$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer File: 2d88838e-541a-4661-8501-3c7d2eb5849d.cer (raw, json) Hash identifier: YJTvhmDo8Xd+68FcJUW+rn259GRm291iRuORQCfpyrY= Subject key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DB7689E1EE3AED3F2CBD51468 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 May 2026 00:45:17 +0000 Certificate not after: Sun 06 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 13439 AS: 395379 IP: 104.171.194.0/24 IP: 136.228.64.0/19 IP: 143.223.112.0/20 IP: 161.129.192.0/20 IP: 2604:e340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:68:9e:1e:e3:ae:d3:f2:cb:d5:14:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 4 00:45:17 2026 GMT Not After : Aug 6 00:45:17 2028 GMT Subject: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e5:12:21:81:09:a6:8a:21:52:60:52:1a:c2: 5b:99:36:bf:2c:82:52:c3:4e:3f:b9:6b:97:f0:15: 53:85:b8:02:90:60:3f:e8:76:4a:98:31:dc:9c:2e: 8d:8a:3a:52:e7:d9:57:02:9b:24:8d:7a:2c:9c:43: cb:c4:18:0a:dc:49:e2:39:73:c3:57:60:6a:92:bd: 74:c5:ad:e7:af:dc:58:14:73:e7:ac:68:48:b7:a7: 21:9f:3f:92:4f:94:37:c8:ec:52:2f:b1:dc:c6:37: e7:07:0c:62:1e:0c:94:52:b1:cc:c3:db:dc:e3:91: e1:c7:03:bd:20:c5:1a:d7:8b:b7:cf:cb:99:ad:a6: 36:81:e8:51:ad:f7:1f:57:40:55:6c:32:3e:a6:52: 10:5c:e0:2c:20:fd:4a:e2:3f:dc:c6:dc:98:91:bf: 85:1a:ef:f3:68:fb:c3:a9:e4:25:c1:0f:c0:72:86: 95:f3:e9:c2:2b:c6:df:db:bd:45:56:d7:ab:c5:2f: 34:d8:0e:35:af:d4:78:35:88:1c:16:05:61:86:ea: 52:b9:44:09:41:05:68:43:ce:01:7f:d8:37:20:dc: a7:cd:f5:e1:94:c6:e9:e1:a4:17:39:7b:a8:86:64: 4e:74:da:2f:18:0e:70:eb:11:30:9b:37:09:91:b2: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.171.194.0/24 136.228.64.0/19 143.223.112.0/20 161.129.192.0/20 IPv6: 2604:e340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13439 395379 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:36:c5:d9:f3:8c:fe:c7:09:c5:f6:bb:e9:0c:88:84:cc:b8: 80:b9:56:24:19:f8:fd:e6:cc:24:4e:83:e1:1c:43:1d:53:91: 5d:ab:53:96:91:b7:d0:1a:f2:4d:06:b9:85:0b:97:2d:8e:fc: 5a:77:62:e9:93:1b:52:bc:14:93:be:07:bf:b1:81:27:4a:84: 00:b8:0e:2a:a5:61:0c:ab:ef:b6:f4:22:be:23:88:37:70:de: 15:92:19:7c:0c:12:92:d8:0c:ec:b0:b0:2a:0d:51:11:91:4f: 9e:06:96:0a:9c:c1:8d:f1:a1:d5:46:e3:e2:fb:32:ad:3d:1e: 4c:67:e8:06:e6:ab:38:28:71:27:99:a5:27:7e:d1:a8:ae:e0: c0:81:32:73:b8:42:5a:34:bc:d3:a2:27:21:7f:6b:51:53:40: 00:74:c8:42:48:33:23:f9:f2:b1:05:4e:87:3d:d7:81:e9:c7: b0:1f:e9:ef:f4:61:b3:17:e6:76:79:70:f7:44:69:6b:45:53: 0d:77:55:ac:2d:ca:d5:ed:06:e4:f1:66:79:2c:73:a2:0c:c6: ec:f0:b4:86:1d:a9:59:0c:69:35:23:e9:f1:69:f3:d4:dc:c2: 8c:81:a8:1b:59:a9:a8:fd:2d:d6:e2:04:ca:9f:2f:43:ee:3b: 97:71:1c:1b -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWE23aJ4e467T8svVFGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwNDAwNDUxN1oXDTI4MDgwNjAwNDUxN1owLzEtMCsGA1UEAxMk MmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOUSIYEJpoohUmBSGsJbmTa/LIJSw04/uWuX 8BVThbgCkGA/6HZKmDHcnC6NijpS59lXApskjXosnEPLxBgK3EniOXPDV2Bqkr10 xa3nr9xYFHPnrGhIt6chnz+ST5Q3yOxSL7HcxjfnBwxiHgyUUrHMw9vc45HhxwO9 IMUa14u3z8uZraY2gehRrfcfV0BVbDI+plIQXOAsIP1K4j/cxtyYkb+FGu/zaPvD qeQlwQ/AcoaV8+nCK8bf271FVterxS802A41r9R4NYgcFgVhhupSuUQJQQVoQ84B f9g3INynzfXhlMbp4aQXOXuohmROdNovGA5w6xEwmzcJkbIuIQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFE6dczv2D1r2njdGKFMJxHpCSVguMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y ZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJkODg4MzhlLTU0MWEtNDY2MS04 NTAxLTNjN2QyZWI1ODQ5ZC8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmVi NTg0OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBABoq8IDBAWI5EADBASP33ADBAShgcAwDQQCAAIw BwMFACYE40AwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICNH8CAwYIczBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBNNsXZ84z+xwnF9rvpDIiEzLiAuVYkGfj95swkToPhHEMdU5Fdq1OWkbfQGvJN BrmFC5ctjvxad2LpkxtSvBSTvge/sYEnSoQAuA4qpWEMq++29CK+I4g3cN4Vkhl8 DBKS2AzssLAqDVERkU+eBpYKnMGN8aHVRuPi+zKtPR5MZ+gG5qs4KHEnmaUnftGo ruDAgTJzuEJaNLzToichf2tRU0AAdMhCSDMj+fKxBU6HPdeB6cewH+nv9GGzF+Z2 eXD3RGlrRVMNd1WsLcrV7Qbk8WZ5LHOiDMbs8LSGHalZDGk1I+nxafPU3MKMgagb Wamo/S3W4gTKny9D7juXcRwb -----END CERTIFICATE-----Generated at Wed May 13 01:02:01 2026 by rpki-client