$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer File: 7b407ffa-7fa7-4255-8a63-77381712e9e8.cer (raw, json) Hash identifier: tvdYluizYGaCgVY5U8hUTk3cHv46b3KrIsjiROTtLwk= Subject key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E455255475BFE1BBDCA298CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Jun 2026 20:45:11 +0000 Certificate not after: Mon 25 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 21827 AS: 33111 AS: 397318 AS: 397650 IP: 64.136.96.0/23 IP: 192.35.85.0/24 IP: 192.52.228.0/24 IP: 192.111.8.0/21 IP: 199.71.142.0/23 IP: 2620:13d:d000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:52:55:47:5b:fe:1b:bd:ca:29:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 23 20:45:11 2026 GMT Not After : Sep 25 20:45:11 2028 GMT Subject: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:dc:6d:20:62:19:94:fe:5b:b8:9a:69:ed: 33:4a:35:1c:c4:37:5d:35:f4:a8:32:42:53:9d:eb: c2:96:70:25:c5:07:55:fa:41:98:36:c7:50:a0:2e: cb:bf:03:ce:f5:d1:f2:ea:26:5e:e9:0f:43:9b:a0: e9:47:32:75:c2:ec:6c:19:99:e6:c4:ae:be:8f:43: 35:04:90:85:fa:25:8f:27:22:b4:0f:b1:67:1e:ad: 81:c2:c9:f5:06:1b:57:60:35:35:d6:77:22:a9:c5: 44:a7:dd:7b:d8:46:74:6b:6a:7c:86:c0:7c:8a:3c: 70:9e:01:11:72:cf:dc:54:2b:3b:4c:46:d8:54:e6: 29:df:f7:eb:27:6f:15:98:c0:4e:49:49:8c:0d:cf: 0c:b1:90:b1:5a:e5:23:fd:cc:52:70:f6:ca:df:1c: 73:e1:68:33:6e:97:e3:2d:0f:cf:82:1e:74:63:e0: 1d:fb:36:8f:3d:85:e3:87:22:43:4d:d0:e1:0f:c2: d3:12:9a:67:91:fb:78:f9:71:ae:3b:78:b2:dc:58: 14:1a:fc:5e:a0:dc:a0:3a:12:95:4e:cd:48:ec:80: fd:2a:17:36:b4:29:15:1c:ba:f0:42:67:ca:9b:ae: c3:c7:9c:d1:09:92:db:66:87:cd:eb:ab:a3:91:66: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.136.96.0/23 192.35.85.0/24 192.52.228.0/24 192.111.8.0/21 199.71.142.0/23 IPv6: 2620:13d:d000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21827 33111 397318 397650 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:dc:99:21:12:83:a6:11:1e:27:d5:36:5d:e1:e9:a5:f4:6b: 8d:54:bf:8b:50:7f:89:a3:6d:dd:68:54:0b:30:11:56:01:90: 8d:3b:7d:35:25:49:f1:36:2a:b5:86:32:90:e4:88:cb:98:4c: 4a:45:96:52:43:21:3e:7c:c8:b6:d2:1c:41:9c:c0:fb:34:c7: 82:46:d0:82:6e:59:ad:0d:90:3b:be:b1:e2:1c:cc:6b:c2:4b: ff:5b:52:0b:64:87:67:8e:09:fa:85:bb:56:38:23:0e:d7:18: 56:95:c5:01:6e:9b:2e:7b:a3:d3:e7:13:58:09:24:7e:60:d7: 5a:4c:70:1a:95:68:0e:4f:b4:f9:63:2a:e4:39:8b:42:90:1e: 89:f7:c2:f5:ac:0f:46:df:f8:5f:e2:ee:c0:bc:64:ce:60:52: 46:0a:33:84:cd:6b:ec:2c:29:ca:5c:d8:10:ff:2c:af:8b:54: 50:e7:d0:dc:8e:fc:f9:d2:1e:8d:a4:45:b2:af:92:d9:53:4e: 3c:d4:5c:e1:e7:12:2d:2b:71:8d:74:32:4e:8f:1c:73:ae:d2: 69:be:3b:ab:79:ef:7e:9a:57:53:d0:71:05:3e:21:dd:56:75: b2:05:1a:d1:37:fc:f2:1f:da:a0:b7:c7:fa:25:29:00:6a:ef: 96:31:de:aa -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUAQ0Mn0MoWE5FUlVHW/4bvcopjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYyMzIwNDUxMVoXDTI4MDkyNTIwNDUxMVowLzEtMCsGA1UEAxMk N2I0MDdmZmEtN2ZhNy00MjU1LThhNjMtNzczODE3MTJlOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uDcbSBiGZT+W7iaae0zSjUcxDddNfSoMkJT nevClnAlxQdV+kGYNsdQoC7LvwPO9dHy6iZe6Q9Dm6DpRzJ1wuxsGZnmxK6+j0M1 BJCF+iWPJyK0D7FnHq2Bwsn1BhtXYDU11nciqcVEp9172EZ0a2p8hsB8ijxwngER cs/cVCs7TEbYVOYp3/frJ28VmMBOSUmMDc8MsZCxWuUj/cxScPbK3xxz4Wgzbpfj LQ/Pgh50Y+Ad+zaPPYXjhyJDTdDhD8LTEppnkft4+XGuO3iy3FgUGvxeoNygOhKV Ts1I7ID9Khc2tCkVHLrwQmfKm67Dx5zRCZLbZofN66ujkWbi8wIDAQABo4IEUTCC BE0wHQYDVR0OBBYEFMJzzXJBGwQwm3v0qEFl/kaAh2IhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcxMmU5ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdiNDA3ZmZhLTdmYTctNDI1NS04 YTYzLTc3MzgxNzEyZTllOC83YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcx MmU5ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAFAiGADBADAI1UDBADANOQDBAPAbwgDBAHHR44w DgQCAAIwCAMGACYgAT3QMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAlVDAgMAgVcC AwYQBgIDBhFSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAE/cmSESg6YRHifVNl3h6aX0a41Uv4tQf4mjbd1o VAswEVYBkI07fTUlSfE2KrWGMpDkiMuYTEpFllJDIT58yLbSHEGcwPs0x4JG0IJu Wa0NkDu+seIczGvCS/9bUgtkh2eOCfqFu1Y4Iw7XGFaVxQFumy57o9PnE1gJJH5g 11pMcBqVaA5PtPljKuQ5i0KQHon3wvWsD0bf+F/i7sC8ZM5gUkYKM4TNa+wsKcpc 2BD/LK+LVFDn0NyO/PnSHo2kRbKvktlTTjzUXOHnEi0rcY10Mk6PHHOu0mm+O6t5 736aV1PQcQU+Id1WdbIFGtE3/PIf2qC3x/olKQBq75Yx3qo= -----END CERTIFICATE-----Generated at Wed Jul 8 18:29:37 2026 by rpki-client