$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer File: f0657a3e-0c20-4004-9a6b-e66cf7940583.cer (raw, json) Hash identifier: oipJqlqMpXoN3dIT0Q7tsPQe4sHIjAxbFU0DGTuUCwo= Subject key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DB8CDF4D6A066D069AB6A2540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 May 2026 12:45:17 +0000 Certificate not after: Sun 06 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 160.32.8.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b8:cd:f4:d6:a0:66:d0:69:ab:6a:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 4 12:45:17 2026 GMT Not After : Aug 6 12:45:17 2028 GMT Subject: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:df:d6:9b:06:14:d3:30:16:eb:57:27:44: ad:c4:32:6a:57:35:1c:45:44:b2:9e:2b:89:35:f8: 64:a6:2d:fd:31:a5:2d:23:a0:df:5e:4e:71:4b:5f: 83:65:6e:7b:b1:17:6e:76:e4:13:d1:7e:36:b3:02: 48:b6:c6:5c:b0:b3:66:9b:6c:18:e8:44:b8:82:0b: 29:93:66:16:7e:68:c8:11:de:64:9a:5f:df:b4:2e: bf:ae:f1:44:2a:89:92:20:cc:fc:9f:e4:da:b8:17: 4f:0d:87:5b:35:92:7b:ef:f7:f3:71:91:e3:08:f7: cb:b0:50:71:d8:0b:ad:e7:c1:a7:1c:70:84:71:11: ec:3b:8b:c0:b8:bb:c7:b2:d1:17:ce:f0:c6:e9:6d: b3:48:2e:f8:db:9c:fd:b3:c6:f3:a3:35:2d:d3:ed: 03:7f:95:45:30:42:e2:ad:3e:24:92:cc:cb:20:f0: d4:ef:a7:7f:fd:42:a0:da:e9:2b:d9:18:e1:85:ab: e1:87:2c:2d:d7:df:1d:ad:fc:42:e1:a7:29:be:cb: 33:9b:70:66:76:8b:b7:16:6b:df:08:58:19:0d:6f: 30:7d:8a:61:2e:68:22:a0:6b:87:10:1a:49:1a:6e: e7:a7:d3:dd:c0:3a:59:57:6b:ad:61:06:8c:45:06: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 160.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:7f:e6:15:08:62:b8:76:61:04:d9:c9:0f:db:de:cc:81:c0: c2:6f:79:51:53:03:0a:7e:9a:08:07:cb:2c:59:6f:5e:73:2f: 05:f7:e1:9d:52:23:e3:d9:7c:20:c5:87:64:d9:63:18:dc:f1: 3b:b8:a8:05:b9:d0:9f:3b:99:2b:d0:45:78:65:c0:de:0b:d8: b7:93:36:f8:28:23:78:25:13:10:5d:44:e4:38:be:6c:5d:97: e2:6e:a9:5a:50:00:fa:58:0a:13:ca:fd:0c:91:c5:37:fe:43: 0d:12:49:f5:4f:6b:9f:ed:f4:1a:97:3c:b0:a9:58:06:56:3a: f4:a4:16:a9:92:72:ce:69:e7:1e:72:59:2a:ec:94:97:5a:b6: 82:58:b4:4d:aa:71:40:9c:fe:ae:52:75:51:56:08:d8:4f:a4: 27:7a:03:02:fc:35:39:e3:98:57:8b:45:39:7a:8b:fe:e2:13: b9:fc:5b:e8:d3:ac:bb:13:64:db:9e:1b:0e:58:bc:1f:8f:ba: 77:92:6d:2a:ac:53:66:f3:3a:1f:fc:a8:fe:8f:d8:b6:f2:77: 36:2c:44:a7:c8:b1:67:89:56:96:1c:25:28:ad:cf:fc:cd:6b: d4:f3:ba:55:c1:61:8a:e0:c1:7e:d0:ef:4b:23:1f:8a:7f:f8: d1:be:ec:75 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE24zfTWoGbQaatqJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwNDEyNDUxN1oXDTI4MDgwNjEyNDUxN1owLzEtMCsGA1UEAxMk ZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQwNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/f1psGFNMwFutXJ0StxDJqVzUcRUSyniuJ Nfhkpi39MaUtI6DfXk5xS1+DZW57sRduduQT0X42swJItsZcsLNmm2wY6ES4ggsp k2YWfmjIEd5kml/ftC6/rvFEKomSIMz8n+TauBdPDYdbNZJ77/fzcZHjCPfLsFBx 2Aut58GnHHCEcRHsO4vAuLvHstEXzvDG6W2zSC7425z9s8bzozUt0+0Df5VFMELi rT4kkszLIPDU76d//UKg2ukr2Rjhhavhhywt198drfxC4acpvsszm3Bmdou3Fmvf CFgZDW8wfYphLmgioGuHEBpJGm7np9PdwDpZV2utYQaMRQbXGQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK7S9n25+5k8/T78CA1anK3uYs0WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m MDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2YwNjU3YTNlLTBjMjAtNDAwNC05 YTZiLWU2NmNmNzk0MDU4My9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5 NDA1ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOgIAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqn/mFQhiuHZhBNnJD9ve zIHAwm95UVMDCn6aCAfLLFlvXnMvBffhnVIj49l8IMWHZNljGNzxO7ioBbnQnzuZ K9BFeGXA3gvYt5M2+CgjeCUTEF1E5Di+bF2X4m6pWlAA+lgKE8r9DJHFN/5DDRJJ 9U9rn+30Gpc8sKlYBlY69KQWqZJyzmnnHnJZKuyUl1q2gli0TapxQJz+rlJ1UVYI 2E+kJ3oDAvw1OeOYV4tFOXqL/uITufxb6NOsuxNk254bDli8H4+6d5JtKqxTZvM6 H/yo/o/YtvJ3NixEp8ixZ4lWlhwlKK3P/M1r1PO6VcFhiuDBftDvSyMfin/40b7s dQ== -----END CERTIFICATE-----Generated at Tue May 12 22:15:22 2026 by rpki-client