$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer File: 3194b2e8-7001-4efa-9998-f4eded0d24d2.cer (raw, json) Hash identifier: AP1lqGMbtPN45hrJbhzWrUqiL7ikKgixOjLtaDs6rzY= Subject key identifier: DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D186571E511741B4E328F94C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Mar 2026 01:45:22 +0000 Certificate not after: Sat 10 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 399081 IP: 104.151.144.0 -- 104.151.175.255 IP: 2606:ce40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:65:71:e5:11:74:1b:4e:32:8f:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 8 01:45:22 2026 GMT Not After : Jun 10 00:45:22 2028 GMT Subject: CN=3194b2e8-7001-4efa-9998-f4eded0d24d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:37:87:0d:3d:7b:d2:e5:9f:d1:8a:62:c1: fb:eb:4f:75:30:2c:cf:54:ef:93:2c:f6:c3:7e:98: b3:a1:87:17:41:ef:60:a9:66:ad:75:27:d9:f8:b4: ef:a9:67:27:09:18:ea:63:9b:4c:f8:16:6c:b6:12: dc:5d:ee:c5:91:69:66:d8:b9:30:1b:9a:6b:06:3b: 95:d3:48:b6:9b:48:b5:d4:70:cb:c6:50:df:f1:27: f2:ff:66:3c:0a:5b:ea:2e:a0:4d:e6:ac:d1:44:6b: a9:d0:45:1b:7e:c5:f8:79:ec:9c:2f:79:b3:16:9f: f2:87:7a:1a:12:69:95:06:c9:16:8d:42:36:a9:28: a7:a1:42:46:36:88:f3:ab:20:c0:6a:7e:0c:c8:35: 5e:a5:34:24:36:dc:7f:42:42:da:06:04:35:a2:b9: f7:39:c8:f2:b1:38:d6:bb:cc:68:ad:de:6f:c1:bc: 60:86:85:5f:da:94:24:0c:e5:c0:15:33:b8:88:b1: 2f:4d:76:43:1f:21:14:76:90:f3:cc:fe:37:9f:27: 28:44:12:9f:e9:8c:37:b2:ab:b8:ba:9c:ef:5d:22: 88:0f:78:00:60:d3:e4:9c:d0:95:fb:80:fb:16:07: ab:28:1f:cf:a5:88:0b:87:1d:c0:42:1a:37:21:91: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.151.144.0-104.151.175.255 IPv6: 2606:ce40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399081 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ea:90:1a:4d:aa:60:93:12:8a:3c:fc:fb:c7:a0:62:d9:4d: 04:4e:76:57:fa:2b:75:8c:5a:1e:3f:7f:03:90:ae:28:16:18: 9a:5d:24:53:54:66:79:96:43:bd:0e:21:08:f1:de:e3:aa:69: 8f:98:cb:24:04:ea:92:b7:cf:f4:7f:ab:d5:96:d0:e1:ac:cb: 83:cb:7a:46:99:86:6b:88:5e:b9:b4:df:3d:dc:ec:a8:34:85: 54:da:2b:25:11:ee:6c:24:37:1b:d2:bc:f3:3a:4d:ab:23:37: 71:e9:b9:1d:74:6d:43:d7:86:31:2a:cd:ab:cc:ab:a5:00:bf: fd:93:c2:78:de:de:3d:d0:1e:91:7d:cd:ea:7d:eb:f5:64:6e: e6:f0:a3:1e:ec:bb:6d:fa:99:63:45:7f:54:4e:6d:51:c7:58: 45:22:1e:2e:a1:eb:e0:37:90:5e:98:9c:63:70:c0:ed:70:f5: 13:50:2a:ad:50:d7:35:43:c6:c0:da:35:70:7e:63:1d:a9:7c: 88:26:ef:0a:d6:a5:b4:76:fe:d5:ca:d3:64:f1:cf:2e:b4:01: d2:76:10:df:e8:0e:2d:b2:48:39:22:44:aa:44:00:f4:06:2f: 76:9d:c9:02:33:09:c0:95:c5:6d:bf:26:ef:80:33:a3:61:f1: 5a:d0:ba:3d -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE0YZXHlEXQbTjKPlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwODAxNDUyMloXDTI4MDYxMDAwNDUyMlowLzEtMCsGA1UEAxMk MzE5NGIyZTgtNzAwMS00ZWZhLTk5OTgtZjRlZGVkMGQyNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH03hw09e9Lln9GKYsH76091MCzPVO+TLPbD fpizoYcXQe9gqWatdSfZ+LTvqWcnCRjqY5tM+BZsthLcXe7FkWlm2LkwG5prBjuV 00i2m0i11HDLxlDf8Sfy/2Y8ClvqLqBN5qzRRGup0EUbfsX4eeycL3mzFp/yh3oa EmmVBskWjUI2qSinoUJGNojzqyDAan4MyDVepTQkNtx/QkLaBgQ1orn3OcjysTjW u8xord5vwbxghoVf2pQkDOXAFTO4iLEvTXZDHyEUdpDzzP43nycoRBKf6Yw3squ4 upzvXSKID3gAYNPknNCV+4D7FgerKB/PpYgLhx3AQho3IZEc1wIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFNreLcVebQ8ZMgIquA5o0fvsb4nsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z MTk0YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVkZWQwZDI0ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMxOTRiMmU4LTcwMDEtNGVmYS05 OTk4LWY0ZWRlZDBkMjRkMi8zMTk0YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVkZWQw ZDI0ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBQEAgABMA4wDAMEBGiXkAMEBGiXoDANBAIAAjAHAwUAJgbOQDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGFukwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa+qQGk2qYJMSijz8 +8egYtlNBE52V/ordYxaHj9/A5CuKBYYml0kU1RmeZZDvQ4hCPHe46ppj5jLJATq krfP9H+r1ZbQ4azLg8t6RpmGa4heubTfPdzsqDSFVNorJRHubCQ3G9K88zpNqyM3 cem5HXRtQ9eGMSrNq8yrpQC//ZPCeN7ePdAekX3N6n3r9WRu5vCjHuy7bfqZY0V/ VE5tUcdYRSIeLqHr4DeQXpicY3DA7XD1E1AqrVDXNUPGwNo1cH5jHal8iCbvCtal tHb+1crTZPHPLrQB0nYQ3+gOLbJIOSJEqkQA9AYvdp3JAjMJwJXFbb8m74Azo2Hx WtC6PQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:13:18 2026 by rpki-client