$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer File: 37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer (raw, json) Hash identifier: dTkhefLHVbljpslFZlO6Ty21r2mFtjzGQOR5RYa6sr8= Subject key identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DC55E09EA6846347E17A6E380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 09 May 2026 00:45:18 +0000 Certificate not after: Fri 11 Aug 2028 00:45:18 +0000 Subordinate resources: AS: 398862 IP: 23.135.196.0/24 IP: 206.183.159.0/24 IP: 2602:f98e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:5e:09:ea:68:46:34:7e:17:a6:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 9 00:45:18 2026 GMT Not After : Aug 11 00:45:18 2028 GMT Subject: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:33:06:96:98:f7:19:86:53:36:91:5b:43: ab:b1:06:e4:1f:c8:2c:cc:9a:fc:6a:20:e9:6a:ae: b3:ee:80:37:65:61:1c:0e:ec:29:ab:6c:2d:17:74: fb:51:43:0a:bc:f1:0b:fb:12:b7:3f:2d:6a:81:74: 19:85:d0:3c:f2:21:3b:29:7a:ed:58:97:e8:4b:dc: f5:2f:97:75:13:63:c7:37:00:9f:84:bc:f0:6b:34: 95:93:06:28:6b:ec:ac:12:9a:ff:2e:4a:3f:c2:6e: b3:be:9b:bf:8a:1e:9a:6d:e2:54:36:98:d7:68:fd: b8:15:3a:aa:b8:c6:4a:c7:a2:39:fb:e5:70:c2:b7: a1:bb:fb:2c:a2:80:cd:ad:29:53:e3:df:17:5c:4b: ec:12:7a:87:2e:9c:e1:03:e8:e5:81:e4:7a:d3:32: 32:47:ca:bd:50:0c:41:e4:23:3d:19:cc:89:68:79: 0b:63:20:8e:93:69:6e:3b:4e:13:00:d3:39:64:98: 8e:ae:8e:74:66:91:43:e9:9c:3c:3b:4e:da:4d:ec: 34:e1:39:80:5b:35:89:3e:c1:98:36:ef:51:a1:89: d6:40:22:ab:42:1e:e1:4b:8d:e3:27:81:7b:3a:e6: 89:04:76:48:d2:99:76:b4:07:2c:57:79:fb:bf:a6: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.196.0/24 206.183.159.0/24 IPv6: 2602:f98e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398862 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:59:dc:f2:37:68:be:ee:85:e5:05:9f:47:cb:b6:c6:18:72: 0d:ea:57:81:c2:5b:00:44:ff:ae:72:31:f6:64:93:3d:1f:13: 22:17:e5:1b:54:8e:83:11:66:15:b6:b9:82:39:ac:50:ec:4c: 8f:7f:63:bd:e8:25:9b:47:ee:1f:99:a8:cf:e1:4d:e4:e9:ef: cc:c1:89:d9:20:63:73:72:41:92:6b:37:3d:14:10:4e:03:d9: 51:1b:00:2d:5c:51:1c:23:a6:11:10:a3:f1:24:eb:72:49:c8: bb:6a:80:67:a7:1d:f4:5c:89:dc:5a:4f:99:e9:7e:f4:b7:c7: 57:bd:67:8c:2b:3d:ef:cc:52:cd:aa:80:b9:21:59:62:f2:e8: 08:a6:e5:ad:b2:01:ad:90:02:51:65:41:c2:ea:2f:fa:96:d0: 06:8a:30:cf:9b:8e:c7:8c:dd:e5:65:fa:62:f1:04:3f:0c:02: 8e:a1:a1:c6:6b:c1:81:12:51:04:ed:4a:95:ea:45:96:95:ad: 0d:db:a0:e1:02:7f:84:51:ad:81:b4:8e:1f:56:da:1c:2b:d8: 95:42:d3:bb:12:83:ab:b2:ab:a1:33:96:a4:02:6e:83:53:e3: 1c:87:d4:01:c4:2b:39:b3:12:a1:7d:30:52:65:68:7d:4c:f1: 24:a7:12:61 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE3FXgnqaEY0fhem44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwOTAwNDUxOFoXDTI4MDgxMTAwNDUxOFowLzEtMCsGA1UEAxMk MzdkZjdiNmItNGIwYi00OWFlLWI2NzQtYTVhODhkOTI4MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZgzBpaY9xmGUzaRW0OrsQbkH8gszJr8aiDp aq6z7oA3ZWEcDuwpq2wtF3T7UUMKvPEL+xK3Py1qgXQZhdA88iE7KXrtWJfoS9z1 L5d1E2PHNwCfhLzwazSVkwYoa+ysEpr/Lko/wm6zvpu/ih6abeJUNpjXaP24FTqq uMZKx6I5++Vwwrehu/ssooDNrSlT498XXEvsEnqHLpzhA+jlgeR60zIyR8q9UAxB 5CM9GcyJaHkLYyCOk2luO04TANM5ZJiOro50ZpFD6Zw8O07aTew04TmAWzWJPsGY Nu9RoYnWQCKrQh7hS43jJ4F7OuaJBHZI0pl2tAcsV3n7v6bpaQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMKHR8VWv9pZMwgrthuKFGsV8yPnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z N2RmN2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4OGQ5MjgwZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzM3ZGY3YjZiLTRiMGItNDlhZS1i Njc0LWE1YTg4ZDkyODBmNC8zN2RmN2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4OGQ5 MjgwZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXh8QDBADOt58wDgQCAAIwCAMGACYC+Y4AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbWdzyN2i+7oXlBZ9H y7bGGHIN6leBwlsARP+ucjH2ZJM9HxMiF+UbVI6DEWYVtrmCOaxQ7EyPf2O96CWb R+4fmajP4U3k6e/MwYnZIGNzckGSazc9FBBOA9lRGwAtXFEcI6YREKPxJOtySci7 aoBnpx30XIncWk+Z6X70t8dXvWeMKz3vzFLNqoC5IVli8ugIpuWtsgGtkAJRZUHC 6i/6ltAGijDPm47HjN3lZfpi8QQ/DAKOoaHGa8GBElEE7UqV6kWWla0N26DhAn+E Ua2BtI4fVtocK9iVQtO7EoOrsquhM5akAm6DU+Mch9QBxCs5sxKhfTBSZWh9TPEk pxJh -----END CERTIFICATE-----Generated at Wed May 13 00:24:10 2026 by rpki-client