$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer File: 29540dcd-69da-45be-b57c-8c4aefcf66fe.cer (raw, json) Hash identifier: DvgOgo+9QnmQYrMBH+Uhsq1M6legKC/yinQ+aSYwSt4= Subject key identifier: 3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DADA3387A55C327808D19BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 12:45:17 +0000 Certificate not after: Wed 02 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 23.132.220.0/24 IP: 2602:f720::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:a3:38:7a:55:c3:27:80:8d:19:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 30 12:45:17 2026 GMT Not After : Aug 2 12:45:17 2028 GMT Subject: CN=29540dcd-69da-45be-b57c-8c4aefcf66fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:73:ec:ae:b1:71:cd:d0:99:da:a1:f1:b9: 73:58:c0:99:bd:1b:cd:f4:b5:25:48:a3:48:30:5c: 50:b8:0b:ee:6f:3b:98:dc:85:dc:dd:e4:13:88:4e: 27:3b:0e:2a:55:a6:2e:62:aa:20:19:82:a1:d4:c6: 84:35:21:cd:10:82:5a:1d:90:ea:e2:d9:d7:5e:08: af:66:a8:f8:ea:c1:59:2c:f2:91:01:7a:f4:12:65: 4c:d1:12:d6:00:90:c3:aa:17:76:c7:0e:41:a4:3a: b1:6f:7d:18:8c:e5:08:b2:81:8d:d5:23:c2:b3:4b: 52:cc:4e:d9:be:ca:62:96:c5:5e:e3:bf:b5:44:8f: 95:25:d7:8b:7b:15:03:58:94:42:48:9e:42:16:2d: c6:0a:c3:91:23:6f:b2:33:87:0b:ff:e3:34:2a:9f: 67:ac:be:02:ba:fa:86:2b:32:f2:06:5b:8f:ae:9f: 6b:40:34:2c:ca:92:51:37:77:1d:28:ff:2e:80:9e: 48:95:ff:0b:a0:32:28:85:a6:a3:26:0c:fc:82:c4: 70:68:ea:b5:49:6b:8b:68:e1:f5:42:d2:3f:dd:90: e9:39:72:64:73:b8:37:65:0b:30:34:25:7b:56:03: 5e:e6:24:65:a9:f2:2e:6a:28:08:d1:2e:23:d5:40: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.220.0/24 IPv6: 2602:f720::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a7:0f:f3:4f:de:d1:5b:2d:70:3a:89:5a:62:44:ed:b9:c2: b5:3a:4d:5b:83:69:2b:99:fb:e6:25:6c:45:59:58:4c:d4:f7: 72:fc:cb:85:b3:12:eb:1b:22:0e:12:7d:a1:78:81:f2:d2:52: df:bb:50:15:eb:bb:83:23:32:ae:a6:ae:ee:d7:2d:40:1d:e3: 7c:91:8e:69:5e:63:49:d6:b3:c7:e2:3e:b2:09:6a:c3:09:15: 00:70:9f:6a:25:25:dd:7c:91:8f:0b:48:f7:30:8a:db:e3:f4: fa:d0:e4:07:e3:f4:50:ae:f4:6a:59:6e:04:61:8f:0a:51:e3: 15:af:85:d8:20:8e:11:97:63:06:be:d2:77:ba:0e:23:99:a5: ea:ab:61:4e:ab:19:b0:05:6b:1c:7a:59:1d:1e:e6:67:41:11: a9:04:b3:f1:f5:0f:46:af:0b:8a:f4:1c:9f:e3:e6:9c:d8:52: 7a:48:32:51:2b:3e:b7:f5:3d:c3:e6:fc:14:28:31:09:4c:b0: b2:0f:05:11:03:89:80:57:7d:14:a9:b4:b8:60:3d:45:2a:ac: 47:2f:aa:5f:56:5d:49:26:cc:c4:2f:cf:6e:51:b8:17:f7:6b: 18:92:cc:4d:90:d9:d7:bd:29:69:e2:1f:ea:c3:a7:35:bc:56: f1:f1:4f:17 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE2tozh6VcMngI0ZvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQzMDEyNDUxN1oXDTI4MDgwMjEyNDUxN1owLzEtMCsGA1UEAxMk Mjk1NDBkY2QtNjlkYS00NWJlLWI1N2MtOGM0YWVmY2Y2NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM1z7K6xcc3Qmdqh8blzWMCZvRvN9LUlSKNI MFxQuAvubzuY3IXc3eQTiE4nOw4qVaYuYqogGYKh1MaENSHNEIJaHZDq4tnXXgiv Zqj46sFZLPKRAXr0EmVM0RLWAJDDqhd2xw5BpDqxb30YjOUIsoGN1SPCs0tSzE7Z vspilsVe47+1RI+VJdeLexUDWJRCSJ5CFi3GCsORI2+yM4cL/+M0Kp9nrL4CuvqG KzLyBluPrp9rQDQsypJRN3cdKP8ugJ5Ilf8LoDIohaajJgz8gsRwaOq1SWuLaOH1 QtI/3ZDpOXJkc7g3ZQswNCV7VgNe5iRlqfIuaigI0S4j1UBmQwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDu8odGBCC0HKPXzXsX7h6rvAHqYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y OTU0MGRjZC02OWRhLTQ1YmUtYjU3Yy04YzRhZWZjZjY2ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI5NTQwZGNkLTY5ZGEtNDViZS1i NTdjLThjNGFlZmNmNjZmZS8yOTU0MGRjZC02OWRhLTQ1YmUtYjU3Yy04YzRhZWZj ZjY2ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhNwwDgQCAAIwCAMGACYC9yAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABunD/NP3tFbLXA6iVpiRO25wrU6TVuDaSuZ++YlbEVZWEzU93L8y4WzEusbIg4S faF4gfLSUt+7UBXru4MjMq6mru7XLUAd43yRjmleY0nWs8fiPrIJasMJFQBwn2ol Jd18kY8LSPcwitvj9PrQ5Afj9FCu9GpZbgRhjwpR4xWvhdggjhGXYwa+0ne6DiOZ peqrYU6rGbAFaxx6WR0e5mdBEakEs/H1D0avC4r0HJ/j5pzYUnpIMlErPrf1PcPm /BQoMQlMsLIPBREDiYBXfRSptLhgPUUqrEcvql9WXUkmzMQvz25RuBf3axiSzE2Q 2de9KWniH+rDpzW8VvHxTxc= -----END CERTIFICATE-----Generated at Tue May 12 22:09:11 2026 by rpki-client