$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer File: 58e96099-0986-4573-bb6b-873a9bcb3747.cer (raw, json) Hash identifier: 64ppKrIBxilJtbXRN+otI1gULP7wBAGTHUv4ZZaUGR4= Subject key identifier: 83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D47BD4D228FEBCF15E6696080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 00:45:23 +0000 Certificate not after: Tue 27 Jun 2028 00:45:23 +0000 Subordinate resources: AS: 32160 IP: 72.9.112.0/20 IP: 160.32.224.0/20 IP: 2607:f4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:bd:4d:22:8f:eb:cf:15:e6:69:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 25 00:45:23 2026 GMT Not After : Jun 27 00:45:23 2028 GMT Subject: CN=58e96099-0986-4573-bb6b-873a9bcb3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:62:e5:e4:c7:12:b6:c6:6c:05:fe:63:ed: bc:ad:6b:e3:35:fc:59:ce:7e:f6:27:f2:34:a1:31: 9c:6f:d3:4f:a6:b6:3b:1d:4f:4e:2e:6e:ff:aa:cf: d7:7c:0d:7d:22:aa:14:eb:e4:a6:b9:c6:4f:52:e0: d2:1a:df:5c:ef:67:8e:45:34:79:61:97:21:ac:c2: a9:0c:58:0e:e0:43:08:cc:96:d0:a7:c0:a9:62:dd: 6a:9b:6d:1f:ef:e1:99:e3:3f:69:2d:8d:ff:78:ed: b4:df:f9:c6:72:e9:3e:99:62:34:13:2a:53:bf:06: f9:df:2c:94:b7:c5:fd:6e:53:5f:fe:01:5f:2f:14: a7:26:13:b7:6d:ff:08:cb:cb:55:27:37:41:6e:12: 60:58:d4:ff:ce:fb:a5:52:27:a2:77:fa:e3:3a:fd: 15:7a:26:51:b5:17:4a:8e:36:e5:32:74:fc:82:30: 77:41:7b:6f:4e:31:99:75:15:c4:fa:94:53:13:4c: 02:50:bb:10:57:7b:7e:f1:a1:92:db:c6:0f:a8:ff: ae:cc:22:a9:ed:df:44:d5:01:55:d8:3b:28:e1:84: 78:5c:94:21:56:c4:0b:06:54:d5:df:7e:a8:d2:d9: 80:34:97:4f:66:dd:cc:56:8e:6e:81:78:5f:7d:6b: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 72.9.112.0/20 160.32.224.0/20 IPv6: 2607:f4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32160 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:58:97:b6:83:16:37:2d:de:29:fe:32:4d:88:a8:ea:fe:2f: 25:b5:25:9e:8c:eb:40:a5:33:b8:c3:e3:a9:16:45:c5:9e:51: cb:1a:89:64:89:e7:08:7a:16:66:cf:51:48:0b:df:c9:63:45: d5:3f:aa:b1:d4:c9:0a:a6:02:a6:46:13:df:1b:ea:02:eb:03: 5d:fb:d7:7a:e2:9c:3c:4b:fe:1d:74:e7:72:2d:37:7b:c0:ad: a0:c3:ce:03:99:c4:2f:5c:4d:a8:7b:16:73:dd:84:76:5d:87: 0b:26:73:bb:85:18:3a:59:3c:d4:b2:c5:db:de:f0:0f:d3:64: 8f:71:9e:3e:06:5e:ed:3b:bf:39:f9:92:d7:bf:ac:47:fa:92: 12:28:5b:aa:9c:31:9f:f7:12:4c:d9:49:be:0d:dd:e2:88:63: 0f:5d:95:2a:6c:1d:cd:6d:47:4f:2f:27:61:85:5b:de:a6:2f: 0f:53:22:1f:84:d9:ee:d8:f5:47:e3:72:1e:4c:dd:bd:bf:f0: e9:59:f3:00:7c:ba:7c:2b:28:9f:e5:1b:96:27:8b:a5:c4:e3: e4:fb:d0:1e:a3:a2:23:24:25:71:b1:d0:c2:1b:90:1e:01:b8: d5:db:b3:e4:82:05:b8:89:d0:d8:fd:04:ba:0d:4e:d5:fb:cd: c8:33:0e:f3 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE1HvU0ij+vPFeZpYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyNTAwNDUyM1oXDTI4MDYyNzAwNDUyM1owLzEtMCsGA1UEAxMk NThlOTYwOTktMDk4Ni00NTczLWJiNmItODczYTliY2IzNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGhi5eTHErbGbAX+Y+28rWvjNfxZzn72J/I0 oTGcb9NPprY7HU9OLm7/qs/XfA19IqoU6+SmucZPUuDSGt9c72eORTR5YZchrMKp DFgO4EMIzJbQp8CpYt1qm20f7+GZ4z9pLY3/eO203/nGcuk+mWI0EypTvwb53yyU t8X9blNf/gFfLxSnJhO3bf8Iy8tVJzdBbhJgWNT/zvulUieid/rjOv0VeiZRtRdK jjblMnT8gjB3QXtvTjGZdRXE+pRTE0wCULsQV3t+8aGS28YPqP+uzCKp7d9E1QFV 2Dso4YR4XJQhVsQLBlTV336o0tmANJdPZt3MVo5ugXhffWseAQIDAQABo4IELzCC BCswHQYDVR0OBBYEFIOv/bdf/6c1qHAMPtgKXr9CfXukMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 OGU5NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNhOWJjYjM3NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU4ZTk2MDk5LTA5ODYtNDU3My1i YjZiLTg3M2E5YmNiMzc0Ny81OGU5NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNhOWJj YjM3NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARICXADBASgIOAwDQQCAAIwBwMFACYH9MAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICfaAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV1iXtoMWNy3eKf4yTYio 6v4vJbUlnozrQKUzuMPjqRZFxZ5RyxqJZInnCHoWZs9RSAvfyWNF1T+qsdTJCqYC pkYT3xvqAusDXfvXeuKcPEv+HXTnci03e8CtoMPOA5nEL1xNqHsWc92Edl2HCyZz u4UYOlk81LLF297wD9Nkj3GePgZe7Tu/OfmS17+sR/qSEihbqpwxn/cSTNlJvg3d 4ohjD12VKmwdzW1HTy8nYYVb3qYvD1MiH4TZ7tj1R+NyHkzdvb/w6VnzAHy6fCso n+UblieLpcTj5PvQHqOiIyQlcbHQwhuQHgG41duz5IIFuInQ2P0Eug1O1fvNyDMO 8w== -----END CERTIFICATE-----Generated at Wed Mar 25 23:17:49 2026 by rpki-client