$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer File: b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer (raw, json) Hash identifier: WEa06s99z02sJqiT/31URU7XCScVgiS3AgicV52Dp3Q= Subject key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D1B1256DBB6020B4812F201C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Mar 2026 00:45:21 +0000 Certificate not after: Sun 11 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 40343 IP: 23.168.64.0/24 IP: 201.159.71.0/24 IP: 2620:3d:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:12:56:db:b6:02:0b:48:12:f2:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 9 00:45:21 2026 GMT Not After : Jun 11 00:45:21 2028 GMT Subject: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:25:0b:f6:29:91:be:e4:11:30:c6:10:21: 1c:f8:94:20:98:8e:ef:ea:46:f6:b8:30:54:0a:8d: fd:5a:77:25:12:ac:df:ef:4d:ac:03:f4:6b:80:38: 41:9e:85:22:d7:cc:88:81:d2:08:ee:e1:28:80:2a: 2a:52:0e:53:c8:a8:bb:1d:e5:51:50:87:19:49:ac: 42:a4:eb:30:cd:f6:b3:7c:76:05:b6:f3:ff:b6:69: 04:a3:5c:18:8c:1e:40:08:8a:b2:a8:5c:4a:f6:5b: 43:c4:06:23:b3:1c:61:8c:84:d2:71:29:b8:ac:6a: c8:ca:5f:20:34:d6:26:47:42:71:df:76:95:09:3a: 55:1d:7d:ae:bd:b4:b4:bb:f1:62:65:91:bc:a7:ca: 7f:13:7c:d3:cd:fa:99:72:ef:98:af:cd:3f:d0:00: dd:c1:fc:cf:47:71:a4:d1:02:30:63:4b:f9:6f:09: d6:e8:ac:3a:91:8a:1c:85:3e:b1:ec:f2:08:42:fa: a1:d5:e9:2c:1a:4b:01:c6:bf:7c:1a:28:26:a2:85: 03:e4:1a:1e:1d:a3:79:2a:a7:f6:26:4e:ee:c4:c9: 82:78:3e:98:09:9f:77:1d:ce:c9:01:2b:ca:de:b0: d1:db:a1:49:0d:5a:c8:3d:e0:73:34:9d:9e:6a:af: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.168.64.0/24 201.159.71.0/24 IPv6: 2620:3d:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a0:bf:51:0a:e1:6b:9b:39:0b:b2:d3:68:a5:02:71:06:77: 70:a9:d9:ff:9b:78:ae:fb:74:df:ad:0a:c3:91:7c:cf:3d:0a: e5:69:e5:61:57:a7:33:ad:2d:06:0c:0e:51:7c:b9:96:57:22: 47:13:16:25:8a:9e:1c:1d:f1:67:ba:58:b7:b7:2e:83:63:eb: 06:78:31:8b:e6:71:59:20:30:21:74:ad:21:fc:1e:33:55:2d: 6e:b1:64:18:91:0f:dc:ec:9c:b4:54:d6:6b:94:f6:51:c5:d9: 7e:da:80:e0:99:31:e3:d5:8e:ee:ec:a7:6e:c9:67:bc:3a:4a: 02:ff:08:9c:62:37:3d:7c:df:e2:42:7d:2e:a0:3b:33:18:e4: cc:b0:c7:3f:c7:ad:ca:eb:e8:27:18:29:93:bf:8f:58:8c:0e: 9c:af:89:a0:1c:7f:fd:10:0b:d0:4c:23:28:b4:5d:d2:3a:5e: 19:8e:bb:eb:02:40:a3:70:52:21:8f:d8:d8:6a:ce:dd:60:ec: cb:3c:61:04:62:b0:7e:33:59:21:09:06:c0:be:63:90:94:ab: d0:d1:a6:ed:68:2d:7c:10:3d:7f:ef:f1:c3:9a:d4:c1:d0:fb: ad:7a:11:35:d2:20:7f:fb:12:e5:31:b5:95:6b:e9:ca:84:7f: 02:e0:15:ac -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE0bElbbtgILSBLyAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwOTAwNDUyMVoXDTI4MDYxMTAwNDUyMVowLzEtMCsGA1UEAxMk YjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPMlC/Ypkb7kETDGECEc+JQgmI7v6kb2uDBU Co39WnclEqzf702sA/RrgDhBnoUi18yIgdII7uEogCoqUg5TyKi7HeVRUIcZSaxC pOswzfazfHYFtvP/tmkEo1wYjB5ACIqyqFxK9ltDxAYjsxxhjITScSm4rGrIyl8g NNYmR0Jx33aVCTpVHX2uvbS0u/FiZZG8p8p/E3zTzfqZcu+Yr80/0ADdwfzPR3Gk 0QIwY0v5bwnW6Kw6kYochT6x7PIIQvqh1eksGksBxr98GigmooUD5BoeHaN5Kqf2 Jk7uxMmCeD6YCZ93Hc7JASvK3rDR26FJDVrIPeBzNJ2eaq9Q7QIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFGxZ308eOW+Jl9E4wQ2LgbxUvOvDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I2NTRlYjYzLTFiYmItNDdjYy04 ZmMzLWY0NWE5YjJhNjlhNy9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIy YTY5YTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXqEADBADJn0cwDwQCAAIwCQMHACYgAD3gADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAnZcwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANaC/UQrha5s5C7LT aKUCcQZ3cKnZ/5t4rvt0360Kw5F8zz0K5WnlYVenM60tBgwOUXy5llciRxMWJYqe HB3xZ7pYt7cug2PrBngxi+ZxWSAwIXStIfweM1UtbrFkGJEP3OyctFTWa5T2UcXZ ftqA4Jkx49WO7uynbslnvDpKAv8InGI3PXzf4kJ9LqA7MxjkzLDHP8etyuvoJxgp k7+PWIwOnK+JoBx//RAL0EwjKLRd0jpeGY676wJAo3BSIY/Y2GrO3WDsyzxhBGKw fjNZIQkGwL5jkJSr0NGm7WgtfBA9f+/xw5rUwdD7rXoRNdIgf/sS5TG1lWvpyoR/ AuAVrA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:04 2026 by rpki-client