$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer File: 8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer (raw, json) Hash identifier: 7iJJgCKc9j/mYlT7EH5/iZ7w/VHIwdkZhhL+SuOPeyE= Subject key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E5AB99977CB1A87EE2F3A3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 12:45:13 +0000 Certificate not after: Sun 13 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 394787 IP: 208.67.72.0/22 IP: 2604:1160::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:b9:99:77:cb:1a:87:ee:2f:3a:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 1 12:45:13 2026 GMT Not After : Aug 13 00:45:17 2028 GMT Subject: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:3f:74:24:b2:65:b7:04:0e:6a:a2:c0:be: 8c:ac:93:5e:43:cc:9a:11:5d:8a:97:a0:da:1f:08: 7a:46:87:29:81:be:18:ab:93:f8:90:da:1d:48:dd: 1d:41:4a:4f:2e:b5:1c:54:c5:e6:61:cf:89:37:50: 80:15:75:db:a7:43:bd:53:a2:8a:f2:67:49:da:b4: a8:50:57:d3:0e:0e:0d:4d:a8:f7:84:34:24:b8:56: 16:d6:9a:e7:72:e2:99:02:6b:e7:d5:f1:c2:f4:b3: fb:e5:56:d6:a2:db:11:31:e8:e9:e3:37:a2:da:4d: 03:02:66:b9:5c:9f:60:7d:09:88:fc:a4:98:63:4a: 0a:8b:98:90:7e:e7:77:cf:04:40:9c:f7:69:08:ed: 31:6e:a4:e2:d2:78:3d:9f:cf:cd:be:41:aa:7c:bf: 9c:6a:ae:5d:29:d5:39:bd:c5:3d:3a:ca:1c:70:eb: 27:7f:88:e5:d6:ad:93:6f:e3:f6:0b:a7:00:dc:58: 6a:31:10:36:f7:5a:2d:f7:36:db:c0:57:3f:09:a2: e5:ad:43:bb:40:27:c6:ea:8e:bc:57:06:25:8b:8c: 8f:d8:60:46:c2:bd:40:25:34:36:dc:22:b6:cd:40: 69:eb:7c:f7:d6:8d:b9:23:86:e5:e6:a7:28:42:9b: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 208.67.72.0/22 IPv6: 2604:1160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394787 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d9:73:a7:d6:69:56:5c:6b:5c:5a:c3:52:34:24:96:67:c6: d0:26:ea:c7:25:6b:8c:fb:2a:88:f0:c5:d3:74:71:2a:13:fa: 41:63:5b:db:8b:e2:f3:98:21:27:81:5c:4b:40:ab:68:f4:a6: 10:03:14:4b:5a:2c:7f:7d:31:68:d8:8d:79:09:92:8d:ca:5e: 2a:f3:a1:3b:88:20:99:ff:04:a6:fa:99:2e:fe:ea:4b:ab:78: 53:c8:01:26:69:81:69:0e:fc:00:ac:7e:7a:1a:c5:03:4e:ae: 07:44:65:46:3c:23:74:1c:19:ac:9e:35:9c:f7:2f:12:4d:f3: 03:48:13:6f:de:74:15:b2:a1:1e:8c:6b:78:07:51:1b:9e:d1: 72:54:91:62:41:7c:9f:ce:fa:d9:b3:40:df:50:1a:32:be:43: 9b:d8:38:0b:c4:94:54:30:50:c1:86:39:77:84:ee:29:ac:c3: 49:3b:78:1a:65:13:9d:42:df:f9:43:fe:15:31:11:f3:e7:bc: f8:f9:73:b7:3f:15:1f:83:d2:ff:e2:e4:6a:a7:28:9c:58:e8: 21:d8:92:87:ce:87:e7:83:1b:89:13:ef:3e:ad:80:51:4e:54: 14:34:aa:ea:1c:3d:b5:fd:16:61:2f:c6:69:34:4e:f1:e9:d6: 26:09:20:ec -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5auZl3yxqH7i86NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDcwMTEyNDUxM1oXDTI4MDgxMzAwNDUxN1owLzEtMCsGA1UEAxMk ODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMzMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXg/dCSyZbcEDmqiwL6MrJNeQ8yaEV2Kl6Da Hwh6Rocpgb4Yq5P4kNodSN0dQUpPLrUcVMXmYc+JN1CAFXXbp0O9U6KK8mdJ2rSo UFfTDg4NTaj3hDQkuFYW1prncuKZAmvn1fHC9LP75VbWotsRMejp4zei2k0DAma5 XJ9gfQmI/KSYY0oKi5iQfud3zwRAnPdpCO0xbqTi0ng9n8/NvkGqfL+caq5dKdU5 vcU9OsoccOsnf4jl1q2Tb+P2C6cA3FhqMRA291ot9zbbwFc/CaLlrUO7QCfG6o68 VwYli4yP2GBGwr1AJTQ23CK2zUBp63z31o25I4bl5qcoQpvZYwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFB57WNiOKWIcEzHCfyuSsJ2H8sJjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg2ODNmNGUxLTUxYjEtNGNiMi05 YTUxLWIwZjBjNDkzMzEwMC84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5 MzMxMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALQQ0gwDQQCAAIwBwMFACYEEWAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgYjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACDZc6fWaVZca1xaw1I0JJZnxtAm 6scla4z7KojwxdN0cSoT+kFjW9uL4vOYISeBXEtAq2j0phADFEtaLH99MWjYjXkJ ko3KXirzoTuIIJn/BKb6mS7+6kureFPIASZpgWkO/ACsfnoaxQNOrgdEZUY8I3Qc GayeNZz3LxJN8wNIE2/edBWyoR6Ma3gHURue0XJUkWJBfJ/O+tmzQN9QGjK+Q5vY OAvElFQwUMGGOXeE7imsw0k7eBplE51C3/lD/hUxEfPnvPj5c7c/FR+D0v/i5Gqn KJxY6CHYkofOh+eDG4kT7z6tgFFOVBQ0quocPbX9FmEvxmk0TvHp1iYJIOw= -----END CERTIFICATE-----Generated at Thu Jul 9 19:13:18 2026 by rpki-client