$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af90da97-5018-4517-bbbe-56fca0027fa9.cer File: af90da97-5018-4517-bbbe-56fca0027fa9.cer (raw, json) Hash identifier: Ev5qnfkHxMOtC3/C2wIl6O6zin/3uh4QBPSYvj+a41M= Subject key identifier: 94:36:82:F3:02:23:D5:23:85:02:AE:50:59:81:1B:8A:0B:D6:D1:22 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D202FE40E9B1EB43D5BC55A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af90da97-5018-4517-bbbe-56fca0027fa9/af90da97-5018-4517-bbbe-56fca0027fa9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af90da97-5018-4517-bbbe-56fca0027fa9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 20:43:56 +0000 Certificate not after: Mon 12 Jun 2028 20:43:56 +0000 Subordinate resources: AS: 395860 IP: 198.61.48.0 -- 198.61.56.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:2f:e4:0e:9b:1e:b4:3d:5b:c5:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 10 20:43:56 2026 GMT Not After : Jun 12 20:43:56 2028 GMT Subject: CN=af90da97-5018-4517-bbbe-56fca0027fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:46:9a:ac:d4:de:db:79:3c:70:00:b7:93: be:98:f9:72:c8:a5:2e:fa:d0:7f:25:c5:82:97:18: 23:6a:63:86:9d:61:8e:7e:ce:8d:b7:60:55:0b:67: bf:2d:b8:1e:5b:16:48:cb:93:8b:5e:5f:e4:64:f5: 31:73:f5:bf:b2:99:7d:60:b9:55:d6:01:ee:27:35: ea:36:a9:df:61:91:08:1e:a4:a9:4c:34:4f:7a:f2: 52:01:5d:bd:01:31:b0:77:5d:6c:03:9b:76:0e:f1: e8:eb:e8:b8:25:5c:25:38:9d:8a:c9:cd:ab:18:9b: 08:ce:e7:3d:6a:cf:b7:5a:bb:9f:42:e0:75:11:0a: 90:ea:73:72:4f:e5:d8:56:f5:b9:86:91:0d:c3:9d: 4b:ab:b3:02:42:36:70:b1:4f:c8:56:ec:35:2b:b2: bf:95:63:ce:4d:30:24:0b:1b:4c:47:c9:80:f8:8b: bd:34:08:52:3e:58:2a:23:ba:15:0d:e8:be:6f:3f: a4:78:59:a0:9d:f4:2f:14:7a:8e:a1:bc:1c:37:8d: f2:7f:36:9b:ce:53:ef:57:d1:21:e3:b5:b4:34:c5: 76:ef:6d:5b:35:59:83:53:b5:2a:2e:92:5f:e2:a0: 31:80:49:95:51:27:1e:89:6d:11:70:34:c2:b5:84: f3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:36:82:F3:02:23:D5:23:85:02:AE:50:59:81:1B:8A:0B:D6:D1:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af90da97-5018-4517-bbbe-56fca0027fa9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af90da97-5018-4517-bbbe-56fca0027fa9/af90da97-5018-4517-bbbe-56fca0027fa9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 198.61.48.0-198.61.56.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3f:fb:3b:61:9c:65:1a:82:b3:07:20:8d:b8:13:60:ea:73: c2:7d:f0:2c:e1:da:0d:35:96:1e:2c:fd:44:6d:d8:6c:ef:7a: 52:ce:e7:c9:25:8e:d2:88:72:7c:88:b6:73:dd:9b:2f:df:c8: e4:c1:6d:28:bd:4d:5a:5e:c4:29:19:56:7f:fc:7a:51:75:d8: df:c0:2a:ce:c2:95:75:6d:22:fe:04:fe:2c:1e:92:cf:12:9e: 2b:d3:86:d3:a7:1e:5e:a1:a1:a0:c3:88:81:1d:89:7f:6a:9e: 61:58:24:af:90:91:9f:96:d9:3a:6c:f5:7d:17:37:9b:8c:80: c7:86:ee:d7:aa:9c:ed:96:d4:f8:9d:99:fb:42:2e:65:30:33: ee:d7:3f:81:a2:20:55:a9:14:57:31:11:07:90:bf:f1:53:69: 9e:50:db:74:0c:48:a7:25:f5:45:f7:3b:d4:d3:8d:70:28:33: 2d:1b:e0:b0:8a:ff:55:39:9d:61:7f:75:91:53:fb:7c:75:94: 31:37:ce:05:17:03:e3:2d:ce:25:3e:30:e8:92:7b:04:df:82: 6f:18:59:4b:5e:45:e7:a3:36:ca:85:49:5c:80:6a:c8:75:14: 4a:0f:bd:89:1f:da:b9:8a:cd:d3:d1:81:65:0d:fb:e2:de:11: 57:4c:37:b3 -----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWE0gL+QOmx60PVvFWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMDIwNDM1NloXDTI4MDYxMjIwNDM1NlowLzEtMCsGA1UEAxMk YWY5MGRhOTctNTAxOC00NTE3LWJiYmUtNTZmY2EwMDI3ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdhGmqzU3tt5PHAAt5O+mPlyyKUu+tB/JcWC lxgjamOGnWGOfs6Nt2BVC2e/LbgeWxZIy5OLXl/kZPUxc/W/spl9YLlV1gHuJzXq NqnfYZEIHqSpTDRPevJSAV29ATGwd11sA5t2DvHo6+i4JVwlOJ2Kyc2rGJsIzuc9 as+3WrufQuB1EQqQ6nNyT+XYVvW5hpENw51Lq7MCQjZwsU/IVuw1K7K/lWPOTTAk CxtMR8mA+Iu9NAhSPlgqI7oVDei+bz+keFmgnfQvFHqOobwcN43yfzabzlPvV9Eh 47W0NMV2721bNVmDU7UqLpJf4qAxgEmVUSceiW0RcDTCtYTz5wIDAQABo4IEIzCC BB8wHQYDVR0OBBYEFJQ2gvMCI9UjhQKuUFmBG4oL1tEiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ZjkwZGE5Ny01MDE4LTQ1MTctYmJiZS01NmZjYTAwMjdmYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FmOTBkYTk3LTUwMTgtNDUxNy1i YmJlLTU2ZmNhMDAyN2ZhOS9hZjkwZGE5Ny01MDE4LTQ1MTctYmJiZS01NmZjYTAw MjdmYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBMY9MAMEAMY9ODAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMGClQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAmD/7O2GcZRqCswcgjbgTYOpzwn3wLOHaDTWW Hiz9RG3YbO96Us7nySWO0ohyfIi2c92bL9/I5MFtKL1NWl7EKRlWf/x6UXXY38Aq zsKVdW0i/gT+LB6SzxKeK9OG06ceXqGhoMOIgR2Jf2qeYVgkr5CRn5bZOmz1fRc3 m4yAx4bu16qc7ZbU+J2Z+0IuZTAz7tc/gaIgVakUVzERB5C/8VNpnlDbdAxIpyX1 Rfc71NONcCgzLRvgsIr/VTmdYX91kVP7fHWUMTfOBRcD4y3OJT4w6JJ7BN+CbxhZ S15F56M2yoVJXIBqyHUUSg+9iR/auYrN09GBZQ374t4RV0w3sw== -----END CERTIFICATE-----Generated at Wed Mar 25 22:54:52 2026 by rpki-client