$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer File: 5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer (raw, json) Hash identifier: /PrHHtRsXthRjQ5/Mn0vOg+UGsspFk/15Kxr5pawN/A= Subject key identifier: B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DA97330C2D7AB247B735BF900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Apr 2026 00:45:17 +0000 Certificate not after: Tue 01 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 11276 IP: 104.238.196.0/24 IP: 199.182.205.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:73:30:c2:d7:ab:24:7b:73:5b:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 29 00:45:17 2026 GMT Not After : Aug 1 00:45:17 2028 GMT Subject: CN=5c76d4a1-73e2-4f34-9886-0c16d4b02008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:12:7e:98:96:25:c2:4e:88:32:14:7d:86: 6c:89:ba:da:e0:5c:6b:25:65:86:a0:6e:da:b5:fc: eb:c5:62:d0:af:15:f3:40:89:29:d4:08:3f:e9:7b: 37:3b:8a:b9:5c:9e:fd:88:e4:f3:38:5e:7c:44:83: 60:14:67:9b:13:4a:ef:32:16:30:c6:36:ac:8e:8e: 7d:db:d2:bf:46:37:2b:91:be:ed:8b:d3:74:19:a8: 8f:b2:f8:b7:6e:1a:32:0f:68:2c:98:28:cc:29:22: 13:1f:fa:06:32:85:44:d0:f8:28:a0:be:60:2a:94: ce:e2:ec:57:4f:d0:58:f0:4f:da:51:c9:ab:e8:70: 1f:90:20:98:a8:2a:b4:3e:59:f0:18:cf:90:12:6e: c0:e2:4a:ef:9c:f6:4b:b2:b5:bd:f0:5b:68:2d:b0: 88:92:9e:69:85:b4:ce:d5:cd:6a:18:d1:d3:e6:cf: 2b:90:5d:ae:f9:3e:2c:e7:da:be:80:62:08:cc:42: 7f:aa:89:68:35:3a:5e:1a:35:1e:c4:5b:c5:76:90: af:07:67:f3:23:54:94:ee:50:ca:34:68:93:2b:de: 1c:e4:fc:a9:cd:c5:b4:b1:e7:00:08:59:8c:b6:b9: 11:7c:82:af:c3:9d:02:e0:f8:ae:fb:b5:53:b2:f1: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.238.196.0/24 199.182.205.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11276 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:78:b5:8e:10:50:59:8d:ee:98:8c:0c:b3:77:22:f7:41:eb: b3:a6:88:81:e5:54:e7:0d:3a:b7:80:d4:44:f8:30:9a:16:9a: 66:97:ed:89:4d:52:14:70:14:7e:d6:c6:93:7c:85:d6:86:b1: a6:25:34:55:72:1c:ee:88:f5:2b:68:dc:82:32:50:6c:4e:5d: 22:19:42:47:97:b6:62:94:6a:7a:50:b9:af:ad:94:72:63:02: cb:5d:c0:a7:af:14:a3:68:8f:ea:31:e9:cd:44:54:49:1d:69: 7d:ae:f0:56:be:87:5d:20:66:e6:e2:91:19:24:f4:30:7e:3c: 94:0a:31:38:2d:fe:11:e2:f9:f7:15:13:b6:54:48:75:96:eb: 00:68:b6:97:7f:3f:af:f8:26:ab:44:02:7c:30:32:20:9c:f4: cb:d2:59:b0:3f:67:58:d8:c1:d1:b3:c3:b6:94:cf:e5:20:ab: 2b:ed:7d:f3:de:ff:00:c3:ad:ed:f0:36:d8:cb:21:00:dd:aa: 69:47:77:7a:af:02:76:33:8f:9b:aa:aa:a2:2f:9a:c6:a1:93: ba:e1:33:40:01:0f:d9:3b:ab:e1:ad:d5:ae:83:6b:31:61:87: 2f:a3:7a:60:17:7b:c4:f7:13:3b:d6:28:42:4f:3c:0f:7b:6d: af:5d:6c:a3 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE2pczDC16ske3Nb+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyOTAwNDUxN1oXDTI4MDgwMTAwNDUxN1owLzEtMCsGA1UEAxMk NWM3NmQ0YTEtNzNlMi00ZjM0LTk4ODYtMGMxNmQ0YjAyMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqASfpiWJcJOiDIUfYZsibra4FxrJWWGoG7a tfzrxWLQrxXzQIkp1Ag/6Xs3O4q5XJ79iOTzOF58RINgFGebE0rvMhYwxjasjo59 29K/Rjcrkb7ti9N0GaiPsvi3bhoyD2gsmCjMKSITH/oGMoVE0PgooL5gKpTO4uxX T9BY8E/aUcmr6HAfkCCYqCq0PlnwGM+QEm7A4krvnPZLsrW98FtoLbCIkp5phbTO 1c1qGNHT5s8rkF2u+T4s59q+gGIIzEJ/qoloNTpeGjUexFvFdpCvB2fzI1SU7lDK NGiTK94c5PypzcW0secACFmMtrkRfIKvw50C4Piu+7VTsvHUUQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFLDoHBlLPpu70cjZuKhwzY5Kw3fSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRiMDIwMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjNzZkNGExLTczZTItNGYzNC05 ODg2LTBjMTZkNGIwMjAwOC81Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRi MDIwMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo7sQDBADHts0wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICLAwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEADXi1jhBQWY3umIwMs3ci90Hrs6aIgeVU5w06t4DU RPgwmhaaZpftiU1SFHAUftbGk3yF1oaxpiU0VXIc7oj1K2jcgjJQbE5dIhlCR5e2 YpRqelC5r62UcmMCy13Ap68Uo2iP6jHpzURUSR1pfa7wVr6HXSBm5uKRGST0MH48 lAoxOC3+EeL59xUTtlRIdZbrAGi2l38/r/gmq0QCfDAyIJz0y9JZsD9nWNjB0bPD tpTP5SCrK+19897/AMOt7fA22MshAN2qaUd3eq8CdjOPm6qqoi+axqGTuuEzQAEP 2Tur4a3VroNrMWGHL6N6YBd7xPcTO9YoQk88D3ttr11sow== -----END CERTIFICATE-----Generated at Wed May 13 01:03:44 2026 by rpki-client