$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer File: 9c74a627-7577-4f11-89e0-589500621344.cer (raw, json) Hash identifier: wlxr3MbZwBCaFjxv6O9SF1F7EUauZ24BbZ3X/GcynfY= Subject key identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DD1EE1C7DF19433D04DC7FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 12:45:17 +0000 Certificate not after: Tue 15 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 23.133.156.0/24 IP: 2602:f707::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:ee:1c:7d:f1:94:33:d0:4d:c7:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 13 12:45:17 2026 GMT Not After : Aug 15 12:45:17 2028 GMT Subject: CN=9c74a627-7577-4f11-89e0-589500621344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:47:cc:c3:a6:ad:a3:b3:f0:e6:c7:0c:7f: eb:5c:d4:9a:ff:26:50:89:64:8a:73:aa:96:16:bb: 8f:a0:4b:0e:36:1b:e2:87:ab:1d:15:4c:57:48:d4: 75:52:f0:0a:1a:46:08:41:d5:f1:c7:60:d9:88:3d: 41:ea:ab:3c:f1:51:a5:64:89:5f:60:ad:f1:cd:85: 19:1a:da:2d:ca:77:98:fa:8d:3d:95:e1:e1:59:98: 9d:17:16:41:1f:51:60:aa:8f:2e:2d:aa:f4:80:7e: ff:bd:5f:15:b5:ff:dc:58:c4:3e:46:60:bf:2d:a3: ee:ff:40:2d:ef:c3:a1:41:06:cb:c3:7f:35:f3:26: 29:71:3b:6b:b2:2c:51:82:36:39:a7:e4:b3:56:de: ab:a8:5e:0d:33:4c:9e:fe:9d:f2:58:d8:a5:20:b6: 23:53:9e:27:8e:c1:a8:7f:21:ee:c3:a0:1e:b9:f0: fc:9c:92:49:74:65:10:c9:f6:d8:6c:31:09:77:f8: 87:b6:ce:79:aa:08:1e:48:ad:ce:0e:48:e8:1b:29: 47:6d:0d:99:f7:06:4c:ba:9f:31:50:13:72:58:e5: df:96:b6:57:9a:64:10:14:b6:f5:39:fd:ac:3e:02: ca:7e:37:ab:dc:16:b5:b0:41:ef:08:a1:49:58:ac: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.156.0/24 IPv6: 2602:f707::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:f3:dd:bc:56:a6:82:33:6f:9b:6a:2d:61:6a:c2:56:f4: e3:a0:84:69:11:44:e0:b1:c8:76:f7:0c:15:3d:56:68:a2:96: 69:94:ab:ca:78:73:94:9a:fc:0b:5f:32:95:63:f6:a3:a4:f6: 45:75:21:e4:89:8d:62:5f:e9:c8:15:7d:11:c6:fe:b0:e6:42: 0b:fe:9a:79:d7:7c:94:fd:e1:9c:5b:90:dc:5a:39:f1:2f:b3: 71:a8:e7:dc:7c:12:58:c6:75:16:76:c4:6b:c3:9e:ec:cf:b8: 3e:4d:40:7f:cb:d8:64:f7:ff:92:13:3d:a1:35:87:80:ce:7d: 7a:7a:21:d1:61:bb:3c:d0:d2:a9:bd:0d:09:70:7c:fb:c5:ed: 82:e3:da:31:e6:7b:64:fd:46:6a:96:97:53:50:a7:7f:3b:5e: 58:7d:89:ba:f6:a6:4e:b6:82:4f:32:fe:a5:57:52:27:ab:6d: 1f:be:b5:b5:8f:48:a5:39:f2:f3:60:e8:54:44:13:f6:cd:17: c3:f6:95:52:69:f3:57:d8:88:4b:d5:33:27:34:1c:b1:9c:02: ff:d5:fe:e2:c9:a3:00:b9:60:bd:65:2d:be:5f:b7:55:1b:11: f7:e5:ff:8c:fd:e5:25:25:7f:bd:b9:85:d8:26:20:86:b9:b7: 4b:68:8e:6a -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3R7hx98ZQz0E3H/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxMzEyNDUxN1oXDTI4MDgxNTEyNDUxN1owLzEtMCsGA1UEAxMk OWM3NGE2MjctNzU3Ny00ZjExLTg5ZTAtNTg5NTAwNjIxMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqxHzMOmraOz8ObHDH/rXNSa/yZQiWSKc6qW FruPoEsONhvih6sdFUxXSNR1UvAKGkYIQdXxx2DZiD1B6qs88VGlZIlfYK3xzYUZ GtotyneY+o09leHhWZidFxZBH1Fgqo8uLar0gH7/vV8Vtf/cWMQ+RmC/LaPu/0At 78OhQQbLw3818yYpcTtrsixRgjY5p+SzVt6rqF4NM0ye/p3yWNilILYjU54njsGo fyHuw6AeufD8nJJJdGUQyfbYbDEJd/iHts55qggeSK3ODkjoGylHbQ2Z9wZMup8x UBNyWOXflrZXmmQQFLb1Of2sPgLKfjer3Ba1sEHvCKFJWKxrhQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNZEuDLgAzf9oWpi3q5Cz1YnSqG4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 Yzc0YTYyNy03NTc3LTRmMTEtODllMC01ODk1MDA2MjEzNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzljNzRhNjI3LTc1NzctNGYxMS04 OWUwLTU4OTUwMDYyMTM0NC85Yzc0YTYyNy03NTc3LTRmMTEtODllMC01ODk1MDA2 MjEzNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhZwwDgQCAAIwCAMGACYC9wcAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFxl8928VqaCM2+bai1hasJW9OOghGkRROCxyHb3DBU9VmiilmmUq8p4c5Sa/Atf MpVj9qOk9kV1IeSJjWJf6cgVfRHG/rDmQgv+mnnXfJT94ZxbkNxaOfEvs3Go59x8 EljGdRZ2xGvDnuzPuD5NQH/L2GT3/5ITPaE1h4DOfXp6IdFhuzzQ0qm9DQlwfPvF 7YLj2jHme2T9RmqWl1NQp387Xlh9ibr2pk62gk8y/qVXUierbR++tbWPSKU58vNg 6FREE/bNF8P2lVJp81fYiEvVMyc0HLGcAv/V/uLJowC5YL1lLb5ft1UbEffl/4z9 5SUlf725hdgmIIa5t0tojmo= -----END CERTIFICATE-----Generated at Sat May 23 18:31:05 2026 by rpki-client