$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer File: e9687864-e283-4f19-98f3-a437efb373e8.cer (raw, json) Hash identifier: WATR/Xc+p4hclIN6q+R2XmKYG6/QLschNG7aD4g2pJM= Subject key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DA3DDD36B5656E189BF18C590 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 00:45:17 +0000 Certificate not after: Sun 30 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 3463 AS: 22772 IP: 192.195.240.0/24 IP: 198.182.64.0/18 IP: 199.33.243.0/24 IP: 204.17.32.0/19 IP: 209.104.0.0/19 IP: 2605:8e00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:dd:d3:6b:56:56:e1:89:bf:18:c5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 27 00:45:17 2026 GMT Not After : Jul 30 00:45:17 2028 GMT Subject: CN=e9687864-e283-4f19-98f3-a437efb373e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:3f:df:af:80:74:1a:34:9c:06:70:a7:5d: 75:25:91:3b:f5:be:e8:31:76:9c:41:f5:14:b5:ec: b3:64:0a:6c:a6:81:dc:bd:d6:05:c8:f6:e3:29:c1: ae:43:01:0f:9b:4f:36:a4:79:5d:9b:e7:76:04:2c: 39:ad:f0:30:57:e4:49:04:a8:c3:0e:2d:07:e6:a1: 0e:ff:34:79:89:e4:41:eb:ce:c9:cb:1a:ce:60:86: 7e:28:61:07:92:24:05:36:d8:d3:46:f0:e1:57:f2: af:24:01:a7:7f:f1:7e:5e:44:9c:37:c2:86:86:5c: 3c:90:7a:30:27:80:60:77:06:8f:73:f6:d6:1d:1c: 39:76:9d:55:1d:ce:91:3c:0b:9c:d0:a9:6a:1e:5b: 03:df:7f:2a:1c:88:da:91:ae:bf:d0:60:77:fb:c2: 1e:51:3c:86:42:66:4f:40:0f:1f:1f:74:cc:44:fa: 12:03:4c:c8:cc:52:e9:8f:c0:92:09:fb:31:e8:b5: b2:60:37:e2:02:8e:7f:b1:fa:66:2d:8e:e2:70:d4: 38:6f:85:d5:c2:2a:49:35:a9:99:2d:d6:a5:e1:33: 04:44:aa:df:f5:68:d7:99:82:9c:4d:3d:c9:c0:4d: 12:01:0c:72:9c:f5:6e:02:b0:96:22:a7:f8:4c:b1: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.195.240.0/24 198.182.64.0/18 199.33.243.0/24 204.17.32.0/19 209.104.0.0/19 IPv6: 2605:8e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3463 22772 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:da:e5:dd:67:31:1f:10:ce:54:d8:b8:40:9d:a0:29:52:12: 2e:cf:4a:bd:a4:b4:c3:67:ee:8f:13:08:0c:f8:c4:d9:6e:63: 04:19:1e:4d:31:33:89:fe:fe:63:6b:c6:3b:c0:d6:b6:29:63: f3:fc:b2:d3:35:ca:14:e9:7d:94:f5:e0:5d:4a:b2:4d:39:e3: c7:54:d6:92:0e:a2:14:86:87:22:90:68:aa:9a:76:d3:3a:5d: 8e:1e:12:ae:0d:fb:f8:c8:5e:c1:32:13:46:74:48:79:90:bd: ef:b4:2b:32:b9:8f:cb:38:27:cb:8d:d2:a3:b4:c6:8d:d9:71: ba:27:bc:ec:81:22:e1:62:4e:9c:ea:60:a0:22:40:cc:3e:28: 03:85:10:57:15:02:5f:af:94:9a:3c:d6:c1:cb:f8:5a:9f:46: cf:0e:2c:40:b3:bf:51:28:66:e5:d2:1e:6b:6a:45:39:54:f2: de:5a:12:48:75:ea:db:cf:47:60:b2:27:84:b9:8d:e9:96:72: d5:b3:ba:cd:ff:7d:7e:08:19:f1:f4:94:d0:cb:ee:bf:cb:42: ff:39:1a:8f:f1:34:a8:d8:e9:1b:2a:63:50:47:11:b7:54:6c: a8:c7:a2:e6:54:a2:cd:f5:d9:71:1b:7a:ee:d5:b3:26:b2:4c: 07:be:e6:7e -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWE2j3dNrVlbhib8YxZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyNzAwNDUxN1oXDTI4MDczMDAwNDUxN1owLzEtMCsGA1UEAxMk ZTk2ODc4NjQtZTI4My00ZjE5LTk4ZjMtYTQzN2VmYjM3M2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKc/36+AdBo0nAZwp111JZE79b7oMXacQfUU teyzZApspoHcvdYFyPbjKcGuQwEPm082pHldm+d2BCw5rfAwV+RJBKjDDi0H5qEO /zR5ieRB687JyxrOYIZ+KGEHkiQFNtjTRvDhV/KvJAGnf/F+XkScN8KGhlw8kHow J4BgdwaPc/bWHRw5dp1VHc6RPAuc0KlqHlsD338qHIjaka6/0GB3+8IeUTyGQmZP QA8fH3TMRPoSA0zIzFLpj8CSCfsx6LWyYDfiAo5/sfpmLY7icNQ4b4XVwipJNamZ Ldal4TMERKrf9WjXmYKcTT3JwE0SAQxynPVuArCWIqf4TLFrHwIDAQABo4IERTCC BEEwHQYDVR0OBBYEFA65gycB9wZ6y6Wcml5hy8fZWMPnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l OTY4Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3ZWZiMzczZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U5Njg3ODY0LWUyODMtNGYxOS05 OGYzLWE0MzdlZmIzNzNlOC9lOTY4Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3ZWZi MzczZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBADAw/ADBAbGtkADBADHIfMDBAXMESADBAXRaAAw DQQCAAIwBwMFACYFjgAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICDYcCAlj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHa5d1nMR8QzlTYuECdoClSEi7PSr2ktMNn7o8TCAz4xNluYwQZHk0x M4n+/mNrxjvA1rYpY/P8stM1yhTpfZT14F1Ksk0548dU1pIOohSGhyKQaKqadtM6 XY4eEq4N+/jIXsEyE0Z0SHmQve+0KzK5j8s4J8uN0qO0xo3ZcbonvOyBIuFiTpzq YKAiQMw+KAOFEFcVAl+vlJo81sHL+FqfRs8OLECzv1EoZuXSHmtqRTlU8t5aEkh1 6tvPR2CyJ4S5jemWctWzus3/fX4IGfH0lNDL7r/LQv85Go/xNKjY6RsqY1BHEbdU bKjHouZUos312XEbeu7VsyayTAe+5n4= -----END CERTIFICATE-----Generated at Wed May 13 00:03:00 2026 by rpki-client