$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924.cer File: 9b2a720b-9aba-4f26-97ea-587d2ab70924.cer (raw, json) Hash identifier: dolTI0vuYiNqXdK6fRsbBSszGFbz/WNlvrf6elNrf6Y= Subject key identifier: AE:90:D9:69:30:87:3A:32:8A:32:F2:B3:15:AF:68:EE:A1:A0:45:F2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584D1F50D1B5B71503291CF8FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/9b2a720b-9aba-4f26-97ea-587d2ab70924.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 13:14:28 +0000 Certificate not after: Mon 12 Jun 2028 13:14:28 +0000 Subordinate resources: AS: 29898 IP: 104.244.232.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:50:d1:b5:b7:15:03:29:1c:f8:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 10 13:14:28 2026 GMT Not After : Jun 12 13:14:28 2028 GMT Subject: CN=9b2a720b-9aba-4f26-97ea-587d2ab70924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:09:a9:9c:25:c4:af:3f:f1:65:e2:44:ab: 56:3f:37:22:27:b0:25:6d:62:b5:fe:e9:85:75:c6: 33:d4:06:b0:f0:e0:9a:62:08:91:48:be:82:12:eb: 62:91:ba:65:eb:cd:90:1d:c9:c4:48:c1:1c:d9:f4: ef:d1:34:1b:e8:bc:11:b2:ec:71:65:f4:ae:67:40: 71:2a:6c:fb:0e:41:47:a7:82:e2:44:14:b2:0b:88: a8:1a:c3:1a:0d:76:a5:81:1d:1a:5b:f0:20:99:fb: 3a:5f:c4:c8:78:96:fc:66:d3:8d:69:b7:01:3f:25: 53:2c:da:85:b1:5d:47:b9:86:ac:60:b5:26:4f:37: e8:4d:b1:56:66:2c:48:37:4f:ca:fd:9a:b8:3c:2f: 9b:04:4a:e5:ed:29:5e:31:e0:4c:b2:86:ea:10:93: 9e:f5:7d:ed:1a:8c:fe:fa:02:e1:d7:33:2a:85:27: f1:7c:34:03:1f:e2:fb:1c:6c:df:8e:69:c1:3e:24: 34:ab:df:4d:61:38:77:44:05:d7:a9:28:70:42:0c: 45:0c:20:15:80:ef:1c:92:6d:a9:bb:81:d2:c9:d0: e1:22:a4:4d:71:03:56:9f:19:32:91:2e:d4:ff:cd: b3:33:1d:0c:03:94:b0:f3:3e:89:a2:2e:20:f4:f5: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:90:D9:69:30:87:3A:32:8A:32:F2:B3:15:AF:68:EE:A1:A0:45:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/9b2a720b-9aba-4f26-97ea-587d2ab70924.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.244.232.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29898 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e6:8b:ed:52:73:85:46:e9:3c:0a:3d:2f:f2:9a:61:f0:5d: 46:16:cc:58:cc:ca:d6:6b:50:43:c0:e8:a9:2c:46:24:79:fb: 71:95:ed:84:0a:a3:b6:1f:c0:3f:47:c2:66:d0:6a:94:8c:df: 1a:ea:3d:17:56:79:b3:60:30:62:21:01:bb:86:f8:b2:57:b4: e2:50:50:87:20:46:46:30:75:26:5b:52:5d:67:85:60:9f:c6: 14:e5:33:37:56:4e:e7:ac:d6:c4:3b:13:0f:39:04:d0:47:8f: f9:f6:e7:d2:e4:69:62:3c:00:58:32:ff:c0:b8:73:39:19:9b: b1:e3:dc:9e:fd:2f:1e:70:4d:11:96:3a:8e:dd:1c:2b:e6:72: f7:30:e0:73:bb:82:7f:7f:17:11:52:85:e9:8a:1b:60:de:a7: d6:8a:49:5a:bc:47:27:a7:5e:b2:76:5a:ff:d4:18:74:df:4f: 21:74:62:19:61:0a:85:0a:98:2d:fd:51:87:fd:92:1d:8e:87: c4:23:25:e4:0d:c5:af:7c:65:17:82:3e:e3:82:15:43:93:ae: f6:85:34:88:2b:05:33:3b:de:c0:f8:4c:3e:fc:9a:ad:06:e9: 08:ee:d2:e1:e6:73:39:34:a3:5f:89:c1:7b:05:70:3e:ba:ec: 24:4b:aa:9b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0fUNG1txUDKRz4/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDMxMDEzMTQyOFoXDTI4MDYxMjEzMTQyOFowLzEtMCsGA1UEAxMk OWIyYTcyMGItOWFiYS00ZjI2LTk3ZWEtNTg3ZDJhYjcwOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll8JqZwlxK8/8WXiRKtWPzciJ7AlbWK1/umF dcYz1Aaw8OCaYgiRSL6CEutikbpl682QHcnESMEc2fTv0TQb6LwRsuxxZfSuZ0Bx Kmz7DkFHp4LiRBSyC4ioGsMaDXalgR0aW/Agmfs6X8TIeJb8ZtONabcBPyVTLNqF sV1HuYasYLUmTzfoTbFWZixIN0/K/Zq4PC+bBErl7SleMeBMsobqEJOe9X3tGoz+ +gLh1zMqhSfxfDQDH+L7HGzfjmnBPiQ0q99NYTh3RAXXqShwQgxFDCAVgO8ckm2p u4HSydDhIqRNcQNWnxkykS7U/82zMx0MA5Sw8z6Joi4g9PUf6wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFK6Q2WkwhzoyijLysxWvaO6hoEXyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 YjJhNzIwYi05YWJhLTRmMjYtOTdlYS01ODdkMmFiNzA5MjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzliMmE3MjBiLTlhYmEtNGYyNi05 N2VhLTU4N2QyYWI3MDkyNC85YjJhNzIwYi05YWJhLTRmMjYtOTdlYS01ODdkMmFi NzA5MjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBANo9OgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dMowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAa+aL7VJzhUbpPAo9L/KaYfBdRhbMWMzK1mtQQ8DoqSxGJHn7 cZXthAqjth/AP0fCZtBqlIzfGuo9F1Z5s2AwYiEBu4b4sle04lBQhyBGRjB1JltS XWeFYJ/GFOUzN1ZO56zWxDsTDzkE0EeP+fbn0uRpYjwAWDL/wLhzORmbsePcnv0v HnBNEZY6jt0cK+Zy9zDgc7uCf38XEVKF6YobYN6n1opJWrxHJ6desnZa/9QYdN9P IXRiGWEKhQqYLf1Rh/2SHY6HxCMl5A3Fr3xlF4I+44IVQ5Ou9oU0iCsFMzvewPhM PvyarQbpCO7S4eZzOTSjX4nBewVwPrrsJEuqmw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:47:58 2026 by rpki-client