$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer File: 480acd92-824c-4b47-a714-6cab20e4ce2d.cer (raw, json) Hash identifier: 1PcuYk1mou9aP+0+Jdw906lPl20cv9kBKgozdTLZJpU= Subject key identifier: B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D090AB04B888A11F7D04D3920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 13:45:22 +0000 Certificate not after: Sun 04 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 23.129.44.0/24 IP: 2602:f79e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:0a:b0:4b:88:8a:11:f7:d0:4d:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 2 13:45:22 2026 GMT Not After : Jun 4 12:45:22 2028 GMT Subject: CN=480acd92-824c-4b47-a714-6cab20e4ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:3a:df:64:ae:06:e0:39:8b:2e:5e:33:83: ae:05:e8:4f:65:f7:ed:2d:4c:b3:59:10:75:bd:00: 76:cf:ef:6d:56:32:7c:9a:b7:4a:92:4d:82:f9:13: bb:04:0c:b6:0b:d3:d3:79:5d:5d:51:f4:11:f5:51: fa:0e:bb:43:56:a9:ea:b0:2e:2b:96:2c:6f:8f:58: 8a:95:dd:df:93:5c:b5:45:c4:da:39:24:b1:7c:9f: c4:a0:78:4f:8d:11:d2:be:8e:88:b4:7c:7c:d3:58: 81:ad:80:da:c9:5d:55:12:0e:27:13:9f:b2:b5:48: 8c:d7:40:a8:84:b2:45:3f:f2:6e:a1:54:89:30:da: d1:9d:f3:be:4a:61:b4:46:ae:d3:17:0b:f4:4f:8e: f8:5b:db:a1:59:28:1f:96:e3:40:42:a2:ee:af:c9: c7:38:10:20:71:00:43:f6:01:31:9e:97:e6:d2:db: 9d:21:de:55:60:e4:46:bd:c5:13:fa:77:62:6a:19: e9:f5:22:0d:4c:03:ce:41:25:84:fb:ba:6b:0a:6c: 24:b4:e9:be:19:67:ba:40:0e:58:e5:c5:f5:08:bf: 3d:52:a4:13:d9:81:0a:2e:4d:14:84:fb:f8:c0:2e: 68:a7:9f:f0:c4:3b:2d:82:13:13:df:7c:40:7c:00: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.44.0/24 IPv6: 2602:f79e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:40:2e:eb:17:9d:b4:08:76:14:e5:c3:c5:b7:83:12:75:13: 05:89:a8:43:03:a1:9f:98:41:84:2e:f7:2c:9b:8a:57:36:3c: 3c:46:21:08:42:f9:6a:03:68:ff:e1:52:de:41:92:98:f8:4c: 17:37:0a:2e:a8:fa:d5:6f:b6:43:3a:69:32:d5:ba:cd:6e:a5: ad:da:34:df:f8:29:ef:e5:de:73:a8:57:29:9d:67:37:73:e3: f0:88:9b:2d:c6:96:5a:80:28:49:13:8d:9a:f7:bb:dd:59:7d: 0a:36:aa:e1:cc:8f:ef:47:47:c3:06:e4:b7:25:44:10:89:cf: b0:ad:5d:54:75:06:3d:c6:41:a5:61:59:ca:d9:fe:a5:b7:0a: 5a:7e:ca:97:8f:a8:40:25:e7:57:52:97:fd:f3:03:af:9e:bd: e1:4e:ab:c0:85:bf:51:70:1c:5b:40:7a:bb:45:ef:d7:f6:84: 88:70:a7:09:88:78:b6:41:99:c0:10:8d:b4:c6:25:ab:03:fb: 35:b9:a4:ba:89:d9:28:2f:7f:a3:34:d0:2e:f5:a3:bd:e0:1d: d3:71:71:1e:d2:52:62:64:75:80:e9:6f:fb:ef:1b:b0:59:1b: e9:e9:02:e4:16:14:03:0b:1b:30:93:f0:0a:17:43:f9:39:3b: 58:af:ca:6c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE0JCrBLiIoR99BNOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMjEzNDUyMloXDTI4MDYwNDEyNDUyMlowLzEtMCsGA1UEAxMk NDgwYWNkOTItODI0Yy00YjQ3LWE3MTQtNmNhYjIwZTRjZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Y632SuBuA5iy5eM4OuBehPZfftLUyzWRB1 vQB2z+9tVjJ8mrdKkk2C+RO7BAy2C9PTeV1dUfQR9VH6DrtDVqnqsC4rlixvj1iK ld3fk1y1RcTaOSSxfJ/EoHhPjRHSvo6ItHx801iBrYDayV1VEg4nE5+ytUiM10Co hLJFP/JuoVSJMNrRnfO+SmG0Rq7TFwv0T474W9uhWSgfluNAQqLur8nHOBAgcQBD 9gExnpfm0tudId5VYORGvcUT+ndiahnp9SINTAPOQSWE+7prCmwktOm+GWe6QA5Y 5cX1CL89UqQT2YEKLk0UhPv4wC5op5/wxDstghMT33xAfAAuXwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLfU4t+0/4kO6LPa2ePmjRnD+CvMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 ODBhY2Q5Mi04MjRjLTRiNDctYTcxNC02Y2FiMjBlNGNlMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQ4MGFjZDkyLTgyNGMtNGI0Ny1h NzE0LTZjYWIyMGU0Y2UyZC80ODBhY2Q5Mi04MjRjLTRiNDctYTcxNC02Y2FiMjBl NGNlMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgSwwDgQCAAIwCAMGACYC954AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AD9ALusXnbQIdhTlw8W3gxJ1EwWJqEMDoZ+YQYQu9yybilc2PDxGIQhC+WoDaP/h Ut5Bkpj4TBc3Ci6o+tVvtkM6aTLVus1upa3aNN/4Ke/l3nOoVymdZzdz4/CImy3G llqAKEkTjZr3u91ZfQo2quHMj+9HR8MG5LclRBCJz7CtXVR1Bj3GQaVhWcrZ/qW3 Clp+ypePqEAl51dSl/3zA6+eveFOq8CFv1FwHFtAertF79f2hIhwpwmIeLZBmcAQ jbTGJasD+zW5pLqJ2Sgvf6M00C71o73gHdNxcR7SUmJkdYDpb/vvG7BZG+npAuQW FAMLGzCT8AoXQ/k5O1ivymw= -----END CERTIFICATE-----Generated at Tue Mar 3 23:09:56 2026 by rpki-client