$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer File: 7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer (raw, json) Hash identifier: wa2nJUjbCxRgCrfUU6Wf4MEXTD9YIr62b4QKjITx6po= Subject key identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DD353743C90226C5E96F64F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 May 2026 00:45:17 +0000 Certificate not after: Wed 16 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 27284 IP: 23.134.76.0/24 IP: 2602:f6f6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:53:74:3c:90:22:6c:5e:96:f6:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 14 00:45:17 2026 GMT Not After : Aug 16 00:45:17 2028 GMT Subject: CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:4f:9a:da:71:23:2a:4d:b0:c7:f9:65:06: 9d:a9:69:57:a8:40:1a:9b:08:51:e3:46:ea:66:e2: eb:f2:65:b5:1a:f2:a8:d4:e0:f8:17:73:a3:e3:8e: 51:10:25:f7:aa:33:90:aa:ae:64:37:11:8b:51:9f: d7:8d:2c:52:e6:0c:3b:11:e6:77:99:68:0f:66:a0: a8:93:77:a6:d3:60:0f:9c:10:9d:07:c9:ac:d9:c5: a0:c0:68:af:c1:c9:95:db:a4:9a:6f:6f:f8:6b:83: 51:fb:ad:1d:2b:86:0b:ae:4f:63:df:33:c3:ba:d0: 0a:36:5b:69:2c:5f:76:b8:08:7f:b2:97:c3:ef:60: ca:8e:c6:b3:48:f0:a2:fa:a8:bc:95:7d:c8:f8:05: 89:fb:da:2f:14:75:5e:e2:75:13:8c:ca:6a:06:16: f5:d2:29:b3:81:e1:38:96:63:19:0c:52:51:4a:b3: 47:7d:9f:b5:ce:95:92:f8:46:e7:01:0a:62:38:4d: 80:58:f8:61:a1:d0:1f:e6:52:8f:51:11:92:42:fb: 99:73:0f:0f:d4:b9:95:31:bb:0f:22:b8:9f:f1:f1: af:02:46:ba:bd:d3:d3:b1:19:88:3f:62:dc:09:1d: 31:09:ad:36:9a:37:e8:36:b8:9c:06:49:c1:0a:6d: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.76.0/24 IPv6: 2602:f6f6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27284 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cc:64:d2:d0:40:95:c8:b0:a9:6d:47:c5:d7:6f:00:17:f2: 53:90:e1:a1:78:55:56:31:91:e8:f8:d9:fa:72:97:52:d4:9d: e8:55:d1:23:c3:69:21:74:10:96:49:ff:47:42:8c:29:5a:52: 4f:71:31:9f:45:e7:a5:56:2c:e1:7e:9b:62:b9:02:b1:9f:e5: c2:64:45:09:4e:69:76:6a:98:6d:31:07:df:e6:79:45:02:34: f8:12:0f:64:bf:68:e7:81:69:ed:d1:98:78:12:aa:16:7a:4c: f0:41:a6:6a:a8:7e:3f:83:2e:90:dd:9e:30:f0:4e:a7:19:c9: 3d:66:6d:1a:a4:bd:b0:62:3e:8b:5c:9e:32:0c:8a:86:dc:2b: 91:04:34:a2:6d:24:0a:7a:94:e0:88:0e:44:16:d8:a3:5e:7c: 0d:59:d4:36:f8:4b:ec:75:06:13:83:19:28:70:01:88:eb:d2: 19:b0:4b:c2:37:3e:9d:d8:87:2e:48:26:a2:de:93:ea:fa:37: 70:9c:52:6e:fd:72:bb:79:e1:60:e5:1f:8c:f0:8e:9f:32:6c: 48:1c:5f:ab:f0:9b:0f:73:95:3e:c4:af:21:65:2e:c6:72:24: 5f:f2:52:84:22:56:fb:22:1c:f9:ef:ae:d1:50:98:d7:29:51: 84:1f:07:bd -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE3TU3Q8kCJsXpb2TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxNDAwNDUxN1oXDTI4MDgxNjAwNDUxN1owLzEtMCsGA1UEAxMk N2U5MGMyZDMtZDJlNC00NDNlLWI0NGUtZDUzMGZjN2YzMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAhPmtpxIypNsMf5ZQadqWlXqEAamwhR40bq ZuLr8mW1GvKo1OD4F3Oj445RECX3qjOQqq5kNxGLUZ/XjSxS5gw7EeZ3mWgPZqCo k3em02APnBCdB8ms2cWgwGivwcmV26Sab2/4a4NR+60dK4YLrk9j3zPDutAKNltp LF92uAh/spfD72DKjsazSPCi+qi8lX3I+AWJ+9ovFHVe4nUTjMpqBhb10imzgeE4 lmMZDFJRSrNHfZ+1zpWS+EbnAQpiOE2AWPhhodAf5lKPURGSQvuZcw8P1LmVMbsP Irif8fGvAka6vdPTsRmIP2LcCR0xCa02mjfoNricBknBCm2hFwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEtFAYkIwY4njD3J4WgPgKvw5GuoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZTkwYzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMwZmM3ZjMzMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdlOTBjMmQzLWQyZTQtNDQzZS1i NDRlLWQ1MzBmYzdmMzMxNS83ZTkwYzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMwZmM3 ZjMzMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhkwwDgQCAAIwCAMGACYC9vYAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmqUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADTMZNLQQJXIsKltR8XXbwAX8lOQ 4aF4VVYxkej42fpyl1LUnehV0SPDaSF0EJZJ/0dCjClaUk9xMZ9F56VWLOF+m2K5 ArGf5cJkRQlOaXZqmG0xB9/meUUCNPgSD2S/aOeBae3RmHgSqhZ6TPBBpmqofj+D LpDdnjDwTqcZyT1mbRqkvbBiPotcnjIMiobcK5EENKJtJAp6lOCIDkQW2KNefA1Z 1Db4S+x1BhODGShwAYjr0hmwS8I3Pp3Yhy5IJqLek+r6N3CcUm79crt54WDlH4zw jp8ybEgcX6vwmw9zlT7EryFlLsZyJF/yUoQiVvsiHPnvrtFQmNcpUYQfB70= -----END CERTIFICATE-----Generated at Tue Jun 9 04:33:20 2026 by rpki-client