$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87.cer File: 7767794e-08b2-4526-9f12-2edd85918e87.cer (raw, json) Hash identifier: lJWdXUNANCxk0wSF7gd6ry8vD0PX1yq//F/57sw0dsI= Subject key identifier: 36:D5:F0:98:E6:A5:0B:41:F2:B8:A4:43:7D:DC:77:96:A9:7C:D7:29 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D47BD4CF95E8C9ECE0B169700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/7767794e-08b2-4526-9f12-2edd85918e87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 00:45:23 +0000 Certificate not after: Tue 27 Jun 2028 00:45:23 +0000 Subordinate resources: IP: 206.167.10.0 -- 206.167.19.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:bd:4c:f9:5e:8c:9e:ce:0b:16:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 25 00:45:23 2026 GMT Not After : Jun 27 00:45:23 2028 GMT Subject: CN=7767794e-08b2-4526-9f12-2edd85918e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:a5:ea:7d:4b:81:06:64:97:fb:98:4f:de: f9:ba:b5:0d:79:f4:72:b4:74:e1:a5:59:92:99:d6: 89:d0:3b:0d:07:a4:c3:de:a7:d3:57:e3:a4:f1:18: a8:e2:46:42:09:06:fc:7d:0f:5b:02:f5:6d:9d:c8: 32:79:81:9c:f9:b1:6b:21:6d:e0:b9:8e:54:f4:e0: fa:15:8c:0c:d5:d3:df:57:96:88:0d:86:d3:4d:c0: 28:d1:cc:3c:2e:25:e0:5c:df:ba:83:c3:78:d2:1a: 36:b4:23:26:9b:ce:ad:04:1f:93:da:b1:8b:a4:58: cc:16:cf:5a:04:c0:ae:fa:2a:17:82:ce:46:57:58: ee:14:90:6b:17:df:4c:82:8d:b1:d4:e2:58:fd:0b: eb:39:55:ac:61:23:b4:25:69:00:5c:56:ae:43:3e: 8a:b8:bd:0a:48:67:da:8a:44:f8:90:ce:94:7f:26: e6:12:ef:26:a1:4f:c1:21:99:06:d4:a7:c8:5d:5f: 72:5e:2b:81:7f:1c:88:98:d5:03:a5:85:c2:ab:ef: 6d:e6:92:86:b3:c3:d8:09:03:a5:8b:82:fa:69:8c: 74:8e:23:cf:c2:c8:77:5a:5d:ec:ff:23:47:8f:36: 84:df:cb:36:07:20:77:f6:0f:8c:65:86:c3:c9:67: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D5:F0:98:E6:A5:0B:41:F2:B8:A4:43:7D:DC:77:96:A9:7C:D7:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/7767794e-08b2-4526-9f12-2edd85918e87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 206.167.10.0-206.167.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:04:42:73:b5:9d:b8:ee:0e:34:a9:e2:04:2c:4d:61:25:44: 45:0f:94:75:43:68:ab:49:af:67:d5:6d:c8:3a:01:d6:52:1e: 04:47:78:ab:b6:66:40:8e:94:e2:e9:df:4b:70:12:7d:1e:cd: 5c:aa:cd:f8:56:35:c2:33:a1:f1:c0:dd:5e:f1:e8:05:dd:77: 8f:70:c4:65:13:ff:5f:ab:aa:25:4e:c4:ff:7a:64:a2:59:e7: 4a:b0:ee:ac:2a:53:a1:c0:d3:25:73:f4:f1:b4:40:32:2a:06: c3:0f:95:1b:c0:9e:90:45:ad:e0:70:90:41:b9:a0:9b:7c:06: f0:1c:16:1e:83:cb:77:3e:e3:a7:d8:01:5d:55:fb:05:c4:d9: c2:d2:94:43:7a:18:c2:76:81:f5:28:9c:22:31:bf:b0:00:89: 51:2b:81:ec:db:ca:a9:61:25:42:df:af:fd:bb:57:6d:a6:60: e2:0d:59:07:6a:8c:b7:a5:46:13:d5:63:fa:a0:95:92:e3:98: 82:a2:78:50:bb:03:fc:90:4d:83:9c:56:95:e0:92:28:9b:5b: 75:86:ce:97:c0:98:05:04:94:6e:07:ba:91:df:09:22:c1:5b: f2:9c:a0:92:64:9c:fe:34:c3:ec:59:f4:28:27:d9:5a:91:a9: 6d:e2:be:c3 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE1HvUz5XoyezgsWlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyNTAwNDUyM1oXDTI4MDYyNzAwNDUyM1owLzEtMCsGA1UEAxMk Nzc2Nzc5NGUtMDhiMi00NTI2LTlmMTItMmVkZDg1OTE4ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA+l6n1LgQZkl/uYT975urUNefRytHThpVmS mdaJ0DsNB6TD3qfTV+Ok8Rio4kZCCQb8fQ9bAvVtncgyeYGc+bFrIW3guY5U9OD6 FYwM1dPfV5aIDYbTTcAo0cw8LiXgXN+6g8N40ho2tCMmm86tBB+T2rGLpFjMFs9a BMCu+ioXgs5GV1juFJBrF99Mgo2x1OJY/QvrOVWsYSO0JWkAXFauQz6KuL0KSGfa ikT4kM6UfybmEu8moU/BIZkG1KfIXV9yXiuBfxyImNUDpYXCq+9t5pKGs8PYCQOl i4L6aYx0jiPPwsh3Wl3s/yNHjzaE38s2ByB39g+MZYbDyWfTgwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFDbV8JjmpQtB8rikQ33cd5apfNcpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NzY3Nzk0ZS0wOGIyLTQ1MjYtOWYxMi0yZWRkODU5MThlODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc3Njc3OTRlLTA4YjItNDUyNi05 ZjEyLTJlZGQ4NTkxOGU4Ny83NzY3Nzk0ZS0wOGIyLTQ1MjYtOWYxMi0yZWRkODU5 MThlODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAc6nCgMEAs6nEDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiBEJztZ24 7g40qeIELE1hJURFD5R1Q2irSa9n1W3IOgHWUh4ER3irtmZAjpTi6d9LcBJ9Hs1c qs34VjXCM6HxwN1e8egF3XePcMRlE/9fq6olTsT/emSiWedKsO6sKlOhwNMlc/Tx tEAyKgbDD5UbwJ6QRa3gcJBBuaCbfAbwHBYeg8t3PuOn2AFdVfsFxNnC0pRDehjC doH1KJwiMb+wAIlRK4Hs28qpYSVC36/9u1dtpmDiDVkHaoy3pUYT1WP6oJWS45iC onhQuwP8kE2DnFaV4JIom1t1hs6XwJgFBJRuB7qR3wkiwVvynKCSZJz+NMPsWfQo J9lakalt4r7D -----END CERTIFICATE-----Generated at Sat Mar 28 10:22:38 2026 by rpki-client