$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer File: d057304d-4312-43aa-92a7-91bbd7043aab.cer (raw, json) Hash identifier: gi66pNe2jaTAAZYTYXucMlzrVW2IIQS3G8k6Sw55USY= Subject key identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D4227EECF000169EE2BF49580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 00:45:23 +0000 Certificate not after: Sun 25 Jun 2028 00:45:23 +0000 Subordinate resources: AS: 53266 IP: 74.116.128.0/21 IP: 199.83.116.0/22 IP: 208.99.24.0/22 IP: 2605:f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:27:ee:cf:00:01:69:ee:2b:f4:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 23 00:45:23 2026 GMT Not After : Jun 25 00:45:23 2028 GMT Subject: CN=d057304d-4312-43aa-92a7-91bbd7043aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:87:af:93:d7:10:62:67:45:e9:2b:8b:fc: a4:98:98:89:29:80:4b:ed:0b:86:f3:74:85:c4:bf: f0:7a:47:7a:0a:d2:52:fe:55:6f:7d:29:53:90:d1: 41:c6:83:d8:a3:ef:b9:bf:34:b6:63:0c:fa:96:ac: 56:8f:a7:7d:4e:8e:88:ac:5c:67:02:e5:98:d1:61: 31:f2:44:e6:25:71:61:0b:23:6c:62:2a:d3:e5:13: 6d:85:ed:40:35:ab:6a:28:4b:92:15:87:f9:9c:2a: 76:83:c3:b5:9d:55:3d:91:1d:49:e2:97:38:81:68: b8:24:46:73:86:48:84:1c:91:68:1b:42:e7:42:69: 61:2d:1f:22:a0:0f:e6:c8:8c:9b:0c:4b:fc:f0:b5: 0d:c5:73:e3:d7:14:4d:cb:e2:9e:db:6c:32:6a:55: 2d:4d:39:29:4e:56:88:c2:31:97:cc:da:de:41:1c: 0f:61:4b:38:1c:a2:0f:7d:86:5b:20:9c:19:dd:7b: 44:ba:ff:c3:7f:e5:9e:c4:ee:18:7e:13:e9:08:20: f7:e7:30:19:c6:6b:51:b7:07:b7:5e:e8:9e:f7:89: ca:a7:c4:a8:87:e4:ee:5c:80:12:1d:fa:d5:6e:5a: 96:b6:91:97:2e:89:c8:53:fb:39:82:a7:16:7c:d7: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 74.116.128.0/21 199.83.116.0/22 208.99.24.0/22 IPv6: 2605:f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53266 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:21:b4:c1:65:a2:8d:09:34:e4:92:44:5c:81:c8:45:9d:70: d1:0b:b6:cc:08:36:82:1f:c2:a7:f1:91:00:cc:30:31:44:ee: fc:fa:75:c1:eb:75:b3:8d:53:f4:34:e2:c7:dc:a3:3d:3b:58: 6a:f7:d2:c4:4e:67:f6:b4:81:93:a8:df:3c:10:f5:0c:71:96: 0f:d4:2a:49:12:ed:13:27:ce:17:39:28:3f:b2:75:75:5d:ef: 08:dc:98:36:1b:44:30:6c:11:67:8e:ec:5b:8c:0f:9c:11:42: 19:8b:8a:f6:23:3e:5b:d1:63:68:7f:1e:47:8c:f4:34:10:16: f3:bd:f8:2a:08:e5:6d:32:76:fd:bc:69:07:72:11:b5:a3:0a: de:73:16:aa:77:aa:1d:cd:86:b9:a6:49:70:52:cf:2f:84:2b: 8e:b6:97:c1:6f:80:ef:7a:60:9f:99:5f:48:50:74:05:d0:86: 78:39:4c:79:a6:59:3e:7a:05:c2:99:3a:e9:c0:6d:a0:22:bc: e5:78:fb:79:c8:ce:7c:87:71:c2:7d:00:91:23:2b:83:67:bf: ae:6f:ee:43:3d:7e:83:f8:9a:7f:30:9d:1b:dd:7a:54:17:ba: 1c:07:77:a7:15:a1:90:0c:d7:16:00:08:03:aa:81:07:11:25: 3b:82:5c:4b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE1CJ+7PAAFp7iv0lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMzAwNDUyM1oXDTI4MDYyNTAwNDUyM1owLzEtMCsGA1UEAxMk ZDA1NzMwNGQtNDMxMi00M2FhLTkyYTctOTFiYmQ3MDQzYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfiHr5PXEGJnRekri/ykmJiJKYBL7QuG83SF xL/wekd6CtJS/lVvfSlTkNFBxoPYo++5vzS2Ywz6lqxWj6d9To6IrFxnAuWY0WEx 8kTmJXFhCyNsYirT5RNthe1ANatqKEuSFYf5nCp2g8O1nVU9kR1J4pc4gWi4JEZz hkiEHJFoG0LnQmlhLR8ioA/myIybDEv88LUNxXPj1xRNy+Ke22wyalUtTTkpTlaI wjGXzNreQRwPYUs4HKIPfYZbIJwZ3XtEuv/Df+WexO4YfhPpCCD35zAZxmtRtwe3 Xuie94nKp8Soh+TuXIASHfrVblqWtpGXLonIU/s5gqcWfNe/UwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJE+aHgqt4wnzEsHmVzxvPP7EWl7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k MDU3MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJiZDcwNDNhYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2QwNTczMDRkLTQzMTItNDNhYS05 MmE3LTkxYmJkNzA0M2FhYi9kMDU3MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJiZDcw NDNhYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANKdIADBALHU3QDBALQYxgwDQQCAAIwBwMFACYF D0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANASMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACMhtMFloo0J NOSSRFyByEWdcNELtswINoIfwqfxkQDMMDFE7vz6dcHrdbONU/Q04sfcoz07WGr3 0sROZ/a0gZOo3zwQ9Qxxlg/UKkkS7RMnzhc5KD+ydXVd7wjcmDYbRDBsEWeO7FuM D5wRQhmLivYjPlvRY2h/HkeM9DQQFvO9+CoI5W0ydv28aQdyEbWjCt5zFqp3qh3N hrmmSXBSzy+EK462l8FvgO96YJ+ZX0hQdAXQhng5THmmWT56BcKZOunAbaAivOV4 +3nIznyHccJ9AJEjK4Nnv65v7kM9foP4mn8wnRvdelQXuhwHd6cVoZAM1xYACAOq gQcRJTuCXEs= -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:10 2026 by rpki-client