$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer File: a4aa20f3-940b-4178-8460-6af30ac20ab8.cer (raw, json) Hash identifier: ilFOPYGSr/7hpxlMQTHOKK5upcQG1aFHK2mRuHd5s6s= Subject key identifier: 8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DE84396B7F770FA74512B4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 May 2026 12:45:17 +0000 Certificate not after: Wed 23 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 18908 IP: 198.175.200.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:43:96:b7:f7:70:fa:74:51:2b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 21 12:45:17 2026 GMT Not After : Aug 23 12:45:17 2028 GMT Subject: CN=a4aa20f3-940b-4178-8460-6af30ac20ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:e5:fb:ad:41:f5:29:e6:70:ef:60:12:03: 77:0a:35:da:94:e5:00:9b:20:ff:2c:06:62:e1:d1: e7:80:4c:01:e8:3a:e2:1c:1c:74:9a:47:b1:69:80: 2b:1f:88:91:38:ec:fd:f5:6c:9f:3f:54:db:b7:64: 3f:79:b8:d0:a1:d9:47:43:e8:76:bc:d1:5e:50:fb: 3c:a0:cd:aa:40:c6:94:de:4b:a5:d1:4c:91:0f:a2: a9:0a:75:cb:8e:77:6a:89:85:ef:42:7d:63:e0:50: 10:0f:bf:e6:b5:b5:23:37:dd:28:47:2b:f9:cd:27: f2:d3:e1:6d:2c:c1:27:0f:2e:79:fd:31:7a:be:9e: c1:45:d0:f8:80:cd:c2:a5:bb:55:84:0c:b2:84:56: 49:37:60:90:62:99:05:c5:4e:9a:cd:a7:da:a4:16: 45:3d:2b:0c:45:f2:71:d4:d1:f1:27:ad:a9:9c:56: 52:39:f9:94:37:d2:d7:05:1b:06:8a:91:38:85:6a: a4:97:ac:6b:3f:fd:9c:42:f7:d7:db:ba:ed:a8:72: 37:94:1d:22:67:47:ab:da:96:e7:5b:58:5e:57:30: 5d:d9:88:74:72:b7:88:41:7d:b9:5e:4e:26:b0:5c: e2:7e:04:d9:9b:4e:77:48:5e:b6:08:35:de:3f:36: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 198.175.200.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18908 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ab:60:e8:a3:6e:9c:2c:5e:c8:94:d6:8b:91:b3:1f:c6:da: ea:dc:bd:ee:f0:38:4f:a4:09:a6:20:3c:2f:09:3d:71:32:2b: 06:6b:45:c4:e2:a3:03:08:09:40:4b:c9:7f:99:95:c9:72:e7: 3c:2a:6b:43:08:e7:5d:ca:a0:38:59:75:2a:b2:ce:21:27:d5: 5d:86:41:ae:67:7a:ff:94:fb:3b:e2:ee:2a:d4:fc:1c:92:56: df:33:84:21:1b:2c:db:89:b9:b5:db:5b:a3:2b:fa:dc:e1:b2: 96:eb:02:21:ca:27:e6:50:3e:32:41:59:7a:e0:94:3a:b9:d6: 28:f3:d9:cc:83:69:aa:91:00:29:80:f9:1a:15:fb:16:49:3b: 07:b4:ec:f9:fc:bf:f3:54:dc:da:7b:0e:73:f1:9e:5e:66:07: 7b:d3:b7:f6:e0:0e:6f:d9:42:f1:d7:aa:83:c6:5e:1d:e5:08: 9c:1d:32:54:31:9e:f4:91:c4:ad:89:f3:a4:88:1d:d8:7a:46: 01:91:5c:8f:1c:27:aa:12:48:f9:f3:03:c7:bf:e6:75:b0:92: 2d:13:a3:8f:a2:14:e0:d4:79:4c:d1:60:ff:fc:08:21:1b:de: c7:33:30:20:9e:8e:ba:19:a3:ba:6e:61:80:d3:37:8a:29:60: 61:40:d3:ad -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE3oQ5a393D6dFErT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyMTEyNDUxN1oXDTI4MDgyMzEyNDUxN1owLzEtMCsGA1UEAxMk YTRhYTIwZjMtOTQwYi00MTc4LTg0NjAtNmFmMzBhYzIwYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpnl+61B9SnmcO9gEgN3CjXalOUAmyD/LAZi 4dHngEwB6DriHBx0mkexaYArH4iROOz99WyfP1Tbt2Q/ebjQodlHQ+h2vNFeUPs8 oM2qQMaU3kul0UyRD6KpCnXLjndqiYXvQn1j4FAQD7/mtbUjN90oRyv5zSfy0+Ft LMEnDy55/TF6vp7BRdD4gM3CpbtVhAyyhFZJN2CQYpkFxU6azafapBZFPSsMRfJx 1NHxJ62pnFZSOfmUN9LXBRsGipE4hWqkl6xrP/2cQvfX27rtqHI3lB0iZ0er2pbn W1heVzBd2Yh0creIQX25Xk4msFzifgTZm053SF62CDXePzYuEQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIrpr9p+IpCK1NCTNn2PzZhKr8JoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h NGFhMjBmMy05NDBiLTQxNzgtODQ2MC02YWYzMGFjMjBhYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E0YWEyMGYzLTk0MGItNDE3OC04 NDYwLTZhZjMwYWMyMGFiOC9hNGFhMjBmMy05NDBiLTQxNzgtODQ2MC02YWYzMGFj MjBhYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGr8gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SdwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEABqtg6KNunCxeyJTWi5GzH8ba6ty97vA4T6QJpiA8Lwk9cTIr BmtFxOKjAwgJQEvJf5mVyXLnPCprQwjnXcqgOFl1KrLOISfVXYZBrmd6/5T7O+Lu KtT8HJJW3zOEIRss24m5tdtboyv63OGylusCIcon5lA+MkFZeuCUOrnWKPPZzINp qpEAKYD5GhX7Fkk7B7Ts+fy/81Tc2nsOc/GeXmYHe9O39uAOb9lC8deqg8ZeHeUI nB0yVDGe9JHErYnzpIgd2HpGAZFcjxwnqhJI+fMDx7/mdbCSLROjj6IU4NR5TNFg //wIIRvexzMwIJ6Ouhmjum5hgNM3iilgYUDTrQ== -----END CERTIFICATE-----Generated at Mon May 25 04:27:56 2026 by rpki-client