$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer File: f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer (raw, json) Hash identifier: wCD8pgK8ZB6/yBkMfjeSY4RzY7w4mKtD3TGhPSVtsOc= Subject key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DB49DEE6D980D9F4B1FDD0820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 May 2026 00:45:17 +0000 Certificate not after: Sat 05 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 21581 IP: 108.161.144.0/20 IP: 2606:7100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:9d:ee:6d:98:0d:9f:4b:1f:dd:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 3 00:45:17 2026 GMT Not After : Aug 5 00:45:17 2028 GMT Subject: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:ab:0e:49:e7:97:f3:3c:b9:22:29:9e:f6: 60:97:0b:90:cf:62:8c:5d:c9:93:c6:a6:e2:ed:69: d8:9d:58:61:e6:de:7b:9f:e2:63:13:f3:40:ac:3e: 76:43:d6:d3:c8:9e:4c:07:14:45:9a:8d:a5:60:ed: ed:20:77:d7:80:b3:d6:92:ab:e6:c1:88:70:45:42: a9:6e:37:e0:6c:e2:f9:38:24:d0:58:41:70:7b:08: c6:31:66:7e:31:c3:6d:a9:5a:e8:bc:0e:4f:71:c0: a3:64:d9:d9:e3:95:f1:5b:f7:aa:b0:fc:93:d1:f8: 10:48:15:08:f4:75:3f:3e:65:65:e4:52:6b:a9:b2: c6:bd:8a:d8:50:2f:8c:57:db:73:c9:f8:63:c1:7c: 22:56:a7:2d:52:2c:57:4d:73:0f:f0:32:96:ba:d1: 56:f8:f0:10:e2:61:f5:2c:52:51:78:22:12:a3:9c: 4a:09:c1:f1:ff:06:6b:e8:e8:24:8b:24:c9:2e:d3: f3:52:73:bb:4e:f3:38:34:1e:e1:3b:e3:06:4e:30: a4:50:29:87:6e:02:17:df:62:5a:e3:22:64:58:31: ed:e9:c0:b6:74:6a:ca:d5:b7:63:81:77:32:74:b8: 65:98:72:54:d0:a7:be:a8:4e:17:01:18:36:3c:99: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 108.161.144.0/20 IPv6: 2606:7100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21581 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:63:af:20:23:7e:7f:59:7f:4d:d8:a6:05:c7:03:8c:72:09: 41:31:66:a1:75:11:9e:ad:e8:da:d5:4e:70:a9:01:ce:0d:91: 9d:be:fa:d1:2f:12:39:0f:cf:5f:74:d6:74:1e:ec:41:f1:16: 93:5f:e8:4a:db:86:37:2b:03:cc:b0:09:8e:bd:13:72:72:5f: 2e:d9:0b:a4:03:a8:59:a4:ff:3c:a5:b1:0c:3f:97:39:c7:3f: 48:41:10:ba:c9:c5:55:cb:d9:77:63:b6:51:4f:ae:ac:89:58: 90:f1:f6:90:bd:ed:ec:9f:d2:e2:45:e0:be:eb:49:1c:7e:21: 15:6e:66:43:e4:16:0b:50:92:17:f5:73:f8:42:2b:9d:c1:ef: e8:c6:91:38:20:07:ba:64:44:05:97:61:31:34:7a:c7:3e:29: 94:4d:18:19:cc:38:f2:a8:59:d7:1e:94:a6:52:71:49:4d:14: 76:ac:90:93:ed:63:9f:80:6f:99:9e:4f:e9:45:71:8b:2a:f0: a4:61:fd:72:b4:fc:6b:b3:b5:63:f1:a0:8c:65:b3:1e:23:77: f9:6c:08:c3:17:47:fb:6e:8b:74:fc:6b:ad:b4:c5:5e:03:0f: 06:dd:de:79:f5:95:fa:ca:11:42:5f:fb:d5:6f:2e:fa:3a:41: b6:0c:f1:4b -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE20ne5tmA2fSx/dCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwMzAwNDUxN1oXDTI4MDgwNTAwNDUxN1owLzEtMCsGA1UEAxMk ZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJhZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcOrDknnl/M8uSIpnvZglwuQz2KMXcmTxqbi 7WnYnVhh5t57n+JjE/NArD52Q9bTyJ5MBxRFmo2lYO3tIHfXgLPWkqvmwYhwRUKp bjfgbOL5OCTQWEFwewjGMWZ+McNtqVrovA5PccCjZNnZ45XxW/eqsPyT0fgQSBUI 9HU/PmVl5FJrqbLGvYrYUC+MV9tzyfhjwXwiVqctUixXTXMP8DKWutFW+PAQ4mH1 LFJReCISo5xKCcHx/wZr6OgkiyTJLtPzUnO7TvM4NB7hO+MGTjCkUCmHbgIX32Ja 4yJkWDHt6cC2dGrK1bdjgXcydLhlmHJU0Ke+qE4XARg2PJkiCQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFK3qPTF0qrzHLoNCL2aWhxBWGJMFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m NjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y2OWU2MGE2LTUxYzQtNGEzZS04 MjFhLTJkN2Q0MzhiYWQ0Yy9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4 YmFkNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARsoZAwDQQCAAIwBwMFACYGcQAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVE0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN2OvICN+f1l/TdimBccDjHIJQTFm oXURnq3o2tVOcKkBzg2Rnb760S8SOQ/PX3TWdB7sQfEWk1/oStuGNysDzLAJjr0T cnJfLtkLpAOoWaT/PKWxDD+XOcc/SEEQusnFVcvZd2O2UU+urIlYkPH2kL3t7J/S 4kXgvutJHH4hFW5mQ+QWC1CSF/Vz+EIrncHv6MaROCAHumREBZdhMTR6xz4plE0Y Gcw48qhZ1x6UplJxSU0UdqyQk+1jn4BvmZ5P6UVxiyrwpGH9crT8a7O1Y/GgjGWz HiN3+WwIwxdH+26LdPxrrbTFXgMPBt3eefWV+soRQl/71W8u+jpBtgzxSw== -----END CERTIFICATE-----Generated at Wed May 13 00:36:04 2026 by rpki-client