$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer File: e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer (raw, json) Hash identifier: f+V1FuG749EvuiQb0ES582L9rx9hT3f9UM5Qptww9Qw= Subject key identifier: BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3F5D3CA482B917839EF29040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 00:45:21 +0000 Certificate not after: Sat 24 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 393705 IP: 169.224.192.0/19 IP: 2607:cdc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:5d:3c:a4:82:b9:17:83:9e:f2:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 22 00:45:21 2026 GMT Not After : Jun 24 00:45:21 2028 GMT Subject: CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:ce:4e:ed:5f:64:10:91:c9:7f:6a:06:0a: df:f8:9d:81:21:53:08:fe:52:4a:fd:32:aa:27:ed: a1:ec:a0:a7:19:a5:c6:a2:e6:52:f0:ac:5f:74:21: 96:d8:1b:f5:d0:66:ea:5a:ff:46:a4:b9:57:ca:24: e0:b1:79:a6:63:51:52:b7:d0:65:53:db:90:9e:c5: 1b:64:2f:cd:84:a4:02:75:df:0b:d4:35:1a:09:e9: de:14:e5:f6:35:c7:90:d8:e5:0f:36:81:2a:47:40: 91:d2:a2:d0:71:c1:95:55:e6:e1:53:9b:1a:e7:47: c9:5f:74:bc:28:10:87:93:7c:f5:fa:cd:67:4d:76: b6:4d:6c:a7:47:65:38:fc:8c:71:df:34:66:0c:ea: 78:1c:f8:2f:65:c4:f3:ae:16:ab:7f:a8:e0:45:b3: 97:08:f9:14:37:a4:07:4f:f2:bf:07:dc:2d:16:83: 07:9a:94:f4:8b:8f:d5:d4:a4:f3:13:8d:1f:e5:14: d6:d2:e2:87:12:1d:84:53:a6:93:a7:9f:eb:da:e5: 37:c9:11:3f:05:4b:ef:21:94:c7:d2:c9:2e:65:f3: d2:85:a7:19:20:a9:b8:f8:1c:eb:73:28:5e:39:08: bf:44:64:87:30:c7:94:71:f5:dd:88:3e:5f:42:d3: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 169.224.192.0/19 IPv6: 2607:cdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393705 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:07:2e:4f:b7:7c:bc:fd:5a:c6:22:c3:e2:fe:ad:1a:ba:81: f9:e9:d1:8c:dc:de:08:de:ef:4e:9a:dd:42:3a:93:36:86:a4: 99:f0:37:89:51:31:96:c1:c4:29:d1:47:47:42:7a:24:7c:30: 64:60:d0:29:2d:13:34:9f:4f:2d:22:bd:2d:ec:da:bc:c9:2a: 2f:bf:03:bb:6d:87:41:b7:65:20:95:20:03:19:29:00:db:24: f5:fa:cf:bf:6d:21:bf:5a:95:92:3b:48:96:47:09:b3:9b:26: be:7b:13:24:07:f7:71:a2:10:1b:19:35:78:14:49:16:cb:45: 0b:a9:7c:2a:85:ae:37:99:61:40:6a:74:b9:37:b6:a0:cb:61: d5:cc:3a:45:58:b0:be:78:18:91:cb:86:3c:35:26:48:50:c6: 3e:22:c2:82:c7:0f:0c:56:51:b3:99:cc:c9:0e:53:0c:66:8c: c6:3a:b3:ba:94:67:7f:ec:d4:b3:54:08:eb:d4:a5:c4:f2:2b: e9:47:a4:f8:37:2e:62:fb:5e:81:32:55:26:c5:ac:6a:39:69: bc:7f:9b:93:f9:56:7b:13:af:fd:53:49:f5:f3:4b:4c:19:ac: ed:fa:29:c4:2e:e5:1d:cf:e0:db:f7:61:22:27:f1:0f:12:2b: 72:d5:73:52 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0/XTykgrkXg57ykEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMjAwNDUyMVoXDTI4MDYyNDAwNDUyMVowLzEtMCsGA1UEAxMk ZTIxNWE5ZTctOGM2Ni00ZTgxLWEwNzctMmE3M2M5MDNhMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmnOTu1fZBCRyX9qBgrf+J2BIVMI/lJK/TKq J+2h7KCnGaXGouZS8KxfdCGW2Bv10GbqWv9GpLlXyiTgsXmmY1FSt9BlU9uQnsUb ZC/NhKQCdd8L1DUaCeneFOX2NceQ2OUPNoEqR0CR0qLQccGVVebhU5sa50fJX3S8 KBCHk3z1+s1nTXa2TWynR2U4/Ixx3zRmDOp4HPgvZcTzrharf6jgRbOXCPkUN6QH T/K/B9wtFoMHmpT0i4/V1KTzE40f5RTW0uKHEh2EU6aTp5/r2uU3yRE/BUvvIZTH 0skuZfPShacZIKm4+BzrcyheOQi/RGSHMMeUcfXdiD5fQtPMnwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLvMbo9x7lt5HGgYhbE/ZD8B0cggMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l MjE1YTllNy04YzY2LTRlODEtYTA3Ny0yYTczYzkwM2EwYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2UyMTVhOWU3LThjNjYtNGU4MS1h MDc3LTJhNzNjOTAzYTBhYy9lMjE1YTllNy04YzY2LTRlODEtYTA3Ny0yYTczYzkw M2EwYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAWp4MAwDQQCAAIwBwMFACYHzcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgHpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA4HLk+3fLz9WsYiw+L+rRq6gfnp 0Yzc3gje706a3UI6kzaGpJnwN4lRMZbBxCnRR0dCeiR8MGRg0CktEzSfTy0ivS3s 2rzJKi+/A7tth0G3ZSCVIAMZKQDbJPX6z79tIb9alZI7SJZHCbObJr57EyQH93Gi EBsZNXgUSRbLRQupfCqFrjeZYUBqdLk3tqDLYdXMOkVYsL54GJHLhjw1JkhQxj4i woLHDwxWUbOZzMkOUwxmjMY6s7qUZ3/s1LNUCOvUpcTyK+lHpPg3LmL7XoEyVSbF rGo5abx/m5P5VnsTr/1TSfXzS0wZrO36KcQu5R3P4Nv3YSIn8Q8SK3LVc1I= -----END CERTIFICATE-----Generated at Wed Mar 25 23:12:13 2026 by rpki-client