$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer File: cda047c8-1dc9-4cca-b1de-b651af254414.cer (raw, json) Hash identifier: oBjTx1iej9FG4jc37i4Bf+sd8LhyH0+q1hU+sHGGkFA= Subject key identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D931DB8E54554AADC0735FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 00:45:17 +0000 Certificate not after: Mon 24 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 400328 IP: 204.76.203.0/24 IP: 2602:f91d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:1d:b8:e5:45:54:aa:dc:07:35:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 21 00:45:17 2026 GMT Not After : Jul 24 00:45:17 2028 GMT Subject: CN=cda047c8-1dc9-4cca-b1de-b651af254414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:6f:6f:a4:1e:69:49:6a:49:36:98:2b:e3: 31:33:b4:6d:de:96:fb:4a:08:81:9e:ba:44:9c:82: d1:87:c4:4b:d9:a7:5c:5a:22:e5:fb:ce:c9:5b:7e: ef:ff:24:58:8f:b1:28:c2:ff:ce:81:c4:7d:3b:05: b3:07:2e:b4:df:20:8e:7d:12:12:5a:c6:fa:3f:c2: 85:6a:9d:37:f2:7f:d7:d8:5a:e1:6e:e1:aa:d9:58: 11:d1:2a:df:a1:ca:79:32:7f:59:e1:b6:c5:6c:0d: ef:87:25:02:a4:e4:28:7b:6d:96:32:a5:d8:c1:1e: b8:1c:d2:d3:7e:69:4d:91:bd:63:91:b8:dc:da:c5: 90:35:a1:52:ba:58:66:90:86:63:b7:b7:eb:2d:ad: d9:5b:ee:1a:22:ae:b4:02:2b:4b:b4:7f:c2:d5:34: d3:d4:99:db:a3:c7:67:d8:59:89:a0:a2:dc:0b:a1: 93:b6:fd:fb:e6:3c:8f:75:09:96:db:a7:73:4f:bb: d9:bd:22:c1:7e:38:92:58:8b:bf:bd:96:a9:5e:eb: 05:fe:87:d4:11:cb:41:fe:34:e3:15:09:9d:9b:90: 1a:50:d6:15:25:02:41:49:e9:59:2a:d5:8b:4e:59: e8:af:2d:e1:73:6d:55:20:91:18:64:e6:d0:90:21: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 204.76.203.0/24 IPv6: 2602:f91d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a2:02:a5:00:14:ab:63:9e:5a:8d:af:9d:23:e1:25:9a:69: f5:d5:d3:8f:23:d0:09:55:4d:e9:e4:8a:a0:48:1f:19:4a:59: b7:d5:51:ae:0d:5d:e1:cb:c8:71:98:47:da:dd:b6:4d:d4:a4: e6:95:78:51:15:f1:95:63:5c:ca:c1:50:e1:1f:b8:30:11:41: d4:b7:b7:b6:9f:18:b7:af:47:31:f2:a4:c3:09:f4:59:8f:04: 4c:a9:1e:9a:4f:35:4b:d4:27:91:72:cc:d4:2c:7a:5d:0a:58: b8:eb:cc:96:0c:e8:7c:d0:75:e6:db:0f:e5:83:23:66:89:a2: 92:64:ba:4b:54:4e:ef:d8:00:36:27:da:13:92:bf:9d:d6:98: 36:1a:a5:f0:2d:17:c1:76:77:e9:9c:84:d6:66:47:5d:88:22: 09:0a:b6:b5:51:99:d9:63:3b:37:3b:0e:8a:81:0f:17:4d:74: 56:47:8a:b0:01:79:0c:29:0a:df:9c:e9:72:81:f6:6e:3d:a7: 28:e2:25:2e:cf:47:92:ec:f7:78:45:dc:42:0a:b3:1a:09:33: a7:14:18:62:f2:8d:48:6c:06:65:ad:d7:9b:9c:0f:ad:9e:d6: e0:67:4c:4d:00:63:d0:83:47:80:89:43:c9:9f:6f:c3:4e:e4: b5:22:86:9b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2THbjlRVSq3Ac1/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyMTAwNDUxN1oXDTI4MDcyNDAwNDUxN1owLzEtMCsGA1UEAxMk Y2RhMDQ3YzgtMWRjOS00Y2NhLWIxZGUtYjY1MWFmMjU0NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcRvb6QeaUlqSTaYK+MxM7Rt3pb7SgiBnrpE nILRh8RL2adcWiLl+87JW37v/yRYj7Eowv/OgcR9OwWzBy603yCOfRISWsb6P8KF ap038n/X2FrhbuGq2VgR0Srfocp5Mn9Z4bbFbA3vhyUCpOQoe22WMqXYwR64HNLT fmlNkb1jkbjc2sWQNaFSulhmkIZjt7frLa3ZW+4aIq60AitLtH/C1TTT1Jnbo8dn 2FmJoKLcC6GTtv375jyPdQmW26dzT7vZvSLBfjiSWIu/vZapXusF/ofUEctB/jTj FQmdm5AaUNYVJQJBSelZKtWLTlnory3hc21VIJEYZObQkCGdDwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMVHPp0nRsxUQDKL6XSMPdGTKILqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j ZGEwNDdjOC0xZGM5LTRjY2EtYjFkZS1iNjUxYWYyNTQ0MTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2NkYTA0N2M4LTFkYzktNGNjYS1i MWRlLWI2NTFhZjI1NDQxNC9jZGEwNDdjOC0xZGM5LTRjY2EtYjFkZS1iNjUxYWYy NTQ0MTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADMTMswDgQCAAIwCAMGACYC+R0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYbyDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKogKlABSrY55aja+dI+Elmmn1 1dOPI9AJVU3p5IqgSB8ZSlm31VGuDV3hy8hxmEfa3bZN1KTmlXhRFfGVY1zKwVDh H7gwEUHUt7e2nxi3r0cx8qTDCfRZjwRMqR6aTzVL1CeRcszULHpdCli468yWDOh8 0HXm2w/lgyNmiaKSZLpLVE7v2AA2J9oTkr+d1pg2GqXwLRfBdnfpnITWZkddiCIJ Cra1UZnZYzs3Ow6KgQ8XTXRWR4qwAXkMKQrfnOlygfZuPaco4iUuz0eS7Pd4RdxC CrMaCTOnFBhi8o1IbAZlrdebnA+tntbgZ0xNAGPQg0eAiUPJn2/DTuS1Ioab -----END CERTIFICATE-----Generated at Mon Apr 27 15:08:23 2026 by rpki-client