$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer File: 2a28de55-f597-40cf-b508-0c5d7318b5ec.cer (raw, json) Hash identifier: ECcwx3292SVksp98PFs9SYG8/bwhZ/u0p0+m10e3cpk= Subject key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DF9B2204BE5C3ED253BD45A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 May 2026 18:36:45 +0000 Certificate not after: Tue 29 Aug 2028 18:36:45 +0000 Subordinate resources: AS: 33715 IP: 103.66.28.0/22 IP: 2607:ec40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:b2:20:4b:e5:c3:ed:25:3b:d4:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 27 18:36:45 2026 GMT Not After : Aug 29 18:36:45 2028 GMT Subject: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:1e:62:bb:02:74:12:27:80:29:ae:8d:cb: 69:91:de:c1:62:16:c4:e8:5d:fe:3d:df:31:50:f7: 65:57:71:3e:4e:23:22:3c:5b:0f:4f:d3:ba:f6:33: e0:8f:dc:22:82:1c:c4:8c:0b:4b:11:09:93:b2:ef: 6d:d7:b9:d5:bc:dc:99:92:0c:bc:5f:88:8a:bd:f9: b8:74:ef:89:ac:e2:e3:99:1f:e6:91:d2:25:f0:1b: 82:40:b7:41:a2:1f:42:db:9f:c6:de:24:bf:0f:d4: 58:6a:6f:93:5f:60:c0:b7:3f:6c:f6:0a:e8:4b:ae: 07:09:e9:04:1b:60:3f:1b:a6:6d:32:bd:e2:15:3b: 3c:e6:4b:c2:2a:58:e9:73:5c:9e:f7:d3:ec:e8:80: 44:1a:be:51:aa:6d:93:30:6a:13:eb:59:f4:26:0a: 5d:f1:30:29:3e:84:4f:f1:a0:6a:7a:cf:d5:96:47: 44:17:b5:a7:f7:92:40:76:45:22:45:80:65:5f:63: 8c:d0:5d:d6:55:c4:dc:dd:6d:08:d1:39:96:da:71: 45:42:e7:dd:24:9e:bd:5b:c1:9d:bc:9c:29:e1:11: cd:b0:30:dd:f6:45:53:74:a5:31:ae:d2:15:3b:d1: eb:7b:c8:93:29:c8:8b:a0:b7:bf:7b:b2:e0:ba:04: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 IPv6: 2607:ec40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33715 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:af:73:60:30:cb:81:b2:5d:c1:a1:98:3c:45:d1:62:b7:aa: e5:c1:d6:90:59:04:4b:3f:69:ed:36:3a:a7:c9:3b:42:7b:0f: 76:3e:42:0f:8b:de:6d:8c:b4:ba:22:af:b7:54:52:2c:fc:6a: 5c:4b:da:18:1b:ea:20:5e:d9:c7:94:3a:30:76:20:a4:0a:99: 56:88:0f:60:ff:97:0a:a0:d0:23:89:a0:68:9e:32:54:d3:af: 2b:bb:9c:e0:a4:9e:7a:80:04:df:07:e8:cc:a6:0b:f2:65:24: 60:9f:a9:53:bb:ab:83:3b:d8:66:32:52:75:b1:cf:a2:6c:ae: cb:a7:9e:e3:8f:b3:5c:e1:32:1f:f5:25:85:5c:89:6a:82:f3: b3:e7:dc:5e:92:ed:67:96:86:a3:f3:33:e3:cd:21:a5:cf:32: c6:42:23:ca:df:c3:e9:ef:a6:c8:d4:f8:38:50:83:19:bc:28: 8a:f3:dd:4c:f3:89:f7:f3:1a:04:96:ff:f3:df:32:de:e4:04: 1d:dc:4f:64:33:ae:0e:2e:11:f9:23:dd:32:e1:cc:a3:5b:f9: 0f:f6:2b:5f:e4:54:81:71:6c:92:0b:cc:86:3d:aa:18:94:e4: 51:87:01:be:a7:eb:b5:c8:f6:f9:49:ed:56:5c:9b:2a:6f:14: a4:ad:87:92 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE35siBL5cPtJTvUWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyNzE4MzY0NVoXDTI4MDgyOTE4MzY0NVowLzEtMCsGA1UEAxMk MmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThiNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tQeYrsCdBIngCmujctpkd7BYhbE6F3+Pd8x UPdlV3E+TiMiPFsPT9O69jPgj9wighzEjAtLEQmTsu9t17nVvNyZkgy8X4iKvfm4 dO+JrOLjmR/mkdIl8BuCQLdBoh9C25/G3iS/D9RYam+TX2DAtz9s9groS64HCekE G2A/G6ZtMr3iFTs85kvCKljpc1ye99Ps6IBEGr5Rqm2TMGoT61n0Jgpd8TApPoRP 8aBqes/VlkdEF7Wn95JAdkUiRYBlX2OM0F3WVcTc3W0I0TmW2nFFQufdJJ69W8Gd vJwp4RHNsDDd9kVTdKUxrtIVO9Hre8iTKciLoLe/e7LgugThDwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIbZ8yB2zDfwGthICpRQlhXVWNx7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y YTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJhMjhkZTU1LWY1OTctNDBjZi1i NTA4LTBjNWQ3MzE4YjVlYy8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMx OGI1ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnQhwwDQQCAAIwBwMFACYH7EAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIOzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHevc2Awy4GyXcGhmDxF0WK3quXB 1pBZBEs/ae02OqfJO0J7D3Y+Qg+L3m2MtLoir7dUUiz8alxL2hgb6iBe2ceUOjB2 IKQKmVaID2D/lwqg0COJoGieMlTTryu7nOCknnqABN8H6MymC/JlJGCfqVO7q4M7 2GYyUnWxz6JsrsunnuOPs1zhMh/1JYVciWqC87Pn3F6S7WeWhqPzM+PNIaXPMsZC I8rfw+nvpsjU+DhQgxm8KIrz3UzziffzGgSW//PfMt7kBB3cT2Qzrg4uEfkj3TLh zKNb+Q/2K1/kVIFxbJILzIY9qhiU5FGHAb6n67XI9vlJ7VZcmypvFKSth5I= -----END CERTIFICATE-----Generated at Sat Jun 13 08:11:37 2026 by rpki-client