$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer File: 938e1602-8093-4bcd-b527-f5d1756295fc.cer (raw, json) Hash identifier: br/fOiMZvUKN5LM+sgI7uEw6/gqGka84/6Iz6mN8nA8= Subject key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D237264AA676B7C2378D7E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Mar 2026 00:45:21 +0000 Certificate not after: Wed 14 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 401482 IP: 142.248.252.0/24 IP: 2620:cf:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:72:64:aa:67:6b:7c:23:78:d7:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 12 00:45:21 2026 GMT Not After : Jun 14 00:45:21 2028 GMT Subject: CN=938e1602-8093-4bcd-b527-f5d1756295fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:68:99:10:47:18:66:ca:d7:d0:b6:27:21: 01:2f:16:cd:6b:0c:dc:ae:ec:a6:05:a3:1e:42:9f: 87:64:f1:e9:ce:57:d8:ba:0a:2a:dc:0c:33:c9:66: 78:9b:c6:2b:e5:9a:e0:46:b0:47:57:0e:68:10:68: 09:6e:75:95:61:d8:85:f3:28:a2:1f:f4:3e:a8:53: c5:d5:5b:21:10:fd:4a:4e:af:2f:60:06:a0:c7:0c: fe:b8:6b:2f:eb:10:14:21:cc:72:73:a4:ec:a7:ea: 97:cd:cf:ec:9d:65:60:2e:4a:a9:ac:d2:c8:3d:1f: 05:45:61:f3:3c:19:44:d6:cf:1b:86:13:a3:31:06: 05:33:02:bd:3d:e7:0a:a7:2a:b6:58:a3:2b:d3:fe: 65:4c:f3:4f:fd:fb:50:cb:c5:63:b5:7c:95:1a:78: 5a:9a:ba:4e:f0:f9:f2:a3:6b:03:34:0c:d0:bb:44: cf:08:64:42:44:a0:e8:89:52:fa:48:1a:aa:90:a8: 50:e0:d8:08:bd:76:7d:d3:47:6c:94:ab:a9:04:e2: 2a:93:ab:d7:b2:7b:60:8b:e2:4d:43:b5:9c:a3:db: df:12:0e:8a:ce:2a:81:14:05:a7:60:d5:39:42:9c: 1e:de:72:45:2b:35:8b:1b:54:04:62:88:3b:1f:91: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.252.0/24 IPv6: 2620:cf:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401482 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:11:a1:07:83:33:c6:0a:ab:ba:8f:aa:51:8b:da:cb:1d:e8: 98:9b:c9:bb:4f:52:64:75:d1:86:2f:7c:9b:12:4c:c1:be:2d: 4b:00:eb:86:f7:04:19:4c:23:74:fc:82:eb:29:71:ef:2f:01: 37:b2:86:66:06:84:15:0d:dc:c3:50:ff:a9:c8:82:19:92:f5: 6d:e2:6b:cb:90:1d:e4:9c:4d:c3:28:6e:f5:7c:2a:cc:8a:0f: 2a:86:79:06:d6:28:c3:80:f7:70:28:17:3a:dd:36:df:c6:76: af:98:c3:ae:a4:a7:7a:0f:48:eb:f4:e5:d1:03:9a:dc:ce:4d: 34:c7:00:b3:25:6c:4a:fd:72:9c:81:e7:8e:04:f7:f5:7e:4a: 8e:6b:5c:27:07:ab:fd:77:12:fc:5f:47:0a:3b:c6:b9:63:81: c1:13:20:83:f4:76:0c:49:42:c9:9e:bb:ac:e8:9f:9b:40:80: 03:56:bb:02:c1:6c:ee:4c:bd:b4:1a:90:c2:74:e1:50:6d:3c: f3:f0:63:b8:a7:ec:26:d4:24:82:34:f8:28:36:1d:f7:ff:e9: 0c:a8:05:96:eb:4f:85:16:0d:5f:2a:a3:a1:37:d9:50:b8:bc: 3c:e6:9b:de:3b:7a:ba:c6:5b:af:af:7a:ce:a5:e9:96:37:37: 53:2f:c0:4c -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE0jcmSqZ2t8I3jX5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMjAwNDUyMVoXDTI4MDYxNDAwNDUyMVowLzEtMCsGA1UEAxMk OTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqZomRBHGGbK19C2JyEBLxbNawzcruymBaMe Qp+HZPHpzlfYugoq3AwzyWZ4m8Yr5ZrgRrBHVw5oEGgJbnWVYdiF8yiiH/Q+qFPF 1VshEP1KTq8vYAagxwz+uGsv6xAUIcxyc6Tsp+qXzc/snWVgLkqprNLIPR8FRWHz PBlE1s8bhhOjMQYFMwK9PecKpyq2WKMr0/5lTPNP/ftQy8VjtXyVGnhamrpO8Pny o2sDNAzQu0TPCGRCRKDoiVL6SBqqkKhQ4NgIvXZ900dslKupBOIqk6vXsntgi+JN Q7Wco9vfEg6KziqBFAWnYNU5Qpwe3nJFKzWLG1QEYog7H5GgRwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFPzMALTGvYB8aVdmLRmp68I3iXj2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzkzOGUxNjAyLTgwOTMtNGJjZC1i NTI3LWY1ZDE3NTYyOTVmYy85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2 Mjk1ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACO+PwwDwQCAAIwCQMHACYgAM+gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIEowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAThGhB4Mzxgqruo+qUYvayx3o mJvJu09SZHXRhi98mxJMwb4tSwDrhvcEGUwjdPyC6ylx7y8BN7KGZgaEFQ3cw1D/ qciCGZL1beJry5Ad5JxNwyhu9XwqzIoPKoZ5BtYow4D3cCgXOt0238Z2r5jDrqSn eg9I6/Tl0QOa3M5NNMcAsyVsSv1ynIHnjgT39X5KjmtcJwer/XcS/F9HCjvGuWOB wRMgg/R2DElCyZ67rOifm0CAA1a7AsFs7ky9tBqQwnThUG088/BjuKfsJtQkgjT4 KDYd9//pDKgFlutPhRYNXyqjoTfZULi8POab3jt6usZbr696zqXpljc3Uy/ATA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:20:31 2026 by rpki-client