$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17.cer File: f4d47f86-b52a-4157-b7b3-b5d446726e17.cer (raw, json) Hash identifier: QuFwzIWGnnmF2qYECtUl1XjPh2lPZxeAmUcZJNGZSi4= Subject key identifier: 6B:85:DE:9B:62:D2:AE:60:9E:AF:80:03:58:06:AA:CA:2B:C3:69:E0 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584DD158064CDF04F5219FE5A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/f4d47f86-b52a-4157-b7b3-b5d446726e17.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 07:42:53 +0000 Certificate not after: Tue 15 Aug 2028 07:42:53 +0000 Subordinate resources: IP: 23.149.56.0/24 IP: 140.235.249.0/24 IP: 2602:fa98::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:58:06:4c:df:04:f5:21:9f:e5:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 13 07:42:53 2026 GMT Not After : Aug 15 07:42:53 2028 GMT Subject: CN=f4d47f86-b52a-4157-b7b3-b5d446726e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:11:1a:1e:af:ea:c0:c0:80:2d:30:c0:69: 36:d3:0a:7a:2e:49:38:85:c9:71:85:90:eb:79:b0: 00:0f:12:61:86:c0:df:48:a9:9c:8a:4f:81:93:bc: a1:ee:47:49:1b:a5:fa:1a:b1:02:74:af:4d:9b:3a: ec:a6:00:17:02:d3:f4:6e:a1:e5:87:37:39:2d:2d: 7b:55:81:6b:ef:de:b8:13:e1:6b:0b:71:60:8f:b7: b7:61:7b:cd:00:ca:71:fe:99:70:92:bd:a3:bf:05: 61:e2:3e:35:11:ea:a0:4f:be:52:58:d0:b4:28:61: ac:86:df:39:f2:05:7b:c7:74:3e:61:75:23:19:b9: 68:60:61:b2:a2:cb:e1:3d:7b:5e:b3:5b:74:b6:aa: 3b:83:64:d3:6f:9a:cf:c3:8d:59:d0:80:94:f0:dc: a6:3a:26:1b:13:eb:f5:43:29:ed:34:e4:45:25:63: 83:08:d6:ea:41:ef:b6:7d:9c:a3:77:43:fc:dd:c7: 57:94:19:20:ae:91:9f:f0:a6:e9:67:d0:35:a2:35: 61:69:c0:21:9c:2d:47:ac:22:92:a0:8b:cc:7c:d7: 0d:ce:69:42:ef:e0:11:9f:af:d0:65:f8:67:80:70: df:15:1b:39:b5:79:21:c4:8b:e6:9a:11:6e:8b:6d: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:85:DE:9B:62:D2:AE:60:9E:AF:80:03:58:06:AA:CA:2B:C3:69:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/f4d47f86-b52a-4157-b7b3-b5d446726e17.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.149.56.0/24 140.235.249.0/24 IPv6: 2602:fa98::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:89:62:17:cb:b5:f4:1f:3b:b3:16:1c:51:f4:9a:20:a4:d3: c6:07:9c:03:e3:ce:b8:ae:2b:6d:66:dd:4f:7e:e5:08:3c:30: 13:8e:79:a7:12:c5:0f:1b:36:8a:90:43:57:7c:f1:ff:90:97: 9b:f4:0a:f6:d0:69:8a:68:c9:bb:2b:16:a2:cb:5b:07:0f:da: c0:99:d9:94:7b:dc:4e:e2:01:93:8e:b3:68:4a:c1:d1:7d:e6: 0f:7d:fb:e4:d2:11:b8:34:72:f9:05:1a:92:da:a3:f0:a9:01: 58:18:b8:0a:cf:40:27:f9:db:01:3a:16:f2:62:b0:d1:f6:a5: 2d:a2:08:71:1d:1d:eb:f4:66:f4:dd:37:bd:38:cd:84:c4:3d: 22:bf:20:1d:3a:0b:a5:e4:7f:4c:5b:7c:8b:a3:6c:fa:56:88: b2:a3:ae:d2:8e:1a:bf:df:cb:f4:ed:20:b5:14:22:ca:6f:2e: 8f:2a:73:e3:13:5e:6b:4a:1d:51:d0:c3:79:c3:40:e3:1d:7d: f3:5e:fa:36:76:06:c8:1c:9f:93:96:16:4d:d2:60:1c:3a:93: e0:42:11:21:0e:aa:c5:67:4f:c4:55:25:23:69:09:33:9f:61: 55:31:e9:63:0b:79:59:bd:40:c4:f0:85:7e:b6:67:d8:30:cd: 8b:10:ff:ea -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE3RWAZM3wT1IZ/lpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDUxMzA3NDI1M1oXDTI4MDgxNTA3NDI1M1owLzEtMCsGA1UEAxMk ZjRkNDdmODYtYjUyYS00MTU3LWI3YjMtYjVkNDQ2NzI2ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLARGh6v6sDAgC0wwGk20wp6Lkk4hclxhZDr ebAADxJhhsDfSKmcik+Bk7yh7kdJG6X6GrECdK9NmzrspgAXAtP0bqHlhzc5LS17 VYFr7964E+FrC3Fgj7e3YXvNAMpx/plwkr2jvwVh4j41EeqgT75SWNC0KGGsht85 8gV7x3Q+YXUjGbloYGGyosvhPXtes1t0tqo7g2TTb5rPw41Z0ICU8NymOiYbE+v1 QyntNORFJWODCNbqQe+2fZyjd0P83cdXlBkgrpGf8KbpZ9A1ojVhacAhnC1HrCKS oIvMfNcNzmlC7+ARn6/QZfhngHDfFRs5tXkhxIvmmhFui214DQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFGuF3pti0q5gnq+AA1gGqsorw2ngMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m NGQ0N2Y4Ni1iNTJhLTQxNTctYjdiMy1iNWQ0NDY3MjZlMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y0ZDQ3Zjg2LWI1MmEtNDE1Ny1i N2IzLWI1ZDQ0NjcyNmUxNy9mNGQ0N2Y4Ni1iNTJhLTQxNTctYjdiMy1iNWQ0NDY3 MjZlMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlTgDBACM6/kwDgQCAAIwCAMGBCYC+pgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOJYhfLtfQfO7MWHFH0miCk08YHnAPjzriuK21m3U9+5Qg8MBOOeacS xQ8bNoqQQ1d88f+Ql5v0CvbQaYpoybsrFqLLWwcP2sCZ2ZR73E7iAZOOs2hKwdF9 5g99++TSEbg0cvkFGpLao/CpAVgYuArPQCf52wE6FvJisNH2pS2iCHEdHev0ZvTd N704zYTEPSK/IB06C6Xkf0xbfIujbPpWiLKjrtKOGr/fy/TtILUUIspvLo8qc+MT XmtKHVHQw3nDQOMdffNe+jZ2Bsgcn5OWFk3SYBw6k+BCESEOqsVnT8RVJSNpCTOf YVUx6WMLeVm9QMTwhX62Z9gwzYsQ/+o= -----END CERTIFICATE-----Generated at Tue May 19 06:25:42 2026 by rpki-client