$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer File: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer (raw, json) Hash identifier: Sc7QoACRUi04dQsCJ6GPPcTB0QZwNVoOUJU3aScCEaM= Subject key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E34923C093F8620C67127A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Jun 2026 20:45:11 +0000 Certificate not after: Tue 19 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 398951 IP: 23.130.60.0/24 IP: 216.181.120.0/24 IP: 2602:f978::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:34:92:3c:09:3f:86:20:c6:71:27:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 17 20:45:11 2026 GMT Not After : Sep 19 20:45:11 2028 GMT Subject: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:f7:a8:5c:f0:d8:d5:bf:b9:4a:ec:74:aa: 7c:42:53:51:1b:2b:36:ac:9e:35:7e:62:60:b9:83: 4c:9f:ff:da:03:16:c5:3a:69:68:0f:c0:b8:ec:07: 71:a1:63:31:9d:3e:78:85:f5:9f:9e:dd:89:55:1b: 5b:7f:39:f6:af:13:78:96:c0:1b:49:3f:8f:ec:b5: 06:c4:c6:41:d0:1d:15:b5:07:3a:b3:1e:ff:ce:cb: 34:70:76:33:df:1d:a5:00:be:a9:4b:91:0d:91:98: 74:d6:bb:8d:66:cb:e5:17:ee:e0:e9:96:ea:77:6f: 56:80:a4:de:4c:ca:d7:bf:12:05:53:fd:7c:e7:1c: 91:b7:f9:98:10:01:35:33:00:81:e4:fe:a1:1c:46: a9:d9:00:d4:e7:ea:d2:ce:58:b4:c8:bd:02:bb:45: 1f:7a:39:1e:6f:72:3c:f0:b2:60:39:a4:a2:1a:06: 6b:bd:c1:9a:8d:be:01:db:ee:11:59:25:23:d6:03: eb:a5:ae:45:6f:f0:2b:27:91:6e:7f:04:48:4f:62: 5d:4c:94:e8:3d:71:c3:32:c0:c3:a1:9f:66:5a:8d: c8:c7:00:16:41:8d:46:15:f2:31:65:b2:ac:35:a5: 75:a8:92:01:08:9f:1f:07:f5:b6:ca:89:fd:59:72: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.60.0/24 216.181.120.0/24 IPv6: 2602:f978::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398951 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:04:a8:cf:55:05:a8:27:6d:fa:ac:2d:2c:54:32:9a:f1:dd: cc:0c:0e:2b:e3:14:8d:36:20:3f:1c:24:ae:80:a7:3c:2b:85: 46:41:31:c5:f9:f3:b4:3d:4a:93:be:61:f0:d4:a8:0c:31:9d: 5c:6d:bd:5b:03:56:25:94:b2:8b:2a:bb:26:77:d7:1b:45:f7: b3:19:f4:d3:b5:0d:7a:c2:01:c8:30:95:08:26:27:b9:b5:05: d5:70:04:b5:a7:c2:ac:4b:d2:9c:77:34:bc:6d:2b:7d:5d:cb: d0:20:8a:b5:47:14:f9:7d:f1:64:92:d6:6e:17:8d:49:17:87: 89:de:c8:43:f6:ab:fd:eb:c9:6e:03:84:d4:83:37:aa:db:ad: 32:40:72:35:fb:96:75:9c:45:54:59:11:28:e2:52:2f:d5:a8: 1e:a4:f9:03:5e:8a:dc:34:d2:7b:fa:08:a3:17:eb:f1:fd:f8: d9:d2:f3:be:0e:f9:32:8f:5c:60:4e:90:cb:c0:bf:fc:84:57: 60:4d:72:c5:64:19:33:28:c9:ba:58:1a:ba:5d:82:1e:28:7f: 8a:65:8f:86:33:af:69:57:da:bd:e4:ae:73:13:8a:80:2e:4c: ed:e6:bc:b7:97:51:f9:ea:4f:0f:b4:f3:7e:48:6a:cd:b4:8f: 07:57:6a:67 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE40kjwJP4YgxnEnpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYxNzIwNDUxMVoXDTI4MDkxOTIwNDUxMVowLzEtMCsGA1UEAxMk ODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIxYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpf3qFzw2NW/uUrsdKp8QlNRGys2rJ41fmJg uYNMn//aAxbFOmloD8C47AdxoWMxnT54hfWfnt2JVRtbfzn2rxN4lsAbST+P7LUG xMZB0B0VtQc6sx7/zss0cHYz3x2lAL6pS5ENkZh01ruNZsvlF+7g6Zbqd29WgKTe TMrXvxIFU/185xyRt/mYEAE1MwCB5P6hHEap2QDU5+rSzli0yL0Cu0Ufejkeb3I8 8LJgOaSiGgZrvcGajb4B2+4RWSUj1gPrpa5Fb/ArJ5FufwRIT2JdTJToPXHDMsDD oZ9mWo3IxwAWQY1GFfIxZbKsNaV1qJIBCJ8fB/W2yon9WXKtkQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFGo0y9l18kvK2+/dSUBSe4PJyuVBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg2ZjVjZDhhLWY5MDMtNDE3Ni05 N2E3LTY2NzFlNDliMWM5Yi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5 YjFjOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgjwDBADYtXgwDgQCAAIwCAMGBCYC+XgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHBKjPVQWoJ236rC0s VDKa8d3MDA4r4xSNNiA/HCSugKc8K4VGQTHF+fO0PUqTvmHw1KgMMZ1cbb1bA1Yl lLKLKrsmd9cbRfezGfTTtQ16wgHIMJUIJie5tQXVcAS1p8KsS9KcdzS8bSt9XcvQ IIq1RxT5ffFkktZuF41JF4eJ3shD9qv968luA4TUgzeq260yQHI1+5Z1nEVUWREo 4lIv1agepPkDXorcNNJ7+gijF+vx/fjZ0vO+Dvkyj1xgTpDLwL/8hFdgTXLFZBkz KMm6WBq6XYIeKH+KZY+GM69pV9q95K5zE4qALkzt5ry3l1H56k8PtPN+SGrNtI8H V2pn -----END CERTIFICATE-----Generated at Thu Jul 9 19:15:05 2026 by rpki-client