$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer File: 40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer (raw, json) Hash identifier: Nakhbu/9flLi3gTTrRldFYT7xShB+B8nX4I5RD+H4PI= Subject key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584DCF236DD16092FD3C0D155E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 12:45:17 +0000 Certificate not after: Mon 14 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 23.133.164.0/24 IP: 2602:f703::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:23:6d:d1:60:92:fd:3c:0d:15:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 12 12:45:17 2026 GMT Not After : Aug 14 12:45:17 2028 GMT Subject: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:4c:eb:8c:62:76:00:02:d4:a2:8a:e2:14: fd:7b:bd:50:f3:6e:44:d0:30:c2:fc:a4:e0:c8:21: 00:4c:da:da:cc:21:87:bd:a2:72:e2:fe:4b:6b:e9: 7f:49:ee:af:14:cc:3a:8c:04:a8:3c:33:db:d3:5f: c6:6b:38:00:ff:24:75:d8:97:9f:c4:6c:83:81:33: f2:d0:62:b3:77:f6:64:4f:ed:f7:df:22:09:f0:6b: 98:1c:c3:63:aa:94:29:a0:fb:77:bd:53:ab:00:dc: cb:17:3f:9d:3e:ed:1a:c2:77:c2:e1:67:1d:21:e5: a2:b8:4f:17:d4:43:ab:74:44:51:93:43:ed:b2:6b: f1:27:a6:36:29:5d:5e:f5:13:3a:29:5d:7b:71:1e: 75:10:d2:ae:c2:cc:c3:bb:05:34:84:fb:1d:86:5f: ba:27:6f:0d:b9:65:ea:4b:55:ac:9c:f7:9a:fd:47: 9f:79:6c:c6:b7:04:c4:5f:a3:ac:29:24:a0:9a:bb: 58:90:49:52:1a:a5:52:d3:33:c2:bf:77:0b:9c:7c: d6:2d:9b:6f:d8:01:56:db:5b:b5:a8:84:ff:4c:8d: 50:47:b3:11:de:bc:2f:3d:43:b8:64:05:33:76:46: 79:ad:ef:7e:54:b1:6c:32:8c:26:07:77:1f:41:22: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.164.0/24 IPv6: 2602:f703::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:20:8a:d3:ca:5e:c4:f8:d1:56:e0:6d:a5:1d:af:68:60:f3: 31:dc:cc:d3:9b:33:1e:ab:95:bd:a3:7a:c4:42:ec:58:50:e4: 70:0b:2f:d7:11:41:6d:ef:5b:de:43:45:93:33:ef:f1:f4:9f: 92:f7:b7:ee:2d:51:c3:c0:71:2d:06:53:47:c1:ba:01:49:97: 98:4b:bd:4c:53:a6:fe:c6:c7:5f:23:e5:6e:db:91:f2:61:67: ec:cb:1d:d3:dc:d7:47:fb:11:76:21:12:73:e6:8e:f9:be:b1: 0a:8c:72:f1:c7:66:a2:ca:84:61:94:52:c9:da:4c:71:4a:2f: e0:0e:1b:05:8c:8a:dd:a7:86:d8:c9:3b:a7:06:72:cf:f4:f0: cc:05:90:5b:69:8b:af:8d:9a:17:17:13:cf:dc:f5:76:3f:59: 8b:66:4a:09:fa:f6:a4:27:a8:b8:68:48:39:ee:34:f1:ba:4d: ce:c5:6c:19:7e:18:97:1f:3b:12:b3:08:03:8d:fb:40:47:71: a0:28:21:c8:22:51:c3:1c:83:51:8a:cd:d9:ce:f8:fb:e9:6f: 40:07:ef:b6:74:4c:78:7d:ad:f2:4f:0e:23:f9:a7:14:50:11: 1f:d1:7d:aa:a0:5a:54:a3:57:13:c1:21:24:0f:68:e3:c3:3f: 39:15:34:60 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3PI23RYJL9PA0VXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDUxMjEyNDUxN1oXDTI4MDgxNDEyNDUxN1owLzEtMCsGA1UEAxMk NDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEVM64xidgAC1KKK4hT9e71Q825E0DDC/KTg yCEATNrazCGHvaJy4v5La+l/Se6vFMw6jASoPDPb01/GazgA/yR12JefxGyDgTPy 0GKzd/ZkT+333yIJ8GuYHMNjqpQpoPt3vVOrANzLFz+dPu0awnfC4WcdIeWiuE8X 1EOrdERRk0PtsmvxJ6Y2KV1e9RM6KV17cR51ENKuwszDuwU0hPsdhl+6J28NuWXq S1WsnPea/UefeWzGtwTEX6OsKSSgmrtYkElSGqVS0zPCv3cLnHzWLZtv2AFW21u1 qIT/TI1QR7MR3rwvPUO4ZAUzdkZ5re9+VLFsMowmB3cfQSIsbwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFP0sbE0QyexQYcHrXYRSJDtiey5DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQwZDdiM2VhLThjZjYtNDRjNC1i NjgxLTdiNjI3MmU2ODhmNi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJl Njg4ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhaQwDgQCAAIwCAMGACYC9wMAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAYgitPKXsT40VbgbaUdr2hg8zHczNObMx6rlb2jesRC7FhQ5HALL9cRQW3vW95D RZMz7/H0n5L3t+4tUcPAcS0GU0fBugFJl5hLvUxTpv7Gx18j5W7bkfJhZ+zLHdPc 10f7EXYhEnPmjvm+sQqMcvHHZqLKhGGUUsnaTHFKL+AOGwWMit2nhtjJO6cGcs/0 8MwFkFtpi6+NmhcXE8/c9XY/WYtmSgn69qQnqLhoSDnuNPG6Tc7FbBl+GJcfOxKz CAON+0BHcaAoIcgiUcMcg1GKzdnO+Pvpb0AH77Z0THh9rfJPDiP5pxRQER/Rfaqg WlSjVxPBISQPaOPDPzkVNGA= -----END CERTIFICATE-----Generated at Wed May 13 05:46:09 2026 by rpki-client