$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer File: 8f1868fa-3526-44ef-8aae-27ceceb072f9.cer (raw, json) Hash identifier: DPbKHusXPOcRohtW2fVco+jIdkdkzbO4eW/goT3NBno= Subject key identifier: AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DBE63537B80823999B8DA2DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 12:45:17 +0000 Certificate not after: Tue 08 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 208.84.80.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:63:53:7b:80:82:39:99:b8:da:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 6 12:45:17 2026 GMT Not After : Aug 8 12:45:17 2028 GMT Subject: CN=8f1868fa-3526-44ef-8aae-27ceceb072f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:53:b7:28:0e:c3:f9:ea:0e:e5:b1:24:f6: f2:a9:b7:db:7c:8e:ac:ae:37:3c:fa:8e:75:f8:45: 0a:f4:60:d7:60:ca:3c:d5:23:45:4f:59:32:e0:6a: b0:4c:1f:39:ae:f0:e3:6a:a0:b6:4a:91:ff:ee:5d: 68:fd:81:f9:5f:bf:b1:5e:ce:5d:a3:db:f4:6b:6c: d0:4f:d8:a4:15:e1:b6:7f:bc:32:d3:f3:28:e3:13: d3:e9:6d:9f:88:ad:b3:48:15:ce:7f:ca:ed:37:ee: 1d:48:99:07:23:dd:5d:ed:72:0e:62:f0:a4:80:45: 30:99:92:c0:75:98:2c:24:2e:64:13:fd:e9:89:da: e5:01:a4:58:45:f4:0e:61:41:53:1a:03:a5:bd:68: 53:f4:b6:57:34:d0:52:6d:02:ec:d1:9d:3b:78:f6: 2f:fe:fb:81:19:4b:44:2b:62:1b:97:5f:a5:0a:36: d7:3a:84:d2:57:0e:bd:7f:9a:a3:a3:15:0e:9d:72: 80:ac:39:1f:c7:b9:11:45:d7:e9:ac:63:86:3b:03: 65:88:93:88:57:0b:25:db:86:32:4d:08:6d:ef:74: e7:b7:40:ee:bb:c9:0f:bc:bc:95:ac:bb:19:0c:3d: 26:37:70:29:11:ea:0c:b7:98:20:71:4a:6e:f9:b4: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 208.84.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e9:dd:ca:55:ad:e0:df:bd:6a:ec:a7:e4:b0:8c:68:67:43: cb:df:36:12:b8:53:ed:42:d3:6b:63:b6:94:a9:82:9b:97:46: 63:d4:03:14:2d:d2:80:e2:56:99:d8:04:33:f0:25:0f:4d:17: 06:5f:50:13:e0:c1:92:14:6e:40:72:ca:a8:c8:be:ba:2c:35: 99:42:28:56:5d:39:91:90:17:67:6c:68:be:1c:50:d9:04:35: 07:92:ee:4f:e5:04:31:c5:0c:44:e2:90:d8:1c:79:83:38:fd: 1e:2d:0b:f8:3b:ca:4a:89:46:54:74:ba:2a:48:7e:03:e6:72: a2:82:df:d5:6b:f1:39:c1:5c:4d:cf:7d:fb:51:72:1a:75:05: 34:b8:2b:36:95:6b:9f:ca:81:47:ea:e8:fc:ea:f3:e2:e0:4d: 71:68:53:7a:3a:12:97:ff:29:2f:f5:d2:be:57:36:77:22:4e: 59:cb:b3:d6:e3:6a:b7:73:a7:1f:8f:b3:ed:15:c2:74:27:43: 4f:5b:93:56:ba:90:79:eb:9b:b3:c7:1e:ea:aa:bb:ec:63:1e: c4:e7:6b:35:68:e2:db:91:dc:e2:ba:fe:3d:32:63:af:51:89: 93:23:97:b7:db:16:48:c9:85:d4:38:3f:93:39:70:6d:99:da: 7d:62:22:bc -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2+Y1N7gII5mbjaLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwNjEyNDUxN1oXDTI4MDgwODEyNDUxN1owLzEtMCsGA1UEAxMk OGYxODY4ZmEtMzUyNi00NGVmLThhYWUtMjdjZWNlYjA3MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjixTtygOw/nqDuWxJPbyqbfbfI6srjc8+o51 +EUK9GDXYMo81SNFT1ky4GqwTB85rvDjaqC2SpH/7l1o/YH5X7+xXs5do9v0a2zQ T9ikFeG2f7wy0/Mo4xPT6W2fiK2zSBXOf8rtN+4dSJkHI91d7XIOYvCkgEUwmZLA dZgsJC5kE/3pidrlAaRYRfQOYUFTGgOlvWhT9LZXNNBSbQLs0Z07ePYv/vuBGUtE K2Ibl1+lCjbXOoTSVw69f5qjoxUOnXKArDkfx7kRRdfprGOGOwNliJOIVwsl24Yy TQht73Tnt0Duu8kPvLyVrLsZDD0mN3ApEeoMt5ggcUpu+bTqeQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK4NKVdHb4v3zZ8J2LXNinw/5EGbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 ZjE4NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2NlY2ViMDcyZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhmMTg2OGZhLTM1MjYtNDRlZi04 YWFlLTI3Y2VjZWIwNzJmOS84ZjE4NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2NlY2Vi MDcyZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQVFAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANundylWt4N+9auyn5LCM aGdDy982ErhT7ULTa2O2lKmCm5dGY9QDFC3SgOJWmdgEM/AlD00XBl9QE+DBkhRu QHLKqMi+uiw1mUIoVl05kZAXZ2xovhxQ2QQ1B5LuT+UEMcUMROKQ2Bx5gzj9Hi0L +DvKSolGVHS6Kkh+A+ZyooLf1WvxOcFcTc99+1FyGnUFNLgrNpVrn8qBR+ro/Orz 4uBNcWhTejoSl/8pL/XSvlc2dyJOWcuz1uNqt3OnH4+z7RXCdCdDT1uTVrqQeeub s8ce6qq77GMexOdrNWji25Hc4rr+PTJjr1GJkyOXt9sWSMmF1Dg/kzlwbZnafWIi vA== -----END CERTIFICATE-----Generated at Wed May 13 00:19:45 2026 by rpki-client