$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer File: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (raw, json) Hash identifier: f6xbP6TCaNqc2N2FraT+OhXFdtYOa2HHOaEFp6Raw3E= Subject key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584D693D773B913F770603286E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Manifest: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft caRepository: rsync://rpki.roa.net/rrdp/xTom/52/ Notify URL: https://rpki.roa.net/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 00:45:18 +0000 Certificate not after: Sun 09 Jul 2028 00:45:18 +0000 Subordinate resources: AS: 32727 IP: 23.144.160.0/24 IP: 2604:eb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:3d:77:3b:91:3f:77:06:03:28:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Apr 6 00:45:18 2026 GMT Not After : Jul 9 00:45:18 2028 GMT Subject: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:14:75:7f:4c:90:50:67:3b:c2:91:ca:c2: 81:c2:8f:f1:70:07:32:2a:3c:9a:58:60:9c:47:5c: 5d:dc:d3:0c:5e:73:26:7e:3d:5e:4a:a2:e3:73:64: 03:1a:a6:1e:bc:f8:18:8b:e0:66:a0:c8:56:f4:b9: 55:98:82:6c:81:3d:b2:d6:30:26:a0:cd:2c:84:51: 2d:56:b2:49:26:1e:2a:da:58:c4:6c:67:f2:1e:52: fb:1e:22:79:87:26:68:1e:7a:08:a7:c5:da:a1:23: b3:6f:78:3d:94:0b:21:10:a8:4a:1b:b5:9d:5d:25: 97:7a:df:39:b9:e6:d5:d3:2c:9c:80:33:7d:d1:ee: 18:cf:8f:6f:e0:85:f5:9f:e6:3b:28:ea:8c:53:f5: cd:89:cc:71:9a:05:ac:5f:e1:f4:f6:66:c2:53:c7: ec:12:c0:30:40:74:80:bc:ee:10:ab:10:a3:18:11: b0:4e:19:22:d6:45:0e:f1:e3:1c:68:b3:60:4f:ec: 99:6a:05:a9:2a:4a:fd:52:02:06:1d:ca:c2:d7:76: 76:75:4d:08:70:f9:08:99:c2:84:8d:31:ce:fd:88: 01:ee:61:f7:45:d6:a5:07:1f:bf:78:8d:cb:67:bf: 66:4d:ea:a4:03:8e:80:fb:c7:04:33:b8:6e:4b:95: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Subject Information Access: CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/52/ RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: 23.144.160.0/24 IPv6: 2604:eb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32727 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:99:a0:1a:5b:7b:51:6d:e5:8b:60:02:c2:2a:69:36:41:e9: 29:6c:e3:05:a8:b1:b4:ac:04:b0:11:e5:71:1a:1c:66:f7:99: a3:19:f5:86:e4:45:b8:42:7b:91:1c:61:c3:61:a6:ab:99:c3: 98:a8:c2:b8:ef:ca:ab:30:b5:c3:cc:49:da:87:35:77:5d:f6: d9:2a:bb:22:05:5b:3f:45:9b:5c:15:09:ff:5f:53:65:73:af: a2:25:a0:b1:15:d1:14:65:2a:ae:9f:ec:9e:21:95:52:8c:b1: f5:74:db:6f:fb:0e:85:94:24:ea:21:cf:cd:f9:9c:95:fc:66: 9b:c6:3f:42:92:02:50:35:6e:98:31:17:c2:b6:b4:6d:62:57: 69:6e:e3:09:7f:b7:f2:6c:b1:07:20:e3:57:82:80:87:69:3c: 6b:e2:29:52:e2:6a:0b:7c:3c:2d:2c:cd:20:34:90:da:f9:34: 0c:36:09:c3:0c:d1:f3:40:f8:55:fe:ce:db:d9:28:34:92:e1: e9:e2:38:c5:2f:7e:74:c9:c0:c1:93:50:d5:1d:7a:51:76:28: 44:00:c3:c9:d4:45:56:10:48:9d:e7:95:f0:e1:dd:c2:f0:58: e8:d8:0e:e0:58:a4:73:d3:6f:2c:f8:95:af:e9:ee:1b:8b:72: 8a:21:62:2b -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWE1pPXc7kT93BgMobgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI2MDQwNjAwNDUxOFoXDTI4MDcwOTAwNDUxOFowPTE7MDkGA1UEAxMy MGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3NzFkOWVlMTMwNDU1OGZk YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6RR1f0yQUGc7wpHK woHCj/FwBzIqPJpYYJxHXF3c0wxecyZ+PV5KouNzZAMaph68+BiL4GagyFb0uVWY gmyBPbLWMCagzSyEUS1WskkmHiraWMRsZ/IeUvseInmHJmgeeginxdqhI7NveD2U CyEQqEobtZ1dJZd63zm55tXTLJyAM33R7hjPj2/ghfWf5jso6oxT9c2JzHGaBaxf 4fT2ZsJTx+wSwDBAdIC87hCrEKMYEbBOGSLWRQ7x4xxos2BP7JlqBakqSv1SAgYd ysLXdnZ1TQhw+QiZwoSNMc79iAHuYfdF1qUHH794jctnv2ZN6qQDjoD7xwQzuG5L lbYFAgMBAAGjggN/MIIDezAdBgNVHQ4EFgQUCdKp2o8GX5lZrpzLBd/VCyOovvkw gdQGCCsGAQUFBwELBIHHMIHEMC4GCCsGAQUFBzAFhiJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTIvMFoGCCsGAQUFBzAKhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1 MEIyM0E4QkVGOS5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnBraS5yb2EubmV0 L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8E gdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1 N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQw ZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00NWJk LWFjMWQtZDc3YjNjNWMzNzgwLmNybDAfBgNVHSMEGDAWgBS8FXviubcOrWgGpbao nwPU4uBGTzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggr BgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYt NDViZC1hYzFkLWQ3N2IzYzVjMzc4MC5jZXIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAAXkKAwDQQCAAIwBwMFACYE60AwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICf9cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhJmgGlt7UW3li2ACwippNkHpKWzjBaixtKwEsBHlcRoc ZveZoxn1huRFuEJ7kRxhw2Gmq5nDmKjCuO/KqzC1w8xJ2oc1d1322Sq7IgVbP0Wb XBUJ/19TZXOvoiWgsRXRFGUqrp/sniGVUoyx9XTbb/sOhZQk6iHPzfmclfxmm8Y/ QpICUDVumDEXwra0bWJXaW7jCX+38myxByDjV4KAh2k8a+IpUuJqC3w8LSzNIDSQ 2vk0DDYJwwzR80D4Vf7O29koNJLh6eI4xS9+dMnAwZNQ1R16UXYoRADDydRFVhBI neeV8OHdwvBY6NgO4Fikc9NvLPiVr+nuG4tyiiFiKw== -----END CERTIFICATE-----Generated at Thu Apr 9 10:56:53 2026 by rpki-client