$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer File: c428d8f6-c296-4695-bec2-37368886f4fa.cer (raw, json) Hash identifier: TZJkGvpwk6sLYnM6ArFXoNLq0kfDr1g8z24vyipILZI= Subject key identifier: 0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E5ADED5283F16107E694714C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 14:00:15 +0000 Certificate not after: Sat 01 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 399654 IP: 192.64.13.0/24 IP: 198.17.139.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:de:d5:28:3f:16:10:7e:69:47:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 1 14:00:15 2026 GMT Not After : Jul 1 00:45:17 2028 GMT Subject: CN=c428d8f6-c296-4695-bec2-37368886f4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cf:cb:b9:92:af:1b:01:c0:28:21:a6:e5:de: 30:2f:9d:31:57:78:c4:4b:14:96:00:f0:8d:b7:3d: a3:f6:1f:1c:60:54:80:be:2b:3c:f8:98:cc:1a:c0: 0a:f4:15:3e:48:39:df:46:a3:67:c5:ee:e1:cd:5f: 9c:81:b0:ba:de:60:f7:0c:f5:d8:3e:fd:b4:c4:e3: 15:74:be:41:fc:b9:d4:78:65:ca:97:90:87:1d:c6: d5:3c:f3:3f:54:76:d7:f6:54:51:cf:94:31:c8:20: 14:85:8c:22:c8:ed:ed:2a:62:d1:2b:69:f8:9a:95: a4:05:c4:cc:cc:82:30:bf:c7:5e:b7:e3:41:a2:37: 95:e4:bc:9d:92:e8:6c:09:c1:dd:31:36:49:e3:92: c2:89:a5:42:1a:57:aa:ce:0b:66:71:a9:a7:8f:a4: 3e:00:05:bd:2e:a0:19:38:53:6f:89:6c:98:c5:9b: 54:9f:1f:e1:3d:59:65:a6:ff:92:af:8f:9d:24:cd: 15:a0:55:f8:be:43:a1:89:c4:29:b6:41:1a:8e:c5: 35:0e:a8:3c:85:67:90:99:92:1d:58:49:62:56:90: 67:21:c8:7d:ab:e0:ea:2f:0f:32:c1:5c:6e:e5:a1: 65:68:ce:4f:be:e5:52:d9:08:fa:fd:e5:e0:f8:ed: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.64.13.0/24 198.17.139.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399654 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c3:c5:93:b5:3d:ea:5c:21:12:67:31:04:43:f6:da:73:8e: cd:3f:ab:f9:d6:6a:2b:de:ec:e7:71:c6:1b:11:98:93:04:37: f0:05:ed:75:eb:30:98:28:5a:fb:9a:ca:6f:ea:26:ae:48:d4: 86:3d:7e:3b:9c:4c:78:15:39:82:5b:b0:eb:fb:19:3c:b7:38: 23:89:01:54:02:ea:e2:75:62:e1:0c:d5:10:a0:84:41:71:f2: 8a:93:2f:c4:eb:44:ed:67:9c:33:3d:40:62:4e:29:0d:a9:eb: e2:3a:53:1e:19:82:e8:9c:7e:0c:e3:00:28:23:9e:37:91:0d: 12:97:3c:b6:01:de:7d:98:17:09:c9:ec:0f:d5:2e:b7:71:cf: 62:a5:67:b1:e5:ab:bb:81:f6:a8:29:24:6c:8f:09:ad:a3:75: a3:bc:0c:00:09:28:c8:f2:95:ac:7a:49:42:cf:0f:05:2a:86: 1a:f9:30:1c:ae:a2:94:9b:d0:5b:1f:2c:22:2e:dd:19:88:63: 8d:9e:af:72:bc:10:59:ab:09:59:08:10:16:af:35:c5:d6:3d: 7e:92:75:97:b8:30:c0:d8:ac:d1:76:65:fb:4f:b9:03:da:8d: b7:95:1e:0c:bd:79:9b:9e:18:55:f0:a8:1c:cb:45:de:1d:c9: 20:d2:27:ed -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE5a3tUoPxYQfmlHFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDcwMTE0MDAxNVoXDTI4MDcwMTAwNDUxN1owLzEtMCsGA1UEAxMk YzQyOGQ4ZjYtYzI5Ni00Njk1LWJlYzItMzczNjg4ODZmNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s/LuZKvGwHAKCGm5d4wL50xV3jESxSWAPCN tz2j9h8cYFSAvis8+JjMGsAK9BU+SDnfRqNnxe7hzV+cgbC63mD3DPXYPv20xOMV dL5B/LnUeGXKl5CHHcbVPPM/VHbX9lRRz5QxyCAUhYwiyO3tKmLRK2n4mpWkBcTM zIIwv8det+NBojeV5LydkuhsCcHdMTZJ45LCiaVCGleqzgtmcamnj6Q+AAW9LqAZ OFNviWyYxZtUnx/hPVllpv+Sr4+dJM0VoFX4vkOhicQptkEajsU1Dqg8hWeQmZId WEliVpBnIch9q+DqLw8ywVxu5aFlaM5PvuVS2Qj6/eXg+O01FQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFAuVpUGyWH5hvUvvbjEuqTcm1tuQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NDI4ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2ODg4NmY0ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M0MjhkOGY2LWMyOTYtNDY5NS1i ZWMyLTM3MzY4ODg2ZjRmYS9jNDI4ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2ODg4 NmY0ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAQA0DBADGEYswGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhkmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGTDxZO1PepcIRJnMQRD9tpzjs0/q/nWaive7Odx xhsRmJMEN/AF7XXrMJgoWvuaym/qJq5I1IY9fjucTHgVOYJbsOv7GTy3OCOJAVQC 6uJ1YuEM1RCghEFx8oqTL8TrRO1nnDM9QGJOKQ2p6+I6Ux4ZguicfgzjACgjnjeR DRKXPLYB3n2YFwnJ7A/VLrdxz2KlZ7Hlq7uB9qgpJGyPCa2jdaO8DAAJKMjylax6 SULPDwUqhhr5MByuopSb0FsfLCIu3RmIY42er3K8EFmrCVkIEBavNcXWPX6SdZe4 MMDYrNF2ZftPuQPajbeVHgy9eZueGFXwqBzLRd4dySDSJ+0= -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:41 2026 by rpki-client