$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer File: 5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer (raw, json) Hash identifier: 3Wd0+xkHmdVS9c8CeeVEWt9g87bPke2uVyIUMdjDR9g= Subject key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D12D012301678855229EB6280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 01:45:22 +0000 Certificate not after: Thu 08 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 401481 IP: 23.128.252.0/24 IP: 2602:f7ab::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:d0:12:30:16:78:85:52:29:eb:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 6 01:45:22 2026 GMT Not After : Jun 8 00:45:22 2028 GMT Subject: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c4:1b:63:34:9e:01:1d:d3:21:4b:c1:6f:49: 80:81:0b:56:b5:9c:18:fc:84:2c:86:b3:12:f2:bf: 9d:a1:87:ab:87:c3:00:53:24:8f:77:40:43:90:5d: ad:27:55:ed:3f:f4:71:99:56:be:e1:b3:a9:3e:34: ca:18:fe:02:14:d4:d3:32:a7:c7:82:2a:47:e7:2d: db:c1:52:90:1f:13:57:30:a3:1e:e5:c4:d6:79:75: 47:0b:48:9e:b4:29:94:37:00:81:ad:3d:89:3a:00: 8b:29:90:e2:e1:22:d6:ab:b0:09:88:9b:08:a9:65: 5b:f6:b4:08:da:02:94:3a:5f:4d:15:d2:ab:cb:57: f5:99:6c:f8:5a:80:b4:16:c0:42:31:c2:14:08:4d: 46:9c:ee:b5:fb:1b:cc:fa:69:05:dd:56:3c:78:f4: f1:04:a6:19:04:96:cc:a5:d4:fe:10:ae:a4:96:1e: 13:7d:1e:c0:fb:6a:77:91:95:2d:0c:91:d9:c3:a0: fb:45:71:5b:54:f6:c4:c9:ae:b2:9b:fd:f9:cf:8a: f5:42:12:08:cf:71:30:e6:79:8c:1a:da:01:aa:0c: 66:79:c6:e1:6e:1c:25:c6:73:e2:2b:3e:40:39:00: 75:f3:37:ec:c6:ce:99:16:7d:3b:03:ec:dd:65:0a: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 IPv6: 2602:f7ab::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401481 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8b:71:b4:69:7a:37:cb:3f:5f:cf:a0:e8:d1:30:3c:a6:7f: 05:11:87:84:39:c2:a9:67:29:34:f9:f0:b7:59:64:7c:63:70: bc:d6:2c:ee:c0:a6:e8:21:9a:80:2b:de:83:44:37:7b:0a:de: ac:23:ae:1b:17:2d:24:00:64:16:dd:92:ba:36:ce:2a:6e:42: 88:28:6f:90:dc:a1:bb:08:ed:d8:92:6b:d7:0e:9f:d9:07:00: 41:51:d5:04:2b:a4:16:ef:6d:c2:a9:12:c7:28:48:1b:d4:8f: c4:1b:ce:95:0b:2a:77:ec:84:e9:96:f6:73:e3:aa:0a:65:a3: 88:46:4c:e9:8d:dd:4f:b3:83:b2:d1:1a:2f:1f:8f:59:61:68: 74:cf:2f:98:ad:7e:41:8e:7d:b4:31:11:56:a4:c0:c5:5a:1a: b5:50:82:0a:c2:f5:a0:ec:16:19:82:68:2a:06:bd:11:ba:1e: 42:cf:e2:82:50:aa:be:e4:36:26:02:ff:2e:f9:31:42:3d:3e: a7:01:24:1b:6e:89:6f:db:17:ac:4a:be:8b:53:49:60:cb:f0: 32:ac:db:30:e5:c1:db:7c:f5:91:d9:40:ce:88:71:b3:3a:83: 69:7a:d8:fd:3d:b7:71:92:3e:fe:fc:8c:f7:02:10:58:0e:a0: d8:2d:f2:f8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0S0BIwFniFUinrYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwNjAxNDUyMloXDTI4MDYwODAwNDUyMlowLzEtMCsGA1UEAxMk NWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIxMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sQbYzSeAR3TIUvBb0mAgQtWtZwY/IQshrMS 8r+doYerh8MAUySPd0BDkF2tJ1XtP/RxmVa+4bOpPjTKGP4CFNTTMqfHgipH5y3b wVKQHxNXMKMe5cTWeXVHC0ietCmUNwCBrT2JOgCLKZDi4SLWq7AJiJsIqWVb9rQI 2gKUOl9NFdKry1f1mWz4WoC0FsBCMcIUCE1GnO61+xvM+mkF3VY8ePTxBKYZBJbM pdT+EK6klh4TfR7A+2p3kZUtDJHZw6D7RXFbVPbEya6ym/35z4r1QhIIz3Ew5nmM GtoBqgxmecbhbhwlxnPiKz5AOQB18zfsxs6ZFn07A+zdZQpz+wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBb1oJbjve7dl8ol0Xv03/+Us4TEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVkZGQxZGMxLTQ3ZTMtNGE1ZS1h ZjdmLTk0NDkzOWQyMTBjNi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5Mzlk MjEwYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgPwwDgQCAAIwCAMGBCYC96sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfi3G0aXo3yz9fz6Do0TA8pn8F EYeEOcKpZyk0+fC3WWR8Y3C81izuwKboIZqAK96DRDd7Ct6sI64bFy0kAGQW3ZK6 Ns4qbkKIKG+Q3KG7CO3YkmvXDp/ZBwBBUdUEK6QW723CqRLHKEgb1I/EG86VCyp3 7ITplvZz46oKZaOIRkzpjd1Ps4Oy0RovH49ZYWh0zy+YrX5Bjn20MRFWpMDFWhq1 UIIKwvWg7BYZgmgqBr0Ruh5Cz+KCUKq+5DYmAv8u+TFCPT6nASQbbolv2xesSr6L U0lgy/AyrNsw5cHbfPWR2UDOiHGzOoNpetj9Pbdxkj7+/Iz3AhBYDqDYLfL4 -----END CERTIFICATE-----Generated at Sat Mar 28 10:38:46 2026 by rpki-client