$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer File: 4d906a8c-85ee-4279-9f48-d84ea4865122.cer (raw, json) Hash identifier: SmxiQY/bh4vKRMA/EhstvBiCC7HoM8JgBp6lfjH73tI= Subject key identifier: C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D948311726DE58F3795DA1B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 12:45:17 +0000 Certificate not after: Mon 24 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 401583 IP: 23.132.100.0/24 IP: 2602:f73a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:83:11:72:6d:e5:8f:37:95:da:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 21 12:45:17 2026 GMT Not After : Jul 24 12:45:17 2028 GMT Subject: CN=4d906a8c-85ee-4279-9f48-d84ea4865122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:ef:f5:9a:78:32:2c:c2:32:89:42:5d:5a: 13:df:41:16:98:60:2e:77:c3:da:5e:31:dc:0e:58: ca:68:36:46:c0:34:80:56:d6:25:83:99:9b:e4:c5: 93:a9:83:ce:04:1b:a2:b6:c9:8a:92:a2:48:33:29: 5f:76:b7:8c:b4:aa:e0:6d:f0:28:50:be:69:eb:12: fe:9d:8a:e9:e6:51:74:d5:94:4e:3d:42:1e:2e:d3: e8:49:0f:6f:1b:2f:83:1b:cf:6a:4a:f5:62:dc:ce: f9:11:cd:be:4c:38:85:9b:74:76:41:0a:99:d0:f1: a7:a4:2a:d7:a4:7a:05:2c:2e:74:30:b0:76:ed:69: b2:52:96:66:63:6d:0d:4b:13:b4:4f:76:12:80:c8: 13:b6:3e:bc:42:8b:64:81:ec:d1:57:5f:74:1c:e5: 8f:0e:45:91:63:b7:dc:98:60:29:74:39:a3:7b:56: 83:b6:07:ca:42:f1:33:8a:a3:e9:0b:54:d3:ad:18: 91:e7:d0:ec:96:7f:83:4d:53:ab:a0:1b:76:de:b1: 5b:09:cd:97:fb:87:c0:0b:2f:fc:6c:a3:96:14:4b: 39:08:d0:34:ce:6d:f0:ea:94:a5:fe:1a:d5:82:3f: a1:33:67:ed:78:93:29:f7:6a:2b:f9:8b:10:fa:89: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.100.0/24 IPv6: 2602:f73a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401583 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bd:65:07:af:41:9d:a1:8b:1a:d6:de:82:eb:29:f3:3a:b2: 08:fa:de:42:c3:27:80:25:56:07:d9:48:e4:38:09:a7:73:e7: 36:2d:f6:9a:40:bd:57:5f:1e:d1:5d:de:4c:9d:c7:25:9d:be: 24:a8:a7:ff:24:12:eb:d5:9f:b1:26:d4:10:55:e6:c9:0f:fc: 46:01:d2:ad:c9:e3:51:dc:38:be:dd:58:47:a8:0c:2c:d9:ba: 6b:49:13:3b:36:fb:14:50:be:f5:9f:82:fb:6c:62:b9:76:9f: d9:bf:06:e8:9b:61:99:cf:4e:90:73:d4:60:56:12:d2:d2:48: 9b:b6:2e:e2:d1:ca:a4:de:c0:1c:86:fd:f6:5b:fc:21:35:ae: ed:99:85:2f:19:c8:2b:3e:dc:11:71:47:53:47:ca:86:bd:f7: c2:c9:33:6f:18:2d:dc:1c:42:0b:b2:27:2a:38:c2:68:b8:a5: 9a:b8:41:13:01:00:33:93:1a:23:75:60:1f:c5:48:0b:66:35: 5c:2d:6d:af:05:80:e9:d2:cf:d2:58:e6:c8:8c:ce:02:2a:b1: ae:b5:1f:2e:16:06:14:70:f8:8b:3d:e8:e4:5a:43:22:c6:da: b5:08:f9:e6:33:d2:78:09:05:62:5e:23:27:9f:8f:7c:52:45: 5c:55:f2:ea -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2UgxFybeWPN5XaG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyMTEyNDUxN1oXDTI4MDcyNDEyNDUxN1owLzEtMCsGA1UEAxMk NGQ5MDZhOGMtODVlZS00Mjc5LTlmNDgtZDg0ZWE0ODY1MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve3v9Zp4MizCMolCXVoT30EWmGAud8PaXjHc DljKaDZGwDSAVtYlg5mb5MWTqYPOBBuitsmKkqJIMylfdreMtKrgbfAoUL5p6xL+ nYrp5lF01ZROPUIeLtPoSQ9vGy+DG89qSvVi3M75Ec2+TDiFm3R2QQqZ0PGnpCrX pHoFLC50MLB27WmyUpZmY20NSxO0T3YSgMgTtj68QotkgezRV190HOWPDkWRY7fc mGApdDmje1aDtgfKQvEziqPpC1TTrRiR59Dsln+DTVOroBt23rFbCc2X+4fACy/8 bKOWFEs5CNA0zm3w6pSl/hrVgj+hM2fteJMp92or+YsQ+omb9QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMVSPZ+hzPwkCgT5GWbhRDueD7YdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 ZDkwNmE4Yy04NWVlLTQyNzktOWY0OC1kODRlYTQ4NjUxMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzRkOTA2YThjLTg1ZWUtNDI3OS05 ZjQ4LWQ4NGVhNDg2NTEyMi80ZDkwNmE4Yy04NWVlLTQyNzktOWY0OC1kODRlYTQ4 NjUxMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhGQwDgQCAAIwCAMGBCYC9zoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgrzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkvWUHr0GdoYsa1t6C6ynzOrII +t5CwyeAJVYH2UjkOAmnc+c2LfaaQL1XXx7RXd5Mncclnb4kqKf/JBLr1Z+xJtQQ VebJD/xGAdKtyeNR3Di+3VhHqAws2bprSRM7NvsUUL71n4L7bGK5dp/Zvwbom2GZ z06Qc9RgVhLS0kibti7i0cqk3sAchv32W/whNa7tmYUvGcgrPtwRcUdTR8qGvffC yTNvGC3cHEILsicqOMJouKWauEETAQAzkxojdWAfxUgLZjVcLW2vBYDp0s/SWObI jM4CKrGutR8uFgYUcPiLPejkWkMixtq1CPnmM9J4CQViXiMnn498UkVcVfLq -----END CERTIFICATE-----Generated at Wed May 13 01:03:58 2026 by rpki-client