$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer File: 8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer (raw, json) Hash identifier: GJgu8osxIOOiPN4MIJRLGFOiiRi0pPhXn/gFBHSSFmM= Subject key identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DAC3DE23132750AD3ABD80000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 00:45:18 +0000 Certificate not after: Wed 02 Aug 2028 00:45:18 +0000 Subordinate resources: IP: 66.45.103.0/24 IP: 2602:f708::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:3d:e2:31:32:75:0a:d3:ab:d8:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 30 00:45:18 2026 GMT Not After : Aug 2 00:45:18 2028 GMT Subject: CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:e0:18:54:8d:66:c0:d4:73:3f:6b:09:e8: e1:82:fc:bf:c4:75:b1:0b:6f:3b:b6:c7:af:f2:f5: 6b:53:5e:b4:f1:9b:4c:3e:56:6a:ac:6c:42:e3:7c: 73:64:2a:bd:98:cb:f5:bc:72:b1:ab:a6:71:43:a5: 7a:38:55:82:05:5a:1a:1d:c9:91:21:b9:13:2c:f7: e5:af:1e:e9:c5:05:d4:34:b6:73:b1:46:20:de:c8: 64:a3:83:23:72:0d:d9:de:2a:9a:fc:1e:bd:4d:8c: 3b:c9:de:9b:9e:e4:06:e6:98:4c:90:e6:45:30:d0: b8:82:4c:f1:8a:3e:24:7f:ae:14:13:1c:8a:ad:67: 9a:24:84:d7:3c:0e:ee:0c:82:5b:b4:78:88:ac:83: 6b:57:e0:58:96:2e:9f:b4:93:67:df:66:87:45:50: 2b:b8:a4:9c:77:4b:31:ab:fe:4f:4f:80:76:24:bf: a3:17:39:49:3d:83:ae:43:e3:56:28:7a:b0:85:1e: 96:49:d5:53:97:bc:6e:b7:f1:1f:89:5a:63:19:1a: 3f:ee:7d:81:a2:a0:ec:0f:50:6a:cc:5d:18:24:4b: f6:6c:d0:3f:9e:58:86:a5:36:1a:db:b3:e7:f4:0b: e0:c6:ce:98:da:84:54:9d:2a:5f:c6:85:a9:e3:f5: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.45.103.0/24 IPv6: 2602:f708::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:63:17:49:ea:13:d2:bc:c5:19:16:f0:e4:2c:9d:43:20:55: c1:7b:62:5f:f9:1f:5b:fa:30:7a:bf:59:c9:14:f6:c2:11:83: 4a:e3:3f:57:02:f7:c8:af:d3:45:cb:a1:38:20:93:2a:2f:4f: 73:08:b4:9f:71:94:91:4a:be:11:8c:27:ea:45:1d:c3:31:08: ce:08:8d:c2:58:20:08:68:f8:11:18:1c:99:6b:a8:34:d0:b2: 6a:88:87:3c:a7:94:fc:53:6c:db:97:ec:5a:c4:f6:68:15:62: 7b:d8:d0:59:56:b9:6d:c8:0f:43:4e:d9:fb:7d:82:62:00:66: a9:f4:f5:11:00:2f:67:96:a8:b7:93:34:a9:9d:fd:1b:ef:18: 07:6d:e8:63:77:e2:79:7d:b2:ac:66:e4:8c:f0:03:e4:0e:02: a1:fc:f3:7d:8d:3e:82:8b:e7:88:30:a1:3f:1a:4c:50:6b:7b: dd:9c:5b:17:6e:19:44:ad:95:2a:1e:f2:b8:fd:92:8e:6d:11: a0:97:c6:8b:1f:51:0d:7e:b4:b3:c0:f9:be:37:d1:02:a6:31: fa:f7:5c:63:c0:4f:35:1c:96:69:a4:f7:11:d2:f4:f3:a1:78: f9:5d:96:5c:24:03:d5:64:5a:71:34:7b:84:3d:04:5e:ce:4d: af:71:e2:55 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE2sPeIxMnUK06vYAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQzMDAwNDUxOFoXDTI4MDgwMjAwNDUxOFowLzEtMCsGA1UEAxMk OGY0NmFmN2ItOGE1MS00ZDBjLTgyZTEtYmYwZTc1MTA4NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngXgGFSNZsDUcz9rCejhgvy/xHWxC287tsev 8vVrU1608ZtMPlZqrGxC43xzZCq9mMv1vHKxq6ZxQ6V6OFWCBVoaHcmRIbkTLPfl rx7pxQXUNLZzsUYg3shko4Mjcg3Z3iqa/B69TYw7yd6bnuQG5phMkOZFMNC4gkzx ij4kf64UExyKrWeaJITXPA7uDIJbtHiIrINrV+BYli6ftJNn32aHRVAruKScd0sx q/5PT4B2JL+jFzlJPYOuQ+NWKHqwhR6WSdVTl7xut/EfiVpjGRo/7n2BoqDsD1Bq zF0YJEv2bNA/nliGpTYa27Pn9Avgxs6Y2oRUnSpfxoWp4/WZ9QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFN7YHz9T9M/VfSeYExbPAPdhyWHhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 ZjQ2YWY3Yi04YTUxLTRkMGMtODJlMS1iZjBlNzUxMDg2MTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhmNDZhZjdiLThhNTEtNGQwYy04 MmUxLWJmMGU3NTEwODYxMC84ZjQ2YWY3Yi04YTUxLTRkMGMtODJlMS1iZjBlNzUx MDg2MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABCLWcwDgQCAAIwCAMGACYC9wgAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKBjF0nqE9K8xRkW8OQsnUMgVcF7Yl/5H1v6MHq/WckU9sIRg0rjP1cC98iv00XL oTggkyovT3MItJ9xlJFKvhGMJ+pFHcMxCM4IjcJYIAho+BEYHJlrqDTQsmqIhzyn lPxTbNuX7FrE9mgVYnvY0FlWuW3ID0NO2ft9gmIAZqn09REAL2eWqLeTNKmd/Rvv GAdt6GN34nl9sqxm5IzwA+QOAqH8832NPoKL54gwoT8aTFBre92cWxduGUStlSoe 8rj9ko5tEaCXxosfUQ1+tLPA+b430QKmMfr3XGPATzUclmmk9xHS9POhePldllwk A9VkWnE0e4Q9BF7OTa9x4lU= -----END CERTIFICATE-----Generated at Wed May 13 01:00:39 2026 by rpki-client