$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer File: 029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer (raw, json) Hash identifier: z9oRZgtC6JeJJI2/ZUDSWKB4Q2I37jgP6kS83sXvVys= Subject key identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D8D885A49968F7CAD4A9D69C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Apr 2026 00:45:17 +0000 Certificate not after: Sat 22 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 401581 IP: 23.132.60.0/24 IP: 2602:f741::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:88:5a:49:96:8f:7c:ad:4a:9d:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 19 00:45:17 2026 GMT Not After : Jul 22 00:45:17 2028 GMT Subject: CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e5:96:b4:e6:c5:4b:7d:0d:02:99:1a:6b:b2: ce:7f:29:b3:2a:4a:54:65:94:88:1a:0f:fb:0b:65: 17:d6:66:de:76:20:57:7a:c3:e8:29:db:a6:16:16: 1d:ad:5b:35:65:a8:49:c6:f6:70:46:c1:81:31:f4: 80:f7:77:6d:84:41:dd:b7:0d:bd:6e:90:6e:f2:62: 89:fb:cd:83:da:82:d0:4d:a1:91:40:4c:89:9c:d2: 93:61:5f:b3:e3:e0:42:bb:03:05:ec:c9:f5:8c:a2: 1d:af:09:b3:d4:7d:c3:79:b2:23:5e:a3:ce:22:7b: f9:a2:af:ae:69:0b:9b:2f:8d:ee:d9:74:4e:dc:fb: c0:98:1f:50:62:d7:f5:4b:80:ea:ea:30:95:a0:ef: 67:c9:47:b9:a4:a0:bb:b2:4e:e9:91:b3:d2:45:44: b0:d9:b2:bb:b5:84:dd:35:f1:5e:87:72:93:ca:88: d9:2e:4e:75:0c:1a:27:b5:dd:c9:59:58:12:be:8d: 29:bd:80:4f:1c:c7:d3:4d:68:e5:b8:55:bc:6f:b6: f1:00:7a:25:9f:6d:03:fd:84:d6:c5:58:ec:9b:d7: 51:77:be:ac:be:12:a3:26:60:3f:4d:01:4f:79:fd: 82:8d:ad:9c:07:fd:cc:8d:d1:1d:67:69:1f:5f:90: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.60.0/24 IPv6: 2602:f741::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401581 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:15:8f:4a:79:db:b2:67:83:62:11:74:2f:d3:33:98:62:aa: d0:1c:88:44:1c:0c:4f:32:c1:e4:01:61:17:16:86:26:ad:cc: f9:0c:f8:70:aa:a3:e2:02:c4:a3:b5:10:1e:8f:a7:54:52:1e: 49:7a:67:9b:36:9f:19:8d:e0:16:e9:fb:9f:d1:10:59:b9:0e: a0:64:c3:b9:47:55:28:83:2b:2b:a7:e3:ca:bf:b1:4c:be:db: 38:3a:d8:0e:25:a0:4a:1f:eb:19:8e:52:d6:21:a7:20:dd:0b: 2a:df:fd:b2:42:61:b8:04:df:ad:c3:e0:c0:cc:d1:e2:4d:64: 4a:8e:57:3d:90:2b:d4:9e:fe:20:ea:5e:8b:25:9a:c6:80:5b: 4b:90:03:ca:45:a3:db:d9:29:d7:6f:a2:e5:59:61:45:20:42: 56:f8:b3:93:e6:bc:95:a3:65:0d:3b:2e:79:68:d1:e5:df:89: 1d:52:b8:eb:25:81:84:61:ac:42:c6:4f:97:5b:56:33:7a:8b: e9:bf:de:88:bc:37:79:e8:6b:0a:12:8a:9b:82:38:fb:04:da: 87:56:a2:0b:cb:bf:c6:0c:9e:00:b2:02:57:08:11:99:6e:ff: 67:33:0f:68:df:8a:ca:f7:87:ff:5b:91:f9:b5:58:d2:b3:c5: 60:d8:5f:ae -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2NiFpJlo98rUqdacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxOTAwNDUxN1oXDTI4MDcyMjAwNDUxN1owLzEtMCsGA1UEAxMk MDI5ZGY4YmQtNDFjNS00ZjIyLWE0YmMtZjg0ZjFiYzA0YmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++WWtObFS30NApkaa7LOfymzKkpUZZSIGg/7 C2UX1mbediBXesPoKdumFhYdrVs1ZahJxvZwRsGBMfSA93dthEHdtw29bpBu8mKJ +82D2oLQTaGRQEyJnNKTYV+z4+BCuwMF7Mn1jKIdrwmz1H3DebIjXqPOInv5oq+u aQubL43u2XRO3PvAmB9QYtf1S4Dq6jCVoO9nyUe5pKC7sk7pkbPSRUSw2bK7tYTd NfFeh3KTyojZLk51DBontd3JWVgSvo0pvYBPHMfTTWjluFW8b7bxAHoln20D/YTW xVjsm9dRd76svhKjJmA/TQFPef2Cja2cB/3MjdEdZ2kfX5D24wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIrtKycX1GtBxmomIwiHqNiPkW18MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w MjlkZjhiZC00MWM1LTRmMjItYTRiYy1mODRmMWJjMDRiZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzAyOWRmOGJkLTQxYzUtNGYyMi1h NGJjLWY4NGYxYmMwNGJmYy8wMjlkZjhiZC00MWM1LTRmMjItYTRiYy1mODRmMWJj MDRiZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhDwwDgQCAAIwCAMGBCYC90EAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgrTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6FY9KeduyZ4NiEXQv0zOYYqrQ HIhEHAxPMsHkAWEXFoYmrcz5DPhwqqPiAsSjtRAej6dUUh5JemebNp8ZjeAW6fuf 0RBZuQ6gZMO5R1Uogysrp+PKv7FMvts4OtgOJaBKH+sZjlLWIacg3Qsq3/2yQmG4 BN+tw+DAzNHiTWRKjlc9kCvUnv4g6l6LJZrGgFtLkAPKRaPb2SnXb6LlWWFFIEJW +LOT5ryVo2UNOy55aNHl34kdUrjrJYGEYaxCxk+XW1Yzeovpv96IvDd56GsKEoqb gjj7BNqHVqILy7/GDJ4AsgJXCBGZbv9nMw9o34rK94f/W5H5tVjSs8Vg2F+u -----END CERTIFICATE-----Generated at Wed May 13 01:39:14 2026 by rpki-client