$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer File: 324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer (raw, json) Hash identifier: yqDUcrYoyozoQTEsxQ0BFwKgZyLRJprPDZ/tRnwpknY= Subject key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Authority key identifier: 71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 Certificate issuer: /CN=51cd99f7-2f42-4dec-b2c6-09bafaa3780e Certificate serial: 010D0C9F4328584D0938D27E0F86239CE070A0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 08 Oct 2025 23:43:34 +0000 Certificate not after: Wed 12 Jan 2028 00:43:34 +0000 Subordinate resources: IP: 23.191.40.0/24 IP: 130.12.93.0/24 IP: 2602:f7de::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:38:d2:7e:0f:86:23:9c:e0:70:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51cd99f7-2f42-4dec-b2c6-09bafaa3780e Validity Not Before: Oct 8 23:43:34 2025 GMT Not After : Jan 12 00:43:34 2028 GMT Subject: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:81:a3:a6:8c:fa:e9:75:0b:45:7c:ee:37: 8c:d6:bd:c0:60:0d:45:8d:2a:b0:aa:2c:7a:42:38: a5:38:5c:c9:b2:9c:07:a3:3a:f8:9d:ba:3f:bd:d5: e3:e8:82:f3:c0:d7:27:e8:cb:74:5b:8f:f7:8e:50: 41:c1:3e:72:ce:b3:00:90:c1:fc:d9:a1:c0:07:8b: 0d:5b:9a:81:01:5b:7f:c8:5c:eb:be:af:12:27:bd: cb:83:3c:1b:af:3a:40:ca:f4:66:dd:82:5c:4f:26: c8:16:b4:ed:7d:f4:ae:cc:21:e8:41:69:b5:85:cd: 44:1a:9b:c7:1d:db:3d:4c:f2:8e:f3:70:48:cf:b5: 27:32:59:d6:60:db:0e:d6:b3:6d:a8:71:15:cc:14: 47:43:b7:ce:8e:9d:60:4a:03:40:91:19:31:b6:4c: b6:db:94:88:cf:c8:18:21:5f:e1:91:50:2c:99:2a: 51:98:c7:63:bf:ee:4b:35:a9:00:c2:33:81:a6:08: e3:23:a1:fb:13:b0:10:40:fc:c8:9d:62:99:99:d1: 05:ff:ba:7c:f3:5c:99:d2:9d:51:73:87:5c:e9:4b: 33:05:2f:b4:13:fd:2b:49:d7:5a:80:05:48:1a:e7: bc:99:61:a5:dd:be:94:28:5d:55:cd:17:78:cf:6f: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl X509v3 Authority Key Identifier: keyid:71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer sbgp-ipAddrBlock: critical IPv4: 23.191.40.0/24 130.12.93.0/24 IPv6: 2602:f7de::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:64:fe:80:78:b4:0a:1b:22:c7:70:f2:ae:fc:04:e2:f5:ae: 43:77:af:20:17:77:00:4f:2f:27:03:89:3e:7a:9b:a0:dc:f8: 1b:4b:29:35:18:98:cf:51:50:37:c8:f8:41:4b:fc:e2:32:8e: eb:bd:c3:72:dc:84:66:18:b3:23:e6:8e:7c:84:3a:df:93:27: db:a8:cf:ec:42:ff:36:91:96:47:bb:7d:08:1c:fa:f9:c2:00: 40:55:bd:4f:92:a8:e7:a3:b0:fa:bf:f5:b0:76:06:50:8e:3b: 65:0a:38:10:69:a4:3f:95:ac:b0:99:73:9f:c9:8f:ac:d2:02: 65:24:92:46:e8:1f:02:43:63:db:3b:73:25:1b:14:38:c5:c8: 5a:1f:b9:12:b7:47:4b:9a:70:bc:16:b5:03:4b:fb:36:6b:8f: b9:fd:66:3d:87:6f:0f:02:7c:3b:30:d0:5f:90:ea:86:5b:ce: 98:84:93:b7:35:21:65:e1:23:4c:d9:e3:b0:34:7f:8d:5f:73: a4:52:13:b1:f6:f1:25:14:f2:2a:45:6b:a2:92:6a:64:29:48: 33:ed:4a:55:03:48:48:ed:26:16:5e:e9:3c:e6:79:0f:0a:29: 1c:06:68:89:e7:3b:f1:ad:3f:44:de:55:d3:44:b9:d7:f5:3f: 7c:46:e1:8f -----BEGIN CERTIFICATE----- MIIG0zCCBbugAwIBAgIUAQ0Mn0MoWE0JONJ+D4YjnOBwoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFjZDk5ZjctMmY0Mi00ZGVjLWIyYzYtMDliYWZhYTM3 ODBlMB4XDTI1MTAwODIzNDMzNFoXDTI4MDExMjAwNDMzNFowPTE7MDkGA1UEAxMy MzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3NjdjZjNkMGI5ZmRlNjIz MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgoGjpoz66XULRXzu N4zWvcBgDUWNKrCqLHpCOKU4XMmynAejOviduj+91ePogvPA1yfoy3Rbj/eOUEHB PnLOswCQwfzZocAHiw1bmoEBW3/IXOu+rxInvcuDPBuvOkDK9GbdglxPJsgWtO19 9K7MIehBabWFzUQam8cd2z1M8o7zcEjPtScyWdZg2w7Ws22ocRXMFEdDt86OnWBK A0CRGTG2TLbblIjPyBghX+GRUCyZKlGYx2O/7ks1qQDCM4GmCOMjofsTsBBA/Mid YpmZ0QX/unzzXJnSnVFzh1zpSzMFL7QT/StJ11qABUga57yZYaXdvpQoXVXNF3jP b+xdAgMBAAGjggPXMIID0zAdBgNVHQ4EFgQUP806g56hQX/ZiPPd/QRUGX+q9How ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5 Zi1hMjI5LTBhYjcwZTQ4MTViYi8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5RUExNDE3RkQ5ODhGM0RE RkQwNDU0MTk3RkFBRjQ3QS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2 ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0wOWJhZmFhMzc4MGUvNTFjZDk5 ZjctMmY0Mi00ZGVjLWIyYzYtMDliYWZhYTM3ODBlLmNybDAfBgNVHSMEGDAWgBRx xgiK2Vq/eT704sVx68VrKNJ3IjAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzUx Y2Q5OWY3LTJmNDItNGRlYy1iMmM2LTA5YmFmYWEzNzgwZS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXvygDBACCDF0wDgQCAAIwCAMGACYC994AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1k/oB4tAobIsdw8q78BOL1rkN3ryAXdwBPLycDiT56m6Dc+BtLKTUY mM9RUDfI+EFL/OIyjuu9w3LchGYYsyPmjnyEOt+TJ9uoz+xC/zaRlke7fQgc+vnC AEBVvU+SqOejsPq/9bB2BlCOO2UKOBBppD+VrLCZc5/Jj6zSAmUkkkboHwJDY9s7 cyUbFDjFyFofuRK3R0uacLwWtQNL+zZrj7n9Zj2Hbw8CfDsw0F+Q6oZbzpiEk7c1 IWXhI0zZ47A0f41fc6RSE7H28SUU8ipFa6KSamQpSDPtSlUDSEjtJhZe6TzmeQ8K KRwGaInnO/GtP0TeVdNEudf1P3xG4Y8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:57 2026 by rpki-client