$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5.cer File: 599cfd9a-6248-4c75-b331-706266d47cb5.cer (raw, json) Hash identifier: sR3RmYjjz83Ur62fEXtSUk/xjnFU2NRt/ukByfwHyuI= Subject key identifier: 37:F4:27:1A:11:89:CD:82:F0:26:73:2D:5C:9B:D0:DF:A6:EE:7A:4D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E6F047A549089AFC019810C30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/599cfd9a-6248-4c75-b331-706266d47cb5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 19:12:16 +0000 Certificate not after: Mon 31 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 395209 IP: 45.41.64.0/20 IP: 2606:4490::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:04:7a:54:90:89:af:c0:19:81:0c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 8 19:12:16 2026 GMT Not After : Jul 31 00:45:17 2028 GMT Subject: CN=599cfd9a-6248-4c75-b331-706266d47cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:fe:72:34:ab:f4:ad:ad:91:a0:df:80:0c: 67:80:de:bf:f2:6d:2d:be:61:ac:04:ef:61:28:d9: 0c:dc:c5:8c:c1:5d:0e:c0:fd:c0:67:7c:9a:6d:76: 25:9a:06:4c:c1:71:1d:62:15:4a:44:20:56:32:93: 1f:1d:57:69:ba:c8:4e:71:91:e1:37:77:ab:e3:30: e8:40:74:79:68:51:90:6a:87:6c:ed:ed:1e:0d:86: d2:8c:7e:0c:c7:4f:6c:85:59:32:8e:36:6c:28:46: 4d:65:a8:b0:ee:af:d0:ad:32:c6:a2:9c:7c:9b:1e: 10:4e:34:61:dc:21:20:8e:07:91:a4:1c:f3:09:d0: ed:d4:df:00:9f:f9:51:86:1c:f2:ad:66:ba:e0:ca: 6c:92:b5:e2:21:9f:93:dd:5c:73:6f:41:4d:5d:fa: a4:c3:0f:4a:a9:67:4c:d3:f5:b8:f6:19:39:0f:bb: 47:46:6e:15:ec:db:32:59:bd:56:fe:f5:71:12:b7: 4a:71:4e:c3:ee:93:dc:ac:5e:9f:6c:61:c8:0f:74: 49:54:65:88:82:a3:a1:c2:34:6b:f6:c7:19:14:13: 7c:9d:46:b3:36:70:33:25:fe:5b:ae:10:0b:b1:eb: 30:d7:76:31:d0:b6:35:3b:1d:ce:f1:fa:30:58:44: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F4:27:1A:11:89:CD:82:F0:26:73:2D:5C:9B:D0:DF:A6:EE:7A:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/599cfd9a-6248-4c75-b331-706266d47cb5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 45.41.64.0/20 IPv6: 2606:4490::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395209 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8b:6b:7e:b7:8e:17:99:43:59:94:da:89:60:88:68:5e:45: 04:9d:b2:08:80:9d:5a:8e:82:10:0f:e7:42:06:d2:94:a8:21: 7d:19:bb:d6:bc:d4:e4:0c:9d:34:12:84:87:83:7f:7d:22:55: 56:a5:16:20:44:48:8d:10:b9:43:78:cb:b7:da:30:a3:b5:56: b5:58:ef:05:c4:bd:a5:34:7f:54:1b:78:5c:e3:f6:10:1d:3d: e4:79:85:1f:2c:50:a5:7e:4d:2c:ad:41:4d:29:01:81:a3:0a: 7d:94:bb:ca:4f:b3:81:85:fc:ea:21:23:5c:1c:44:6f:21:8d: 0a:2f:dd:c8:41:e8:60:b5:0b:ea:93:a6:28:c9:91:5e:2e:6c: 60:79:79:da:6f:71:38:4d:d3:37:ba:9f:a0:b9:c7:e4:ce:14: b5:b1:d3:f7:9f:04:59:0e:5e:58:91:aa:a1:f4:01:b4:1e:97: 64:57:71:22:65:53:56:cd:98:82:4d:75:e7:38:40:70:e9:5e: b6:f0:6a:43:a2:cd:4d:5b:5f:7f:de:79:78:3d:19:78:37:66: 31:c9:b8:47:f0:5d:17:b3:46:12:cc:a5:f1:cd:dc:a3:a5:7e: 7c:2d:d2:fe:dd:52:99:06:2e:61:56:4e:07:be:dd:44:b1:c1: 62:c7:71:8e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5vBHpUkImvwBmBDDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDcwODE5MTIxNloXDTI4MDczMTAwNDUxN1owLzEtMCsGA1UEAxMk NTk5Y2ZkOWEtNjI0OC00Yzc1LWIzMzEtNzA2MjY2ZDQ3Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7+cjSr9K2tkaDfgAxngN6/8m0tvmGsBO9h KNkM3MWMwV0OwP3AZ3yabXYlmgZMwXEdYhVKRCBWMpMfHVdpushOcZHhN3er4zDo QHR5aFGQaods7e0eDYbSjH4Mx09shVkyjjZsKEZNZaiw7q/QrTLGopx8mx4QTjRh 3CEgjgeRpBzzCdDt1N8An/lRhhzyrWa64MpskrXiIZ+T3Vxzb0FNXfqkww9KqWdM 0/W49hk5D7tHRm4V7NsyWb1W/vVxErdKcU7D7pPcrF6fbGHID3RJVGWIgqOhwjRr 9scZFBN8nUazNnAzJf5brhALsesw13Yx0LY1Ox3O8fowWER6xwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDf0JxoRic2C8CZzLVyb0N+m7npNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 OTljZmQ5YS02MjQ4LTRjNzUtYjMzMS03MDYyNjZkNDdjYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU5OWNmZDlhLTYyNDgtNGM3NS1i MzMxLTcwNjI2NmQ0N2NiNS81OTljZmQ5YS02MjQ4LTRjNzUtYjMzMS03MDYyNjZk NDdjYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAQtKUAwDQQCAAIwBwMFACYGRJAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgfJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACmLa363jheZQ1mU2olgiGheRQSd sgiAnVqOghAP50IG0pSoIX0Zu9a81OQMnTQShIeDf30iVValFiBESI0QuUN4y7fa MKO1VrVY7wXEvaU0f1QbeFzj9hAdPeR5hR8sUKV+TSytQU0pAYGjCn2Uu8pPs4GF /OohI1wcRG8hjQov3chB6GC1C+qTpijJkV4ubGB5edpvcThN0ze6n6C5x+TOFLWx 0/efBFkOXliRqqH0AbQel2RXcSJlU1bNmIJNdec4QHDpXrbwakOizU1bX3/eeXg9 GXg3ZjHJuEfwXRezRhLMpfHN3KOlfnwt0v7dUpkGLmFWTge+3USxwWLHcY4= -----END CERTIFICATE-----Generated at Thu Jul 23 21:31:12 2026 by rpki-client