$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808.cer File: 821acbde-bbb2-4953-b4eb-6a706f6f3808.cer (raw, json) Hash identifier: BHmaumAKi4BtfARuhmrT2tT9Q1vph/kd7wC+VH6/Iec= Subject key identifier: C1:56:77:5C:A2:A0:8D:E4:68:05:4E:39:7A:C6:9E:85:F9:03:7A:CB Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D46ACC937F4C036EF18EB6DB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/821acbde-bbb2-4953-b4eb-6a706f6f3808.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Mar 2026 15:36:18 +0000 Certificate not after: Tue 01 Feb 2028 20:37:57 +0000 Subordinate resources: AS: 393725 AS: 394512 IP: 104.193.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:ac:c9:37:f4:c0:36:ef:18:eb:6d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 24 15:36:18 2026 GMT Not After : Feb 1 20:37:57 2028 GMT Subject: CN=821acbde-bbb2-4953-b4eb-6a706f6f3808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:a3:3e:e4:92:d8:bd:cb:60:e7:4b:7d:f8: 14:91:6b:94:a3:3f:cc:c9:bb:70:5b:da:3a:8e:d3: 94:16:27:e2:6b:f1:be:0c:e3:31:86:e4:11:fe:16: e1:90:b9:36:ae:86:ad:67:e7:76:92:60:b1:85:60: be:64:bd:dd:90:01:65:f8:88:5e:7d:e5:00:d9:62: 98:04:f2:3d:8f:4d:4d:8b:7c:93:b1:c0:f3:a0:7c: 42:2b:a0:cb:0a:cd:02:a5:18:b3:5e:6b:48:e5:b8: f3:57:fb:cd:eb:2a:00:47:d9:0f:27:4b:3c:79:d3: f3:27:b7:44:13:be:05:08:9e:b2:f9:f9:8f:9f:7f: 8a:34:44:9b:03:82:96:10:a4:20:b3:0b:3c:4d:80: 3c:ad:1f:0b:f0:6c:dc:8b:e2:1a:52:2a:4f:43:99: 82:41:5a:ce:43:07:63:af:11:b1:f7:a0:d4:aa:33: 5e:36:6e:7f:0f:21:ab:1f:32:2b:f5:d1:2a:3b:29: c8:ec:33:2e:ff:d3:56:20:a5:be:7f:a4:a1:22:3d: bf:44:ac:cf:3a:fb:7b:de:a3:6d:b8:c4:2e:dc:55: 70:47:0c:9e:0b:0d:99:a6:27:74:24:d0:d2:30:4b: ed:a5:3e:b9:1c:3f:a1:ee:79:1c:ae:ce:bd:77:1a: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:56:77:5C:A2:A0:8D:E4:68:05:4E:39:7A:C6:9E:85:F9:03:7A:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/821acbde-bbb2-4953-b4eb-6a706f6f3808.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.193.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393725 394512 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:72:0d:2a:77:cb:ea:9d:99:e6:07:18:87:a4:85:01:57:30: 4f:ec:b1:89:a8:5a:98:1f:bc:43:09:57:2c:39:e7:c5:83:9f: 95:a3:cf:a2:34:ab:37:bb:94:9d:3d:20:5d:01:6d:e2:c7:d9: b5:91:66:de:c1:08:16:95:6f:62:84:e8:ec:fe:6f:41:4b:42: 2e:09:36:1f:43:82:9e:8c:8b:dd:7d:cf:2c:8e:9d:28:e5:41: 56:46:7c:e6:8a:c1:8f:6d:ff:c1:b7:60:95:73:bb:38:3b:6f: ef:cb:61:6d:9a:ea:9b:1f:2c:08:79:92:8e:d4:d5:8c:9f:e2: 7e:fd:8d:ef:44:e6:0c:9f:34:d6:6c:78:7d:8b:b6:00:29:25: b7:e5:d8:bd:af:52:3b:cf:73:5c:9b:c8:35:b2:b0:64:65:76: cb:4f:da:88:dc:7f:c6:03:28:d7:73:12:6c:f1:f5:f0:a8:9a: e7:0a:27:80:a9:f3:cb:25:06:65:98:55:ff:d0:05:e6:7c:cb: 63:16:b2:dd:0b:bc:5b:36:1a:24:7f:4e:cd:81:d4:7b:23:af: bd:0f:74:eb:fa:a9:f7:0a:92:b1:3d:81:d3:e2:48:09:db:25: 88:77:e6:18:65:da:6d:1e:a8:50:a2:69:64:62:9a:ef:b1:15: 0e:1f:0b:82 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE1GrMk39MA27xjrbbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMyNDE1MzYxOFoXDTI4MDIwMTIwMzc1N1owLzEtMCsGA1UEAxMk ODIxYWNiZGUtYmJiMi00OTUzLWI0ZWItNmE3MDZmNmYzODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrejPuSS2L3LYOdLffgUkWuUoz/MybtwW9o6 jtOUFifia/G+DOMxhuQR/hbhkLk2roatZ+d2kmCxhWC+ZL3dkAFl+IhefeUA2WKY BPI9j01Ni3yTscDzoHxCK6DLCs0CpRizXmtI5bjzV/vN6yoAR9kPJ0s8edPzJ7dE E74FCJ6y+fmPn3+KNESbA4KWEKQgsws8TYA8rR8L8Gzci+IaUipPQ5mCQVrOQwdj rxGx96DUqjNeNm5/DyGrHzIr9dEqOynI7DMu/9NWIKW+f6ShIj2/RKzPOvt73qNt uMQu3FVwRwyeCw2Zpid0JNDSMEvtpT65HD+h7nkcrs69dxofUQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFMFWd1yioI3kaAVOOXrGnoX5A3rLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 MjFhY2JkZS1iYmIyLTQ5NTMtYjRlYi02YTcwNmY2ZjM4MDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgyMWFjYmRlLWJiYjItNDk1My1i NGViLTZhNzA2ZjZmMzgwOC84MjFhY2JkZS1iYmIyLTQ5NTMtYjRlYi02YTcwNmY2 ZjM4MDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowXwwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID BgH9AgMGBRAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAXHINKnfL6p2Z5gcYh6SFAVcwT+yxiahamB+8QwlX LDnnxYOflaPPojSrN7uUnT0gXQFt4sfZtZFm3sEIFpVvYoTo7P5vQUtCLgk2H0OC noyL3X3PLI6dKOVBVkZ85orBj23/wbdglXO7ODtv78thbZrqmx8sCHmSjtTVjJ/i fv2N70TmDJ801mx4fYu2ACklt+XYva9SO89zXJvINbKwZGV2y0/aiNx/xgMo13MS bPH18Kia5wongKnzyyUGZZhV/9AF5nzLYxay3Qu8WzYaJH9OzYHUeyOvvQ906/qp 9wqSsT2B0+JICdsliHfmGGXabR6oUKJpZGKa77EVDh8Lgg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:29 2026 by rpki-client