$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer File: 58520fc1-e07b-4b1b-ad59-5756198c9756.cer (raw, json) Hash identifier: d0Je7aKTCGe16JqEHT33BCbRysuOiCdx+KNEkM1U66c= Subject key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E3FBCF8C34C4C430015141740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Jun 2026 20:45:11 +0000 Certificate not after: Sat 23 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 22770 IP: 199.181.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:bc:f8:c3:4c:4c:43:00:15:14:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 21 20:45:11 2026 GMT Not After : Sep 23 20:45:11 2028 GMT Subject: CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:4a:1d:32:8c:39:ba:4c:e4:ef:d4:e1:c0: 5d:12:da:84:d1:6c:b3:49:49:79:e0:23:7e:7e:b0: 19:1b:f5:b1:c4:29:14:ab:af:56:50:20:cd:cf:a1: 57:f9:a0:2b:fe:02:ad:ae:15:7d:62:99:8d:8a:b0: 12:60:6c:fe:32:2f:3b:d0:33:a6:65:89:76:23:13: a0:86:13:fe:30:f1:f8:1f:d2:cb:67:e3:66:65:fc: 52:9f:16:ec:ea:f6:17:72:5d:7f:27:bb:8a:4a:15: 43:50:53:c8:10:f5:72:87:c6:de:9f:3b:62:9d:21: f5:3d:d7:a7:03:9f:22:55:16:28:ba:5e:ef:5d:a6: b2:53:73:84:0d:61:82:93:6e:56:3e:20:51:e3:d7: d4:25:03:db:ed:43:71:86:03:f5:b3:10:11:5d:fa: a7:51:89:f0:56:c8:19:62:88:14:17:52:a4:40:38: b1:5d:6e:cf:dc:c6:56:70:3a:b0:3f:b2:97:d7:52: 1e:83:9e:9d:5f:c9:99:b9:72:3f:39:a3:ca:0d:56: d7:06:8a:03:ad:8a:30:8b:c7:07:5f:9d:66:5a:b2: 4c:ca:6d:32:95:0f:1a:8b:aa:53:c6:09:b1:31:98: d0:ee:e8:cc:44:5c:f9:ca:f3:12:4c:f7:72:24:74: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.181.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22770 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5e:4f:ef:25:ba:c6:11:e9:23:bf:eb:d9:1e:b2:55:ca:23: e9:bc:cf:91:0b:aa:dc:85:81:23:a4:04:5e:8d:0d:f5:9d:cb: 18:53:94:a9:a7:35:3b:e2:20:93:f5:a2:a6:0f:8c:50:2f:7e: 9b:22:86:e8:6e:f1:4a:89:75:9e:ad:82:33:6b:8b:68:39:0e: 21:4f:e3:de:38:f2:a9:39:06:d6:5b:c6:5e:21:b1:d2:76:e7: 03:22:8c:5f:62:57:4f:57:4d:7f:5d:8f:4e:ea:ae:d8:a3:7b: 0c:4c:d9:21:12:3e:43:7c:e4:7d:04:ae:90:a2:0e:c1:62:e5: f3:ff:97:54:1f:ca:7f:a6:96:96:0b:3b:9a:83:97:6b:c0:44: 23:82:39:73:30:4a:35:10:df:67:48:46:34:29:6b:43:33:5b: 2d:96:3b:66:4c:11:9d:ff:19:f2:0a:ff:5b:3a:e2:61:e5:c7: d5:b8:ab:de:e6:a9:df:80:00:4c:1a:f1:9e:15:e6:e3:46:5b: a1:f3:dd:68:f2:c2:77:ef:eb:e0:4d:5d:4b:c3:b6:f7:84:41: 2c:cb:ca:a3:34:ac:0b:d7:38:20:58:d8:4c:a6:d7:75:89:6f: 2a:33:f5:09:c7:df:07:0e:e1:17:3c:0e:6c:f9:15:8d:0f:92: bb:38:00:91 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE4/vPjDTExDABUUF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYyMTIwNDUxMVoXDTI4MDkyMzIwNDUxMVowLzEtMCsGA1UEAxMk NTg1MjBmYzEtZTA3Yi00YjFiLWFkNTktNTc1NjE5OGM5NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYRKHTKMObpM5O/U4cBdEtqE0WyzSUl54CN+ frAZG/WxxCkUq69WUCDNz6FX+aAr/gKtrhV9YpmNirASYGz+Mi870DOmZYl2IxOg hhP+MPH4H9LLZ+NmZfxSnxbs6vYXcl1/J7uKShVDUFPIEPVyh8benztinSH1Pden A58iVRYoul7vXaayU3OEDWGCk25WPiBR49fUJQPb7UNxhgP1sxARXfqnUYnwVsgZ YogUF1KkQDixXW7P3MZWcDqwP7KX11Ieg56dX8mZuXI/OaPKDVbXBooDrYowi8cH X51mWrJMym0ylQ8ai6pTxgmxMZjQ7ujMRFz5yvMSTPdyJHQXdwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFItoWkeW05bR+aFf5ziV4CmD5tQFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4Yzk3NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU4NTIwZmMxLWUwN2ItNGIxYi1h ZDU5LTU3NTYxOThjOTc1Ni81ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4 Yzk3NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXHtSAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WPIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAV15P7yW6xhHpI7/r2R6yVcoj6bzPkQuq3IWBI6QEXo0N9Z3L GFOUqac1O+Igk/Wipg+MUC9+myKG6G7xSol1nq2CM2uLaDkOIU/j3jjyqTkG1lvG XiGx0nbnAyKMX2JXT1dNf12PTuqu2KN7DEzZIRI+Q3zkfQSukKIOwWLl8/+XVB/K f6aWlgs7moOXa8BEI4I5czBKNRDfZ0hGNClrQzNbLZY7ZkwRnf8Z8gr/WzriYeXH 1bir3uap34AATBrxnhXm40ZbofPdaPLCd+/r4E1dS8O294RBLMvKozSsC9c4IFjY TKbXdYlvKjP1CcffBw7hFzwObPkVjQ+SuzgAkQ== -----END CERTIFICATE-----Generated at Tue Jul 21 11:36:10 2026 by rpki-client