$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c.cer File: c43461c6-7f30-4e29-b5d4-59628f6d093c.cer (raw, json) Hash identifier: y99Yvfrzo854TW3Ci+J1pMTvBZGSwia0cKcxbc16ww4= Subject key identifier: 96:26:92:EF:EC:36:EB:8F:D4:04:C5:88:12:1D:2E:40:01:BF:D9:BA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E4287A72E4305AC1694BBFF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/c43461c6-7f30-4e29-b5d4-59628f6d093c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Jun 2026 20:45:11 +0000 Certificate not after: Sun 24 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 15211 AS: 394628 IP: 74.122.184.0/21 IP: 135.84.132.0/22 IP: 2620:30::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:87:a7:2e:43:05:ac:16:94:bb:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 22 20:45:11 2026 GMT Not After : Sep 24 20:45:11 2028 GMT Subject: CN=c43461c6-7f30-4e29-b5d4-59628f6d093c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d4:93:ea:f6:18:3a:79:c9:dc:5b:cd:1f:95: b6:78:ec:5c:82:5c:72:04:a6:fe:bc:a9:23:7b:94: 15:d1:e7:03:f2:76:72:0f:53:82:48:79:8f:ee:35: 06:5f:0c:5f:7c:2c:8c:c2:6a:e0:0f:fd:43:75:8d: b2:71:50:21:37:67:1f:12:d8:8c:f5:3e:e1:33:a9: bb:bb:01:d6:a4:17:b7:0f:35:4e:be:c7:b6:cf:c9: 1b:76:11:a1:17:d3:32:4a:3d:ac:70:98:29:1d:ee: 48:73:5d:bd:d1:3a:a8:db:84:f1:3e:db:29:6f:b6: d1:91:7f:bc:78:fa:84:6f:5a:77:c0:70:a3:cf:b3: 2c:12:64:4d:d2:f0:15:02:50:9a:b4:50:4c:22:9d: 63:4b:eb:4b:e9:1c:9a:37:52:f8:2c:ce:86:81:cb: 62:23:ed:73:09:86:59:1a:c4:bf:a6:85:e9:9c:e4: 4c:fe:60:c3:56:72:53:11:a5:fa:86:24:6e:b7:b6: 12:64:40:eb:45:70:21:dc:1c:5f:42:09:05:ce:cd: 38:2d:53:bc:d6:53:79:c9:22:55:5a:cd:45:3f:91: 36:75:67:5d:49:14:8f:3c:d5:4b:99:95:23:38:81: 2a:53:80:ce:bd:0d:22:79:e3:a6:82:fc:f1:02:b0: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:26:92:EF:EC:36:EB:8F:D4:04:C5:88:12:1D:2E:40:01:BF:D9:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/c43461c6-7f30-4e29-b5d4-59628f6d093c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 74.122.184.0/21 135.84.132.0/22 IPv6: 2620:30::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15211 394628 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1a:ef:c2:42:5f:fb:5f:d5:f7:bf:9c:a1:7e:cb:1d:2e:92: d9:a0:ec:0a:33:2f:de:93:29:58:21:b1:8a:63:54:cd:e3:bb: 9a:4f:5a:c4:66:aa:58:e8:9c:6d:d8:74:35:37:10:2c:7f:38: fe:6b:1d:d3:bd:cf:3a:f9:4d:59:68:2b:d3:54:48:c8:09:8c: 19:fe:34:ba:32:38:c2:cc:59:21:bc:f9:28:8a:7a:e1:97:22: fb:e5:bd:4e:66:dc:4d:97:94:4e:39:11:b9:1c:ce:a0:d6:2e: 6e:e3:5c:58:86:99:f5:74:99:ea:a1:ed:0b:f1:2c:fa:e0:32: 6b:c8:43:d2:0b:1c:0f:be:6c:f0:31:14:f0:03:74:ad:72:9d: c4:96:bc:7f:9c:06:05:f9:ba:52:43:48:96:64:1c:7c:64:c8: 2f:5f:54:16:9b:36:ae:42:19:31:7b:20:62:33:c9:7b:b2:dc: a8:d1:fe:8c:f9:78:49:00:b3:2c:65:b2:1b:c8:6b:71:e6:86: 0f:a5:b6:7d:d1:c0:e8:0d:a8:7f:8d:cf:f6:3d:9c:ec:04:bb: ea:e9:98:63:e3:23:54:c6:83:e2:94:20:03:1d:6a:79:61:a4: a1:3e:89:06:76:0d:70:ac:02:84:f2:b0:77:32:b1:85:26:9e: a4:b9:79:f5 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE5Ch6cuQwWsFpS7/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYyMjIwNDUxMVoXDTI4MDkyNDIwNDUxMVowLzEtMCsGA1UEAxMk YzQzNDYxYzYtN2YzMC00ZTI5LWI1ZDQtNTk2MjhmNmQwOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNST6vYYOnnJ3FvNH5W2eOxcglxyBKb+vKkj e5QV0ecD8nZyD1OCSHmP7jUGXwxffCyMwmrgD/1DdY2ycVAhN2cfEtiM9T7hM6m7 uwHWpBe3DzVOvse2z8kbdhGhF9MySj2scJgpHe5Ic1290Tqo24TxPtspb7bRkX+8 ePqEb1p3wHCjz7MsEmRN0vAVAlCatFBMIp1jS+tL6RyaN1L4LM6GgctiI+1zCYZZ GsS/poXpnORM/mDDVnJTEaX6hiRut7YSZEDrRXAh3BxfQgkFzs04LVO81lN5ySJV Ws1FP5E2dWddSRSPPNVLmZUjOIEqU4DOvQ0ieeOmgvzxArBD+wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJYmku/sNuuP1ATFiBIdLkABv9m6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NDM0NjFjNi03ZjMwLTRlMjktYjVkNC01OTYyOGY2ZDA5M2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M0MzQ2MWM2LTdmMzAtNGUyOS1i NWQ0LTU5NjI4ZjZkMDkzYy9jNDM0NjFjNi03ZjMwLTRlMjktYjVkNC01OTYyOGY2 ZDA5M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBANKergDBAKHVIQwDwQCAAIwCQMHBCYgADAAADAe BggrBgEFBQcBCAEB/wQPMA2gCzAJAgI7awIDBgWEMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA0a78JCX/tf 1fe/nKF+yx0uktmg7AozL96TKVghsYpjVM3ju5pPWsRmqljonG3YdDU3ECx/OP5r HdO9zzr5TVloK9NUSMgJjBn+NLoyOMLMWSG8+SiKeuGXIvvlvU5m3E2XlE45Ebkc zqDWLm7jXFiGmfV0meqh7QvxLPrgMmvIQ9ILHA++bPAxFPADdK1yncSWvH+cBgX5 ulJDSJZkHHxkyC9fVBabNq5CGTF7IGIzyXuy3KjR/oz5eEkAsyxlshvIa3Hmhg+l tn3RwOgNqH+Nz/Y9nOwEu+rpmGPjI1TGg+KUIAMdanlhpKE+iQZ2DXCsAoTysHcy sYUmnqS5efU= -----END CERTIFICATE-----Generated at Thu Jul 9 19:12:27 2026 by rpki-client