$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer File: 7fb67441-9735-44cc-ae5f-20a79cca0b47.cer (raw, json) Hash identifier: trBMLrdWwK2dSMnzFRwCdmV4FC5Bc/FMw6sJ8EGz8w4= Subject key identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D186571AE53341DF3920FB880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Mar 2026 01:45:22 +0000 Certificate not after: Sat 10 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 29894 IP: 64.130.128.0/18 IP: 96.31.48.0/20 IP: 169.136.32.0/19 IP: 216.122.32.0/20 IP: 2607:bdc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:65:71:ae:53:34:1d:f3:92:0f:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 8 01:45:22 2026 GMT Not After : Jun 10 00:45:22 2028 GMT Subject: CN=7fb67441-9735-44cc-ae5f-20a79cca0b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:69:b6:17:7b:8a:ae:46:e3:e6:1f:7b:3b: ff:c7:36:b4:da:9c:37:7a:6f:df:53:6b:6d:ab:b1: 26:fb:89:2c:95:ba:75:45:c1:21:70:00:77:d3:e0: f9:fb:7c:db:07:ed:33:66:41:6e:e9:91:14:a3:4c: 56:3e:f1:98:83:b5:7b:be:ec:4a:9e:fb:23:4a:7b: 9c:16:d6:74:c5:ff:82:f4:96:5c:c7:40:b5:f1:b3: 47:85:0e:96:02:97:bc:d5:9a:79:f3:5b:6f:1c:95: 6a:7c:84:f1:6c:69:18:6e:28:25:46:9e:de:7b:4f: b2:ee:62:ae:38:b1:92:13:d0:9c:4c:11:db:e6:04: 24:79:23:a6:30:26:ad:d1:b1:42:62:3a:26:66:9a: a3:5d:3b:44:d0:02:54:f4:a5:67:15:20:da:e6:27: fe:86:5b:59:d1:cc:1a:a2:5c:ae:ed:b3:5f:b5:64: a1:58:f7:1d:4f:5d:f9:2d:94:66:1b:54:8b:00:03: d6:ad:f5:c9:30:6d:59:2b:dd:3e:5d:4a:3f:60:16: 8e:36:1b:b0:de:05:8f:ee:f6:96:a8:47:b3:72:09: 38:c5:5e:4a:ba:63:95:b3:83:ad:01:9d:d1:bd:28: 44:af:ed:20:e1:13:41:49:49:aa:b2:00:5a:f4:ed: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.130.128.0/18 96.31.48.0/20 169.136.32.0/19 216.122.32.0/20 IPv6: 2607:bdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29894 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3c:e5:4f:38:9e:45:1a:a4:72:be:bd:63:89:98:fe:6f:70: 0f:2f:01:7e:86:cd:01:79:97:f5:db:a0:ff:21:e6:19:3c:8e: 4c:e6:73:3e:9d:01:41:1f:7f:6f:69:a1:c4:da:0e:a1:aa:0e: 1d:fa:e5:19:ec:ef:95:d9:bc:d5:1f:c1:cc:7e:be:26:69:a5: 6e:05:8f:65:46:ce:7d:ea:91:40:2a:66:e0:84:7a:c7:ae:d3: 06:66:ec:18:1e:f8:92:8c:48:25:23:f8:f8:e3:63:99:e6:e3: 31:2c:8f:a1:dd:60:3b:d1:60:bf:60:8a:34:cf:38:c5:aa:da: d9:d8:25:6d:84:65:58:1c:51:63:85:6f:d1:bb:0a:c7:53:44: 48:9a:dd:0e:f5:00:1f:be:46:7b:89:d4:13:f3:9d:df:a9:37: 3d:56:ea:4b:03:e3:d4:35:c7:86:03:27:64:b9:84:d1:40:51: a8:9f:72:f8:de:d6:f3:08:10:62:89:cc:2b:2e:48:3e:61:57: fa:37:50:bf:e0:70:19:96:fe:a2:d2:8b:e1:ce:5c:6a:18:77: 64:16:fc:be:e9:80:a3:3c:95:0b:54:9d:0a:9d:ed:e6:76:3e: 54:b8:0b:61:0c:8d:97:7d:0c:9a:38:6c:e1:89:28:86:24:b8: c4:e2:5b:a3 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE0YZXGuUzQd85IPuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwODAxNDUyMloXDTI4MDYxMDAwNDUyMlowLzEtMCsGA1UEAxMk N2ZiNjc0NDEtOTczNS00NGNjLWFlNWYtMjBhNzljY2EwYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoBpthd7iq5G4+Yfezv/xza02pw3em/fU2tt q7Em+4kslbp1RcEhcAB30+D5+3zbB+0zZkFu6ZEUo0xWPvGYg7V7vuxKnvsjSnuc FtZ0xf+C9JZcx0C18bNHhQ6WApe81Zp581tvHJVqfITxbGkYbiglRp7ee0+y7mKu OLGSE9CcTBHb5gQkeSOmMCat0bFCYjomZpqjXTtE0AJU9KVnFSDa5if+hltZ0cwa olyu7bNftWShWPcdT135LZRmG1SLAAPWrfXJMG1ZK90+XUo/YBaONhuw3gWP7vaW qEezcgk4xV5KumOVs4OtAZ3RvShEr+0g4RNBSUmqsgBa9O1ADwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFK9HVb0r6E6IX0ga4+npMm3JrE6zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZmI2NzQ0MS05NzM1LTQ0Y2MtYWU1Zi0yMGE3OWNjYTBiNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdmYjY3NDQxLTk3MzUtNDRjYy1h ZTVmLTIwYTc5Y2NhMGI0Ny83ZmI2NzQ0MS05NzM1LTQ0Y2MtYWU1Zi0yMGE3OWNj YTBiNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAZAgoADBARgHzADBAWpiCADBATYeiAwDQQCAAIw BwMFACYHvcAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdMYwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASDzl TzieRRqkcr69Y4mY/m9wDy8BfobNAXmX9dug/yHmGTyOTOZzPp0BQR9/b2mhxNoO oaoOHfrlGezvldm81R/BzH6+JmmlbgWPZUbOfeqRQCpm4IR6x67TBmbsGB74koxI JSP4+ONjmebjMSyPod1gO9Fgv2CKNM84xara2dglbYRlWBxRY4Vv0bsKx1NESJrd DvUAH75Ge4nUE/Od36k3PVbqSwPj1DXHhgMnZLmE0UBRqJ9y+N7W8wgQYonMKy5I PmFX+jdQv+BwGZb+otKL4c5cahh3ZBb8vumAozyVC1SdCp3t5nY+VLgLYQyNl30M mjhs4YkohiS4xOJbow== -----END CERTIFICATE-----Generated at Wed Mar 25 23:13:00 2026 by rpki-client