$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer File: 8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer (raw, json) Hash identifier: GRyhZJue0BaGY8N+qbbI63Gp+kJMC7G35SwzXQWr/fw= Subject key identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D95E86724D489A124B202F640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 00:45:17 +0000 Certificate not after: Tue 25 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 30011 IP: 162.118.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:e8:67:24:d4:89:a1:24:b2:02:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 22 00:45:17 2026 GMT Not After : Jul 25 00:45:17 2028 GMT Subject: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:5b:83:c4:04:7d:36:90:1d:5e:bc:a6:fb: b6:50:90:ab:fb:50:35:fd:17:54:51:f9:48:97:46: 72:92:0f:ae:95:ed:0d:bf:a8:5a:88:c4:31:5c:df: 1d:b7:e3:0c:7a:25:e9:2e:b4:4b:e9:6a:47:1b:b9: 22:92:58:11:32:89:74:6c:50:e0:bf:22:ca:47:9d: d8:0d:5d:1e:7f:cf:12:ec:a6:4a:21:f6:35:ac:51: 52:b5:95:77:7b:09:ca:a9:d4:4a:b9:3d:2a:84:0e: 0d:13:48:c5:a6:f4:3c:ea:27:77:09:c9:e1:1c:fe: d0:82:96:ee:fd:56:f6:1d:67:04:8e:10:d2:26:00: 74:2b:3e:ef:58:e7:16:69:94:b3:95:39:72:e4:8d: 9a:29:21:33:41:4b:bd:61:b8:a8:d3:45:0b:11:73: 16:1c:01:1d:75:f6:3e:53:11:98:3f:1d:1e:d8:8e: fb:b4:9a:c7:97:c3:4f:96:58:59:ae:e7:80:ea:cd: 27:dc:de:a9:63:85:31:af:42:35:aa:a1:ae:15:38: 31:96:31:b5:ae:2d:e5:ee:c6:cd:3e:9c:06:14:d6: 0c:16:6a:cf:d2:56:c6:17:ce:d7:f8:a1:3a:ef:5e: 3a:a6:64:43:d5:1b:42:bf:73:7b:c1:29:3d:23:58: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.118.16.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30011 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:72:b7:85:21:64:39:71:55:f1:6b:6c:bb:29:8b:60:60:41: 93:4a:4c:51:e3:7d:a5:90:a1:f1:48:cb:1b:56:49:8c:78:2f: d7:a6:36:09:ad:70:d0:04:cc:13:c7:98:1d:bb:b0:37:1e:b4: 1d:37:6b:8f:37:09:7d:de:c2:cc:fd:49:63:f2:9b:d2:c2:34: 9c:e9:34:82:78:e8:26:3b:2f:f6:f9:0c:9e:d2:44:32:a7:5f: 61:2e:03:26:88:f3:b4:f7:41:bf:cb:a0:bf:06:02:9b:ae:64: b5:31:14:e3:6f:c5:29:61:04:23:90:8c:c5:fe:f0:bc:71:08: 5b:0a:4e:fb:d0:4c:f0:00:f1:da:da:df:27:c9:f8:65:09:29: f0:4e:f7:72:23:59:0d:67:5e:8e:01:c0:ca:28:f4:34:41:c8: fb:e9:36:73:0a:e5:cf:1c:a2:8b:c8:9b:fb:a0:b1:d6:35:ab: c9:5f:af:a6:13:e2:4a:4c:c1:75:15:a0:60:ab:97:3e:df:dd: b3:8c:83:9b:73:04:05:9c:6e:d9:3d:20:30:6e:08:76:bd:c3: d4:0a:b2:3e:ad:6f:19:d5:0c:9f:ea:9c:34:3c:cf:c0:de:b3: f4:ae:5f:c2:1b:32:4e:9e:29:b3:f3:37:bb:19:39:d4:fb:c6: 89:cc:f7:4c -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE2V6Gck1ImhJLIC9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyMjAwNDUxN1oXDTI4MDcyNTAwNDUxN1owLzEtMCsGA1UEAxMk OGE4NDQzZDEtNWM3Yy00NGViLTgyMmMtNjJhMWExNDIzYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNbg8QEfTaQHV68pvu2UJCr+1A1/RdUUflI l0Zykg+ule0Nv6haiMQxXN8dt+MMeiXpLrRL6WpHG7kiklgRMol0bFDgvyLKR53Y DV0ef88S7KZKIfY1rFFStZV3ewnKqdRKuT0qhA4NE0jFpvQ86id3CcnhHP7Qgpbu /Vb2HWcEjhDSJgB0Kz7vWOcWaZSzlTly5I2aKSEzQUu9Ybio00ULEXMWHAEddfY+ UxGYPx0e2I77tJrHl8NPllhZrueA6s0n3N6pY4Uxr0I1qqGuFTgxljG1ri3l7sbN PpwGFNYMFmrP0lbGF87X+KE67146pmRD1RtCv3N7wSk9I1gM7wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDLLgEMD2Wm2HRFNi81hPZY1IAvFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 YTg0NDNkMS01YzdjLTQ0ZWItODIyYy02MmExYTE0MjNhMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhhODQ0M2QxLTVjN2MtNDRlYi04 MjJjLTYyYTFhMTQyM2EyYi84YTg0NDNkMS01YzdjLTQ0ZWItODIyYy02MmExYTE0 MjNhMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASidhAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dTswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAK3K3hSFkOXFV8WtsuymLYGBBk0pMUeN9pZCh8UjLG1ZJjHgv 16Y2Ca1w0ATME8eYHbuwNx60HTdrjzcJfd7CzP1JY/Kb0sI0nOk0gnjoJjsv9vkM ntJEMqdfYS4DJojztPdBv8ugvwYCm65ktTEU42/FKWEEI5CMxf7wvHEIWwpO+9BM 8ADx2trfJ8n4ZQkp8E73ciNZDWdejgHAyij0NEHI++k2cwrlzxyii8ib+6Cx1jWr yV+vphPiSkzBdRWgYKuXPt/ds4yDm3MEBZxu2T0gMG4Idr3D1AqyPq1vGdUMn+qc NDzPwN6z9K5fwhsyTp4ps/M3uxk51PvGicz3TA== -----END CERTIFICATE-----Generated at Wed Apr 22 09:50:04 2026 by rpki-client