$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer File: a2839383-af07-436e-89af-5453510b6546.cer (raw, json) Hash identifier: 190otfkL6jXBOJ1LYgWJ1VhfcXnqpVVBwijFlOzeV/4= Subject key identifier: 00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E5AB81F4D3E38AB0265B68780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 12:42:15 +0000 Certificate not after: Mon 12 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 401487 IP: 23.129.84.0/24 IP: 128.254.152.0/22 IP: 2602:f7a1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:b8:1f:4d:3e:38:ab:02:65:b6:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 1 12:42:15 2026 GMT Not After : Jun 12 00:45:22 2028 GMT Subject: CN=a2839383-af07-436e-89af-5453510b6546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:e3:ec:ce:98:ed:12:e8:fc:09:f9:53:32: 6c:0f:de:b3:5b:b9:45:bf:30:18:12:ad:2a:44:f7: 44:84:83:d0:12:26:22:c6:4b:0a:7e:a4:90:68:17: b9:81:50:9e:1d:db:89:12:6a:30:71:97:81:89:a6: 14:14:c2:03:27:f4:2b:f6:d9:ec:74:34:d9:29:8a: 74:bf:71:eb:de:87:b9:ee:22:06:1b:0b:d8:8d:a4: 3d:98:f4:ec:2a:f9:7a:71:7a:ea:00:f8:d4:61:d8: c1:31:65:a5:de:79:2b:85:79:ec:39:a2:86:62:91: a3:19:d7:ff:ac:32:4a:35:8d:25:3f:a0:56:77:3c: 59:1e:4b:73:d4:de:70:1a:ef:05:ca:50:dd:d9:b5: 7e:2e:1e:a9:59:5b:13:a3:70:79:79:cc:8c:19:d5: 1e:4b:99:51:8f:33:6d:da:b0:10:7c:3f:0e:68:54: 25:ea:bf:aa:77:98:74:7c:32:96:85:0d:52:db:16: b3:3c:7a:2a:81:fc:09:43:f8:60:8b:e1:2d:7b:53: 16:5d:c1:db:cb:cc:09:c2:7d:b2:85:ed:55:be:b0: 07:f7:38:a4:af:cb:d0:6c:7f:2f:fb:58:5b:e4:c3: f5:26:eb:eb:fc:a8:dd:8a:32:a3:72:38:2c:b3:be: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.84.0/24 128.254.152.0/22 IPv6: 2602:f7a1::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401487 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ff:01:52:37:7c:75:6b:57:b4:32:1b:85:c1:a9:b4:4f:65: cc:34:3d:89:0d:0c:d9:96:3e:29:9b:7e:75:da:b2:27:4f:7e: 67:8e:b0:5c:e1:bc:2c:ec:de:89:68:fa:9f:fc:e6:f3:9b:3d: 8e:39:7f:a3:6f:fe:ea:af:db:c9:88:a4:62:7b:ab:1c:0b:6b: d1:fe:9a:13:2d:c6:7b:c0:ca:26:2f:1d:bc:7e:54:be:4c:77: ea:ad:fd:7d:35:b6:61:cb:9f:ec:1d:6f:56:12:bf:00:0e:d3: ce:57:b7:9a:3c:3d:6e:fa:7e:e5:04:c0:cc:1a:81:0e:e7:6a: 7a:cc:28:62:cf:bc:be:26:2c:f1:c5:ab:71:a1:79:d8:a5:b6: f9:ba:b9:1d:51:ce:8a:23:7b:95:6d:60:7b:77:b2:f5:05:a2: 39:0e:c9:8b:78:47:c9:44:26:be:a8:aa:99:5b:2e:4e:aa:f5: 3d:75:1f:f2:5e:af:2d:00:60:aa:fd:4a:ba:74:01:ec:7c:11: c9:90:56:fa:78:ad:b3:8f:99:b5:4c:9e:68:82:31:e9:83:60: 2d:18:f7:d6:27:9c:5f:d7:61:eb:11:ea:0e:b5:d1:ee:ed:f7: 06:72:3f:50:f4:db:f6:69:8b:fc:ac:8b:a8:7c:1b:c4:73:a2: b3:fd:62:59 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5auB9NPjirAmW2h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDcwMTEyNDIxNVoXDTI4MDYxMjAwNDUyMlowLzEtMCsGA1UEAxMk YTI4MzkzODMtYWYwNy00MzZlLTg5YWYtNTQ1MzUxMGI2NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1vj7M6Y7RLo/An5UzJsD96zW7lFvzAYEq0q RPdEhIPQEiYixksKfqSQaBe5gVCeHduJEmowcZeBiaYUFMIDJ/Qr9tnsdDTZKYp0 v3Hr3oe57iIGGwvYjaQ9mPTsKvl6cXrqAPjUYdjBMWWl3nkrhXnsOaKGYpGjGdf/ rDJKNY0lP6BWdzxZHktz1N5wGu8FylDd2bV+Lh6pWVsTo3B5ecyMGdUeS5lRjzNt 2rAQfD8OaFQl6r+qd5h0fDKWhQ1S2xazPHoqgfwJQ/hgi+Ete1MWXcHby8wJwn2y he1VvrAH9zikr8vQbH8v+1hb5MP1Juvr/KjdijKjcjgss77F8wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFABmwgqnNQ1V7DmABha1xTw8bosjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h MjgzOTM4My1hZjA3LTQzNmUtODlhZi01NDUzNTEwYjY1NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2EyODM5MzgzLWFmMDctNDM2ZS04 OWFmLTU0NTM1MTBiNjU0Ni9hMjgzOTM4My1hZjA3LTQzNmUtODlhZi01NDUzNTEw YjY1NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgVQDBAKA/pgwDgQCAAIwCAMGACYC96EAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYgTzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz/wFSN3x1a1e0MhuF wam0T2XMND2JDQzZlj4pm3512rInT35njrBc4bws7N6JaPqf/Obzmz2OOX+jb/7q r9vJiKRie6scC2vR/poTLcZ7wMomLx28flS+THfqrf19NbZhy5/sHW9WEr8ADtPO V7eaPD1u+n7lBMDMGoEO52p6zChiz7y+JizxxatxoXnYpbb5urkdUc6KI3uVbWB7 d7L1BaI5DsmLeEfJRCa+qKqZWy5OqvU9dR/yXq8tAGCq/Uq6dAHsfBHJkFb6eK2z j5m1TJ5ogjHpg2AtGPfWJ5xf12HrEeoOtdHu7fcGcj9Q9Nv2aYv8rIuofBvEc6Kz /WJZ -----END CERTIFICATE-----Generated at Thu Jul 9 19:14:49 2026 by rpki-client