$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer File: 3e9fb25a-438f-4e1d-a136-5c878d065c24.cer (raw, json) Hash identifier: s+BzJAEtLmOA9s2SFYNSOdKXuuS7jUAB2FNNu0qVj6E= Subject key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D905309350AAC4E2CA0DDC600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 00:45:17 +0000 Certificate not after: Sun 23 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 29765 IP: 162.217.104.0/21 IP: 192.104.0.0/24 IP: 199.80.28.0/22 IP: 204.15.96.0/22 IP: 208.91.240.0/22 IP: 2606:5b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:53:09:35:0a:ac:4e:2c:a0:dd:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 20 00:45:17 2026 GMT Not After : Jul 23 00:45:17 2028 GMT Subject: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:c5:d6:d0:ae:04:d0:51:31:69:63:32:23: 9c:3f:c2:fc:14:b5:45:3e:71:48:ce:2d:55:2a:88: b9:8f:86:36:7c:7d:0a:a5:8b:30:f7:99:82:ff:16: 1d:67:7f:66:7f:60:87:67:48:51:f4:f9:d4:51:21: a2:b0:37:fe:e7:86:a3:f9:7c:63:f8:78:dd:53:a9: d2:ff:41:86:c7:59:d1:e6:90:03:4e:27:0b:16:d4: 82:b0:bc:2b:b9:15:05:3c:1f:65:35:2b:75:14:6f: 41:ef:cb:7a:1a:42:c5:32:5c:92:8f:7b:a6:bd:0c: 26:c4:c3:a0:e7:23:c5:0c:41:dc:4d:72:fc:8b:db: a6:8f:1f:c3:57:b2:7e:02:db:d2:8b:47:c3:68:33: bb:ab:f1:ba:e6:67:5a:00:f7:42:ec:28:6f:06:85: 38:99:b5:58:5e:3a:4a:c5:61:2e:f2:d3:4e:46:97: dc:5c:b0:d7:50:68:82:f4:92:a2:e5:94:ab:6a:13: 7d:3c:e1:eb:25:8a:51:a4:5b:09:1b:bd:1f:70:60: 63:9f:c0:c4:5d:29:ef:19:d6:43:b1:67:9c:4d:58: 8d:65:71:3a:9c:fd:e1:0e:8a:50:da:1e:ab:b6:48: be:f1:57:2a:5b:cf:a5:5f:bb:4d:be:a0:91:da:ee: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.217.104.0/21 192.104.0.0/24 199.80.28.0/22 204.15.96.0/22 208.91.240.0/22 IPv6: 2606:5b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29765 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c2:63:a7:94:00:86:33:74:43:49:42:5b:40:2e:76:43:30: 3e:a0:73:aa:4a:12:98:b6:65:5c:88:61:fa:59:34:72:8c:ae: 77:4f:a4:34:38:b7:33:35:94:75:88:57:53:35:e5:3a:75:fc: 6d:dd:4c:b4:4f:eb:22:87:6e:9f:ab:f1:8e:bf:83:10:3f:f7: 2e:b4:2b:5d:51:b2:c7:3f:c9:27:44:64:4c:3e:df:53:19:dc: b5:01:4a:5c:25:59:e9:65:32:21:f1:4d:ef:b0:ea:69:55:c1: 4d:9c:16:40:2d:bf:11:51:47:f5:80:f1:58:fa:3a:c5:f6:73: 9a:d0:a0:6d:a3:d7:b3:33:15:36:5d:5b:61:c1:ba:d4:88:9b: 83:7c:03:1d:db:a8:ec:50:e0:b0:8c:fb:8a:65:c9:9b:75:08: b7:5a:78:a0:e9:3c:36:39:72:66:ef:b6:dd:fd:19:ed:7b:c4: 4c:d6:86:0a:5e:94:e7:56:49:c7:cd:36:d0:9c:ea:44:53:67: 26:86:88:8f:c4:c6:ca:2d:c1:48:fb:45:c1:30:d2:b1:b1:e6: 1f:09:28:de:38:2e:99:05:fe:67:f6:8f:5b:f4:0e:db:2a:c1: 97:84:62:d0:dc:ea:10:64:61:0c:c4:a0:b1:54:77:49:3a:7b: 33:1a:bd:6f -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWE2QUwk1CqxOLKDdxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyMDAwNDUxN1oXDTI4MDcyMzAwNDUxN1owLzEtMCsGA1UEAxMk M2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbTF1tCuBNBRMWljMiOcP8L8FLVFPnFIzi1V Koi5j4Y2fH0KpYsw95mC/xYdZ39mf2CHZ0hR9PnUUSGisDf+54aj+Xxj+HjdU6nS /0GGx1nR5pADTicLFtSCsLwruRUFPB9lNSt1FG9B78t6GkLFMlySj3umvQwmxMOg 5yPFDEHcTXL8i9umjx/DV7J+AtvSi0fDaDO7q/G65mdaAPdC7ChvBoU4mbVYXjpK xWEu8tNORpfcXLDXUGiC9JKi5ZSrahN9POHrJYpRpFsJG70fcGBjn8DEXSnvGdZD sWecTViNZXE6nP3hDopQ2h6rtki+8VcqW8+lX7tNvqCR2u6OSQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFNMOdrGjFZgB/i+fQ/xRQwo6+uoEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z ZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNlOWZiMjVhLTQzOGYtNGUxZC1h MTM2LTVjODc4ZDA2NWMyNC8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQw NjVjMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAOi2WgDBADAaAADBALHUBwDBALMD2ADBALQW/Aw DQQCAAIwBwMFACYGWwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdEUwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAg8Jjp5QAhjN0Q0lCW0AudkMwPqBzqkoSmLZlXIhh+lk0coyud0+kNDi3MzWU dYhXUzXlOnX8bd1MtE/rIodun6vxjr+DED/3LrQrXVGyxz/JJ0RkTD7fUxnctQFK XCVZ6WUyIfFN77DqaVXBTZwWQC2/EVFH9YDxWPo6xfZzmtCgbaPXszMVNl1bYcG6 1Iibg3wDHduo7FDgsIz7imXJm3UIt1p4oOk8NjlyZu+23f0Z7XvETNaGCl6U51ZJ x8020JzqRFNnJoaIj8TGyi3BSPtFwTDSsbHmHwko3jgumQX+Z/aPW/QO2yrBl4Ri 0NzqEGRhDMSgsVR3STp7Mxq9bw== -----END CERTIFICATE-----Generated at Tue May 12 22:08:15 2026 by rpki-client