$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer File: 9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer (raw, json) Hash identifier: bTkEGTr3L1jHulsuAg7ERJS3UQGEb+yj639PlTs98W0= Subject key identifier: C9:65:92:2C:3A:B0:AD:1F:B3:FE:08:61:5C:BF:BA:2B:23:DB:10:5E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D116AB96CAFEE16336F06A840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Mar 2026 13:45:21 +0000 Certificate not after: Wed 07 Jun 2028 12:45:21 +0000 Subordinate resources: AS: 399968 IP: 204.126.252.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:6a:b9:6c:af:ee:16:33:6f:06:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 5 13:45:21 2026 GMT Not After : Jun 7 12:45:21 2028 GMT Subject: CN=9d948f00-81b9-4e48-b4ec-8b2a1272c17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:91:c9:f7:28:af:0b:d0:cb:0d:66:7d:9f:56: 41:77:08:c0:41:27:4f:46:25:2f:1f:2b:63:35:48: d6:bf:c8:9e:0d:ac:02:1f:5b:8f:13:7b:e8:7c:f1: 5c:0a:b9:f5:be:14:af:0d:1f:fa:85:05:37:69:94: e3:2f:1e:ed:67:f8:6b:03:40:02:94:ea:a3:0c:85: 15:db:d8:4f:fd:f3:ac:d5:9b:12:30:f7:d4:d4:da: 9b:3b:17:4a:50:b3:24:f6:63:2b:53:b1:ba:c3:a8: 11:86:3c:fb:50:c6:11:31:75:a5:77:70:e8:4a:d5: 22:2b:e8:bb:5e:aa:4f:20:a2:b5:d6:15:9c:ff:99: a2:04:8e:84:0a:c6:56:b7:a8:ad:01:05:cb:4b:b3: 28:5a:aa:14:68:42:01:0d:fa:e2:67:50:73:b5:ba: 74:2b:15:a3:93:34:83:8b:6b:00:3d:b9:f5:ae:fd: 52:6b:be:ce:d5:67:e2:90:38:a0:f5:23:ff:24:e4: 46:98:5e:80:4d:97:14:5e:41:76:01:79:57:d7:5d: 9d:d3:38:2e:9f:18:98:73:79:69:f1:9d:95:ae:cb: 47:45:18:2b:60:86:59:0b:33:2d:d9:ca:ef:b9:a2: fb:bc:28:84:cf:9f:7b:17:6f:7a:61:47:c1:fb:97: 67:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:65:92:2C:3A:B0:AD:1F:B3:FE:08:61:5C:BF:BA:2B:23:DB:10:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.126.252.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399968 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cf:f4:17:7b:34:0f:eb:11:1b:90:cc:7d:cc:4c:54:b4:cb: f1:b4:f6:e4:7c:84:ff:c7:ad:30:b5:e9:43:7a:71:ff:0d:9b: 4b:d3:86:0f:d6:27:a0:94:db:e7:41:68:57:cd:e4:bb:09:36: 7f:9a:80:2a:35:1c:6a:ff:1b:f9:8c:48:8f:a6:b0:2f:b5:6a: 4d:2c:c5:02:1d:54:0d:41:4b:65:62:2e:93:28:47:5b:82:41: ca:1f:fc:25:8f:42:3a:44:d0:2a:57:a8:1a:5c:55:82:4a:64: 81:a8:fe:6f:68:94:d8:c6:74:0d:e1:87:3d:07:99:20:59:79: f7:e7:a7:f1:b3:20:52:67:bf:4d:cb:ed:41:a0:17:7b:12:97: 5a:c8:cc:c2:bf:26:43:9d:aa:8c:a4:84:9a:a6:9d:8b:6f:9d: 23:e0:50:29:c7:ca:77:16:89:0f:f1:16:ec:bf:09:0a:19:72: 58:d6:9c:6f:60:f1:e9:55:aa:19:bd:81:dd:64:9f:86:0d:fd: 73:49:de:bc:54:63:c2:11:c9:24:0c:e0:f2:ba:ec:61:20:39: a8:d9:81:09:44:66:00:28:6a:b2:ec:e9:80:b7:63:e2:f0:cf: 5e:04:d7:4a:49:51:b2:56:e2:57:dc:7b:9b:69:2b:a2:78:4b: ef:ba:2a:df -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE0Rarlsr+4WM28GqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMwNTEzNDUyMVoXDTI4MDYwNzEyNDUyMVowLzEtMCsGA1UEAxMk OWQ5NDhmMDAtODFiOS00ZTQ4LWI0ZWMtOGIyYTEyNzJjMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZHJ9yivC9DLDWZ9n1ZBdwjAQSdPRiUvHytj NUjWv8ieDawCH1uPE3vofPFcCrn1vhSvDR/6hQU3aZTjLx7tZ/hrA0AClOqjDIUV 29hP/fOs1ZsSMPfU1NqbOxdKULMk9mMrU7G6w6gRhjz7UMYRMXWld3DoStUiK+i7 XqpPIKK11hWc/5miBI6ECsZWt6itAQXLS7MoWqoUaEIBDfriZ1Bztbp0KxWjkzSD i2sAPbn1rv1Sa77O1WfikDig9SP/JORGmF6ATZcUXkF2AXlX112d0zgunxiYc3lp 8Z2VrstHRRgrYIZZCzMt2crvuaL7vCiEz597F296YUfB+5dnYQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMllkiw6sK0fs/4IYVy/uisj2xBeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 ZDk0OGYwMC04MWI5LTRlNDgtYjRlYy04YjJhMTI3MmMxN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzlkOTQ4ZjAwLTgxYjktNGU0OC1i NGVjLThiMmExMjcyYzE3Yi85ZDk0OGYwMC04MWI5LTRlNDgtYjRlYy04YjJhMTI3 MmMxN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMfvwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE7P9Bd7NA/rERuQzH3MTFS0y/G09uR8hP/HrTC16UN6cf8N m0vThg/WJ6CU2+dBaFfN5LsJNn+agCo1HGr/G/mMSI+msC+1ak0sxQIdVA1BS2Vi LpMoR1uCQcof/CWPQjpE0CpXqBpcVYJKZIGo/m9olNjGdA3hhz0HmSBZeffnp/Gz IFJnv03L7UGgF3sSl1rIzMK/JkOdqoykhJqmnYtvnSPgUCnHyncWiQ/xFuy/CQoZ cljWnG9g8elVqhm9gd1kn4YN/XNJ3rxUY8IRySQM4PK67GEgOajZgQlEZgAoarLs 6YC3Y+Lwz14E10pJUbJW4lfce5tpK6J4S++6Kt8= -----END CERTIFICATE-----Generated at Sun Mar 22 06:56:27 2026 by rpki-client