$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer File: e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer (raw, json) Hash identifier: BwZB4FyaoxAedN97dtfpa4JU9S3+T31HZEX35gfoByc= Subject key identifier: B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DF0A3A3E6B05BA31F276A1100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 May 2026 12:45:17 +0000 Certificate not after: Sat 26 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 23.134.28.0/24 IP: 2602:f6f7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:a3:a3:e6:b0:5b:a3:1f:27:6a:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 24 12:45:17 2026 GMT Not After : Aug 26 12:45:17 2028 GMT Subject: CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:20:02:ab:69:34:7d:0d:96:c6:e7:20:cd:f9: 1b:79:5c:73:5b:86:27:d8:d7:5f:65:c1:da:90:b5: be:c5:7b:07:d2:81:62:10:4f:b9:c3:da:f6:37:cc: cc:06:60:3c:27:f3:3b:21:97:da:40:ac:a3:7e:86: 24:a3:15:37:29:9e:e6:0c:a5:db:71:0a:5c:43:72: 80:f9:41:8d:8a:fb:49:59:72:d9:e4:15:41:5f:59: 18:58:4e:36:e2:51:68:1f:d7:52:a3:da:1e:8b:91: 7b:11:a1:28:3c:fd:60:2e:3b:84:a1:8e:84:55:83: 3c:90:46:73:46:1e:84:1e:c9:62:cc:2c:86:1a:7f: a0:ac:34:26:07:ee:c1:b3:d3:38:f9:2a:a0:6a:d4: 6d:fa:90:f9:38:aa:a3:f3:ab:60:85:59:91:13:4b: 19:b9:bc:68:27:65:49:d4:d8:b8:84:52:c5:c2:2f: 65:15:64:ef:84:b2:6c:be:1a:99:0f:45:eb:72:9d: 64:1c:0a:f5:c5:f5:ee:b3:a7:63:54:bf:2d:2f:da: 57:b2:9e:69:0c:e0:9b:d5:34:6d:58:39:2b:f3:8a: ff:64:e0:ca:a7:7e:5d:8b:96:bb:b1:54:a1:36:f5: 3f:25:ce:e5:4d:a7:29:27:e7:9d:46:df:65:80:b8: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.28.0/24 IPv6: 2602:f6f7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2f:de:9e:73:4a:1e:07:14:df:3f:33:a8:3b:ad:e3:9f:6f: e7:50:51:1a:c0:57:cd:fa:94:b2:33:da:69:00:fb:be:2d:e4: 79:a9:55:0c:78:93:ec:84:14:65:1b:e0:53:ef:45:3b:3f:e6: 3a:f8:71:30:07:1f:be:31:d4:dd:da:63:73:e3:ba:ec:2c:67: 2c:45:f8:b5:2d:47:43:e3:49:cc:cc:2f:4e:ed:9d:4a:a0:de: 16:35:63:01:9b:6e:e8:2a:92:d1:12:d3:9e:a2:76:8c:53:60: 46:f2:d3:94:6c:68:54:84:35:df:fb:a8:ec:6d:7d:d0:ec:7b: 88:1c:e2:50:ff:74:99:03:cf:71:8b:49:83:61:65:a4:0e:a2: 07:b5:2a:b9:75:37:e2:18:2d:e2:df:e7:1c:ff:56:a1:12:eb: 39:ff:5d:78:b3:e8:36:40:31:37:12:68:46:da:1f:ab:f1:a6: 50:02:80:b2:02:cf:c8:43:a0:29:af:4f:bd:51:17:4d:63:a3: 2a:b1:c5:1d:d2:d4:b6:4c:ab:a6:83:dd:cf:db:ad:6d:a1:f7: 21:5c:c4:a0:67:09:e2:29:f9:2e:a6:d7:2a:dc:c4:e4:d9:3a: 24:d5:96:ba:c8:8f:17:13:0e:3d:6e:ca:b6:1c:1c:19:b9:5e: c7:68:77:c1 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3wo6PmsFujHydqEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyNDEyNDUxN1oXDTI4MDgyNjEyNDUxN1owLzEtMCsGA1UEAxMk ZTZhNTM4YWUtZmEyNS00YTM4LWIxZjEtMzIwZTJlOWYxNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CACq2k0fQ2WxucgzfkbeVxzW4Yn2NdfZcHa kLW+xXsH0oFiEE+5w9r2N8zMBmA8J/M7IZfaQKyjfoYkoxU3KZ7mDKXbcQpcQ3KA +UGNivtJWXLZ5BVBX1kYWE424lFoH9dSo9oei5F7EaEoPP1gLjuEoY6EVYM8kEZz Rh6EHslizCyGGn+grDQmB+7Bs9M4+SqgatRt+pD5OKqj86tghVmRE0sZubxoJ2VJ 1Ni4hFLFwi9lFWTvhLJsvhqZD0Xrcp1kHAr1xfXus6djVL8tL9pXsp5pDOCb1TRt WDkr84r/ZODKp35di5a7sVShNvU/Jc7lTacpJ+edRt9lgLhysQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLcsjMiedc7XUx5spZHrcquBLAq6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l NmE1MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBlMmU5ZjE2ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U2YTUzOGFlLWZhMjUtNGEzOC1i MWYxLTMyMGUyZTlmMTZlZi9lNmE1MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBlMmU5 ZjE2ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhhwwDgQCAAIwCAMGACYC9vcAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AC0v3p5zSh4HFN8/M6g7reOfb+dQURrAV836lLIz2mkA+74t5HmpVQx4k+yEFGUb 4FPvRTs/5jr4cTAHH74x1N3aY3PjuuwsZyxF+LUtR0PjSczML07tnUqg3hY1YwGb bugqktES056idoxTYEby05RsaFSENd/7qOxtfdDse4gc4lD/dJkDz3GLSYNhZaQO oge1Krl1N+IYLeLf5xz/VqES6zn/XXiz6DZAMTcSaEbaH6vxplACgLICz8hDoCmv T71RF01joyqxxR3S1LZMq6aD3c/brW2h9yFcxKBnCeIp+S6m1yrcxOTZOiTVlrrI jxcTDj1uyrYcHBm5Xsdod8E= -----END CERTIFICATE-----Generated at Mon May 25 04:26:20 2026 by rpki-client