$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer File: 00cce351-050e-4c52-bceb-c8ccc4c6257e.cer (raw, json) Hash identifier: p8GWOwtVU2dDjTSWJre/DjIg90MWh1gCW2ClFEtkzWw= Subject key identifier: BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E34923BCEAE58F939F3D0AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Jun 2026 20:45:11 +0000 Certificate not after: Tue 19 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 11019 IP: 104.152.112.0/21 IP: 209.126.32.0/19 IP: 2604:cac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:34:92:3b:ce:ae:58:f9:39:f3:d0:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 17 20:45:11 2026 GMT Not After : Sep 19 20:45:11 2028 GMT Subject: CN=00cce351-050e-4c52-bceb-c8ccc4c6257e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:e7:99:a5:b2:cc:f4:f3:97:ad:4a:de:71: 0e:5c:4a:3a:0d:a7:2f:63:52:50:d8:e2:91:97:39: ed:7b:e7:59:3a:9e:f1:2d:0c:43:c7:a8:28:a5:fa: 24:3f:1b:8d:09:54:c8:12:c4:ba:0f:0a:bf:6d:9f: 02:6d:cf:ab:4d:ce:fd:d5:dd:fa:3c:49:39:65:ad: 48:65:9b:8d:52:29:5d:a0:c3:3a:11:d1:09:c4:44: c9:5d:32:22:ad:f7:1f:21:18:92:3c:88:7f:6e:40: f7:96:da:e7:59:99:eb:c2:7b:9f:b6:f2:ed:de:d7: 3d:97:61:54:f3:41:11:1c:a2:77:ba:cf:03:d0:76: 05:6c:3c:db:55:72:9d:50:cd:a9:00:7c:54:2d:1c: 24:f2:a4:81:61:66:7a:78:e9:77:7e:04:d1:57:e1: 6b:e3:5b:ba:64:44:c9:1e:06:bd:18:2a:26:b5:c9: 9f:b5:b2:d9:9d:24:e2:4d:6b:38:bb:d4:31:d5:14: 65:5f:35:4a:af:54:6f:b0:c4:c7:fe:30:f2:55:f0: 61:24:dd:ce:fe:78:a5:fb:02:ee:21:ba:9a:97:40: bd:bf:3c:67:0e:6f:f4:62:c2:a4:1f:89:ec:ad:7b: 0a:a7:72:f9:e7:96:36:af:01:20:10:26:15:c4:5d: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.152.112.0/21 209.126.32.0/19 IPv6: 2604:cac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11019 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b9:f6:bf:78:f9:db:9c:b5:78:b4:4b:01:89:fc:59:75:9a: 4a:22:4f:c9:18:96:23:89:42:25:96:4d:58:df:28:af:1b:71: 66:3f:12:c5:3b:d8:fb:5b:db:ca:05:89:66:aa:8d:2d:e8:b0: 19:8d:4a:80:e1:8a:ba:5f:62:b2:45:18:f9:4d:79:e9:2f:09: 58:25:b1:81:8f:48:4d:02:89:72:5a:61:18:62:24:dc:33:3d: f4:91:37:d7:ff:c5:6e:41:41:98:20:66:27:5e:06:2f:a9:4f: b6:0d:f6:13:43:12:4b:5e:d7:df:d6:7d:48:17:aa:44:0f:2e: 10:4d:85:d0:6b:2d:c6:82:05:a4:12:31:e9:68:fa:6f:b0:04: d1:a3:77:32:81:47:43:3a:42:96:b7:27:c0:74:0d:e7:f3:41: df:7a:c0:9b:b9:34:46:94:c7:70:59:2e:92:8c:f9:ef:e6:c1: 83:ab:00:18:0a:c0:0a:14:91:6a:60:2a:6b:65:27:71:69:99: d5:92:35:9a:f4:44:35:cb:65:bf:e6:8b:a2:f4:a8:9f:6b:38: f0:cb:53:a1:99:ff:b2:18:45:5c:85:04:32:c8:8f:05:04:79: 35:7c:37:b8:5c:91:a0:0e:af:3b:81:ea:7b:05:fe:0a:5c:f5: 6c:db:2f:5d -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE40kjvOrlj5OfPQrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYxNzIwNDUxMVoXDTI4MDkxOTIwNDUxMVowLzEtMCsGA1UEAxMk MDBjY2UzNTEtMDUwZS00YzUyLWJjZWItYzhjY2M0YzYyNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrrnmaWyzPTzl61K3nEOXEo6DacvY1JQ2OKR lznte+dZOp7xLQxDx6gopfokPxuNCVTIEsS6Dwq/bZ8Cbc+rTc791d36PEk5Za1I ZZuNUildoMM6EdEJxETJXTIirfcfIRiSPIh/bkD3ltrnWZnrwnuftvLt3tc9l2FU 80ERHKJ3us8D0HYFbDzbVXKdUM2pAHxULRwk8qSBYWZ6eOl3fgTRV+Fr41u6ZETJ Hga9GComtcmftbLZnSTiTWs4u9Qx1RRlXzVKr1RvsMTH/jDyVfBhJN3O/nil+wLu Ibqal0C9vzxnDm/0YsKkH4nsrXsKp3L555Y2rwEgECYVxF2P3QIDAQABo4IELzCC BCswHQYDVR0OBBYEFL1t9QDl4pdsoBAKlb59cVf/zYT1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w MGNjZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNjYzRjNjI1N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzAwY2NlMzUxLTA1MGUtNGM1Mi1i Y2ViLWM4Y2NjNGM2MjU3ZS8wMGNjZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNjYzRj NjI1N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANomHADBAXRfiAwDQQCAAIwBwMFACYEysAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICKwswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqbn2v3j525y1eLRLAYn8 WXWaSiJPyRiWI4lCJZZNWN8orxtxZj8SxTvY+1vbygWJZqqNLeiwGY1KgOGKul9i skUY+U156S8JWCWxgY9ITQKJclphGGIk3DM99JE31//FbkFBmCBmJ14GL6lPtg32 E0MSS17X39Z9SBeqRA8uEE2F0GstxoIFpBIx6Wj6b7AE0aN3MoFHQzpClrcnwHQN 5/NB33rAm7k0RpTHcFkukoz57+bBg6sAGArAChSRamAqa2UncWmZ1ZI1mvRENctl v+aLovSon2s48MtToZn/shhFXIUEMsiPBQR5NXw3uFyRoA6vO4HqewX+Clz1bNsv XQ== -----END CERTIFICATE-----Generated at Thu Jul 9 19:12:07 2026 by rpki-client