$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.cer File: cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.cer (raw, json) Hash identifier: 7JyQkfzHd42jNHJcgvKRm+tiejzZQ20hVYOyPr2eRYE= Subject key identifier: 3D:1E:D6:70:B7:AC:D6:61:A8:3C:E5:AB:EB:A0:9F:FE:4B:4C:E7:68 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DD1D9D77D5AE98262FDC98940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 12:04:27 +0000 Certificate not after: Tue 15 Aug 2028 12:04:27 +0000 Subordinate resources: IP: 142.248.159.0/24 IP: 2602:f504::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:d9:d7:7d:5a:e9:82:62:fd:c9:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 13 12:04:27 2026 GMT Not After : Aug 15 12:04:27 2028 GMT Subject: CN=cc0e351b-a6aa-47c5-8ac7-b5248ac2666b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:95:46:43:00:34:57:2a:d1:37:37:ee:02: 0c:1c:d7:dd:f3:2d:94:c2:93:df:2c:0c:ef:1b:f2: e4:68:45:ae:fc:9f:e4:06:d7:4c:78:d6:bc:b1:ac: 77:4b:4c:a6:cd:c7:df:b1:26:78:01:6c:9e:60:52: 6d:ed:9d:8b:ed:91:ee:e8:49:00:38:b4:4a:9e:33: 9d:b1:17:10:12:4e:19:1c:67:9c:44:88:3f:86:94: a2:25:67:a7:c7:97:f9:d6:c7:55:f0:e6:7d:89:91: 7c:8e:0d:78:64:e5:32:24:de:3b:41:74:7e:d4:dc: a2:2a:f4:8d:34:de:45:70:16:f4:89:1e:7d:9b:f5: f2:c2:89:f8:d6:d5:27:72:3a:c2:54:f0:d8:11:46: d6:2d:6f:aa:f4:3e:20:e2:28:07:3d:3c:92:93:cf: 6c:b6:ef:eb:f3:7c:b8:6e:2e:d0:b5:65:ab:b9:82: 04:61:2c:42:98:93:53:cb:e1:c4:d8:60:5b:31:29: e2:34:6d:ae:a6:7f:3c:a9:09:90:8b:86:1d:a2:b9: 4a:5d:f5:2f:5d:53:9a:82:61:26:19:3e:df:ed:5d: dc:f8:f3:61:1e:52:85:23:39:4a:54:92:67:90:a1: f4:39:0d:0b:10:d0:e9:f5:8c:1f:51:f1:b8:c5:bf: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:D6:70:B7:AC:D6:61:A8:3C:E5:AB:EB:A0:9F:FE:4B:4C:E7:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.159.0/24 IPv6: 2602:f504::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e7:f9:50:d0:14:27:1b:0e:5c:d2:53:ef:8d:0b:b3:28:96: b1:73:36:ad:ce:3d:77:6b:8a:f7:7c:a2:2f:04:b8:e5:a7:53: 29:d4:20:05:f5:e9:38:24:57:5b:b2:6d:07:9f:af:4b:d7:5d: 40:df:ee:2b:09:2a:c8:0e:3c:dd:38:7b:4d:3a:e3:34:e6:a1: 87:2d:a0:85:80:3e:5c:8b:ff:98:91:7c:fa:f2:aa:1a:0c:3e: 72:95:68:50:a5:0e:12:98:9c:c5:07:29:63:ad:1c:e3:88:98: 52:70:6b:75:a8:b0:06:07:0d:d0:c3:11:e3:64:44:12:21:44: dd:f5:9c:ee:54:c7:0d:3d:65:0c:a1:99:bc:cf:32:83:9e:46: a9:36:24:5c:b3:94:6f:fe:4e:ac:4f:81:bc:e2:f8:a8:ed:bf: c3:29:00:9c:d0:70:63:bb:ec:55:94:ee:96:e8:86:c6:e1:3b: 4d:86:5a:4c:00:d8:d1:7c:a1:4d:09:34:89:61:d1:fe:4a:a0: 7f:fd:55:22:5c:4f:e0:71:10:1d:12:48:f1:2d:35:f7:ab:32: 67:80:9d:6c:9e:da:6a:44:53:8a:95:31:be:5b:9d:68:67:30: 7c:06:d9:51:e1:42:cb:85:87:ec:bd:41:f3:06:bb:e3:e5:31: 6e:bd:12:20 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3R2dd9WumCYv3JiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxMzEyMDQyN1oXDTI4MDgxNTEyMDQyN1owLzEtMCsGA1UEAxMk Y2MwZTM1MWItYTZhYS00N2M1LThhYzctYjUyNDhhYzI2NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdCVRkMANFcq0Tc37gIMHNfd8y2UwpPfLAzv G/LkaEWu/J/kBtdMeNa8sax3S0ymzcffsSZ4AWyeYFJt7Z2L7ZHu6EkAOLRKnjOd sRcQEk4ZHGecRIg/hpSiJWenx5f51sdV8OZ9iZF8jg14ZOUyJN47QXR+1NyiKvSN NN5FcBb0iR59m/Xywon41tUncjrCVPDYEUbWLW+q9D4g4igHPTySk89stu/r83y4 bi7QtWWruYIEYSxCmJNTy+HE2GBbMSniNG2upn88qQmQi4YdorlKXfUvXVOagmEm GT7f7V3c+PNhHlKFIzlKVJJnkKH0OQ0LENDp9YwfUfG4xb+ICwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFD0e1nC3rNZhqDzlq+ugn/5LTOdoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j YzBlMzUxYi1hNmFhLTQ3YzUtOGFjNy1iNTI0OGFjMjY2NmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2NjMGUzNTFiLWE2YWEtNDdjNS04 YWM3LWI1MjQ4YWMyNjY2Yi9jYzBlMzUxYi1hNmFhLTQ3YzUtOGFjNy1iNTI0OGFj MjY2NmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACO+J8wDgQCAAIwCAMGACYC9QQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACbn+VDQFCcbDlzSU++NC7MolrFzNq3OPXdrivd8oi8EuOWnUynUIAX16TgkV1uy bQefr0vXXUDf7isJKsgOPN04e0064zTmoYctoIWAPlyL/5iRfPryqhoMPnKVaFCl DhKYnMUHKWOtHOOImFJwa3WosAYHDdDDEeNkRBIhRN31nO5Uxw09ZQyhmbzPMoOe Rqk2JFyzlG/+TqxPgbzi+Kjtv8MpAJzQcGO77FWU7pbohsbhO02GWkwA2NF8oU0J NIlh0f5KoH/9VSJcT+BxEB0SSPEtNferMmeAnWye2mpEU4qVMb5bnWhnMHwG2VHh QsuFh+y9QfMGu+PlMW69EiA= -----END CERTIFICATE-----Generated at Mon May 25 04:25:54 2026 by rpki-client