$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0.cer File: b6fd9206-247a-4078-aca1-d3717a7d7ee0.cer (raw, json) Hash identifier: KzK/odflSG0yP9dhU63/LFuu8kxASSeOiO+6Yze/bcc= Subject key identifier: B2:7F:A2:54:04:79:6A:89:1A:C4:70:A5:86:82:F5:14:4B:74:35:CA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D0EA00D8C40D5AF237DAADC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/b6fd9206-247a-4078-aca1-d3717a7d7ee0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 13:45:22 +0000 Certificate not after: Tue 06 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 15289 IP: 23.129.236.0/24 IP: 2602:f78c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a0:0d:8c:40:d5:af:23:7d:aa:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 4 13:45:22 2026 GMT Not After : Jun 6 12:45:22 2028 GMT Subject: CN=b6fd9206-247a-4078-aca1-d3717a7d7ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:4b:1f:94:cd:0c:a0:d9:f2:8d:97:80:ea: 86:b4:38:39:86:28:71:b9:f6:6b:b4:b8:9b:b3:b6: 6e:01:82:b7:df:89:30:9b:d8:dd:e1:e0:5e:4d:f0: ff:27:64:7a:2f:29:fb:db:91:5c:a2:8a:57:70:6b: 48:8e:cf:35:c6:16:3e:71:be:86:52:07:19:24:1d: 82:2a:2d:41:76:59:96:1f:62:48:d4:01:d7:95:a1: 5b:18:86:45:90:c0:83:11:9f:99:14:48:bc:23:7e: 74:ec:06:6a:fe:2c:94:3e:48:92:58:1c:e5:63:26: 07:41:1c:11:e6:73:e6:97:74:a9:91:b0:94:d3:cd: 2c:a7:32:68:0f:d0:67:52:4c:54:e0:a5:f5:f6:71: f4:4d:55:7a:c7:22:ac:90:d9:f7:19:94:04:64:f5: e8:06:d9:7d:ee:43:00:cc:fb:2d:24:c8:68:af:fc: da:9a:67:04:0c:ec:7f:13:ca:9f:02:7f:cf:c2:4c: 36:0a:1e:5a:0f:0f:5a:53:c3:2f:a0:8d:97:d1:25: 4f:25:d0:53:8b:b5:ed:59:2d:d8:b9:a1:2d:37:58: 83:43:0d:9e:93:29:88:f2:2b:14:d1:69:13:82:7a: ed:25:b6:b8:21:3c:f2:28:a6:13:34:b9:62:05:c8: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:A2:54:04:79:6A:89:1A:C4:70:A5:86:82:F5:14:4B:74:35:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/b6fd9206-247a-4078-aca1-d3717a7d7ee0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.236.0/24 IPv6: 2602:f78c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b6:7a:d0:3e:26:b7:53:73:4d:7d:70:14:8e:f6:fc:9d:d0: 55:80:70:36:b4:c4:fc:d5:d2:e8:80:f9:fb:3d:b8:bc:2d:94: 3d:68:06:06:de:72:c6:f0:a7:eb:1d:2b:3f:ab:9e:63:80:8f: 4d:eb:b7:5b:b8:76:e1:62:70:b2:40:c5:89:3e:e8:4c:db:5a: cc:a4:bf:0f:18:07:c9:9d:dd:59:06:f0:2b:3f:74:74:ad:23: f1:7f:56:0b:e2:61:87:01:6e:de:b8:b2:22:c2:5a:ee:59:c3: 15:68:a0:1c:37:f8:91:62:0c:d4:2a:f2:47:da:fb:88:d8:7a: c3:ca:a4:2e:90:0f:d7:9f:9b:a3:57:30:9b:40:c6:4b:93:37: 50:7e:cb:4c:7a:7c:1f:2e:54:18:07:27:7d:de:6e:0d:14:c8: 14:22:6a:30:05:ec:cd:16:bf:62:be:58:a5:6f:1f:51:db:b1: 35:80:a6:bb:4f:e4:18:c8:80:0a:a0:89:14:31:d3:ed:96:51: 97:98:80:35:47:06:30:b2:52:95:30:0f:28:ce:df:c2:a8:af: 63:94:63:07:8b:b2:1a:fc:cd:da:36:3b:2d:f1:75:ba:6c:4b: bc:96:66:95:cb:b9:86:f6:55:39:a3:36:6b:42:5f:33:fe:27: 7f:e6:19:9f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0OoA2MQNWvI32q3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwNDEzNDUyMloXDTI4MDYwNjEyNDUyMlowLzEtMCsGA1UEAxMk YjZmZDkyMDYtMjQ3YS00MDc4LWFjYTEtZDM3MTdhN2Q3ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBZLH5TNDKDZ8o2XgOqGtDg5hihxufZrtLib s7ZuAYK334kwm9jd4eBeTfD/J2R6Lyn725FcoopXcGtIjs81xhY+cb6GUgcZJB2C Ki1BdlmWH2JI1AHXlaFbGIZFkMCDEZ+ZFEi8I3507AZq/iyUPkiSWBzlYyYHQRwR 5nPml3SpkbCU080spzJoD9BnUkxU4KX19nH0TVV6xyKskNn3GZQEZPXoBtl97kMA zPstJMhor/zammcEDOx/E8qfAn/Pwkw2Ch5aDw9aU8MvoI2X0SVPJdBTi7XtWS3Y uaEtN1iDQw2ekymI8isU0WkTgnrtJba4ITzyKKYTNLliBcgOrwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLJ/olQEeWqJGsRwpYaC9RRLdDXKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NmZkOTIwNi0yNDdhLTQwNzgtYWNhMS1kMzcxN2E3ZDdlZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I2ZmQ5MjA2LTI0N2EtNDA3OC1h Y2ExLWQzNzE3YTdkN2VlMC9iNmZkOTIwNi0yNDdhLTQwNzgtYWNhMS1kMzcxN2E3 ZDdlZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgewwDgQCAAIwCAMGBCYC94wAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAju5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB62etA+JrdTc019cBSO9vyd0FWA cDa0xPzV0uiA+fs9uLwtlD1oBgbecsbwp+sdKz+rnmOAj03rt1u4duFicLJAxYk+ 6EzbWsykvw8YB8md3VkG8Cs/dHStI/F/VgviYYcBbt64siLCWu5ZwxVooBw3+JFi DNQq8kfa+4jYesPKpC6QD9efm6NXMJtAxkuTN1B+y0x6fB8uVBgHJ33ebg0UyBQi ajAF7M0Wv2K+WKVvH1HbsTWAprtP5BjIgAqgiRQx0+2WUZeYgDVHBjCyUpUwDyjO 38Kor2OUYweLshr8zdo2Oy3xdbpsS7yWZpXLuYb2VTmjNmtCXzP+J3/mGZ8= -----END CERTIFICATE-----Generated at Wed Mar 25 23:13:04 2026 by rpki-client