$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer File: f2560405-675d-4c58-8230-db678dbdf9bb.cer (raw, json) Hash identifier: HH8NnrQarM7y+py6MVSD0ZPNb6ZLpEJQ8btAH4I6oys= Subject key identifier: A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584EC31CD2F5FC5755807EFC1A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Aug 2026 22:09:13 +0000 Certificate not after: Wed 16 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 22348 IP: 140.232.64.0/23 IP: 2602:f6f9::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:1c:d2:f5:fc:57:55:80:7e:fc:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Aug 7 22:09:13 2026 GMT Not After : Aug 16 00:45:17 2028 GMT Subject: CN=f2560405-675d-4c58-8230-db678dbdf9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:79:63:dd:9c:90:9e:d3:ff:8f:ca:d5:ce: 79:01:51:ed:68:a5:3a:1d:e6:cd:39:66:7a:a8:9b: c6:07:b5:be:b6:f4:fb:1b:c8:18:3e:b2:61:ef:bc: d6:69:48:3c:64:0a:36:f5:2b:10:a6:ce:b1:ed:fe: 5b:b3:9a:f0:bf:70:fa:90:f1:9b:c5:8d:4c:69:62: bb:28:70:a8:18:d1:ef:d7:57:ba:a2:98:fd:91:3b: 92:96:a4:99:29:2c:1a:52:21:0d:f6:1a:d9:7d:72: ad:69:9e:24:c2:d3:aa:ff:d0:4d:a3:c8:95:a5:78: 5c:dc:ed:21:5c:3f:6e:35:af:10:bb:8a:e4:75:c0: 22:cc:50:23:46:fe:bb:0a:44:18:65:9c:1d:11:d8: 62:ea:af:d1:65:9b:c1:5b:c6:e5:eb:e4:04:73:5c: 18:d9:79:d7:c3:b3:60:bb:f9:06:c0:74:ed:40:2f: 22:9e:86:7e:66:f7:57:92:f4:88:2d:16:bb:9f:a9: 2a:ba:fc:dc:50:43:55:51:ea:0b:1f:58:cd:41:48: 44:6c:d7:93:83:a1:de:13:c4:cb:1c:10:8c:b1:b5: c0:6c:ec:7d:82:92:e2:91:3d:07:e4:35:1b:ca:8e: 80:cc:a4:42:ad:34:7e:38:3b:b0:9a:89:be:95:87: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 140.232.64.0/23 IPv6: 2602:f6f9::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22348 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f4:ac:b6:2d:cd:aa:6e:fe:5d:56:be:b3:5b:4d:4d:20:4b: 5d:58:9f:78:a5:bc:3b:8e:3a:9f:f5:f0:33:4d:00:b4:1b:d6: 56:ad:a2:f2:21:50:0b:03:7e:40:0c:7c:e1:70:91:3a:3a:c9: 4e:bb:2e:b1:45:bc:43:8e:ff:35:78:f5:2f:2a:54:e7:ab:e7: 6c:74:ff:ed:ba:1b:93:52:b2:30:a8:29:5e:a1:f2:13:b5:c3: 93:e5:04:a9:04:b2:f2:77:8e:82:7c:b0:b1:c9:8d:86:72:52: f1:7a:0b:be:80:c2:ec:bd:6c:e0:8a:cb:7d:c2:95:e1:75:73: 5a:2d:48:39:f5:14:b3:72:67:f7:96:70:d1:60:d5:dc:3d:1a: 83:0f:25:9e:73:68:bc:38:04:b7:3f:a6:48:ef:ec:55:95:2b: ac:8c:ce:88:b6:6e:3a:9a:6b:01:83:36:c9:4e:1f:66:c8:0d: 0f:ca:af:36:7e:eb:eb:0d:4f:6f:5f:c4:d3:2d:93:b3:22:85: 55:35:fb:12:96:ab:d8:a6:c7:ae:37:04:0c:e3:3d:1d:2c:92: df:9f:ec:e6:1a:75:93:45:ef:71:1b:68:6e:42:3f:1d:29:79: 3a:d6:54:5b:0f:4f:dc:5a:43:a1:5a:4b:02:a8:c1:27:94:5a: bb:24:9f:52 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE7DHNL1/FdVgH78GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDgwNzIyMDkxM1oXDTI4MDgxNjAwNDUxN1owLzEtMCsGA1UEAxMk ZjI1NjA0MDUtNjc1ZC00YzU4LTgyMzAtZGI2NzhkYmRmOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys55Y92ckJ7T/4/K1c55AVHtaKU6HebNOWZ6 qJvGB7W+tvT7G8gYPrJh77zWaUg8ZAo29SsQps6x7f5bs5rwv3D6kPGbxY1MaWK7 KHCoGNHv11e6opj9kTuSlqSZKSwaUiEN9hrZfXKtaZ4kwtOq/9BNo8iVpXhc3O0h XD9uNa8Qu4rkdcAizFAjRv67CkQYZZwdEdhi6q/RZZvBW8bl6+QEc1wY2XnXw7Ng u/kGwHTtQC8inoZ+ZvdXkvSILRa7n6kquvzcUENVUeoLH1jNQUhEbNeTg6HeE8TL HBCMsbXAbOx9gpLikT0H5DUbyo6AzKRCrTR+ODuwmom+lYfvgwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKgzRbosz8uMNAVojzYtG0Z1ODzbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m MjU2MDQwNS02NzVkLTRjNTgtODIzMC1kYjY3OGRiZGY5YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2YyNTYwNDA1LTY3NWQtNGM1OC04 MjMwLWRiNjc4ZGJkZjliYi9mMjU2MDQwNS02NzVkLTRjNTgtODIzMC1kYjY3OGRi ZGY5YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGM6EAwDgQCAAIwCAMGBCYC9vkAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAldMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC30rLYtzapu/l1WvrNbTU0gS11Y n3ilvDuOOp/18DNNALQb1latovIhUAsDfkAMfOFwkTo6yU67LrFFvEOO/zV49S8q VOer52x0/+26G5NSsjCoKV6h8hO1w5PlBKkEsvJ3joJ8sLHJjYZyUvF6C76Awuy9 bOCKy33CleF1c1otSDn1FLNyZ/eWcNFg1dw9GoMPJZ5zaLw4BLc/pkjv7FWVK6yM zoi2bjqaawGDNslOH2bIDQ/KrzZ+6+sNT29fxNMtk7MihVU1+xKWq9imx643BAzj PR0skt+f7OYadZNF73EbaG5CPx0peTrWVFsPT9xaQ6FaSwKowSeUWrskn1I= -----END CERTIFICATE-----Generated at Tue Aug 25 08:00:58 2026 by rpki-client