$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a.cer File: ce634c28-231a-4b71-ad47-43e04779690a.cer (raw, json) Hash identifier: 28eemsp9jGM/BmyDKf2AAgT0Bsp6a5VEODW2Z22MiR4= Subject key identifier: AD:81:80:2B:9E:99:D1:56:F5:23:57:FA:68:96:E0:83:21:93:DE:45 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D6E4711EBFBAE3F3E6DE60A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Apr 2026 20:03:41 +0000 Certificate not after: Mon 10 Jul 2028 20:03:41 +0000 Subordinate resources: AS: 398578 IP: 23.162.112.0/23 IP: 23.247.152.0/22 IP: 130.51.104.0/22 IP: 172.82.112.0/22 IP: 206.83.144.0/22 IP: 208.85.92.0/22 IP: 2602:fd5d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:47:11:eb:fb:ae:3f:3e:6d:e6:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 7 20:03:41 2026 GMT Not After : Jul 10 20:03:41 2028 GMT Subject: CN=ce634c28-231a-4b71-ad47-43e04779690a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:9d:39:62:9c:7f:ce:6e:7e:79:85:1f:c6: 85:06:ba:a9:a7:47:70:70:db:69:09:59:13:60:b0: 46:9a:ba:82:65:56:6f:1a:1e:1f:dd:8d:22:83:34: 02:c3:5d:18:e7:6f:6a:36:f2:27:33:9d:82:43:47: da:f0:6a:27:97:be:5e:74:97:31:f1:80:d2:4b:3b: fc:0e:3b:17:99:bf:7f:f2:e9:59:6a:a3:eb:9a:de: 10:a6:32:39:33:ab:13:3c:b4:bf:4c:19:72:88:41: 81:ef:b4:b1:30:4c:66:26:82:d4:3a:4c:0e:46:07: 17:73:83:a1:be:3e:3d:70:bc:db:e1:7e:3a:a7:b1: 3b:bd:dd:dc:f1:0b:10:ca:4b:06:c1:17:9f:92:26: 60:e8:4d:a6:4b:b7:86:76:a3:75:25:54:b2:ab:c7: 4b:cf:b4:b4:f8:72:9c:48:7a:ef:f7:f8:38:2f:cf: 65:51:4a:f3:86:34:eb:e6:84:3c:fa:d7:df:4e:73: 83:b5:fa:8e:16:e7:a6:48:ce:2d:cb:a6:63:b5:71: ff:01:b2:71:86:52:bc:8e:7f:09:ca:37:98:7d:7b: c4:56:c7:0c:41:66:43:bb:d5:8e:0d:64:af:d5:87: 25:b8:84:c8:d5:30:a3:74:2a:84:6a:22:c1:97:90: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:81:80:2B:9E:99:D1:56:F5:23:57:FA:68:96:E0:83:21:93:DE:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.162.112.0/23 23.247.152.0/22 130.51.104.0/22 172.82.112.0/22 206.83.144.0/22 208.85.92.0/22 IPv6: 2602:fd5d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398578 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:04:b7:6e:62:90:41:01:d6:5f:c3:85:8e:93:f2:db:ed:70: ee:28:8a:65:62:c8:47:bf:e2:ff:fc:8f:be:c3:0f:c1:40:46: ac:14:1f:ab:23:48:ae:ea:fa:83:8f:b3:e3:55:2d:6c:6e:93: 2d:6c:95:87:34:f3:06:56:91:54:3c:97:b4:aa:79:b9:c9:2f: f9:e6:f6:5c:df:5f:c6:f6:33:44:85:04:b3:64:95:0b:90:2d: 2f:3e:9c:b5:9b:6e:55:09:ef:69:25:3e:7d:82:f5:34:62:ae: 94:d0:54:53:23:47:0e:36:24:31:14:2c:82:77:fe:0a:eb:c2: ea:ed:79:81:b5:d5:11:a3:c5:87:ec:b1:99:f3:67:d2:37:8d: a8:4c:3a:03:e5:ee:55:9d:39:1b:aa:3f:01:32:2f:b8:11:7b: 93:8f:50:98:f8:de:c8:41:ca:17:9b:f1:5a:2b:42:db:7b:1f: 90:a2:b3:5b:49:4c:06:15:0b:a1:9e:91:db:18:42:6c:7b:ce: 87:11:09:f1:26:7b:05:a9:8f:ce:a9:ba:4c:58:a3:b0:20:53: 21:08:2e:05:ae:68:02:83:4e:87:8d:ff:8c:ab:3f:b4:38:20: 88:7c:da:71:e0:bd:18:7b:93:6d:56:5e:16:72:bc:ea:93:31: e4:c2:eb:10 -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWE1uRxHr+64/Pm3mCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDQwNzIwMDM0MVoXDTI4MDcxMDIwMDM0MVowLzEtMCsGA1UEAxMk Y2U2MzRjMjgtMjMxYS00YjcxLWFkNDctNDNlMDQ3Nzk2OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeKdOWKcf85ufnmFH8aFBrqpp0dwcNtpCVkT YLBGmrqCZVZvGh4f3Y0igzQCw10Y529qNvInM52CQ0fa8Gonl75edJcx8YDSSzv8 DjsXmb9/8ulZaqPrmt4QpjI5M6sTPLS/TBlyiEGB77SxMExmJoLUOkwORgcXc4Oh vj49cLzb4X46p7E7vd3c8QsQyksGwRefkiZg6E2mS7eGdqN1JVSyq8dLz7S0+HKc SHrv9/g4L89lUUrzhjTr5oQ8+tffTnODtfqOFuemSM4ty6ZjtXH/AbJxhlK8jn8J yjeYfXvEVscMQWZDu9WODWSv1YcluITI1TCjdCqEaiLBl5DS1wIDAQABo4IESTCC BEUwHQYDVR0OBBYEFK2BgCuemdFW9SNX+miW4IMhk95FMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j ZTYzNGMyOC0yMzFhLTRiNzEtYWQ0Ny00M2UwNDc3OTY5MGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2NlNjM0YzI4LTIzMWEtNGI3MS1h ZDQ3LTQzZTA0Nzc5NjkwYS9jZTYzNGMyOC0yMzFhLTRiNzEtYWQ0Ny00M2UwNDc3 OTY5MGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAEXonADBAIX95gDBAKCM2gDBAKsUnADBALOU5AD BALQVVwwDgQCAAIwCAMGBCYC/V0AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYU 8jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAtBLduYpBBAdZfw4WOk/Lb7XDuKIplYshHv+L//I++ww/BQEas FB+rI0iu6vqDj7PjVS1sbpMtbJWHNPMGVpFUPJe0qnm5yS/55vZc31/G9jNEhQSz ZJULkC0vPpy1m25VCe9pJT59gvU0Yq6U0FRTI0cONiQxFCyCd/4K68Lq7XmBtdUR o8WH7LGZ82fSN42oTDoD5e5VnTkbqj8BMi+4EXuTj1CY+N7IQcoXm/FaK0Lbex+Q orNbSUwGFQuhnpHbGEJse86HEQnxJnsFqY/OqbpMWKOwIFMhCC4FrmgCg06Hjf+M qz+0OCCIfNpx4L0Ye5NtVl4WcrzqkzHkwusQ -----END CERTIFICATE-----Generated at Wed Apr 8 23:59:45 2026 by rpki-client