$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer File: f40e4177-8831-4c30-83f0-fa2c74173aff.cer (raw, json) Hash identifier: a+f2S9hOGzmvI/xApMCyq0t/LlfmjvQD5Gg1Q5UjUUE= Subject key identifier: 19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DAC3DE225D6869AE6C95BD380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 00:45:18 +0000 Certificate not after: Wed 02 Aug 2028 00:45:18 +0000 Subordinate resources: AS: 400860 IP: 207.166.129.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:3d:e2:25:d6:86:9a:e6:c9:5b:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 30 00:45:18 2026 GMT Not After : Aug 2 00:45:18 2028 GMT Subject: CN=f40e4177-8831-4c30-83f0-fa2c74173aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:ef:ed:08:d4:df:5d:43:ed:91:25:e8:78: b5:d0:84:32:80:99:c9:a7:12:ce:f5:6a:84:5d:6f: 57:e7:29:cb:d6:db:c7:0a:ef:e4:f5:58:da:de:e5: 61:88:2a:80:c2:b9:e4:81:35:3a:08:2d:d0:3c:74: 27:64:71:25:13:d8:ba:eb:df:e0:58:fe:95:74:12: 4d:aa:75:74:35:d3:7e:17:c6:7c:cd:f7:da:c7:3e: 30:ec:7b:95:7a:68:15:41:66:ae:34:e6:4c:f2:21: 41:9b:ce:83:a1:c4:7d:4f:c0:b0:67:cc:5f:dc:72: 11:90:19:95:8f:8d:69:cf:b0:ac:69:18:20:c3:7e: 00:e5:3f:04:b4:6b:6b:83:72:5e:3b:8e:d5:41:6f: 2d:07:57:9b:74:15:3c:ad:6b:ef:1c:77:fd:52:1e: 8c:f2:dc:e8:34:ef:8b:79:b0:20:00:fe:2b:1d:c6: 9d:e3:db:2e:b8:f7:19:83:6b:03:cf:45:ab:0a:71: 61:f1:b3:64:8a:3b:f9:84:31:98:c0:26:52:67:a3: 26:2f:9a:cc:6c:ed:e0:f0:66:f9:d9:19:08:5b:a0: 34:10:ee:c6:56:c3:00:6c:65:cb:b7:ba:1a:ca:59: a2:ca:23:18:de:6a:bd:5d:bc:85:ac:51:be:c8:96: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 207.166.129.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:29:30:56:57:7c:4f:66:9e:4f:93:0f:e3:bf:1f:51:ff:c9: 0f:b4:34:f2:d5:bc:e7:d3:6e:68:61:1a:98:a7:a7:d9:f5:c7: 2f:71:12:dd:cd:f9:17:fa:56:62:c1:7b:8a:3c:a7:96:18:6a: 85:eb:9c:26:b6:32:e3:76:91:52:2d:fe:ee:80:39:19:12:85: 0c:30:a0:4e:b8:3d:83:5d:7c:69:80:5b:72:1f:da:62:3e:71: 06:7f:09:ee:0c:20:86:cd:41:82:ee:e9:95:d1:c5:a5:4d:41: 51:c9:33:c5:ef:8d:0e:18:e8:f3:25:60:e2:17:34:05:bc:1a: 1a:d7:86:c5:d1:d1:8e:c1:63:4f:19:db:fb:bf:fb:d1:52:1e: c1:e4:cb:21:7a:cf:25:90:2c:53:77:b3:ca:76:44:77:d3:0b: 6e:5c:14:62:3d:60:37:c8:c0:1e:3b:61:f4:f9:b0:30:ac:f4: 10:d8:d8:c7:51:65:dc:f5:90:16:c0:af:f1:2d:6b:cf:11:42: 04:f6:f3:5c:a3:23:a0:e0:2c:d5:85:17:9e:6b:3c:b3:b6:c4: 09:81:4a:0c:fd:b8:d5:7f:ab:f4:98:10:63:44:18:61:32:78: 77:61:83:24:02:bb:92:96:39:17:c3:d7:e3:4d:0e:c3:d1:c4: 0b:6b:49:0a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2sPeIl1oaa5slb04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQzMDAwNDUxOFoXDTI4MDgwMjAwNDUxOFowLzEtMCsGA1UEAxMk ZjQwZTQxNzctODgzMS00YzMwLTgzZjAtZmEyYzc0MTczYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNPv7QjU311D7ZEl6Hi10IQygJnJpxLO9WqE XW9X5ynL1tvHCu/k9Vja3uVhiCqAwrnkgTU6CC3QPHQnZHElE9i669/gWP6VdBJN qnV0NdN+F8Z8zffaxz4w7HuVemgVQWauNOZM8iFBm86DocR9T8CwZ8xf3HIRkBmV j41pz7CsaRggw34A5T8EtGtrg3JeO47VQW8tB1ebdBU8rWvvHHf9Uh6M8tzoNO+L ebAgAP4rHcad49suuPcZg2sDz0WrCnFh8bNkijv5hDGYwCZSZ6MmL5rMbO3g8Gb5 2RkIW6A0EO7GVsMAbGXLt7oaylmiyiMY3mq9XbyFrFG+yJZmPQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBnZ/W31jP4wfdGaOVk53PN7gWgMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m NDBlNDE3Ny04ODMxLTRjMzAtODNmMC1mYTJjNzQxNzNhZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y0MGU0MTc3LTg4MzEtNGMzMC04 M2YwLWZhMmM3NDE3M2FmZi9mNDBlNDE3Ny04ODMxLTRjMzAtODNmMC1mYTJjNzQx NzNhZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADPpoEwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh3cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ0pMFZXfE9mnk+TD+O/H1H/yQ+0NPLVvOfTbmhhGpinp9n1 xy9xEt3N+Rf6VmLBe4o8p5YYaoXrnCa2MuN2kVIt/u6AORkShQwwoE64PYNdfGmA W3If2mI+cQZ/Ce4MIIbNQYLu6ZXRxaVNQVHJM8XvjQ4Y6PMlYOIXNAW8GhrXhsXR 0Y7BY08Z2/u/+9FSHsHkyyF6zyWQLFN3s8p2RHfTC25cFGI9YDfIwB47YfT5sDCs 9BDY2MdRZdz1kBbAr/Eta88RQgT281yjI6DgLNWFF55rPLO2xAmBSgz9uNV/q/SY EGNEGGEyeHdhgyQCu5KWORfD1+NNDsPRxAtrSQo= -----END CERTIFICATE-----Generated at Wed May 13 00:55:52 2026 by rpki-client