$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer File: be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer (raw, json) Hash identifier: 6VbdYvVjoQUZ1CDmInKFQSbo2x9fGu7TMbS6tFTz7wU= Subject key identifier: 7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D47BD4D1617D0D017EB08C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 00:45:23 +0000 Certificate not after: Tue 27 Jun 2028 00:45:23 +0000 Subordinate resources: IP: 66.11.232.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:bd:4d:16:17:d0:d0:17:eb:08:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 25 00:45:23 2026 GMT Not After : Jun 27 00:45:23 2028 GMT Subject: CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8d:96:57:fb:0a:88:f4:86:59:61:50:7a:47: 3b:bd:3c:85:09:f0:ff:81:a6:f6:f5:b8:7b:85:07: 9e:81:2d:ea:a5:24:f0:e2:90:93:c7:88:ee:43:1a: 38:9b:ec:41:ba:91:e9:77:ee:e5:ff:bb:17:e4:80: 01:eb:ed:96:ba:7a:fa:f4:99:03:7a:6f:a2:22:41: 03:60:4d:0e:9b:a6:7c:9e:cb:cb:28:6a:57:65:dd: 38:72:4a:8d:e9:af:a1:0b:b9:b2:79:15:40:b1:80: 31:b3:09:b1:4c:b6:cc:29:51:08:f5:6d:0b:d8:4d: 6b:87:f5:1e:c7:8a:8a:2b:96:39:bb:ba:2c:4f:21: e0:df:57:a5:91:70:bf:75:ca:43:dc:cf:59:f5:dc: 65:bd:43:5e:5e:6f:c7:4f:14:8a:58:14:ee:e1:50: ca:36:b9:fd:98:73:c0:47:8e:b7:54:08:43:cd:e3: 2f:d7:c0:f1:0c:c0:47:7b:0d:06:e6:3b:e2:5a:da: 20:6c:25:50:ca:f4:84:08:51:6c:72:90:72:e6:d5: 89:0d:df:d6:24:a2:b2:bf:d2:fc:e7:56:42:86:ce: 51:ce:95:cd:ad:84:80:79:1e:11:3e:40:1b:b7:a0: d1:09:2a:86:77:71:3a:b9:77:13:e6:59:9a:5a:f5: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.11.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:42:9c:52:0f:b4:2b:8e:4a:5d:5b:b5:2a:e6:a3:05:86:c9: 47:8e:e5:ec:0a:ab:6a:83:da:b3:b0:df:1f:99:58:f8:b8:87: 38:8d:c5:55:f9:fc:22:dd:da:aa:9b:8e:ca:6f:0d:9c:28:e2: 8c:17:5d:07:55:c2:4a:47:43:ac:45:d5:17:80:7d:19:c6:30: 89:61:4d:55:a6:c4:7f:6e:2c:d0:dd:8e:02:f3:1e:e9:2f:18: 08:aa:30:e2:82:94:05:0a:45:dd:f7:da:10:00:4d:29:12:22: 0b:a3:f2:ad:0d:fe:dd:3d:f1:71:83:5e:5e:e1:ae:33:71:f3: 52:06:b1:24:e8:ef:ca:4b:32:58:84:ca:e7:55:52:b0:68:e7: 90:94:34:4c:80:8f:c6:f5:e4:bd:96:43:f3:33:e7:53:fd:73: f0:96:3b:8e:cd:96:1a:3b:48:af:72:38:01:43:6f:ff:f5:24: 9f:46:84:88:e9:16:4c:df:92:59:b2:7a:9f:8b:5d:d1:27:92: 5c:9b:05:14:c3:6f:dd:83:d7:85:06:7e:0f:f1:95:46:b1:9c: ad:f5:d2:5a:02:4c:6a:04:0c:4f:7e:ac:d2:fc:4f:56:ce:1e: a4:c7:7a:8e:c6:46:e7:cf:a7:8b:c0:f2:ad:42:9c:3c:db:46: ca:d5:b9:fb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1HvU0WF9DQF+sIxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyNTAwNDUyM1oXDTI4MDYyNzAwNDUyM1owLzEtMCsGA1UEAxMk YmUyMzYyZGUtNWJjZi00ZTRkLWE1ODItYWY1OWQ1ZmZiNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh42WV/sKiPSGWWFQekc7vTyFCfD/gab29bh7 hQeegS3qpSTw4pCTx4juQxo4m+xBupHpd+7l/7sX5IAB6+2Wunr69JkDem+iIkED YE0Om6Z8nsvLKGpXZd04ckqN6a+hC7myeRVAsYAxswmxTLbMKVEI9W0L2E1rh/Ue x4qKK5Y5u7osTyHg31elkXC/dcpD3M9Z9dxlvUNeXm/HTxSKWBTu4VDKNrn9mHPA R463VAhDzeMv18DxDMBHew0G5jviWtogbCVQyvSECFFscpBy5tWJDd/WJKKyv9L8 51ZChs5RzpXNrYSAeR4RPkAbt6DRCSqGd3E6uXcT5lmaWvU1eQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHvcnXnH1RC4LPqINMrwZHYVYefjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i ZTIzNjJkZS01YmNmLTRlNGQtYTU4Mi1hZjU5ZDVmZmI3NWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JlMjM2MmRlLTViY2YtNGU0ZC1h NTgyLWFmNTlkNWZmYjc1Zi9iZTIzNjJkZS01YmNmLTRlNGQtYTU4Mi1hZjU5ZDVm ZmI3NWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBANCC+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApEKcUg+0K45KXVu1Kuaj BYbJR47l7AqraoPas7DfH5lY+LiHOI3FVfn8It3aqpuOym8NnCjijBddB1XCSkdD rEXVF4B9GcYwiWFNVabEf24s0N2OAvMe6S8YCKow4oKUBQpF3ffaEABNKRIiC6Py rQ3+3T3xcYNeXuGuM3HzUgaxJOjvyksyWITK51VSsGjnkJQ0TICPxvXkvZZD8zPn U/1z8JY7js2WGjtIr3I4AUNv//Ukn0aEiOkWTN+SWbJ6n4td0SeSXJsFFMNv3YPX hQZ+D/GVRrGcrfXSWgJMagQMT36s0vxPVs4epMd6jsZG58+ni8DyrUKcPNtGytW5 +w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:13 2026 by rpki-client