$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer File: 469597d0-a870-46e2-b0a1-04a71dad0b25.cer (raw, json) Hash identifier: 4Y4BYRqWhNolYUSJMPgLSrk5MxqrnAe6GodDqklZrSI= Subject key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D86F1657508CAF11FBEAD7060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Apr 2026 16:06:17 +0000 Certificate not after: Thu 20 Apr 2028 15:02:51 +0000 Subordinate resources: AS: 21867 AS: 54004 AS: 54419 AS: 63125 IP: 24.170.208.0/20 IP: 47.19.0.0/16 IP: 104.238.237.0/24 IP: 148.76.64.0 -- 148.76.191.255 IP: 148.77.0.0/17 IP: 192.150.73.0/24 IP: 192.188.120.0/24 IP: 2606:2e80::/32 IP: 2607:fda8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:f1:65:75:08:ca:f1:1f:be:ad:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 16 16:06:17 2026 GMT Not After : Apr 20 15:02:51 2028 GMT Subject: CN=469597d0-a870-46e2-b0a1-04a71dad0b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:52:19:74:a6:44:4d:b8:4c:bc:82:22:d4: b9:7e:71:d5:08:be:cf:d6:e3:00:0b:5d:c5:6e:3f: de:76:d3:8d:4c:54:2b:72:03:ce:59:0f:8e:24:d9: 0b:71:fd:08:3c:56:d6:92:c9:bb:ab:16:b0:3d:10: 53:b4:ca:55:46:2a:b4:30:04:a1:d8:50:c1:d6:92: 8c:11:a2:75:18:b2:17:1f:76:d6:d1:7a:b7:54:5a: f1:1b:1d:dc:a2:fd:f0:78:1b:f9:c9:d6:1a:e1:0b: 6f:d0:c9:a3:0a:88:d2:01:a6:0e:de:58:8e:1d:48: 84:4a:6c:b5:40:85:82:e3:01:c2:5d:03:25:98:f2: 20:cc:9e:e5:ee:29:7a:1d:94:62:5b:d6:ff:65:a8: db:be:1d:49:30:c1:a0:5f:ed:d7:9c:d4:16:ee:85: a6:c8:99:aa:a1:e8:41:1b:b1:a4:b8:2e:6b:ac:ba: 85:a9:65:59:94:6a:95:81:a6:c7:f5:fa:f4:92:c0: 80:b2:58:39:f7:f8:d4:a8:7d:4c:65:02:f3:2e:2c: 27:4c:d5:3c:05:06:76:fa:ea:ff:0d:e7:eb:3c:a1: f0:52:b7:13:6c:98:7b:28:0f:74:9f:69:93:0e:f7: f6:98:a5:28:19:40:4a:b9:ab:f2:f6:7e:d6:0e:ae: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 24.170.208.0/20 47.19.0.0/16 104.238.237.0/24 148.76.64.0-148.76.191.255 148.77.0.0/17 192.150.73.0/24 192.188.120.0/24 IPv6: 2606:2e80::/32 2607:fda8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21867 54004 54419 63125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:32:06:4d:ef:c9:fd:29:3d:bf:48:ca:99:30:56:ea:b6:2f: b4:aa:43:b5:91:b6:41:7a:28:83:6e:6e:b5:15:67:bc:d6:c6: bd:84:fc:aa:94:50:a1:71:27:46:86:ca:55:ba:17:05:72:c5: 6e:3d:e8:2a:45:b9:9b:60:9a:b9:de:65:88:d9:d2:93:31:5d: ec:38:1d:ac:56:32:31:9f:fa:9a:b4:1a:f0:03:29:25:82:c1: ed:df:31:ca:7e:19:c7:48:01:13:5a:21:85:df:ce:75:3d:2c: 5d:ed:37:c6:42:80:cd:d9:9a:bc:77:b7:31:4b:90:57:9f:22: 72:42:e1:42:31:f6:94:c2:5c:33:a3:ef:03:d3:b8:42:b4:b3: 51:b1:88:2f:41:d8:3f:fa:e6:84:1f:d5:98:0c:a5:f1:ba:2e: e0:a5:ec:23:4a:7c:d3:31:40:51:d5:2a:4b:16:bf:3f:5b:98: 0a:ad:c4:41:81:47:2d:a7:35:3b:71:0c:59:79:47:08:f0:8a: 82:6b:33:1a:02:82:d0:a6:09:f4:8b:a3:d2:53:13:f5:bc:f5: 2d:d3:3a:76:18:63:e4:db:db:18:4d:c3:cb:37:f6:f2:7b:73: f2:b0:47:a2:0d:40:78:59:a8:91:bf:a5:65:48:19:e5:ff:8b: ab:b5:92:dd -----BEGIN CERTIFICATE----- MIIHWDCCBkCgAwIBAgIUAQ0Mn0MoWE2G8WV1CMrxH76tcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxNjE2MDYxN1oXDTI4MDQyMDE1MDI1MVowLzEtMCsGA1UEAxMk NDY5NTk3ZDAtYTg3MC00NmUyLWIwYTEtMDRhNzFkYWQwYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGlSGXSmRE24TLyCItS5fnHVCL7P1uMAC13F bj/edtONTFQrcgPOWQ+OJNkLcf0IPFbWksm7qxawPRBTtMpVRiq0MASh2FDB1pKM EaJ1GLIXH3bW0Xq3VFrxGx3cov3weBv5ydYa4Qtv0MmjCojSAaYO3liOHUiESmy1 QIWC4wHCXQMlmPIgzJ7l7il6HZRiW9b/Zajbvh1JMMGgX+3XnNQW7oWmyJmqoehB G7GkuC5rrLqFqWVZlGqVgabH9fr0ksCAslg59/jUqH1MZQLzLiwnTNU8BQZ2+ur/ DefrPKHwUrcTbJh7KA90n2mTDvf2mKUoGUBKuavy9n7WDq4crQIDAQABo4IEajCC BGYwHQYDVR0OBBYEFNki9MEUCn+TJPYJUzlc1xX9dnq0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRhZDBiMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQ2OTU5N2QwLWE4NzAtNDZlMi1i MGExLTA0YTcxZGFkMGIyNS80Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRh ZDBiMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwYAYIKwYBBQUH AQcBAf8EUTBPMDcEAgABMDEDBAQYqtADAwAvEwMEAGju7TAMAwQGlExAAwQGlEyA AwQHlE0AAwQAwJZJAwQAwLx4MBQEAgACMA4DBQAmBi6AAwUAJgf9qDAoBggrBgEF BQcBCAEB/wQZMBegFTATAgJVawIDANL0AgMA1JMCAwD2lTBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZMgZN 78n9KT2/SMqZMFbqti+0qkO1kbZBeiiDbm61FWe81sa9hPyqlFChcSdGhspVuhcF csVuPegqRbmbYJq53mWI2dKTMV3sOB2sVjIxn/qatBrwAyklgsHt3zHKfhnHSAET WiGF3851PSxd7TfGQoDN2Zq8d7cxS5BXnyJyQuFCMfaUwlwzo+8D07hCtLNRsYgv Qdg/+uaEH9WYDKXxui7gpewjSnzTMUBR1SpLFr8/W5gKrcRBgUctpzU7cQxZeUcI 8IqCazMaAoLQpgn0i6PSUxP1vPUt0zp2GGPk29sYTcPLN/bye3PysEeiDUB4WaiR v6VlSBnl/4urtZLd -----END CERTIFICATE-----Generated at Fri Apr 17 10:01:35 2026 by rpki-client