$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer File: 9d295acd-c538-4740-8f21-9eca736b29d5.cer (raw, json) Hash identifier: eLuAsVPV6TRBq+ANKUA79yWvCcgDRFkKjXiyUGPR5Rg= Subject key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E2EFCDE5CA534648849F78480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jun 2026 20:45:11 +0000 Certificate not after: Sun 17 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 205.233.90.0/23 IP: 2604:1f20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2e:fc:de:5c:a5:34:64:88:49:f7:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 15 20:45:11 2026 GMT Not After : Sep 17 20:45:11 2028 GMT Subject: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e7:12:6f:e5:87:a6:93:29:77:d9:07:58:d1: 3c:1a:ee:fc:e2:59:3b:9a:8d:83:29:e8:30:9e:73: 0f:07:d1:50:d1:ef:d4:ae:14:94:dd:29:59:59:f6: 11:aa:05:90:de:a4:fa:52:b0:6f:65:05:cb:e0:2b: 47:09:8d:cc:5b:26:3c:7e:a1:cc:74:e6:72:df:e8: 34:7f:90:8d:49:b5:ad:02:06:dc:56:65:88:ba:eb: fb:0a:18:b7:7e:32:33:1c:04:5f:c7:5e:93:a6:7a: ee:8b:f6:6c:52:79:83:4a:ba:3b:0c:39:21:8d:dc: 3f:d4:6a:fd:5b:41:7d:d3:05:93:59:f8:03:ab:58: f9:bf:71:d0:a3:57:6f:4d:e7:50:6c:0d:a1:e3:75: 42:9d:a8:6e:0e:3f:ae:94:8e:b2:eb:3a:6e:56:a6: 04:e5:6e:16:1a:c4:a4:ac:87:00:44:bb:46:30:43: 3b:0b:fb:1a:bb:4d:2b:d1:c1:a5:ef:53:1b:00:f0: 5e:31:65:94:cb:e9:ab:a6:6c:71:88:90:7d:08:dd: bc:07:1b:87:80:f3:9d:c1:53:73:33:74:c6:e7:ee: 22:5f:ff:d5:a6:ab:c3:8a:2b:94:2e:9a:68:03:f3: 69:9b:53:10:98:07:87:3b:25:d9:21:e7:d8:6a:76: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 205.233.90.0/23 IPv6: 2604:1f20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:dd:94:fc:ab:b8:f3:75:c3:44:2f:f4:1e:5b:ef:dd:75:08: 64:75:dd:da:50:0f:42:81:9c:f1:17:61:1b:7d:b1:c3:ee:b8: 2f:f6:b8:d7:19:ba:7b:06:2c:6a:ce:2a:b8:31:58:ac:a5:55: 00:38:5b:ca:23:95:fa:b2:56:c1:30:78:c5:d4:e1:90:b0:3e: 65:5d:f0:3f:85:0c:a6:95:a4:12:24:eb:49:c6:dc:bf:13:01: 53:3c:db:fd:89:09:59:cd:ef:12:11:f3:e5:36:4b:c3:c1:e3: e0:9c:3f:10:1a:9e:cb:25:a6:9f:61:17:3d:1a:82:ed:86:3f: 02:3b:b3:39:c4:26:b1:6c:fd:86:9c:01:a4:98:18:24:ff:e5: 3c:4d:f0:4f:81:0c:74:18:e4:e1:29:4a:1f:46:c9:dd:37:8a: b9:fc:08:86:13:f6:26:ff:42:96:b8:c1:20:b7:75:c4:6e:04: 78:68:dd:9f:b1:3a:e5:4e:f3:bf:03:fe:d4:5a:b8:c6:49:d5: a0:12:81:cc:19:7e:27:77:30:c2:7e:de:24:29:3c:af:ef:79: c0:50:3c:4e:fb:51:31:45:8f:87:83:02:21:aa:a3:eb:13:b5: 35:e5:f6:e7:5e:be:38:48:e7:ad:be:a1:d7:ee:0b:e7:af:9e: c0:16:dc:5f -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE4u/N5cpTRkiEn3hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYxNTIwNDUxMVoXDTI4MDkxNzIwNDUxMVowLzEtMCsGA1UEAxMk OWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIyOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjecSb+WHppMpd9kHWNE8Gu784lk7mo2DKegw nnMPB9FQ0e/UrhSU3SlZWfYRqgWQ3qT6UrBvZQXL4CtHCY3MWyY8fqHMdOZy3+g0 f5CNSbWtAgbcVmWIuuv7Chi3fjIzHARfx16Tpnrui/ZsUnmDSro7DDkhjdw/1Gr9 W0F90wWTWfgDq1j5v3HQo1dvTedQbA2h43VCnahuDj+ulI6y6zpuVqYE5W4WGsSk rIcARLtGMEM7C/sau00r0cGl71MbAPBeMWWUy+mrpmxxiJB9CN28BxuHgPOdwVNz M3TG5+4iX//VpqvDiiuULppoA/Npm1MQmAeHOyXZIefYanbOjwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFEIDXbkAugqf5Zvwp1XAh9gmAsLZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzlkMjk1YWNkLWM1MzgtNDc0MC04 ZjIxLTllY2E3MzZiMjlkNS85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2 YjI5ZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAHN6VowDQQCAAIwBwMFACYEHyAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA BN2U/Ku483XDRC/0Hlvv3XUIZHXd2lAPQoGc8RdhG32xw+64L/a41xm6ewYsas4q uDFYrKVVADhbyiOV+rJWwTB4xdThkLA+ZV3wP4UMppWkEiTrScbcvxMBUzzb/YkJ Wc3vEhHz5TZLw8Hj4Jw/EBqeyyWmn2EXPRqC7YY/AjuzOcQmsWz9hpwBpJgYJP/l PE3wT4EMdBjk4SlKH0bJ3TeKufwIhhP2Jv9ClrjBILd1xG4EeGjdn7E65U7zvwP+ 1Fq4xknVoBKBzBl+J3cwwn7eJCk8r+95wFA8TvtRMUWPh4MCIaqj6xO1NeX2516+ OEjnrb6h1+4L56+ewBbcXw== -----END CERTIFICATE-----Generated at Wed Jun 24 21:16:56 2026 by rpki-client