$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer File: d0677001-b062-4999-89f9-d882893f5a1c.cer (raw, json) Hash identifier: bmcmYRTDGM/E2YcYQvE6gTQcbvavF73AsHuYEczze1s= Subject key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DA6A8825BAA38905115EB1600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 00:45:17 +0000 Certificate not after: Mon 31 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 27628 AS: 393607 IP: 192.152.158.0/24 IP: 198.169.125.0 -- 198.169.127.255 IP: 198.169.132.0 -- 198.169.134.255 IP: 2607:ee00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:a8:82:5b:aa:38:90:51:15:eb:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 28 00:45:17 2026 GMT Not After : Jul 31 00:45:17 2028 GMT Subject: CN=d0677001-b062-4999-89f9-d882893f5a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:53:de:9f:57:57:ed:ee:36:a1:68:bf:d9: 8f:ff:e4:a9:87:66:17:cc:8f:b9:93:e9:db:59:d5: 2f:37:e1:4a:3c:63:09:10:08:d5:37:d9:90:ef:9b: af:9f:5b:b2:b7:4a:2c:0c:59:10:ac:8c:80:85:b5: c1:cf:d7:0d:39:13:38:e2:54:5a:a4:e5:92:8f:d6: 86:9e:c8:b9:aa:7c:5c:7c:26:f9:47:ba:e5:ad:05: 01:b9:64:c3:cb:00:80:f3:2b:50:18:0e:69:8f:c0: 37:af:fc:52:9d:54:a2:6d:e4:5c:10:8f:24:9e:4e: 87:09:3e:74:0f:4f:f3:a0:64:dc:51:9a:e5:53:5b: 7f:62:f3:a0:29:27:88:13:f8:9f:e0:88:6b:e5:55: b0:f1:73:c1:a6:2a:ba:18:90:e7:b7:6b:48:b8:7f: ac:99:6e:e1:23:07:1d:01:ef:79:9c:ad:8d:0c:9a: 9d:7c:1d:10:65:1d:75:ed:80:62:49:97:53:3c:00: ff:6a:89:15:ae:d7:fa:88:fa:17:d5:e1:54:44:a1: 56:bd:39:ae:89:82:63:53:a6:bb:fb:d6:47:66:5f: 3d:9a:f8:c5:44:d4:be:bd:85:03:8f:b4:34:05:4c: fb:c2:a6:ce:63:b0:15:cf:88:a2:24:2c:35:a3:f9: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.152.158.0/24 198.169.125.0-198.169.127.255 198.169.132.0-198.169.134.255 IPv6: 2607:ee00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27628 393607 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d5:80:12:da:5a:32:46:83:b3:df:22:0b:ec:45:76:5a:4a: 2b:3b:d9:7a:e2:5d:b1:b2:33:5c:37:db:ca:40:45:66:60:42: 7f:99:db:f1:03:22:4e:81:b3:57:e3:35:3d:7f:7b:19:1e:01: 87:66:7a:ad:7b:42:08:dd:2a:53:50:6a:5a:76:76:64:3a:a8: 88:79:aa:b8:15:f2:40:8e:28:30:1e:bf:93:8d:93:0d:bd:2f: bc:c2:73:14:b1:93:15:39:e6:10:f1:8c:6a:33:e2:a2:0f:01: b4:7c:a2:81:49:3e:c2:a4:05:89:bd:74:56:41:7a:8e:18:19: e7:9f:8b:54:ee:1c:74:f9:7e:a7:1c:49:1a:47:df:0e:69:65: df:47:6c:c7:18:fc:2e:31:9b:c2:dc:45:40:76:fd:43:8a:41: ea:5c:b7:b5:8b:69:43:e0:fd:ae:bd:04:fa:c0:d0:d1:da:9c: c8:54:4a:f3:04:41:20:d2:b3:03:64:8c:aa:54:08:23:94:11: de:49:23:90:51:56:e3:49:9a:94:67:33:df:b7:c0:5c:05:f9: 05:c0:cc:85:b3:e9:bd:39:de:a1:42:a7:a6:4c:40:d9:9c:ae: b0:20:7b:e3:f9:92:12:a5:d1:83:5a:c3:72:02:af:d3:67:6e: a7:75:fc:fc -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWE2mqIJbqjiQURXrFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyODAwNDUxN1oXDTI4MDczMTAwNDUxN1owLzEtMCsGA1UEAxMk ZDA2NzcwMDEtYjA2Mi00OTk5LTg5ZjktZDg4Mjg5M2Y1YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzJT3p9XV+3uNqFov9mP/+Sph2YXzI+5k+nb WdUvN+FKPGMJEAjVN9mQ75uvn1uyt0osDFkQrIyAhbXBz9cNORM44lRapOWSj9aG nsi5qnxcfCb5R7rlrQUBuWTDywCA8ytQGA5pj8A3r/xSnVSibeRcEI8knk6HCT50 D0/zoGTcUZrlU1t/YvOgKSeIE/if4Ihr5VWw8XPBpiq6GJDnt2tIuH+smW7hIwcd Ae95nK2NDJqdfB0QZR117YBiSZdTPAD/aokVrtf6iPoX1eFURKFWvTmuiYJjU6a7 +9ZHZl89mvjFRNS+vYUDj7Q0BUz7wqbOY7AVz4iiJCw1o/kHhQIDAQABo4IESjCC BEYwHQYDVR0OBBYEFC8A7+QfjjpskEWvnYtgS3DZ9LUpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k MDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkzZjVhMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2QwNjc3MDAxLWIwNjItNDk5OS04 OWY5LWQ4ODI4OTNmNWExYy9kMDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkz ZjVhMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwSgYIKwYBBQUH AQcBAf8EOzA5MCgEAgABMCIDBADAmJ4wDAMEAMapfQMEB8apADAMAwQCxqmEAwQA xqmGMA0EAgACMAcDBQAmB+4AMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAmvsAgMG AYcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAG9WAEtpaMkaDs98iC+xFdlpKKzvZeuJdsbIzXDfbykBFZmBC f5nb8QMiToGzV+M1PX97GR4Bh2Z6rXtCCN0qU1BqWnZ2ZDqoiHmquBXyQI4oMB6/ k42TDb0vvMJzFLGTFTnmEPGMajPiog8BtHyigUk+wqQFib10VkF6jhgZ55+LVO4c dPl+pxxJGkffDmll30dsxxj8LjGbwtxFQHb9Q4pB6ly3tYtpQ+D9rr0E+sDQ0dqc yFRK8wRBINKzA2SMqlQII5QR3kkjkFFW40malGcz37fAXAX5BcDMhbPpvTneoUKn pkxA2ZyusCB74/mSEqXRg1rDcgKv02dup3X8/A== -----END CERTIFICATE-----Generated at Wed May 13 03:38:39 2026 by rpki-client