$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c.cer File: 13f95d00-e723-4d02-a4d7-88fe5200506c.cer (raw, json) Hash identifier: TGTn08lOiEMJYc2EsrhQXcxTajNN7S4FAFRL3eb/gQo= Subject key identifier: A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DDD18DBFF3D6D0F688C4ECF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 12:45:18 +0000 Certificate not after: Sat 19 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 153.40.0.0/16 IP: 163.35.0.0 -- 163.39.255.255 IP: 192.193.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:18:db:ff:3d:6d:0f:68:8c:4e:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 17 12:45:18 2026 GMT Not After : Aug 19 12:45:18 2028 GMT Subject: CN=13f95d00-e723-4d02-a4d7-88fe5200506c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:70:d9:5b:df:b0:cf:8e:48:6b:dc:cb:57: af:91:dc:13:7d:70:ac:e1:08:52:b5:e5:9b:65:c3: fc:96:ad:be:95:ea:c8:6d:aa:c8:8a:f4:16:be:c9: 86:f1:fc:81:68:58:d2:3d:8f:dc:b9:c2:79:c1:d5: 24:4c:cd:7d:a3:f5:ea:6e:d4:fd:19:d6:8a:60:4b: 17:bb:dd:30:c7:90:0d:50:e2:36:82:9d:f1:0b:27: 7e:fc:1d:1e:42:49:c2:80:c2:46:e1:d1:93:32:4a: 85:fa:5a:91:6a:56:7c:09:7e:f7:04:ab:d8:c2:ec: 98:3f:57:0d:bb:46:6c:b0:8f:b5:13:db:62:01:cd: 40:6b:17:38:7e:dc:59:7a:a0:e4:93:d3:35:b1:cc: 65:af:51:32:6a:43:09:01:14:2c:53:da:02:71:f9: 73:8d:d3:d0:3e:f6:a0:ab:74:d6:c3:95:ed:64:21: 44:25:ae:92:43:95:61:30:84:78:92:f0:9d:18:ae: e2:c2:29:7d:d9:57:82:a6:0e:60:27:99:1e:33:a5: 6e:35:e9:da:f0:b6:57:4b:d2:c8:39:03:9f:07:dd: bc:4d:e5:e6:b9:a0:d2:f8:fb:e1:01:65:13:b6:aa: 8d:d4:c2:40:79:0b:1b:8b:40:f4:41:4c:53:2f:31: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 153.40.0.0/16 163.35.0.0-163.39.255.255 192.193.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0c:03:9b:00:0d:6e:3d:13:85:6a:c8:01:65:01:4f:37:86: 68:ac:3d:c4:62:bb:71:27:f2:9a:35:01:de:58:e2:58:a0:bf: ad:7b:a1:d3:ab:02:e1:4e:a9:f1:e7:da:7c:da:c7:a4:82:37: eb:84:0a:54:ac:96:9b:42:7e:1c:6e:85:e1:9f:1f:2d:8b:25: 41:83:f3:71:06:9f:40:63:48:72:7d:a2:08:29:aa:d3:ee:83: 0f:5b:8a:d9:5e:28:32:41:2c:e8:5c:fa:00:61:c4:de:fc:17: 04:1e:ab:49:13:f6:fd:1f:2c:a3:4d:64:b2:d7:f8:4c:66:49: 21:ba:bf:89:58:57:1a:0e:59:b2:a5:66:04:53:3d:0d:20:9e: ad:77:a7:c4:51:49:32:f3:a7:d0:1b:ef:82:9a:49:28:54:64: 10:c9:dc:cc:9e:01:ae:52:83:42:7b:e9:5a:83:bf:f5:72:35: e0:3a:93:59:c6:79:70:40:d8:cd:3e:12:51:e4:55:8f:b2:ff: 08:6a:34:1f:0d:ef:9f:42:02:61:e4:75:ff:3e:f7:71:d0:2b: d5:71:ae:fd:1e:20:6b:9c:0f:a3:b7:5d:3d:0f:9c:ea:23:c6: 09:b6:a9:e1:e8:e5:01:70:ef:e1:82:9b:95:59:15:18:78:99: 1b:cc:3b:8f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3dGNv/PW0PaIxOzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxNzEyNDUxOFoXDTI4MDgxOTEyNDUxOFowLzEtMCsGA1UEAxMk MTNmOTVkMDAtZTcyMy00ZDAyLWE0ZDctODhmZTUyMDA1MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4tw2VvfsM+OSGvcy1evkdwTfXCs4QhSteWb ZcP8lq2+lerIbarIivQWvsmG8fyBaFjSPY/cucJ5wdUkTM19o/XqbtT9GdaKYEsX u90wx5ANUOI2gp3xCyd+/B0eQknCgMJG4dGTMkqF+lqRalZ8CX73BKvYwuyYP1cN u0ZssI+1E9tiAc1Aaxc4ftxZeqDkk9M1scxlr1EyakMJARQsU9oCcflzjdPQPvag q3TWw5XtZCFEJa6SQ5VhMIR4kvCdGK7iwil92VeCpg5gJ5keM6VuNena8LZXS9LI OQOfB928TeXmuaDS+PvhAWUTtqqN1MJAeQsbi0D0QUxTLzEcQwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKZ9aLibMYXkzjMUZnyOYlqbAG4MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x M2Y5NWQwMC1lNzIzLTRkMDItYTRkNy04OGZlNTIwMDUwNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEzZjk1ZDAwLWU3MjMtNGQwMi1h NGQ3LTg4ZmU1MjAwNTA2Yy8xM2Y5NWQwMC1lNzIzLTRkMDItYTRkNy04OGZlNTIw MDUwNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMBwEAgABMBYDAwCZKDAKAwMAoyMDAwOjIAMDAMDBMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJkMA5sADW49E4VqyAFlAU83hmisPcRiu3En8po1Ad5Y4ligv617odOrAuFOqfHn 2nzax6SCN+uEClSslptCfhxuheGfHy2LJUGD83EGn0BjSHJ9oggpqtPugw9bitle KDJBLOhc+gBhxN78FwQeq0kT9v0fLKNNZLLX+ExmSSG6v4lYVxoOWbKlZgRTPQ0g nq13p8RRSTLzp9Ab74KaSShUZBDJ3MyeAa5Sg0J76VqDv/VyNeA6k1nGeXBA2M0+ ElHkVY+y/whqNB8N759CAmHkdf8+93HQK9Vxrv0eIGucD6O3XT0PnOojxgm2qeHo 5QFw7+GCm5VZFRh4mRvMO48= -----END CERTIFICATE-----Generated at Thu Jun 4 12:27:28 2026 by rpki-client