$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236.cer File: c286a634-9315-4f0e-a434-cf4e2a0d1236.cer (raw, json) Hash identifier: NfO/cp1VdT77Get1oTl+rFpgXlGr/bosHixB476iqpE= Subject key identifier: 36:88:07:03:6C:FE:C0:8D:8F:03:DF:73:35:D4:E3:65:60:5A:1C:AE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D27A26CC7CCE8A075BB5D7700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/c286a634-9315-4f0e-a434-cf4e2a0d1236.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Mar 2026 12:45:22 +0000 Certificate not after: Thu 15 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 401130 IP: 172.111.26.0/24 IP: 2602:f762::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:a2:6c:c7:cc:e8:a0:75:bb:5d:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 13 12:45:22 2026 GMT Not After : Jun 15 12:45:22 2028 GMT Subject: CN=c286a634-9315-4f0e-a434-cf4e2a0d1236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:ae:5f:94:5f:b2:c1:5e:10:55:f5:6a:65: f3:69:be:ba:d5:f3:7a:34:5b:71:9b:14:32:51:01: b4:4c:62:8e:5b:cc:78:20:c9:d8:65:f9:a9:32:b8: d5:36:f9:71:ac:83:f4:5a:2c:e6:11:a3:8d:71:64: 2f:c7:93:8a:b8:79:ec:53:02:e3:34:36:ca:f3:29: bf:72:3c:26:aa:0f:a6:07:e7:9f:55:c9:21:65:f0: 5d:91:2d:36:fa:f8:59:41:a6:b0:33:f5:52:01:67: 78:2b:d5:fa:87:db:44:16:0e:f1:5f:dd:b4:b2:6a: 65:82:52:9c:87:33:4b:84:9a:40:07:16:9a:fd:0b: 7c:45:c6:f2:d0:eb:30:fd:93:10:9c:1c:b4:b1:48: 83:d8:f3:25:71:04:64:fe:ac:18:4c:a2:c5:cf:21: c7:71:b2:78:06:53:86:e3:d1:3d:1b:b7:df:e9:58: 67:c2:ec:ef:df:4a:d3:0b:b9:7a:4b:46:f5:f0:65: d3:98:2e:4c:ae:2a:cb:39:a5:fd:c6:b0:cb:91:e6: d6:e1:cb:c5:5b:d1:44:b5:96:00:2f:20:f7:22:ff: 24:82:48:35:cb:72:85:9f:b4:48:3c:9a:d7:e1:ed: 17:cf:f4:59:1c:44:27:fb:58:39:68:65:1e:90:71: 86:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:88:07:03:6C:FE:C0:8D:8F:03:DF:73:35:D4:E3:65:60:5A:1C:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/c286a634-9315-4f0e-a434-cf4e2a0d1236.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 172.111.26.0/24 IPv6: 2602:f762::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401130 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5a:52:4c:d3:df:4f:5d:36:b1:96:1e:23:2a:96:49:5e:5d: 06:d1:0e:5e:13:15:63:69:be:e5:df:21:2a:17:c9:b4:16:bf: c0:07:51:df:63:df:f7:aa:3a:08:dd:87:4e:0e:aa:04:b4:82: 0e:74:45:f0:52:54:ef:73:45:51:19:79:f6:7e:57:c8:ee:b4: 50:ff:54:09:41:dd:21:d1:e7:c8:b6:a0:c9:6d:2f:6c:e1:e3: 22:a6:18:b2:5e:d5:0f:8f:39:fc:b4:2c:d0:54:d4:02:7d:7c: 8f:36:45:3a:34:e0:65:72:dd:0b:0c:7f:12:9f:28:d6:61:1e: ec:0b:c6:ca:54:e3:24:42:8f:18:4d:04:96:11:27:c3:b8:40: 1c:81:80:c9:c9:ad:a6:86:a1:5d:01:f5:cd:07:fe:5d:92:03: f9:3c:c3:87:e4:33:07:af:ea:08:7c:a5:ea:1a:73:83:2b:f5: 45:c4:c9:9d:09:33:2f:7d:79:e1:4b:45:dc:26:07:9d:06:f0: 7e:79:67:26:b7:89:dc:81:51:32:b4:a6:4e:c5:eb:0d:9c:0d: 1b:c0:ba:37:41:24:b9:10:c4:b6:67:02:58:94:bd:07:33:d3: 5a:a5:5b:e6:b9:59:39:ac:c0:01:5c:e3:fb:4d:99:b2:c9:50: 7e:8c:61:26 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0nomzHzOigdbtddwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMzEyNDUyMloXDTI4MDYxNTEyNDUyMlowLzEtMCsGA1UEAxMk YzI4NmE2MzQtOTMxNS00ZjBlLWE0MzQtY2Y0ZTJhMGQxMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEeuX5RfssFeEFX1amXzab661fN6NFtxmxQy UQG0TGKOW8x4IMnYZfmpMrjVNvlxrIP0WizmEaONcWQvx5OKuHnsUwLjNDbK8ym/ cjwmqg+mB+efVckhZfBdkS02+vhZQaawM/VSAWd4K9X6h9tEFg7xX920smplglKc hzNLhJpABxaa/Qt8Rcby0Osw/ZMQnBy0sUiD2PMlcQRk/qwYTKLFzyHHcbJ4BlOG 49E9G7ff6Vhnwuzv30rTC7l6S0b18GXTmC5MrirLOaX9xrDLkebW4cvFW9FEtZYA LyD3Iv8kgkg1y3KFn7RIPJrX4e0Xz/RZHEQn+1g5aGUekHGGJQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDaIBwNs/sCNjwPfczXU42VgWhyuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j Mjg2YTYzNC05MzE1LTRmMGUtYTQzNC1jZjRlMmEwZDEyMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2MyODZhNjM0LTkzMTUtNGYwZS1h NDM0LWNmNGUyYTBkMTIzNi9jMjg2YTYzNC05MzE1LTRmMGUtYTQzNC1jZjRlMmEw ZDEyMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACsbxowDgQCAAIwCAMGACYC92IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYe6jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAWlJM099PXTaxlh4jKpZJXl0G 0Q5eExVjab7l3yEqF8m0Fr/AB1HfY9/3qjoI3YdODqoEtIIOdEXwUlTvc0VRGXn2 flfI7rRQ/1QJQd0h0efItqDJbS9s4eMiphiyXtUPjzn8tCzQVNQCfXyPNkU6NOBl ct0LDH8SnyjWYR7sC8bKVOMkQo8YTQSWESfDuEAcgYDJya2mhqFdAfXNB/5dkgP5 PMOH5DMHr+oIfKXqGnODK/VFxMmdCTMvfXnhS0XcJgedBvB+eWcmt4ncgVEytKZO xesNnA0bwLo3QSS5EMS2ZwJYlL0HM9NapVvmuVk5rMABXOP7TZmyyVB+jGEm -----END CERTIFICATE-----Generated at Wed Mar 25 23:06:23 2026 by rpki-client