$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer File: ae6e260c-421d-48c3-b47d-d76ac074fbba.cer (raw, json) Hash identifier: lODQHRxPvbFfOe34G4yLjBea9KpqHSPF14DvYzz/gp4= Subject key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584DBB98A61A27D01BE454116FE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 12:45:18 +0000 Certificate not after: Mon 07 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 163.245.32.0 -- 163.245.127.255 IP: 205.215.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:98:a6:1a:27:d0:1b:e4:54:11:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 5 12:45:18 2026 GMT Not After : Aug 7 12:45:18 2028 GMT Subject: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:51:2d:aa:be:8a:0e:8a:9a:df:07:46:af:1a: b9:dd:a8:cf:43:49:6e:4d:28:e7:ee:3b:68:ee:b7: 1f:d6:dc:79:86:f7:d2:e0:8d:d9:ac:5f:30:a6:b5: c5:f8:8c:11:27:77:60:c1:91:25:7b:60:11:82:41: f3:cd:b9:3a:59:d4:36:9a:d1:07:37:a0:7d:25:27: 85:1a:71:d6:e6:8c:fd:44:cb:bf:e1:64:6b:c3:51: 17:b0:a3:b7:ef:03:49:86:0c:c4:18:7a:67:86:2a: 00:96:75:90:c4:65:06:6d:fc:52:e6:21:30:a3:7a: c7:97:ab:e6:50:07:4e:23:9b:35:14:5b:fc:98:c4: ce:6a:de:c8:91:7e:5b:d2:af:53:6a:5a:c5:7b:4d: 32:55:c9:50:69:3d:d4:73:e9:11:a5:e7:7e:bb:f3: 22:bc:e7:79:1a:17:6e:b5:b9:a0:d6:88:14:6d:ef: be:14:1c:da:a7:04:f8:04:24:c5:ed:0b:ec:e3:ab: 2a:4f:13:62:d4:20:77:ec:96:5d:54:90:bc:fd:9d: 96:14:07:74:d0:77:6d:40:80:8b:3a:1e:8f:bb:ae: 07:79:23:64:a0:db:8a:80:76:9e:c6:8b:7c:77:bf: 37:7d:ba:53:99:9a:78:0d:e2:4b:77:a2:36:47:fa: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 163.245.32.0-163.245.127.255 205.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c8:0f:ff:9c:01:bc:be:71:3d:02:0c:8b:43:aa:89:6e:6e: c8:b9:b4:70:59:ad:bd:33:ba:27:41:f9:08:b6:85:73:4b:b7: cf:13:db:76:a9:3c:20:c9:f7:b3:df:a1:c1:5a:26:cf:c0:c7: 13:c1:f4:9e:e0:e7:fb:e7:d4:f0:02:12:81:ac:19:9b:49:bc: 58:f0:dc:f1:47:92:af:f9:7a:29:d3:b1:8e:44:13:5b:28:66: 76:82:47:44:1a:73:2c:46:c3:e7:4d:7f:c3:a7:18:40:29:c0: 70:08:c1:be:9a:20:70:c9:f9:da:28:ed:58:dc:de:ca:de:fc: dd:07:0d:a3:43:1a:15:94:66:51:49:27:15:74:b8:34:df:c3: fc:d9:03:02:7a:c0:86:31:cd:6e:68:c3:89:0d:27:bd:c4:70: 45:fd:5e:b0:85:a2:f0:b9:9c:d1:d7:2a:c2:9a:09:cf:81:fa: b4:aa:4d:31:b7:7e:44:3d:70:14:04:7d:8e:4a:15:6c:73:70: 72:0b:8c:42:d7:5a:90:5e:72:a7:e3:23:8b:e5:61:5a:b4:0a: 1b:fd:1b:60:d3:aa:a8:7c:93:32:c1:8d:c6:8b:d2:77:8b:9c: 34:5c:50:07:f1:56:61:f0:9b:29:9d:b2:f9:e2:df:13:d1:32: 91:ce:6f:1b -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWE27mKYaJ9Ab5FQRb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDUwNTEyNDUxOFoXDTI4MDgwNzEyNDUxOFowLzEtMCsGA1UEAxMk YWU2ZTI2MGMtNDIxZC00OGMzLWI0N2QtZDc2YWMwNzRmYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFEtqr6KDoqa3wdGrxq53ajPQ0luTSjn7jto 7rcf1tx5hvfS4I3ZrF8wprXF+IwRJ3dgwZEle2ARgkHzzbk6WdQ2mtEHN6B9JSeF GnHW5oz9RMu/4WRrw1EXsKO37wNJhgzEGHpnhioAlnWQxGUGbfxS5iEwo3rHl6vm UAdOI5s1FFv8mMTOat7IkX5b0q9TalrFe00yVclQaT3Uc+kRped+u/MivOd5Ghdu tbmg1ogUbe++FBzapwT4BCTF7Qvs46sqTxNi1CB37JZdVJC8/Z2WFAd00HdtQICL Oh6Pu64HeSNkoNuKgHaexot8d783fbpTmZp4DeJLd6I2R/r/fQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFHSTYFyspXJjGrq3lS7dZwKD3jzjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3NGZiYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlNmUyNjBjLTQyMWQtNDhjMy1i NDdkLWQ3NmFjMDc0ZmJiYS9hZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3 NGZiYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEBaP1IAMEB6P1AAMEBs3XQDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBP yA//nAG8vnE9AgyLQ6qJbm7IubRwWa29M7onQfkItoVzS7fPE9t2qTwgyfez36HB WibPwMcTwfSe4Of759TwAhKBrBmbSbxY8NzxR5Kv+Xop07GORBNbKGZ2gkdEGnMs RsPnTX/DpxhAKcBwCMG+miBwyfnaKO1Y3N7K3vzdBw2jQxoVlGZRSScVdLg038P8 2QMCesCGMc1uaMOJDSe9xHBF/V6whaLwuZzR1yrCmgnPgfq0qk0xt35EPXAUBH2O ShVsc3ByC4xC11qQXnKn4yOL5WFatAob/Rtg06qofJMywY3Gi9J3i5w0XFAH8VZh 8JspnbL54t8T0TKRzm8b -----END CERTIFICATE-----Generated at Wed May 6 23:40:49 2026 by rpki-client