1K/aRMkVaDVWAI4Q2dmUa/KipE+86YCoITeA8DMyaGHzzvYPXzWq88ITAA0J g5Z7lr/rFyscH3lIFqelwiClukvKL/Dti6Bzc9MZY5xzXzUbZNDnTQyhNe7khBwH weZTjg4UVEE+vmTTqgooOO9/X4xmFNMYwIljG3k70N8vtSb1nQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLUPUIGNOAfgITnR+NGeICPuYLsqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k NjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q2OGEyZDFkLTJjMzYtNGExZC04 OGE3LTBjMzBkMjU3ZjM4Ni9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1 N2YzODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgxQwDgQCAAIwCAMGBCYC92kAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfsDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkx7tc3zUd8cp9X8XSKCC6fHKu ZOpx6XQb0/OK3Z9/bEqQRvto8fqMTGLe7WcuTVpSPL3tO0xLUPsL/usBzGHf4yaZ J2P4R++i9tDx7cxDRa37wfcg886PtI+5eIz//7qr1dpcMkTSrt6EPS4J2wpw5oyU wyR58mexuwV2uWA/TSnyWY+bgvZfSFmb7TgqLDF9b2yqVI87FGs/A/8ALFY4CURb tIQPC2FsbR4tGH35DT88fVa1379sNC7WeT93dTN85ZMp+lcLI1RU3GrLbrQ+MpC+ W2T5ag/695wV4yxYAZb3CU9g/j5kdsFAcSpQKyju3ay1kJarzRKFvC53HBSr -----END CERTIFICATE-----Generated at Sun Apr 19 10:10:52 2026 by rpki-client