$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223.cer File: 98d84ff8-a32d-40d7-840f-429ac8bcf223.cer (raw, json) Hash identifier: iXOg7LDQ3KZgEmkc6KUKXIxNSrKuoIB1bz2R5GekfSw= Subject key identifier: 45:D8:0D:DF:26:8E:4F:EB:1A:DB:7E:84:F4:3C:54:4E:7D:12:D5:97 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D2BD2734937206C022B84EE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/98d84ff8-a32d-40d7-840f-429ac8bcf223.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Mar 2026 00:45:22 +0000 Certificate not after: Sat 17 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 6602 IP: 199.233.15.0/24 IP: 2620:2d:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:d2:73:49:37:20:6c:02:2b:84:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 15 00:45:22 2026 GMT Not After : Jun 17 00:45:22 2028 GMT Subject: CN=98d84ff8-a32d-40d7-840f-429ac8bcf223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:13:cb:24:63:e9:bd:60:e4:cb:19:59:e7: 2e:31:f9:5c:c3:cb:30:7b:99:c8:1b:8d:9d:70:d4: 6e:3d:c7:96:48:d0:3f:31:bd:ef:c6:bb:ee:07:b4: 2a:58:c9:9b:1f:c7:fd:ed:9b:e9:2d:36:e8:cf:9e: 4e:c1:0a:9c:82:6d:40:43:48:9e:70:44:b4:f8:77: b9:6c:d0:56:90:b8:8f:75:2d:4f:30:f5:86:21:bd: 20:6e:5d:fb:d6:4a:dd:db:ac:25:97:c7:d7:0a:65: 24:4f:31:b2:32:a2:5a:b3:22:cd:b5:27:dc:d1:37: 73:0d:ad:18:c6:a5:38:ce:7b:ae:d8:7d:52:ea:93: 2a:58:83:c7:88:a6:be:ba:0d:78:34:29:6b:83:ca: a7:2c:7f:b8:c5:f5:8e:ad:7a:ef:d5:a2:60:05:a4: 22:97:c6:5a:b5:b8:b2:a1:c7:d5:40:f4:46:50:b8: aa:9e:95:3e:1d:bb:ec:7d:03:81:c1:34:16:64:e6: ad:a9:be:b8:d7:4f:7a:bf:61:2d:e7:ae:ad:69:65: 14:1b:07:8d:8b:46:f1:bc:2e:b4:9f:7b:3c:8c:ad: ca:7b:16:6e:eb:85:24:6f:60:05:61:1f:9a:bc:84: fb:00:95:81:97:ab:b9:01:25:7d:d2:79:69:28:6f: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:0D:DF:26:8E:4F:EB:1A:DB:7E:84:F4:3C:54:4E:7D:12:D5:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/98d84ff8-a32d-40d7-840f-429ac8bcf223.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.233.15.0/24 IPv6: 2620:2d:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6602 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:38:92:60:ba:35:e5:41:b8:76:a3:04:89:7c:2a:42:a3:ba: e6:29:57:ad:bc:22:8d:ec:da:96:2e:d3:3c:10:b1:b7:92:3d: 0a:67:ba:53:70:55:4e:4c:94:ea:d6:9a:13:cc:7b:96:41:8c: 87:71:f8:b2:7c:52:2f:74:29:b0:08:10:69:f3:53:13:56:41: 33:a7:e2:cd:95:73:3f:99:05:e2:5e:d8:80:e2:f0:54:63:2d: 90:54:66:14:74:91:d5:c9:36:b4:0a:ed:79:a1:c6:11:11:26: 15:54:ac:84:22:33:df:41:fc:e0:0e:43:3c:69:b7:74:64:cc: 7a:5e:18:b3:06:aa:2e:56:19:a5:29:f2:ad:20:a9:c4:83:c2: 54:0e:ac:49:25:2a:2c:26:2d:dd:17:e5:63:8c:b0:5d:bb:db: 74:63:f3:39:0c:29:c7:71:38:07:ba:54:7d:74:12:78:9e:00: 5f:6e:36:ba:32:ee:36:de:9b:f6:42:8e:d8:13:ec:cc:9d:26: 27:36:b6:27:a4:d3:d0:bd:12:13:20:e4:f1:03:27:ab:51:d8: 97:ba:d4:56:25:73:21:2a:ff:2b:60:fa:d3:1b:dc:42:86:5e: fb:38:ca:a8:87:e0:60:b1:eb:e7:c5:f6:fd:cf:80:5e:e1:89: cc:f2:f1:29 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0r0nNJNyBsAiuE7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMxNTAwNDUyMloXDTI4MDYxNzAwNDUyMlowLzEtMCsGA1UEAxMk OThkODRmZjgtYTMyZC00MGQ3LTg0MGYtNDI5YWM4YmNmMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCYTyyRj6b1g5MsZWecuMflcw8swe5nIG42d cNRuPceWSNA/Mb3vxrvuB7QqWMmbH8f97ZvpLTboz55OwQqcgm1AQ0iecES0+He5 bNBWkLiPdS1PMPWGIb0gbl371krd26wll8fXCmUkTzGyMqJasyLNtSfc0TdzDa0Y xqU4znuu2H1S6pMqWIPHiKa+ug14NClrg8qnLH+4xfWOrXrv1aJgBaQil8Zatbiy ocfVQPRGULiqnpU+HbvsfQOBwTQWZOatqb641096v2Et566taWUUGweNi0bxvC60 n3s8jK3KexZu64Ukb2AFYR+avIT7AJWBl6u5ASV90nlpKG8YOwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEXYDd8mjk/rGtt+hPQ8VE59EtWXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 OGQ4NGZmOC1hMzJkLTQwZDctODQwZi00MjlhYzhiY2YyMjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzk4ZDg0ZmY4LWEzMmQtNDBkNy04 NDBmLTQyOWFjOGJjZjIyMy85OGQ4NGZmOC1hMzJkLTQwZDctODQwZi00MjlhYzhi Y2YyMjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADH6Q8wDwQCAAIwCQMHACYgAC0gADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIZyjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9OJJgujXlQbh2owSJfCpCo7rm KVetvCKN7NqWLtM8ELG3kj0KZ7pTcFVOTJTq1poTzHuWQYyHcfiyfFIvdCmwCBBp 81MTVkEzp+LNlXM/mQXiXtiA4vBUYy2QVGYUdJHVyTa0Cu15ocYRESYVVKyEIjPf QfzgDkM8abd0ZMx6XhizBqouVhmlKfKtIKnEg8JUDqxJJSosJi3dF+VjjLBdu9t0 Y/M5DCnHcTgHulR9dBJ4ngBfbja6Mu423pv2Qo7YE+zMnSYnNrYnpNPQvRITIOTx AyerUdiXutRWJXMhKv8rYPrTG9xChl77OMqoh+Bgsevnxfb9z4Be4YnM8vEp -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:46 2026 by rpki-client