$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer File: 94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer (raw, json) Hash identifier: z6SF8rLN85Q5CdGgAA4HfTc2Jxxe3Y67lgZwd7j1OBM= Subject key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D1C77B0F303E140D28A61D080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Mar 2026 12:45:22 +0000 Certificate not after: Sun 11 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 13696 IP: 142.248.136.0/22 IP: 2602:f77c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:77:b0:f3:03:e1:40:d2:8a:61:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 9 12:45:22 2026 GMT Not After : Jun 11 12:45:22 2028 GMT Subject: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:90:dc:35:6c:c6:1c:45:61:8d:28:cf:03: 12:65:1f:37:8c:43:43:9d:80:34:19:31:69:ba:b5: 5d:53:0b:be:e4:f4:13:78:5e:78:5a:42:a9:1b:c8: d0:7d:3e:dd:85:7f:3b:39:1c:9a:e0:05:c0:3a:f3: 58:6a:9f:a7:05:e5:4c:5f:4b:70:f7:3b:a6:2d:10: c5:52:6f:03:58:d6:45:c4:2a:0e:f3:2e:98:3d:15: aa:7f:53:94:fe:80:c4:65:9e:3b:82:06:a2:6a:87: f0:6a:21:9d:61:18:ed:47:aa:be:da:20:a1:a3:d4: f0:88:71:4c:e4:41:6d:8e:8a:df:39:40:75:17:0a: 98:64:8d:fe:e4:48:34:10:ea:db:a8:15:44:51:d1: e9:6d:00:c7:e4:54:03:5d:45:20:40:fc:d1:1b:f5: 0f:47:e5:71:d5:f1:da:78:b9:49:8d:09:c9:a8:61: e8:61:33:19:15:6e:52:e9:c0:07:ec:42:d7:ac:d1: 1a:81:af:79:23:cf:41:47:48:fe:c6:a9:bf:b6:b3: 2f:e3:38:9a:e1:53:95:53:c6:ac:ec:ef:e4:34:56: 35:d7:51:71:d2:00:b3:96:b2:d4:c6:3b:91:58:13: d5:6e:3b:56:7a:f0:2b:76:7c:a5:7a:99:ba:2c:f7: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.136.0/22 IPv6: 2602:f77c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13696 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:44:9c:e5:44:21:71:6d:da:72:22:e3:f5:0f:a2:89:50:d1: cc:3c:9c:41:f9:c9:aa:9a:07:69:68:fb:7e:6e:93:e5:0b:e5: 85:96:4d:e7:11:14:f8:74:44:32:99:68:7c:99:4b:43:51:86: 7e:ce:cc:c8:fa:c0:f2:77:73:ec:02:11:f8:9e:59:ee:2a:d2: 59:fe:85:ec:fd:6f:8c:d2:96:b0:8f:64:fb:f5:19:d7:fb:19: c3:70:f0:79:c3:33:3d:22:39:7c:65:3c:ef:32:60:c3:dd:34: c9:a2:fd:a9:ad:02:61:40:3c:bb:51:2c:92:e6:db:39:5b:54: ce:9e:bf:82:5e:8f:5d:af:74:97:e1:32:d0:9c:73:88:44:83: 87:96:53:0c:9b:97:0e:a9:d6:a4:c9:65:a9:12:6a:80:7c:b5: 55:90:58:f1:5b:31:32:a4:df:45:3f:36:bc:db:d6:be:50:e7: 2b:0e:84:1a:df:8f:0a:f9:79:81:8a:9b:64:b4:3a:69:1d:01: 21:84:da:54:9b:5b:d0:f1:3b:51:40:c3:fc:4e:2d:c8:67:d1: f7:5d:d0:81:05:26:50:d8:16:8f:f2:50:b3:03:82:6c:45:8e: 2d:ae:61:08:74:17:c4:a0:1a:4a:0f:80:b4:ae:b7:48:eb:f2: 63:a0:e2:4e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0cd7DzA+FA0oph0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwOTEyNDUyMloXDTI4MDYxMTEyNDUyMlowLzEtMCsGA1UEAxMk OTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8qQ3DVsxhxFYY0ozwMSZR83jENDnYA0GTFp urVdUwu+5PQTeF54WkKpG8jQfT7dhX87ORya4AXAOvNYap+nBeVMX0tw9zumLRDF Um8DWNZFxCoO8y6YPRWqf1OU/oDEZZ47ggaiaofwaiGdYRjtR6q+2iCho9TwiHFM 5EFtjorfOUB1FwqYZI3+5Eg0EOrbqBVEUdHpbQDH5FQDXUUgQPzRG/UPR+Vx1fHa eLlJjQnJqGHoYTMZFW5S6cAH7ELXrNEaga95I89BR0j+xqm/trMv4zia4VOVU8as 7O/kNFY111Fx0gCzlrLUxjuRWBPVbjtWevArdnylepm6LPffewIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJHF2x7cpWErhAugrqSNZMUFyBBIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk0ZjYyM2U3LWM2YmUtNGMzYi1i NTU0LTZhZDZhY2IwODUwYi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNi MDg1MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKO+IgwDgQCAAIwCAMGBCYC93wAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFZEnOVEIXFt2nIi4/UPoolQ0cw8 nEH5yaqaB2lo+35uk+UL5YWWTecRFPh0RDKZaHyZS0NRhn7OzMj6wPJ3c+wCEfie We4q0ln+hez9b4zSlrCPZPv1Gdf7GcNw8HnDMz0iOXxlPO8yYMPdNMmi/amtAmFA PLtRLJLm2zlbVM6ev4Jej12vdJfhMtCcc4hEg4eWUwyblw6p1qTJZakSaoB8tVWQ WPFbMTKk30U/Nrzb1r5Q5ysOhBrfjwr5eYGKm2S0OmkdASGE2lSbW9DxO1FAw/xO Lchn0fdd0IEFJlDYFo/yULMDgmxFji2uYQh0F8SgGkoPgLSut0jr8mOg4k4= -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:37 2026 by rpki-client