$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c.cer File: 10e63d97-2f16-4c66-8928-7a89ff99c05c.cer (raw, json) Hash identifier: f5MTQ4LTLnXgtb63nsozSBhw8bSgSBqcMJrvsgxSmaY= Subject key identifier: 21:61:2B:B1:AD:D4:34:A7:40:4E:12:B2:49:63:1A:50:07:25:61:28 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584D5FAF234F43E668E03E2C8500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/10e63d97-2f16-4c66-8928-7a89ff99c05c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 14:36:15 +0000 Certificate not after: Thu 19 Aug 2027 03:51:13 +0000 Subordinate resources: AS: 396108 IP: 23.140.164.0/24 IP: 204.153.123.0/24 IP: 2602:f65e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:af:23:4f:43:e6:68:e0:3e:2c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 2 14:36:15 2026 GMT Not After : Aug 19 03:51:13 2027 GMT Subject: CN=10e63d97-2f16-4c66-8928-7a89ff99c05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:be:4a:c3:37:e4:3b:ed:f9:89:6a:87:0d: 4b:9a:1d:a4:c0:c8:b0:80:5b:f6:c5:c2:28:f2:d0: 18:db:7a:a3:06:1d:a9:f2:7f:4d:64:87:44:14:ea: 80:a3:d6:77:a9:96:ef:d4:c2:36:1c:84:15:d5:e5: 16:cd:14:b4:e0:42:68:1a:62:fd:b5:ab:ac:15:fe: 64:a6:87:ad:fb:8e:6e:5b:4f:98:b9:90:d1:2c:06: c0:de:38:ab:6b:50:5e:df:98:fe:0f:97:cf:ab:a8: 2d:5d:e1:51:7f:4a:87:0f:b7:86:0c:0c:80:25:5b: 9d:ae:aa:61:fa:be:42:29:a3:8f:6b:8d:ff:79:1a: 9b:9d:d9:fe:5d:22:12:e2:5a:01:ea:2c:bb:ee:bb: 90:e3:f9:b0:70:6a:99:4d:cc:10:e9:55:af:ed:3f: 18:cd:88:e7:8d:8f:a5:9a:a1:48:cc:c2:c5:9f:de: a4:7f:4f:7e:e0:0f:cf:77:31:a0:4d:c6:63:6c:87: 9e:c8:9c:17:f0:72:26:4e:bd:07:d4:23:1f:a0:2a: ab:4d:5d:eb:e8:aa:b0:b9:9f:f5:72:bd:ab:a5:e7: 27:41:3c:13:fa:00:b8:ab:c5:84:27:b5:36:02:ef: 7a:ba:32:83:ab:be:2c:e4:49:2c:5d:0e:ca:fb:f2: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:2B:B1:AD:D4:34:A7:40:4E:12:B2:49:63:1A:50:07:25:61:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/10e63d97-2f16-4c66-8928-7a89ff99c05c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.140.164.0/24 204.153.123.0/24 IPv6: 2602:f65e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396108 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:55:c4:4d:0f:90:08:39:e3:37:2a:6d:27:46:0c:ba:67:b6: 79:9a:9e:0a:21:0e:1d:e2:16:7a:9e:81:7e:76:2a:fb:a1:7e: 3e:97:bf:49:73:9e:a7:1e:ef:10:93:ec:d1:23:39:17:93:cb: 98:50:c3:ce:16:4e:82:ec:3d:61:ac:dc:37:bc:0d:25:3a:59: 53:24:f4:8d:80:cb:64:6b:2e:d9:7c:d6:2b:a6:f5:6f:75:e4: cb:19:85:d6:4b:ea:a4:45:eb:86:ff:03:44:ad:10:31:8b:b5: be:77:e1:2d:17:b5:5f:be:f5:9a:9f:5f:eb:5b:fc:94:88:91: ca:d3:4f:6c:3a:34:db:b8:dd:e2:15:4c:74:6c:b7:8f:20:03: 6a:7b:59:52:ac:7d:51:f8:1d:9e:68:00:4b:e4:64:02:90:3c: 20:ef:a2:fd:6c:76:21:ea:e1:bd:8c:d2:d1:d6:96:ea:79:96: c5:82:aa:de:06:4a:03:3b:2f:57:8e:a2:ac:15:34:98:2a:9a: 0f:4f:d5:60:18:92:c8:86:7c:4a:b4:bd:26:aa:cc:ed:7e:78: e9:1c:af:19:4e:f5:87:8c:55:30:ff:85:6c:66:2d:b8:fb:41: 35:db:74:e2:a9:13:b0:c1:37:4c:3a:f1:be:cf:ab:1f:f1:90: 95:07:e9:7c -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE1fryNPQ+Zo4D4shQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDQwMjE0MzYxNVoXDTI3MDgxOTAzNTExM1owLzEtMCsGA1UEAxMk MTBlNjNkOTctMmYxNi00YzY2LTg5MjgtN2E4OWZmOTljMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAW+SsM35Dvt+Ylqhw1Lmh2kwMiwgFv2xcIo 8tAY23qjBh2p8n9NZIdEFOqAo9Z3qZbv1MI2HIQV1eUWzRS04EJoGmL9tausFf5k poet+45uW0+YuZDRLAbA3jira1Be35j+D5fPq6gtXeFRf0qHD7eGDAyAJVudrqph +r5CKaOPa43/eRqbndn+XSIS4loB6iy77ruQ4/mwcGqZTcwQ6VWv7T8YzYjnjY+l mqFIzMLFn96kf09+4A/PdzGgTcZjbIeeyJwX8HImTr0H1CMfoCqrTV3r6KqwuZ/1 cr2rpecnQTwT+gC4q8WEJ7U2Au96ujKDq74s5EksXQ7K+/KGcwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCFhK7Gt1DSnQE4SskljGlAHJWEoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x MGU2M2Q5Ny0yZjE2LTRjNjYtODkyOC03YTg5ZmY5OWMwNWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzEwZTYzZDk3LTJmMTYtNGM2Ni04 OTI4LTdhODlmZjk5YzA1Yy8xMGU2M2Q5Ny0yZjE2LTRjNjYtODkyOC03YTg5ZmY5 OWMwNWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjKQDBADMmXswDgQCAAIwCAMGACYC9l4AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYLTDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtVcRND5AIOeM3Km0n Rgy6Z7Z5mp4KIQ4d4hZ6noF+dir7oX4+l79Jc56nHu8Qk+zRIzkXk8uYUMPOFk6C 7D1hrNw3vA0lOllTJPSNgMtkay7ZfNYrpvVvdeTLGYXWS+qkReuG/wNErRAxi7W+ d+EtF7VfvvWan1/rW/yUiJHK009sOjTbuN3iFUx0bLePIANqe1lSrH1R+B2eaABL 5GQCkDwg76L9bHYh6uG9jNLR1pbqeZbFgqreBkoDOy9XjqKsFTSYKpoPT9VgGJLI hnxKtL0mqsztfnjpHK8ZTvWHjFUw/4VsZi24+0E123TiqROwwTdMOvG+z6sf8ZCV B+l8 -----END CERTIFICATE-----Generated at Wed Apr 15 12:58:42 2026 by rpki-client