$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd.cer File: 61b4838c-1edf-4e06-b314-62670a6d2dfd.cer (raw, json) Hash identifier: ACxUmnclt8DGXDCf+9vF0Ya2JAol2INBX8A/bCqiEaE= Subject key identifier: F2:91:EB:3F:5A:ED:88:B5:3E:F5:26:7E:96:91:08:CE:63:DA:04:DD Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DBA334DFDC6E7BFB64790BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/61b4838c-1edf-4e06-b314-62670a6d2dfd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 00:45:18 +0000 Certificate not after: Mon 07 Aug 2028 00:45:18 +0000 Subordinate resources: AS: 36529 IP: 199.30.241.0/24 IP: 2607:cb00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:33:4d:fd:c6:e7:bf:b6:47:90:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 5 00:45:18 2026 GMT Not After : Aug 7 00:45:18 2028 GMT Subject: CN=61b4838c-1edf-4e06-b314-62670a6d2dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2a:04:b4:d1:75:57:b2:f1:31:c8:d1:c6:df: a6:21:a0:f2:79:3f:90:82:52:10:8c:6b:54:13:28: 0e:ca:26:92:d8:05:df:99:6e:b0:b0:c2:d5:2f:a2: 61:f8:8e:ff:85:db:8a:19:5f:ca:3c:3d:cb:24:03: 2a:0b:43:2a:5c:7f:fb:14:4f:af:c3:3c:0c:fb:ba: 05:e2:30:05:fa:10:0d:ac:8e:10:63:a3:ed:1e:d8: ff:4b:a7:92:5a:25:90:88:a3:b4:9e:70:b6:65:8b: 8e:1a:48:45:c5:53:dd:d2:ec:cd:28:0c:c9:60:20: eb:d2:01:4f:ca:6d:16:28:2c:2e:b3:84:c9:ce:4b: c8:74:3f:64:ff:16:f8:60:88:d3:73:fe:a7:45:eb: 51:41:97:47:db:3f:41:c6:22:fc:ca:12:68:2e:e4: 57:02:e0:bd:30:d0:c0:a5:90:eb:8a:72:4b:96:e5: 49:f1:1c:32:95:38:ea:32:a8:12:a6:e9:6a:41:6e: f3:75:2a:1c:30:5f:24:ac:51:6c:71:dd:c0:0a:70: 7c:dd:d0:a5:8e:39:bb:07:de:b2:ba:db:df:3d:60: bd:1d:e9:1b:f4:b7:9b:21:77:c4:6e:26:88:1f:7f: 05:34:58:dd:32:1d:c0:55:1f:d9:1b:8f:4f:6e:3a: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:EB:3F:5A:ED:88:B5:3E:F5:26:7E:96:91:08:CE:63:DA:04:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/61b4838c-1edf-4e06-b314-62670a6d2dfd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.30.241.0/24 IPv6: 2607:cb00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36529 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a7:fa:f3:00:bf:ba:20:e9:95:69:25:b7:1c:b6:43:70:a6: 7e:f4:e4:52:f2:21:39:02:71:b0:5f:85:d4:c9:ae:84:55:ee: d1:c3:e8:20:56:09:60:5d:85:34:be:66:35:0d:f5:3e:d7:d4: e5:9b:bc:2d:ba:38:46:b7:1d:dc:9b:c6:ee:7a:ee:6b:bf:8f: 0d:71:1f:7b:43:11:ba:13:ab:b8:b1:89:3f:e4:c8:1d:c1:37: 48:29:e3:18:cf:99:48:ed:02:43:ac:c8:42:7e:fc:c8:cf:81: 07:0b:81:58:ba:30:9c:f9:d9:18:41:ce:d9:ab:55:33:57:7d: 45:56:87:4c:24:3d:a7:3b:32:77:03:79:ec:d5:8f:2c:43:33: 74:06:e6:5e:24:69:6e:88:c1:6b:dc:cd:ae:90:66:56:2e:67: 0f:89:72:6d:34:39:8c:47:4f:e7:6b:a0:61:ab:69:a0:b8:96: 8a:90:0e:0b:dc:8d:81:67:e8:68:7e:3e:80:05:bb:2e:8b:78: 8f:ce:e8:50:c1:6a:cf:b5:23:61:49:10:79:dc:27:99:5a:00: 89:b8:00:ac:0f:c5:6d:62:67:d0:10:8f:34:e7:ca:49:8c:ad: ea:8e:6e:be:5f:ac:ac:8f:7f:6d:51:93:37:e7:d1:8c:07:6f: 6d:ff:3e:68 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE26M039xue/tkeQv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwNTAwNDUxOFoXDTI4MDgwNzAwNDUxOFowLzEtMCsGA1UEAxMk NjFiNDgzOGMtMWVkZi00ZTA2LWIzMTQtNjI2NzBhNmQyZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSoEtNF1V7LxMcjRxt+mIaDyeT+QglIQjGtU EygOyiaS2AXfmW6wsMLVL6Jh+I7/hduKGV/KPD3LJAMqC0MqXH/7FE+vwzwM+7oF 4jAF+hANrI4QY6PtHtj/S6eSWiWQiKO0nnC2ZYuOGkhFxVPd0uzNKAzJYCDr0gFP ym0WKCwus4TJzkvIdD9k/xb4YIjTc/6nRetRQZdH2z9BxiL8yhJoLuRXAuC9MNDA pZDrinJLluVJ8RwylTjqMqgSpulqQW7zdSocMF8krFFscd3ACnB83dCljjm7B96y utvfPWC9Hekb9LebIXfEbiaIH38FNFjdMh3AVR/ZG49PbjoiHQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPKR6z9a7Yi1PvUmfpaRCM5j2gTdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 MWI0ODM4Yy0xZWRmLTRlMDYtYjMxNC02MjY3MGE2ZDJkZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzYxYjQ4MzhjLTFlZGYtNGUwNi1i MzE0LTYyNjcwYTZkMmRmZC82MWI0ODM4Yy0xZWRmLTRlMDYtYjMxNC02MjY3MGE2 ZDJkZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHHvEwDQQCAAIwBwMFACYHywAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAI6xMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGin+vMAv7og6ZVpJbcctkNwpn70 5FLyITkCcbBfhdTJroRV7tHD6CBWCWBdhTS+ZjUN9T7X1OWbvC26OEa3Hdybxu56 7mu/jw1xH3tDEboTq7ixiT/kyB3BN0gp4xjPmUjtAkOsyEJ+/MjPgQcLgVi6MJz5 2RhBztmrVTNXfUVWh0wkPac7MncDeezVjyxDM3QG5l4kaW6IwWvcza6QZlYuZw+J cm00OYxHT+droGGraaC4loqQDgvcjYFn6Gh+PoAFuy6LeI/O6FDBas+1I2FJEHnc J5laAIm4AKwPxW1iZ9AQjzTnykmMreqObr5frKyPf21Rkzfn0YwHb23/Pmg= -----END CERTIFICATE-----Generated at Tue May 12 22:44:54 2026 by rpki-client