$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer File: 4049ac35-71e1-42c8-878b-af94c9280b59.cer (raw, json) Hash identifier: Q8/XQNTITsagMJg9Txw0hDUfYUyTmDxRTFz5kUMFAI8= Subject key identifier: 21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D3DF7E60052145865298FCF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Mar 2026 12:45:22 +0000 Certificate not after: Fri 23 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 164.47.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:f7:e6:00:52:14:58:65:29:8f:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 21 12:45:22 2026 GMT Not After : Jun 23 12:45:22 2028 GMT Subject: CN=4049ac35-71e1-42c8-878b-af94c9280b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:03:7a:31:f1:d4:56:ee:a2:b0:1b:b2:1d: 45:4f:2c:b6:14:33:71:23:bb:6e:c4:ac:8c:35:08: ee:46:d4:9d:a5:63:cf:28:92:49:c8:bc:3d:bf:76: 5e:ad:cd:0d:1c:2b:b4:29:c9:de:df:f1:7c:f9:6f: 2c:2b:9d:8d:2e:04:ea:87:97:50:be:f1:8d:9f:fe: cc:67:77:28:11:b4:fa:a1:cc:e7:a7:89:ea:9e:41: 42:31:6f:23:02:6a:08:bd:b7:68:d8:25:36:35:f1: cb:0e:1d:51:b2:78:d0:a7:3d:26:24:35:78:7e:61: a5:f2:b8:c8:bb:4c:64:c6:fc:dd:62:36:a0:cd:5f: 88:28:8e:15:d7:d6:50:87:45:3c:bc:d4:7d:84:04: f6:4f:04:68:b0:c8:f5:7a:0e:33:6c:7e:a0:42:7c: ab:73:b2:b3:99:04:e4:fd:f3:06:be:62:c7:cd:57: 16:66:a9:7f:90:66:6b:21:27:ee:81:7b:cf:69:37: 2d:52:95:f5:c1:c2:79:3b:8a:8d:59:8e:00:e8:8e: 5f:a5:e0:f4:59:70:45:84:13:7e:9c:7a:f6:0c:7f: e8:2a:2e:c7:d2:e7:fe:ac:bd:0e:5f:09:20:7d:21: cd:9d:a2:3b:29:da:9a:5e:ae:11:ec:cf:4b:23:d0: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 164.47.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:09:fd:df:8a:92:6f:75:38:f4:2f:a5:b6:97:ec:f8:19:be: cd:d1:4d:61:7f:16:99:16:f7:3b:98:b0:7c:78:2a:1a:73:4f: 43:f3:1f:4f:80:95:bf:87:fd:84:a7:be:8d:f9:23:ce:ad:70: 91:f6:42:15:77:ba:23:d8:b8:2b:a3:a5:08:cf:4f:2c:5c:c3: 74:d5:12:cd:23:7c:e4:c0:1a:d9:fb:b3:67:13:70:fa:3d:66: 6e:19:58:ca:c6:25:6a:5f:3b:0c:01:83:30:9b:ea:22:17:60: cd:4a:32:05:e9:b5:3c:40:ca:42:ed:6a:60:5e:f8:12:0a:01: f4:0d:86:bd:e0:de:9d:87:6c:d5:39:c0:b5:51:6c:54:46:91: 82:b9:48:03:66:2d:db:84:10:fa:67:ba:0c:2c:31:88:ef:a7: 61:09:95:c3:4c:fe:ad:0c:1e:1b:35:a8:05:ba:26:c0:9f:68: 03:25:24:f8:d8:cf:92:89:2e:86:98:c9:be:d6:f7:4a:19:84: 51:b9:2c:3f:41:df:b9:aa:ef:bf:60:f1:ea:9a:44:88:d8:c0: da:9e:b6:b9:39:84:61:a5:99:aa:4b:a6:e5:1d:6f:b1:ca:ca: 0f:0e:00:3a:ac:64:c2:f4:57:50:43:a0:62:a6:0b:ed:a1:f6: 09:c2:5c:1e -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE099+YAUhRYZSmPzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMyMTEyNDUyMloXDTI4MDYyMzEyNDUyMlowLzEtMCsGA1UEAxMk NDA0OWFjMzUtNzFlMS00MmM4LTg3OGItYWY5NGM5MjgwYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1kDejHx1FbuorAbsh1FTyy2FDNxI7tuxKyM NQjuRtSdpWPPKJJJyLw9v3Zerc0NHCu0Kcne3/F8+W8sK52NLgTqh5dQvvGNn/7M Z3coEbT6ocznp4nqnkFCMW8jAmoIvbdo2CU2NfHLDh1RsnjQpz0mJDV4fmGl8rjI u0xkxvzdYjagzV+IKI4V19ZQh0U8vNR9hAT2TwRosMj1eg4zbH6gQnyrc7KzmQTk /fMGvmLHzVcWZql/kGZrISfugXvPaTctUpX1wcJ5O4qNWY4A6I5fpeD0WXBFhBN+ nHr2DH/oKi7H0uf+rL0OXwkgfSHNnaI7KdqaXq4R7M9LI9D7AwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCGtvIvoSKqJvnOIzZiFMsqoqmwyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 MDQ5YWMzNS03MWUxLTQyYzgtODc4Yi1hZjk0YzkyODBiNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQwNDlhYzM1LTcxZTEtNDJjOC04 NzhiLWFmOTRjOTI4MGI1OS80MDQ5YWMzNS03MWUxLTQyYzgtODc4Yi1hZjk0Yzky ODBiNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCkLzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtCf3fipJvdTj0L6W2l+z4 Gb7N0U1hfxaZFvc7mLB8eCoac09D8x9PgJW/h/2Ep76N+SPOrXCR9kIVd7oj2Lgr o6UIz08sXMN01RLNI3zkwBrZ+7NnE3D6PWZuGVjKxiVqXzsMAYMwm+oiF2DNSjIF 6bU8QMpC7WpgXvgSCgH0DYa94N6dh2zVOcC1UWxURpGCuUgDZi3bhBD6Z7oMLDGI 76dhCZXDTP6tDB4bNagFuibAn2gDJST42M+SiS6GmMm+1vdKGYRRuSw/Qd+5qu+/ YPHqmkSI2MDanra5OYRhpZmqS6blHW+xysoPDgA6rGTC9FdQQ6BipgvtofYJwlwe -----END CERTIFICATE-----Generated at Wed Mar 25 23:24:01 2026 by rpki-client