$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer File: 1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer (raw, json) Hash identifier: RdThS3vbkNYHb65mEFUABi8uMftcQ086kLyhaoc3Dr4= Subject key identifier: 4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D91B8612C9071E7152FEEAA60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 12:45:17 +0000 Certificate not after: Sun 23 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 204.228.68.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:b8:61:2c:90:71:e7:15:2f:ee:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 20 12:45:17 2026 GMT Not After : Jul 23 12:45:17 2028 GMT Subject: CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:27:3e:cd:91:21:69:6f:77:5d:a5:e1:1d: dc:6b:0c:d0:7f:dc:2b:67:9f:8d:0b:50:00:b8:00: 78:bc:dc:ca:5b:1d:23:fa:32:94:bc:ea:a6:bc:bd: a0:fd:9d:de:0f:45:4b:f5:e6:fa:04:02:28:b8:11: 1f:30:89:9d:e9:0b:88:f5:6c:bd:65:f3:d9:e5:82: 98:66:9a:65:92:3e:8e:9c:b9:fd:0a:f4:21:17:bc: 07:9f:81:51:30:69:bd:eb:97:9d:de:fc:0e:a2:e7: be:a1:b6:b1:44:98:88:60:8d:03:63:86:59:89:db: 24:db:5c:fc:09:25:01:20:63:d5:8a:7e:eb:d2:aa: 7d:84:18:43:13:71:78:df:52:78:34:97:e6:47:42: b4:3d:f4:6c:6d:6c:30:60:15:80:37:4e:dc:a7:94: 1e:08:ab:bc:f0:77:a5:3c:d7:f2:45:6f:f8:fd:f6: 6f:af:c4:a3:cb:ac:a2:53:19:c7:2f:89:cb:76:c8: d3:db:a7:f1:79:26:72:b5:1b:d1:73:03:da:b4:73: 67:64:36:89:e2:ea:6d:e3:34:f0:64:eb:ef:4e:d4: 82:c4:d6:7d:52:c2:19:22:3d:88:95:6f:51:a3:ec: 1e:ac:d2:5e:4a:d3:a5:9b:bd:c3:e4:a1:06:87:d3: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 204.228.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e4:3a:54:c2:15:7e:37:39:42:9c:44:71:d2:e7:79:57:29: 81:22:19:85:86:ad:c3:9c:e5:d5:60:0a:c4:f1:d9:7e:63:3d: e9:df:38:83:04:a3:f1:06:37:b4:15:41:bf:4f:90:81:e0:4f: 87:c9:9b:df:a8:7f:6c:86:67:c4:be:41:b2:11:67:11:df:e8: c5:12:36:e1:73:99:e3:50:e9:15:4f:4c:9c:2d:66:d5:80:d4: c2:60:19:09:61:95:98:20:0c:24:19:1c:ff:fe:0c:77:a1:1d: 38:57:1a:fa:d6:37:dc:3e:02:4d:0c:99:ec:90:1a:fe:fc:36: 97:c1:5c:83:90:33:69:3d:18:cf:c2:24:5f:b6:09:a4:7a:49: d5:bc:f7:d4:bc:0c:7f:6c:01:d7:0b:a0:c7:40:06:2c:cc:fd: 29:5d:b8:37:e3:50:05:d2:6f:6b:73:8f:d8:49:42:36:a9:d2: 04:a7:e2:36:46:be:21:86:56:2d:3d:4f:e3:f4:83:1b:22:9b: 33:83:70:ea:49:4c:4b:a7:17:2e:33:7e:ad:cf:53:c7:24:9e: eb:29:5c:55:e3:f0:12:a3:24:d1:90:b0:31:49:77:47:68:e0: d1:a7:92:3f:ec:17:be:79:23:1b:2f:cc:58:88:35:bc:8a:ae: 33:f7:d8:6e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2RuGEskHHnFS/uqmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDQyMDEyNDUxN1oXDTI4MDcyMzEyNDUxN1owLzEtMCsGA1UEAxMk MTU2MmMxYWItYjM5NS00OGVlLThkMmQtZjM0ZDQ3ZTRlZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrMnPs2RIWlvd12l4R3cawzQf9wrZ5+NC1AA uAB4vNzKWx0j+jKUvOqmvL2g/Z3eD0VL9eb6BAIouBEfMImd6QuI9Wy9ZfPZ5YKY Zpplkj6OnLn9CvQhF7wHn4FRMGm965ed3vwOoue+obaxRJiIYI0DY4ZZidsk21z8 CSUBIGPVin7r0qp9hBhDE3F431J4NJfmR0K0PfRsbWwwYBWAN07cp5QeCKu88Hel PNfyRW/4/fZvr8Sjy6yiUxnHL4nLdsjT26fxeSZytRvRcwPatHNnZDaJ4upt4zTw ZOvvTtSCxNZ9UsIZIj2IlW9Ro+werNJeStOlm73D5KEGh9OGVQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEogwXh5iLBPGI/LQM/Bi2kNgouwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x NTYyYzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRkNDdlNGVlNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzE1NjJjMWFiLWIzOTUtNDhlZS04 ZDJkLWYzNGQ0N2U0ZWU2My8xNTYyYzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRkNDdl NGVlNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALM5EQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAseQ6VMIVfjc5QpxEcdLn eVcpgSIZhYatw5zl1WAKxPHZfmM96d84gwSj8QY3tBVBv0+QgeBPh8mb36h/bIZn xL5BshFnEd/oxRI24XOZ41DpFU9MnC1m1YDUwmAZCWGVmCAMJBkc//4Md6EdOFca +tY33D4CTQyZ7JAa/vw2l8Fcg5AzaT0Yz8IkX7YJpHpJ1bz31LwMf2wB1wugx0AG LMz9KV24N+NQBdJva3OP2ElCNqnSBKfiNka+IYZWLT1P4/SDGyKbM4Nw6klMS6cX LjN+rc9TxySe6ylcVePwEqMk0ZCwMUl3R2jg0aeSP+wXvnkjGy/MWIg1vIquM/fY bg== -----END CERTIFICATE-----Generated at Wed May 13 07:09:49 2026 by rpki-client