$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer File: aa27be3e-5663-4196-bb8a-966e8a6bf571.cer (raw, json) Hash identifier: /BCgvGXINJZDNzS5ysuXhaNVePkstVIFURHXS4QLNes= Subject key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E3CF249B64819A55CCEA48700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Jun 2026 20:45:11 +0000 Certificate not after: Fri 22 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 35882 AS: 63045 AS: 395516 IP: 141.206.0.0 -- 141.206.143.255 IP: 141.206.160.0 -- 141.206.255.255 IP: 153.62.0.0/16 IP: 153.64.0.0/15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3c:f2:49:b6:48:19:a5:5c:ce:a4:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 20 20:45:11 2026 GMT Not After : Sep 22 20:45:11 2028 GMT Subject: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:46:40:f9:70:24:9c:35:a9:81:6f:46:03: c8:92:37:6a:fa:7c:e3:c3:5a:51:fa:40:6c:99:93: ae:89:0b:ec:3a:bf:07:02:68:65:c4:34:cb:3b:a5: 7f:34:20:fe:04:12:53:f7:65:7e:6b:e8:0e:93:2a: 44:1b:b4:fc:f7:7a:6d:4f:d1:88:bb:2a:67:fe:8d: b7:4d:6d:fc:69:9d:e5:26:86:70:cb:fe:5d:d5:6c: 55:ff:f1:1f:04:f0:72:8d:fe:ee:13:04:12:a2:0e: 08:eb:5f:95:9f:d7:d2:2b:e9:ec:d9:c6:90:6a:20: 87:6f:81:eb:47:69:84:9c:46:6e:e7:b3:74:19:df: 03:b5:8b:c0:f0:bb:66:ad:c5:78:e8:fb:7f:78:eb: 0d:51:a9:67:04:32:14:15:00:40:e7:cf:3a:68:fc: 1c:c9:7c:14:4e:ac:f3:ba:1f:8e:99:79:37:23:5d: 5d:b0:8c:8a:a5:b2:6b:a3:e2:57:ef:ce:a2:f5:a6: d2:05:3c:cb:ad:9e:53:f3:7f:22:d8:e0:cc:ef:34: 5f:47:c1:df:fa:7a:ce:80:5f:90:1f:e6:b4:6d:c6: d0:54:22:24:39:87:4e:32:21:da:84:0d:34:83:ed: 9c:fe:ec:2a:e5:15:74:08:3e:05:12:29:23:af:24: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 141.206.0.0-141.206.143.255 141.206.160.0-141.206.255.255 153.62.0.0/16 153.64.0.0/15 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35882 63045 395516 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:21:be:cc:eb:b9:8e:a4:a9:86:c7:ba:1a:7c:99:de:0b:60: 18:68:a2:62:a5:a4:0a:6f:d8:12:60:2e:1d:bf:a3:e4:8d:e0: 25:11:d1:c7:79:2b:49:63:58:03:a8:12:77:a8:1b:42:61:b8: b1:4e:11:08:b5:2c:8e:ce:8a:9c:59:44:f3:ef:bf:5b:e7:df: 79:3c:6e:a0:61:e0:76:4a:68:dd:84:03:f6:95:8c:3f:9a:4d: c4:e8:5e:c6:97:07:5f:96:04:66:28:eb:fc:b6:c3:b1:54:b0: 56:8a:71:63:9f:0b:f2:59:f5:f4:59:b1:0a:e6:57:2d:86:80: 1b:56:99:3c:bd:c6:ba:7f:c7:e1:ab:96:59:78:2a:e4:23:22: 1c:bb:ed:77:80:5e:99:01:8e:7f:fa:b9:6e:dc:4d:eb:89:54: fa:0b:3b:78:48:40:2a:4c:96:9c:22:23:2a:9c:75:b6:02:cd: 0c:13:db:a9:07:3c:35:92:3e:eb:f1:ea:12:52:2d:b9:95:96: c9:1c:fc:99:f3:13:73:4b:44:94:8e:93:8e:c0:dd:73:f3:e4: e9:60:83:5b:99:ee:9c:95:62:ce:a7:71:20:e5:2a:ec:ac:ab: 68:de:e9:65:b2:dd:e0:e5:e7:eb:ed:01:b2:87:5d:0e:2b:80: 9d:00:a0:cf -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWE488km2SBmlXM6khwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYyMDIwNDUxMVoXDTI4MDkyMjIwNDUxMVowLzEtMCsGA1UEAxMk YWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJmNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhpGQPlwJJw1qYFvRgPIkjdq+nzjw1pR+kBs mZOuiQvsOr8HAmhlxDTLO6V/NCD+BBJT92V+a+gOkypEG7T893ptT9GIuypn/o23 TW38aZ3lJoZwy/5d1WxV//EfBPByjf7uEwQSog4I61+Vn9fSK+ns2caQaiCHb4Hr R2mEnEZu57N0Gd8DtYvA8LtmrcV46Pt/eOsNUalnBDIUFQBA5886aPwcyXwUTqzz uh+OmXk3I11dsIyKpbJro+JX786i9abSBTzLrZ5T838i2ODM7zRfR8Hf+nrOgF+Q H+a0bcbQVCIkOYdOMiHahA00g+2c/uwq5RV0CD4FEikjryQshQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFBuQha7pF31tOs1jIaWH5bgJdl/lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h YTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FhMjdiZTNlLTU2NjMtNDE5Ni1i YjhhLTk2NmU4YTZiZjU3MS9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2 YmY1NzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQwCwMDAY3OAwQEjc6AMAsDBAWNzqADAwCNzgMDAJk+ AwMBmUAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAIwqAgMA9kUCAwYI/DBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQB+Ib7M67mOpKmGx7oafJneC2AYaKJipaQKb9gSYC4dv6PkjeAlEdHHeStJ Y1gDqBJ3qBtCYbixThEItSyOzoqcWUTz779b5995PG6gYeB2SmjdhAP2lYw/mk3E 6F7GlwdflgRmKOv8tsOxVLBWinFjnwvyWfX0WbEK5lcthoAbVpk8vca6f8fhq5ZZ eCrkIyIcu+13gF6ZAY5/+rlu3E3riVT6Czt4SEAqTJacIiMqnHW2As0ME9upBzw1 kj7r8eoSUi25lZbJHPyZ8xNzS0SUjpOOwN1z8+TpYINbme6clWLOp3Eg5SrsrKto 3ullst3g5efr7QGyh10OK4CdAKDP -----END CERTIFICATE-----Generated at Tue Jul 21 14:08:44 2026 by rpki-client