$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42406f2e-e40d-4f6f-bf30-4707180723b0.cer File: 42406f2e-e40d-4f6f-bf30-4707180723b0.cer (raw, json) Hash identifier: LAgF9I7nYapIj88win9SZ5tPh3oEvwivbSkRqlR2f9s= Subject key identifier: E7:A3:6C:C7:EA:D8:99:71:00:8A:C2:8D:92:80:48:C0:17:2B:84:4E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D98B3167E4D4BE3F3862FC9A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42406f2e-e40d-4f6f-bf30-4707180723b0/42406f2e-e40d-4f6f-bf30-4707180723b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42406f2e-e40d-4f6f-bf30-4707180723b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Apr 2026 00:45:17 +0000 Certificate not after: Wed 26 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 401621 IP: 131.143.127.0/24 IP: 2602:f729::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:b3:16:7e:4d:4b:e3:f3:86:2f:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 23 00:45:17 2026 GMT Not After : Jul 26 00:45:17 2028 GMT Subject: CN=42406f2e-e40d-4f6f-bf30-4707180723b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2b:fa:d5:22:39:2e:9e:52:71:ce:69:52:bd: d3:df:12:f1:83:7d:b0:ed:da:6a:3f:9d:3d:8c:b6: 3b:9b:cc:d7:d5:d1:bc:28:13:5c:83:46:fc:15:f8: 0c:26:64:ee:c2:ee:d4:ed:f8:c0:87:5a:e7:b4:78: 9c:07:4e:1f:68:90:64:83:10:87:a0:b1:e0:f7:4c: 93:34:13:11:dc:b8:93:63:97:1b:9e:01:ed:4a:9c: cd:33:df:a6:93:d4:e0:01:26:29:cb:69:2a:e5:87: aa:d6:ec:77:47:59:4d:63:4f:2b:14:4e:2c:6f:9b: 29:ed:06:11:f1:d7:b5:dc:f8:87:9c:1f:ff:fa:cd: e3:74:3c:9c:64:c0:28:5d:43:fc:41:88:62:09:da: 03:86:f1:6d:f9:3e:0a:ed:46:e9:f7:5b:c5:74:a2: ea:08:d2:6c:27:3c:9e:46:76:ef:2c:83:ea:41:43: 74:fc:4b:a7:13:3e:ca:b0:90:d9:ed:f0:1d:bf:70: ff:ce:19:33:6f:53:8c:c8:69:f4:61:2d:a2:5d:b6: 34:62:81:f6:78:2d:13:07:89:87:f7:93:dd:2b:3a: 9f:44:c5:a5:9a:3e:92:4e:3a:0e:0a:f6:b8:95:dd: 4f:02:80:e3:90:66:b7:f6:44:94:7b:c1:bb:62:38: df:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A3:6C:C7:EA:D8:99:71:00:8A:C2:8D:92:80:48:C0:17:2B:84:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42406f2e-e40d-4f6f-bf30-4707180723b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42406f2e-e40d-4f6f-bf30-4707180723b0/42406f2e-e40d-4f6f-bf30-4707180723b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 131.143.127.0/24 IPv6: 2602:f729::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f0:6c:8e:18:ba:67:d9:cf:1f:0b:cb:56:0c:e4:1b:c6:39: 3c:8e:8e:7d:1a:60:a7:6f:78:e5:03:93:84:93:d3:12:7a:c4: 3a:5b:5c:58:7b:f5:93:48:eb:39:60:1a:05:53:a2:ab:8b:b0: 45:6c:5e:6b:9e:e3:ae:4d:9a:18:16:cc:b3:e6:72:4e:0e:49: 55:d3:de:8f:d8:2b:2b:71:b9:9e:73:63:2d:2a:0c:60:5c:d9: b6:f7:9b:99:c7:2d:80:db:98:f5:cc:b5:3e:ee:8a:c7:df:c5: d9:7f:67:c4:04:c1:6f:57:d5:a5:ce:ac:db:af:03:d3:39:38: d1:1d:c3:8f:7e:a3:3a:62:79:f2:42:80:20:9a:2c:cb:5c:5c: 21:18:7b:fb:65:f4:2c:c9:e1:2b:9e:4c:04:2f:e4:38:74:42: d6:47:97:4e:6d:39:a1:f3:88:2a:d6:73:42:da:58:c6:95:53: 5b:52:2f:f0:3a:e5:ef:15:c5:8b:3a:14:fa:82:05:82:5f:ed: da:fb:cd:23:9c:f7:4c:79:83:91:b4:70:18:80:41:3c:81:43: 95:45:d0:d1:5b:65:d7:75:28:5d:51:fc:8d:5d:47:2b:c5:f9: 2e:ea:55:c4:6d:69:e2:49:21:c4:ac:2c:75:b9:9f:4a:a9:14: 97:3d:d0:16 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2YsxZ+TUvj84YvyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyMzAwNDUxN1oXDTI4MDcyNjAwNDUxN1owLzEtMCsGA1UEAxMk NDI0MDZmMmUtZTQwZC00ZjZmLWJmMzAtNDcwNzE4MDcyM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiv61SI5Lp5Scc5pUr3T3xLxg32w7dpqP509 jLY7m8zX1dG8KBNcg0b8FfgMJmTuwu7U7fjAh1rntHicB04faJBkgxCHoLHg90yT NBMR3LiTY5cbngHtSpzNM9+mk9TgASYpy2kq5Yeq1ux3R1lNY08rFE4sb5sp7QYR 8de13PiHnB//+s3jdDycZMAoXUP8QYhiCdoDhvFt+T4K7Ubp91vFdKLqCNJsJzye RnbvLIPqQUN0/EunEz7KsJDZ7fAdv3D/zhkzb1OMyGn0YS2iXbY0YoH2eC0TB4mH 95PdKzqfRMWlmj6STjoOCva4ld1PAoDjkGa39kSUe8G7YjjfcwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOejbMfq2JlxAIrCjZKASMAXK4ROMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 MjQwNmYyZS1lNDBkLTRmNmYtYmYzMC00NzA3MTgwNzIzYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQyNDA2ZjJlLWU0MGQtNGY2Zi1i ZjMwLTQ3MDcxODA3MjNiMC80MjQwNmYyZS1lNDBkLTRmNmYtYmYzMC00NzA3MTgw NzIzYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACDj38wDgQCAAIwCAMGACYC9ykAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYg1TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBN8GyOGLpn2c8fC8tWDOQbxjk8 jo59GmCnb3jlA5OEk9MSesQ6W1xYe/WTSOs5YBoFU6Kri7BFbF5rnuOuTZoYFsyz 5nJODklV096P2Csrcbmec2MtKgxgXNm295uZxy2A25j1zLU+7orH38XZf2fEBMFv V9WlzqzbrwPTOTjRHcOPfqM6YnnyQoAgmizLXFwhGHv7ZfQsyeErnkwEL+Q4dELW R5dObTmh84gq1nNC2ljGlVNbUi/wOuXvFcWLOhT6ggWCX+3a+80jnPdMeYORtHAY gEE8gUOVRdDRW2XXdShdUfyNXUcrxfku6lXEbWniSSHErCx1uZ9KqRSXPdAW -----END CERTIFICATE-----Generated at Tue May 12 22:08:12 2026 by rpki-client