$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d.cer File: 1ec223ee-1e0d-426c-9970-c00985634a4d.cer (raw, json) Hash identifier: SK2QptxdZoPVbRdwTzEXmxA/UneGNkCOH17+SnfCQ/Q= Subject key identifier: 62:6C:A7:99:7F:B8:32:3B:58:22:5C:7E:37:93:AB:B0:DC:2B:B3:2A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D438D4675368F0021915ED7A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/1ec223ee-1e0d-426c-9970-c00985634a4d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 12:45:22 +0000 Certificate not after: Sun 25 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 205.166.50.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:8d:46:75:36:8f:00:21:91:5e:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 23 12:45:22 2026 GMT Not After : Jun 25 12:45:22 2028 GMT Subject: CN=1ec223ee-1e0d-426c-9970-c00985634a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:d5:36:54:85:aa:66:b1:8b:9f:0c:d6:1c: 5a:cb:63:f5:de:81:a6:b4:7f:cc:17:ad:a2:bf:92: 05:a7:8e:3e:82:40:20:f6:4e:13:39:0b:c2:26:9f: 4f:79:1a:bd:84:d0:9c:36:92:09:ec:9e:09:04:76: c3:f4:69:c5:f8:22:c9:61:e7:d8:ab:ed:bf:bb:ee: 0a:88:c6:e1:c3:aa:d3:36:6d:99:b4:29:d4:41:03: b8:dc:d2:88:30:b6:8b:8e:e6:47:ba:2a:e0:0d:1f: 11:35:c3:2b:c0:5c:e5:a5:17:ca:dc:07:00:b2:14: 2d:8b:9d:5f:dd:29:56:75:42:65:8c:d3:54:26:92: c0:2d:95:7b:0e:ee:c8:73:cd:cf:1b:1d:21:26:47: 7b:28:27:9e:08:15:b7:40:c5:56:d0:ae:6e:1a:fd: 39:01:13:bd:a2:25:a4:e2:c1:bf:07:f7:c7:3b:2a: e1:07:b5:84:01:f7:a6:2d:c0:b3:80:29:90:a2:b4: 71:bf:8f:ea:fc:22:a3:91:5a:e8:99:e8:26:00:8e: 00:d6:ff:9d:ed:ea:9a:48:ed:0f:63:c8:b8:7b:da: 3f:90:96:9a:c5:06:26:1b:90:ee:0d:90:17:d8:cd: 91:47:3b:f9:13:ff:16:db:8c:1d:b5:6e:9a:37:80: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6C:A7:99:7F:B8:32:3B:58:22:5C:7E:37:93:AB:B0:DC:2B:B3:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/1ec223ee-1e0d-426c-9970-c00985634a4d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 205.166.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:78:c5:90:4d:b7:a1:d0:09:c5:0d:6c:a6:3d:46:95:a4:88: e3:95:be:27:c6:48:91:e9:fb:d6:5d:ff:57:14:01:0b:3a:c2: 4a:ef:75:e8:d2:26:4f:4b:1e:1b:d5:0c:e7:34:0f:af:30:14: 90:de:04:08:38:00:18:7f:3c:31:53:03:10:62:d0:fd:f1:f6: 92:67:19:19:a8:56:69:db:85:f3:be:bc:91:b1:f1:80:3b:e5: 7b:46:13:4c:d2:41:90:68:e5:11:fc:17:56:99:c0:4e:68:f1: cc:3c:aa:d0:de:1a:ae:35:58:0b:69:80:4c:71:96:94:0d:0f: f8:5d:a6:b3:bf:97:09:3a:a5:9b:d2:5a:f1:b9:cd:cf:38:7a: 1f:46:8c:40:6f:a3:63:08:49:78:01:aa:2c:ce:2f:79:1b:7e: d4:ca:09:1c:f3:d0:f5:fe:a4:db:99:10:ac:65:b2:27:62:d6: c4:cd:ef:5a:d5:69:fb:e0:67:07:38:46:15:4b:6f:b7:00:9c: 1b:8c:58:c0:7c:8b:f2:b7:9f:54:b0:e0:c6:ef:00:a5:1d:9c: 8d:9b:70:25:ca:0a:53:f7:29:98:b5:a3:ce:8e:fb:5d:c2:98: 9c:52:3c:a8:e5:30:fb:c3:79:c5:a7:64:35:66:1c:56:9e:0a: f4:44:76:0a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1DjUZ1No8AIZFe16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMzEyNDUyMloXDTI4MDYyNTEyNDUyMlowLzEtMCsGA1UEAxMk MWVjMjIzZWUtMWUwZC00MjZjLTk5NzAtYzAwOTg1NjM0YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NDVNlSFqmaxi58M1hxay2P13oGmtH/MF62i v5IFp44+gkAg9k4TOQvCJp9PeRq9hNCcNpIJ7J4JBHbD9GnF+CLJYefYq+2/u+4K iMbhw6rTNm2ZtCnUQQO43NKIMLaLjuZHuirgDR8RNcMrwFzlpRfK3AcAshQti51f 3SlWdUJljNNUJpLALZV7Du7Ic83PGx0hJkd7KCeeCBW3QMVW0K5uGv05ARO9oiWk 4sG/B/fHOyrhB7WEAfemLcCzgCmQorRxv4/q/CKjkVromegmAI4A1v+d7eqaSO0P Y8i4e9o/kJaaxQYmG5DuDZAX2M2RRzv5E/8W24wdtW6aN4CwKwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGJsp5l/uDI7WCJcfjeTq7DcK7MqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x ZWMyMjNlZS0xZTBkLTQyNmMtOTk3MC1jMDA5ODU2MzRhNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFlYzIyM2VlLTFlMGQtNDI2Yy05 OTcwLWMwMDk4NTYzNGE0ZC8xZWMyMjNlZS0xZTBkLTQyNmMtOTk3MC1jMDA5ODU2 MzRhNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADNpjIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlHjFkE23odAJxQ1spj1G laSI45W+J8ZIken71l3/VxQBCzrCSu916NImT0seG9UM5zQPrzAUkN4ECDgAGH88 MVMDEGLQ/fH2kmcZGahWaduF8768kbHxgDvle0YTTNJBkGjlEfwXVpnATmjxzDyq 0N4arjVYC2mATHGWlA0P+F2ms7+XCTqlm9Ja8bnNzzh6H0aMQG+jYwhJeAGqLM4v eRt+1MoJHPPQ9f6k25kQrGWyJ2LWxM3vWtVp++BnBzhGFUtvtwCcG4xYwHyL8ref VLDgxu8ApR2cjZtwJcoKU/cpmLWjzo77XcKYnFI8qOUw+8N5xadkNWYcVp4K9ER2 Cg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:18:13 2026 by rpki-client