$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer File: 8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer (raw, json) Hash identifier: hwWLHM6xXBLx+OygYltBQofuKAYAMv4i3C0+MpwcJhU= Subject key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3432823134712C2A6E0B8180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 00:45:22 +0000 Certificate not after: Tue 20 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 394772 IP: 66.223.120.0/21 IP: 199.241.140.0/23 IP: 2602:f9a8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:32:82:31:34:71:2c:2a:6e:0b:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 00:45:22 2026 GMT Not After : Jun 20 00:45:22 2028 GMT Subject: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:5b:64:25:0a:87:5d:b1:55:11:1d:b4:57: 83:b9:0d:c6:96:ef:9a:cf:27:6c:e9:21:c6:75:25: 00:1a:4b:39:a3:b7:1d:b2:eb:96:82:2b:3d:c8:01: ba:e0:8e:39:65:f3:81:d7:83:f7:9f:49:17:75:1e: 03:53:09:2d:53:28:5c:4b:48:eb:41:71:de:d4:be: 87:ad:aa:e7:12:31:57:55:55:56:bb:cc:1b:ef:0d: 01:d5:6e:33:cb:dc:d6:cb:f3:eb:2b:0a:5f:a1:6c: 21:23:ca:5d:62:f7:65:88:f5:02:70:aa:8d:d4:ea: 16:1d:cf:b0:d0:1b:ce:3e:96:6b:31:3f:d5:9c:e3: f5:e6:eb:28:3a:79:58:72:63:5b:2e:96:0e:9d:a2: fa:09:f3:b7:28:7b:44:77:ff:d1:4e:ba:74:3c:ff: 55:36:44:d2:aa:d1:f8:03:38:3c:3a:b9:ac:56:a7: 89:d1:48:75:8f:1a:05:77:9a:9d:a7:a3:6b:29:5a: 9f:48:38:92:dc:95:40:3d:14:e7:39:19:cf:4d:c9: eb:4e:3d:ab:43:2e:d6:27:58:49:28:0d:05:09:4e: 31:87:4a:f7:2f:6a:cf:ec:a5:3a:26:10:e5:09:e8: 31:1c:a8:23:7e:64:47:58:eb:40:2a:93:d5:8c:69: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.223.120.0/21 199.241.140.0/23 IPv6: 2602:f9a8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394772 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:da:b2:a7:a3:3f:1e:b8:e4:fd:1d:c3:ad:9e:e7:2d:df:a8: 1e:76:51:18:d1:cd:6c:ef:61:a8:59:7a:1d:f3:da:57:7c:95: f9:10:2d:f4:88:fc:7d:47:f0:04:f9:22:42:e8:12:24:9d:f9: 22:77:f1:7c:2e:36:4f:3d:ea:16:fc:65:36:4d:db:27:86:1d: 7e:af:e9:b3:5c:26:e7:a6:c2:30:1b:e6:e0:7c:c2:fd:dd:03: 6b:8c:cc:86:4a:93:98:6f:7e:02:1e:11:df:78:d4:2c:fd:6a: b2:b3:5d:8a:39:52:aa:a6:da:48:4e:60:6e:39:d8:18:fd:e9: 07:d1:74:8d:fb:0a:5f:5a:de:49:d3:24:04:dd:f2:3c:ac:d6: 33:af:9b:6b:29:53:1e:ca:27:4a:34:82:4c:68:7a:da:92:46: d6:7d:c6:6f:e2:01:54:d9:3d:2b:f4:f4:7a:8e:91:98:f9:6b: c6:39:5a:8d:f9:68:dc:f3:af:41:23:91:8d:c3:e0:03:21:a6: 28:ae:15:25:68:ed:62:e9:5a:62:53:84:2c:ea:55:cd:4f:38: 3d:b4:45:cd:df:d0:30:6b:be:63:5a:28:be:b3:0d:4d:03:2b: 8a:2f:8c:af:80:a4:43:6e:5f:77:87:f9:ac:d9:47:32:cc:ec: 6b:42:ee:ac -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE00MoIxNHEsKm4LgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxODAwNDUyMloXDTI4MDYyMDAwNDUyMlowLzEtMCsGA1UEAxMk OGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRlZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+FbZCUKh12xVREdtFeDuQ3Glu+azyds6SHG dSUAGks5o7cdsuuWgis9yAG64I45ZfOB14P3n0kXdR4DUwktUyhcS0jrQXHe1L6H rarnEjFXVVVWu8wb7w0B1W4zy9zWy/PrKwpfoWwhI8pdYvdliPUCcKqN1OoWHc+w 0BvOPpZrMT/VnOP15usoOnlYcmNbLpYOnaL6CfO3KHtEd//RTrp0PP9VNkTSqtH4 Azg8OrmsVqeJ0Uh1jxoFd5qdp6NrKVqfSDiS3JVAPRTnORnPTcnrTj2rQy7WJ1hJ KA0FCU4xh0r3L2rP7KU6JhDlCegxHKgjfmRHWOtAKpPVjGm5tQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFKp37Nft88zscUsZepiJf36PkHboMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhlYWYwMTRkLTBiM2UtNDQ5NC1i MDdmLWIzMjU0ZmRkZWY2YS84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZk ZGVmNmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBANC33gDBAHH8YwwDgQCAAIwCAMGBCYC+agAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYGFDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv2rKnoz8euOT9HcOt nuct36gedlEY0c1s72GoWXod89pXfJX5EC30iPx9R/AE+SJC6BIknfkid/F8LjZP PeoW/GU2Tdsnhh1+r+mzXCbnpsIwG+bgfML93QNrjMyGSpOYb34CHhHfeNQs/Wqy s12KOVKqptpITmBuOdgY/ekH0XSN+wpfWt5J0yQE3fI8rNYzr5trKVMeyidKNIJM aHrakkbWfcZv4gFU2T0r9PR6jpGY+WvGOVqN+Wjc869BI5GNw+ADIaYorhUlaO1i 6VpiU4Qs6lXNTzg9tEXN39Awa75jWii+sw1NAyuKL4yvgKRDbl93h/ms2UcyzOxr Qu6s -----END CERTIFICATE-----Generated at Wed Mar 25 23:07:16 2026 by rpki-client