$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer File: ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer (raw, json) Hash identifier: 7NSd4Nn0/6X0cXKurrU0M1uQxtuf69TYFfWV7EWt3aI= Subject key identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DAC3DE23D1DDEC0CDA9C91220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 00:45:18 +0000 Certificate not after: Wed 02 Aug 2028 00:45:18 +0000 Subordinate resources: AS: 396083 IP: 160.84.192.0/18 IP: 192.52.170.0/24 IP: 192.58.211.0/24 IP: 192.84.7.0/24 IP: 192.104.50.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:3d:e2:3d:1d:de:c0:cd:a9:c9:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 30 00:45:18 2026 GMT Not After : Aug 2 00:45:18 2028 GMT Subject: CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:c7:95:08:f3:cf:18:ae:38:d1:15:d0:6a: ce:bb:d9:ae:f2:2c:1e:b4:70:16:22:e4:02:c9:23: 8b:75:5c:75:ba:a6:c1:00:5b:eb:84:78:c7:9f:1a: 89:c1:05:48:b7:bc:66:71:3e:cf:0c:76:52:13:35: 4d:bc:cf:da:2a:b0:4e:e4:77:37:25:3a:e0:73:cb: 47:a9:c3:0a:14:c1:83:92:10:73:f8:79:95:66:51: d3:83:48:5f:f4:d7:25:dd:11:ce:b5:fb:43:31:6c: 81:49:fc:a3:d1:36:17:2b:cc:2a:fe:5c:d5:b7:13: 46:73:b3:d7:ec:9a:e8:80:65:19:87:44:32:fc:7b: 8e:c8:36:1f:35:fc:75:12:39:ae:84:dd:90:ab:17: 79:d5:63:b8:5a:34:2b:60:a3:9a:1d:64:87:0c:2e: 0b:17:31:3f:1f:ab:25:9d:81:65:46:14:9a:15:07: 7e:b1:24:e1:97:07:84:40:30:0e:59:d1:8e:af:4f: 6d:ad:5c:1f:02:0e:26:6c:18:e6:03:27:f9:83:6c: 60:b2:19:d1:51:93:e2:82:7b:f9:bf:1b:84:f9:cf: ee:f6:c4:48:7e:b6:f3:0c:a7:75:4d:80:1e:e4:2e: da:94:f6:d0:cf:58:76:fc:a7:e0:20:4a:76:ad:17: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 160.84.192.0/18 192.52.170.0/24 192.58.211.0/24 192.84.7.0/24 192.104.50.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396083 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e2:c2:a3:80:65:76:30:6d:66:4c:fc:1f:ba:91:e1:73:76: b4:c1:97:71:b5:23:5f:e6:25:80:6d:3c:9d:6e:37:10:fd:53: ee:78:41:da:30:ae:71:0b:7f:27:26:74:6a:2a:45:45:2e:ae: 3a:3e:a1:b5:41:e5:fe:c6:83:3b:af:b2:ad:e4:47:ec:df:b8: be:ee:30:24:d6:62:68:f3:91:33:c8:05:5b:74:97:3b:10:24: 07:51:7d:78:19:9a:8a:41:3b:6f:4d:d2:db:f4:68:b2:3c:e6: 11:dd:ea:a3:f5:c3:ae:5d:69:f0:9c:64:28:80:06:84:12:ff: f6:de:75:91:ad:d7:47:3d:a9:f6:39:31:38:ff:14:f7:0c:69: e0:72:63:a1:25:4d:bd:fe:e4:89:5b:20:36:4e:ab:bc:23:e3: 69:4d:da:cb:1a:6e:f1:fa:ba:26:95:0a:bc:85:6c:ea:6f:97: 9e:26:d0:6b:2c:e3:c4:6b:ce:b1:99:2d:13:31:b5:c3:b4:70: 86:d1:4d:90:d7:6f:53:52:a1:aa:82:51:da:00:c7:1f:be:4d: 02:25:fc:c4:07:dd:ef:3c:c1:09:ee:13:db:ff:cc:aa:a7:02: 79:43:e1:f1:04:73:c3:23:06:07:13:51:ba:3a:84:2d:ee:5b: a8:da:6e:83 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWE2sPeI9Hd7AzanJEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQzMDAwNDUxOFoXDTI4MDgwMjAwNDUxOFowLzEtMCsGA1UEAxMk YWI5OTFlZTQtZjVhZC00YzU0LWEwMWUtMTU2ZjI0YmFjOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWLHlQjzzxiuONEV0GrOu9mu8iwetHAWIuQC ySOLdVx1uqbBAFvrhHjHnxqJwQVIt7xmcT7PDHZSEzVNvM/aKrBO5Hc3JTrgc8tH qcMKFMGDkhBz+HmVZlHTg0hf9Ncl3RHOtftDMWyBSfyj0TYXK8wq/lzVtxNGc7PX 7JrogGUZh0Qy/HuOyDYfNfx1EjmuhN2Qqxd51WO4WjQrYKOaHWSHDC4LFzE/H6sl nYFlRhSaFQd+sSThlweEQDAOWdGOr09trVwfAg4mbBjmAyf5g2xgshnRUZPignv5 vxuE+c/u9sRIfrbzDKd1TYAe5C7alPbQz1h2/KfgIEp2rRe8/QIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFOQN/s+4AXaAQbUCLAHMAxO/ACpXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Yjk5MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZmMjRiYWM5ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FiOTkxZWU0LWY1YWQtNGM1NC1h MDFlLTE1NmYyNGJhYzlmYi9hYjk5MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZmMjRi YWM5ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAagVMADBADANKoDBADAOtMDBADAVAcDBADAaDIw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgszMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJfiwqOAZXYwbWZM /B+6keFzdrTBl3G1I1/mJYBtPJ1uNxD9U+54QdowrnELfycmdGoqRUUurjo+obVB 5f7Ggzuvsq3kR+zfuL7uMCTWYmjzkTPIBVt0lzsQJAdRfXgZmopBO29N0tv0aLI8 5hHd6qP1w65dafCcZCiABoQS//bedZGt10c9qfY5MTj/FPcMaeByY6ElTb3+5Ilb IDZOq7wj42lN2ssabvH6uiaVCryFbOpvl54m0Gss48RrzrGZLRMxtcO0cIbRTZDX b1NSoaqCUdoAxx++TQIl/MQH3e88wQnuE9v/zKqnAnlD4fEEc8MjBgcTUbo6hC3u W6jaboM= -----END CERTIFICATE-----Generated at Wed May 13 02:23:37 2026 by rpki-client