$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer File: 250ff67c-5904-4655-8b50-832a485ad1b8.cer (raw, json) Hash identifier: 07MA/3ED4rVhI6WmhiKem4iaWS/3D48qS1e1fUA+AMg= Subject key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D5F7811040DC42DE5C4D4B510 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 12:45:17 +0000 Certificate not after: Wed 05 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 22483 IP: 199.247.85.0/24 IP: 216.163.189.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:78:11:04:0d:c4:2d:e5:c4:d4:b5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 2 12:45:17 2026 GMT Not After : Jul 5 12:45:17 2028 GMT Subject: CN=250ff67c-5904-4655-8b50-832a485ad1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:78:13:a3:1c:f2:ce:7c:50:e5:91:81:d1: 34:61:4b:ac:e9:e1:f6:a6:8c:e8:9f:d4:2d:ea:09: 50:8f:71:67:46:d0:ec:bd:9d:8c:9a:8c:ca:65:a6: f8:00:15:80:11:50:49:28:8b:2c:de:5e:80:8d:d4: da:57:96:3f:26:bd:c8:a6:14:e8:f0:b5:c7:fc:ad: b7:ff:7c:7d:df:f8:1f:26:c8:99:fb:7b:e5:e7:5b: e5:e8:84:07:78:6f:d8:9b:77:29:6f:ae:d7:d9:9f: 79:a7:6e:56:7f:16:61:f1:dd:78:a8:a2:10:39:0f: 64:35:6c:f4:c3:73:46:33:99:05:4f:4a:12:fc:bd: 64:76:e4:5c:ab:e8:65:1d:4a:77:71:e9:ec:ea:01: ed:c1:09:8d:3c:8d:15:7a:15:e7:40:cf:45:a8:89: 77:9d:cf:bc:d7:7f:59:cc:ca:1d:71:7d:92:a6:c2: 03:1a:df:f0:7a:04:58:45:b7:fb:02:3b:f2:9e:ac: 94:2b:cf:f2:0d:aa:b3:c7:68:d6:ca:d9:72:78:a8: 85:d6:50:6b:70:6b:a1:41:cf:63:38:4f:ce:48:9c: 2d:38:57:ab:3c:8b:4e:43:80:87:39:2e:dd:cd:6f: 3e:11:af:9a:80:64:f0:a2:d2:a6:23:b5:05:e8:92: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.247.85.0/24 216.163.189.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22483 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e8:93:f2:2a:0e:37:e4:ee:5d:08:e9:cb:59:17:05:44:27: 0a:f2:83:f3:04:4f:43:c1:ec:fd:62:8b:a9:c6:78:ba:3e:0c: b0:88:ab:08:2a:2d:43:d1:10:18:0d:99:08:fd:78:f7:dd:01: 5a:82:30:66:e5:b9:21:4a:58:ba:4a:f5:4e:49:cd:64:5a:90: 94:9b:d0:21:3f:62:28:2c:aa:4e:c3:5f:55:aa:74:ca:56:38: 66:68:99:a2:a6:73:94:1d:24:95:b0:bf:d5:82:45:9c:3d:af: 37:59:c4:5b:cf:ad:3c:0a:20:fe:23:bf:02:17:10:1b:86:d9: f1:4e:77:86:57:ba:c8:2e:e2:e0:9d:45:5a:68:4d:ee:18:0c: bc:67:52:65:77:99:25:df:9b:1d:29:e6:20:ed:65:e5:60:c7: 90:0f:21:51:a5:d8:51:83:da:18:58:ba:5a:0c:44:68:e9:a5: e2:b9:d6:19:f8:d4:91:86:ab:59:a0:03:23:37:be:78:ab:8a: b3:5d:21:91:bf:c8:a3:98:4b:4a:98:1e:11:de:e4:01:1c:b0: 5f:a3:b6:10:c4:39:5f:8e:07:1d:e6:30:d1:81:e0:9e:cd:b8: c1:1a:9d:b6:4a:cc:6b:e7:3d:89:56:c7:25:bf:8c:b6:81:7e: 41:a0:da:fa -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE1feBEEDcQt5cTUtRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDQwMjEyNDUxN1oXDTI4MDcwNTEyNDUxN1owLzEtMCsGA1UEAxMk MjUwZmY2N2MtNTkwNC00NjU1LThiNTAtODMyYTQ4NWFkMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWp4E6Mc8s58UOWRgdE0YUus6eH2pozon9Qt 6glQj3FnRtDsvZ2MmozKZab4ABWAEVBJKIss3l6AjdTaV5Y/Jr3IphTo8LXH/K23 /3x93/gfJsiZ+3vl51vl6IQHeG/Ym3cpb67X2Z95p25WfxZh8d14qKIQOQ9kNWz0 w3NGM5kFT0oS/L1kduRcq+hlHUp3cens6gHtwQmNPI0VehXnQM9FqIl3nc+8139Z zModcX2SpsIDGt/wegRYRbf7AjvynqyUK8/yDaqzx2jWytlyeKiF1lBrcGuhQc9j OE/OSJwtOFerPItOQ4CHOS7dzW8+Ea+agGTwotKmI7UF6JLUKQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNlsVd5kuMy7qvEsaTeXUpl1VWs5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y NTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1YWQxYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI1MGZmNjdjLTU5MDQtNDY1NS04 YjUwLTgzMmE0ODVhZDFiOC8yNTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1 YWQxYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADH91UDBADYo70wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICV9MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAJOiT8ioON+TuXQjpy1kXBUQnCvKD8wRPQ8Hs/WKL qcZ4uj4MsIirCCotQ9EQGA2ZCP14990BWoIwZuW5IUpYukr1TknNZFqQlJvQIT9i KCyqTsNfVap0ylY4ZmiZoqZzlB0klbC/1YJFnD2vN1nEW8+tPAog/iO/AhcQG4bZ 8U53hle6yC7i4J1FWmhN7hgMvGdSZXeZJd+bHSnmIO1l5WDHkA8hUaXYUYPaGFi6 WgxEaOml4rnWGfjUkYarWaADIze+eKuKs10hkb/Io5hLSpgeEd7kARywX6O2EMQ5 X44HHeYw0YHgns24wRqdtkrMa+c9iVbHJb+MtoF+QaDa+g== -----END CERTIFICATE-----Generated at Mon Apr 13 08:08:31 2026 by rpki-client