$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer File: 40a67241-3cd8-43fd-9ff7-3e18bd867926.cer (raw, json) Hash identifier: G/+iCCY0G5Wk2IaO9nkKcfagbaJteyoWRbJ9rn0gx6o= Subject key identifier: D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3597D8EB1037F2C4AC3419C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 12:45:22 +0000 Certificate not after: Tue 20 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 202.37.170.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:97:d8:eb:10:37:f2:c4:ac:34:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 12:45:22 2026 GMT Not After : Jun 20 12:45:22 2028 GMT Subject: CN=40a67241-3cd8-43fd-9ff7-3e18bd867926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:a2:6c:e5:a6:23:79:62:8c:fa:e0:ed:86: 52:ab:4f:91:db:e4:c5:00:40:55:02:bd:6b:6a:f8: ad:72:74:d1:11:3b:1d:14:d8:b2:29:b5:1c:c9:84: 03:9f:c1:a0:26:28:e6:51:d9:a0:95:9f:d8:b7:ef: b1:7d:31:77:18:9b:a1:87:25:64:1c:fa:bf:b3:e3: ce:3c:d8:38:52:1f:78:9f:8f:0c:0a:73:92:c7:14: 3a:a1:af:ec:d5:5f:87:09:2d:f1:76:61:42:47:78: 5b:45:15:49:72:9d:89:18:9c:be:72:91:cf:a2:30: f5:65:e3:da:6c:b8:27:e2:c5:60:32:b2:d8:d6:af: 02:8f:23:f7:a2:a2:1f:52:e0:b8:d0:d4:47:99:49: cf:fb:6f:cc:f6:e6:18:b9:02:48:39:7a:bd:8b:89: 67:5e:71:da:cd:75:f3:c6:06:42:3c:42:4c:50:da: 74:95:78:8c:e6:12:be:88:44:a6:b3:e6:43:e4:25: 00:95:83:8d:85:14:41:ff:59:9c:44:62:f1:88:ce: 2d:58:64:20:bd:e0:9d:e6:e9:97:6e:10:09:3f:43: f8:3f:f1:57:b5:e6:9d:ea:1c:46:e9:2d:87:f8:8c: d3:55:dc:86:ee:6e:5b:1c:2a:10:e2:1f:9b:91:40: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 202.37.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ef:b9:fd:de:98:a3:fe:cc:4a:ac:d8:a1:85:64:b6:9d:5e: a8:92:5a:f0:a8:c4:44:16:61:15:4f:48:8b:b6:ed:e5:95:40: a3:da:b2:6a:9f:3e:31:c5:13:ac:40:53:68:62:e8:ed:c5:18: 2e:91:c3:cf:58:26:fb:51:cf:0c:bf:bc:fe:9b:e1:c5:4e:af: c3:53:83:de:87:59:90:d8:ba:8b:00:20:2f:26:28:f2:ed:d5: ed:fd:9e:10:3c:87:1b:b6:be:d7:16:a8:6a:07:88:9f:56:ef: 97:85:40:47:f6:65:72:36:a9:bd:ca:cf:19:50:a6:db:c4:7d: 2f:19:c2:84:08:db:b6:62:a1:b4:9d:10:ad:9a:32:3f:5b:03: 70:8c:98:6b:84:50:a1:42:33:63:05:72:81:c7:c6:21:95:fa: 69:1e:7d:00:d8:90:35:1f:78:6e:6d:93:a5:04:2a:d6:07:37: aa:f6:08:99:c8:e3:3e:20:56:9f:dd:5a:77:93:22:4e:bb:be: 63:c5:65:ac:30:4d:e5:ab:a5:4b:6a:f5:a3:1a:79:96:e4:68: 97:54:19:91:fc:c6:3a:8e:85:3f:c3:39:d5:d6:ea:65:59:3a: b0:7a:17:c0:8e:32:1a:89:e3:2a:e1:d3:f0:03:58:19:7f:29: 60:6e:5e:05 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE01l9jrEDfyxKw0GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxODEyNDUyMloXDTI4MDYyMDEyNDUyMlowLzEtMCsGA1UEAxMk NDBhNjcyNDEtM2NkOC00M2ZkLTlmZjctM2UxOGJkODY3OTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv+ibOWmI3lijPrg7YZSq0+R2+TFAEBVAr1r avitcnTRETsdFNiyKbUcyYQDn8GgJijmUdmglZ/Yt++xfTF3GJuhhyVkHPq/s+PO PNg4Uh94n48MCnOSxxQ6oa/s1V+HCS3xdmFCR3hbRRVJcp2JGJy+cpHPojD1ZePa bLgn4sVgMrLY1q8CjyP3oqIfUuC40NRHmUnP+2/M9uYYuQJIOXq9i4lnXnHazXXz xgZCPEJMUNp0lXiM5hK+iESms+ZD5CUAlYONhRRB/1mcRGLxiM4tWGQgveCd5umX bhAJP0P4P/FXtead6hxG6S2H+IzTVdyG7m5bHCoQ4h+bkUBqMQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNW1WZ/W/nEc+g6+zgsp2jTbAvWeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 MGE2NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4YmQ4Njc5MjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQwYTY3MjQxLTNjZDgtNDNmZC05 ZmY3LTNlMThiZDg2NzkyNi80MGE2NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4YmQ4 Njc5MjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADKJaowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABe+5/d6Yo/7MSqzYoYVk tp1eqJJa8KjERBZhFU9Ii7bt5ZVAo9qyap8+McUTrEBTaGLo7cUYLpHDz1gm+1HP DL+8/pvhxU6vw1OD3odZkNi6iwAgLyYo8u3V7f2eEDyHG7a+1xaoageIn1bvl4VA R/ZlcjapvcrPGVCm28R9LxnChAjbtmKhtJ0QrZoyP1sDcIyYa4RQoUIzYwVygcfG IZX6aR59ANiQNR94bm2TpQQq1gc3qvYImcjjPiBWn91ad5MiTru+Y8VlrDBN5aul S2r1oxp5luRol1QZkfzGOo6FP8M51dbqZVk6sHoXwI4yGonjKuHT8ANYGX8pYG5e BQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:12:05 2026 by rpki-client