$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer File: 5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer (raw, json) Hash identifier: BA2JfUvFn91q3ti6j/JGCFTOxc/olqzXnMeRhaaiSFw= Subject key identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D343282B23A67328BAE980980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 00:45:22 +0000 Certificate not after: Tue 20 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 401441 IP: 142.249.28.0/23 IP: 2602:f7b2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:32:82:b2:3a:67:32:8b:ae:98:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 00:45:22 2026 GMT Not After : Jun 20 00:45:22 2028 GMT Subject: CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:4e:54:d4:1e:d9:83:ba:9e:b1:5d:24:fc: c4:97:ce:c9:be:dc:90:a3:d8:b4:8c:7f:99:42:bd: 55:88:ba:57:4e:62:15:13:f2:96:1a:be:15:b5:bb: c0:a1:31:d3:6b:73:13:03:d8:b4:db:72:c3:09:a5: 5c:33:f6:7f:fe:e3:31:f8:99:b8:a2:43:72:1d:ed: c6:bc:12:6e:cf:2b:8e:87:94:ef:a1:9e:ad:ff:14: 5f:cb:0e:a7:45:2a:d8:25:94:5b:b4:2a:0f:f2:df: c3:a0:a2:1f:bc:7c:32:a2:09:17:cc:93:65:cf:56: f0:f5:5e:7b:93:dd:68:09:b5:21:08:3c:53:ae:61: a0:6c:01:d7:bd:81:da:f3:0f:59:ce:b6:2a:5e:2e: 93:42:8f:32:0e:67:33:cf:ce:24:d7:40:51:bf:5a: e7:98:af:67:f9:00:6d:6e:d8:15:e5:37:01:af:a4: 0c:88:3e:f2:ad:c7:26:6e:eb:d4:d7:a8:6d:eb:18: e7:f7:0c:ab:80:07:e1:e4:b6:07:b1:14:fc:f1:2c: 00:bc:d9:0e:ea:72:a2:60:8f:74:34:1f:c6:22:11: 74:46:57:ab:68:d0:96:bc:76:f1:ab:ca:a8:d6:b9: 43:c0:6c:6c:16:8d:b2:0c:af:f2:aa:47:89:15:e5: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.249.28.0/23 IPv6: 2602:f7b2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e8:48:83:b2:ef:b2:61:3a:04:4c:57:da:4d:da:d1:5c:ef: 01:3b:a6:b7:bf:63:03:cd:a4:05:51:90:b0:af:67:b5:b5:24: 73:36:26:19:56:6e:7f:78:5d:79:c2:3f:b6:35:4a:40:5c:56: 3e:d9:03:7d:93:0a:ce:fc:fe:01:89:75:e5:f2:06:40:90:93: be:21:f7:a0:cd:b6:f4:f9:c7:21:6f:01:f7:99:77:59:3c:e5: 5b:c4:50:7b:06:be:93:0c:ef:5f:e4:77:06:4f:30:68:c4:ad: 81:24:4b:b4:24:77:91:66:9e:9a:c8:56:e5:b3:9b:50:a1:2f: a7:56:ac:48:20:d4:56:58:45:de:66:b7:30:0f:83:59:b2:c2: 40:10:1f:13:19:03:b6:30:c6:27:10:2d:11:66:a4:8d:1f:03: a0:e9:6a:2d:56:a4:a0:f1:5b:29:db:fb:ce:97:1c:d3:97:b1: 80:91:eb:76:fb:76:59:a3:1c:82:5b:fd:fb:07:d1:5a:a8:b3: e1:d0:e1:bd:33:10:ee:09:07:9b:4e:5b:b6:f7:13:b5:ce:c9: 1f:cc:65:ca:75:d7:49:46:51:c5:d8:67:fa:c5:0e:cc:9a:3b: de:6e:4f:6c:cb:c4:78:39:b1:e6:82:a8:ee:ac:c0:f7:d3:af: d2:12:4b:71 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE00MoKyOmcyi66YCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxODAwNDUyMloXDTI4MDYyMDAwNDUyMlowLzEtMCsGA1UEAxMk NWEwNjBmYTMtZTJmMS00ODU3LWFjZjMtOWE5OGE5OGRmNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXJOVNQe2YO6nrFdJPzEl87JvtyQo9i0jH+Z Qr1ViLpXTmIVE/KWGr4VtbvAoTHTa3MTA9i023LDCaVcM/Z//uMx+Jm4okNyHe3G vBJuzyuOh5TvoZ6t/xRfyw6nRSrYJZRbtCoP8t/DoKIfvHwyogkXzJNlz1bw9V57 k91oCbUhCDxTrmGgbAHXvYHa8w9ZzrYqXi6TQo8yDmczz84k10BRv1rnmK9n+QBt btgV5TcBr6QMiD7yrccmbuvU16ht6xjn9wyrgAfh5LYHsRT88SwAvNkO6nKiYI90 NB/GIhF0RleraNCWvHbxq8qo1rlDwGxsFo2yDK/yqkeJFeXSpQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFES7DjPSUih13GyXGfX+VZ/AbrB9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4ZGY2ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVhMDYwZmEzLWUyZjEtNDg1Ny1h Y2YzLTlhOThhOThkZjZmMi81YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4 ZGY2ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGO+RwwDgQCAAIwCAMGBCYC97IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgITBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB56EiDsu+yYToETFfaTdrRXO8B O6a3v2MDzaQFUZCwr2e1tSRzNiYZVm5/eF15wj+2NUpAXFY+2QN9kwrO/P4BiXXl 8gZAkJO+Ifegzbb0+cchbwH3mXdZPOVbxFB7Br6TDO9f5HcGTzBoxK2BJEu0JHeR Zp6ayFbls5tQoS+nVqxIINRWWEXeZrcwD4NZssJAEB8TGQO2MMYnEC0RZqSNHwOg 6WotVqSg8Vsp2/vOlxzTl7GAket2+3ZZoxyCW/37B9FaqLPh0OG9MxDuCQebTlu2 9xO1zskfzGXKdddJRlHF2Gf6xQ7Mmjvebk9sy8R4ObHmgqjurMD306/SEktx -----END CERTIFICATE-----Generated at Thu Mar 26 06:49:53 2026 by rpki-client