$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer File: 33d8879e-24de-4dd1-bab7-7cc451009cc2.cer (raw, json) Hash identifier: gDQzimC1faoGpsgyJTrqGdJmcvj8+hAhTPRNWyMzBrc= Subject key identifier: 73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E07E74A7BD2A31D6FB83E1040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jun 2026 20:45:11 +0000 Certificate not after: Sun 03 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 23.134.236.0/24 IP: 2602:f6dd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:e7:4a:7b:d2:a3:1d:6f:b8:3e:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 1 20:45:11 2026 GMT Not After : Sep 3 20:45:11 2028 GMT Subject: CN=33d8879e-24de-4dd1-bab7-7cc451009cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:33:86:52:3e:5e:cc:c8:4a:5c:f5:24:2b: 05:c1:47:6d:52:59:eb:3d:01:78:31:a8:ff:92:80: e0:88:61:af:45:08:ae:8f:97:db:17:66:c5:2c:5a: a1:a7:fd:6d:a8:81:60:7c:20:0d:79:98:2a:fb:0c: 0f:36:8f:65:7c:10:30:0e:bf:17:fa:ca:43:39:07: 0b:e1:b3:7e:92:ba:4f:e2:24:5e:ae:f2:66:45:86: 79:0e:67:99:e0:25:a9:ff:03:3d:4c:18:2f:eb:23: 8b:05:8f:e7:0f:21:35:3a:09:17:c9:f9:ab:92:52: 4b:16:76:28:71:e4:64:0b:79:b8:33:92:b6:87:cb: 17:17:fd:44:15:3d:0b:20:94:75:1c:23:96:b0:3a: f5:82:d9:18:c9:5c:13:b1:4b:33:cd:2f:97:cc:10: d4:dd:f1:8f:d8:f0:b9:59:ad:40:1c:6a:b7:10:e5: d1:43:0f:83:e4:dd:eb:6b:e4:a3:3a:66:70:7a:ac: 2f:37:d8:18:be:f6:7e:bb:06:38:45:42:3e:19:14: f8:af:ab:3b:d2:d1:57:95:e6:eb:0f:ad:3a:7d:4d: fe:51:79:b2:c4:90:c4:21:dc:72:d3:8d:09:8d:19: 0f:96:66:df:46:79:30:a8:f2:70:64:78:28:a7:07: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.236.0/24 IPv6: 2602:f6dd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8d:1d:7e:d1:33:12:e2:3c:c3:ba:4a:7d:c7:9f:d7:4d:12: 68:7f:a9:02:ff:19:e0:d0:e8:ef:fa:a8:64:62:14:2e:ee:88: 46:59:90:97:d8:7d:3f:6b:17:d7:27:1a:f7:d1:5d:10:98:99: 34:e5:52:76:32:fc:7c:ac:92:0c:a2:2d:92:0c:1d:7a:23:99: eb:ef:89:82:62:04:c8:37:f2:bf:1f:11:18:42:b3:97:e6:4a: 42:b0:92:55:88:ae:ad:e6:b0:1b:f4:6d:3d:2c:e0:75:2a:aa: db:34:30:7a:53:f4:24:5c:37:e3:df:10:89:7e:b0:5b:2b:e2: 5e:76:4e:21:4c:4d:5a:d5:9e:00:20:e7:e3:12:db:5b:42:d5: 47:1e:fd:34:f7:10:13:8b:f3:53:0a:68:04:80:80:bd:ca:91: 71:5d:7c:af:2a:99:95:5b:38:ba:f3:d1:c3:db:ce:e7:08:4c: 14:e3:f7:70:22:d6:bc:4b:6e:f0:6c:58:a6:e0:2d:65:10:c9: b8:f7:c5:25:e6:62:9b:cc:a2:5a:ef:c4:be:5e:d0:69:5c:d9: 2d:98:61:2a:43:d4:42:17:a3:3e:55:f8:cf:04:f6:26:dd:1b: c8:13:9f:09:7b:78:96:cf:22:61:59:e6:d1:74:6f:39:0a:99: f7:1f:2f:3f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE4H50p70qMdb7g+EEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYwMTIwNDUxMVoXDTI4MDkwMzIwNDUxMVowLzEtMCsGA1UEAxMk MzNkODg3OWUtMjRkZS00ZGQxLWJhYjctN2NjNDUxMDA5Y2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45szhlI+XszISlz1JCsFwUdtUlnrPQF4Maj/ koDgiGGvRQiuj5fbF2bFLFqhp/1tqIFgfCANeZgq+wwPNo9lfBAwDr8X+spDOQcL 4bN+krpP4iRervJmRYZ5DmeZ4CWp/wM9TBgv6yOLBY/nDyE1OgkXyfmrklJLFnYo ceRkC3m4M5K2h8sXF/1EFT0LIJR1HCOWsDr1gtkYyVwTsUszzS+XzBDU3fGP2PC5 Wa1AHGq3EOXRQw+D5N3ra+SjOmZweqwvN9gYvvZ+uwY4RUI+GRT4r6s70tFXlebr D606fU3+UXmyxJDEIdxy040JjRkPlmbfRnkwqPJwZHgopwciCwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHO6X5XBZe77NX6E1XNl2vUIrO6rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z M2Q4ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0NTEwMDljYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMzZDg4NzllLTI0ZGUtNGRkMS1i YWI3LTdjYzQ1MTAwOWNjMi8zM2Q4ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0NTEw MDljYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhuwwDgQCAAIwCAMGACYC9t0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE+NHX7RMxLiPMO6Sn3Hn9dNEmh/qQL/GeDQ6O/6qGRiFC7uiEZZkJfYfT9rF9cn GvfRXRCYmTTlUnYy/HyskgyiLZIMHXojmevviYJiBMg38r8fERhCs5fmSkKwklWI rq3msBv0bT0s4HUqqts0MHpT9CRcN+PfEIl+sFsr4l52TiFMTVrVngAg5+MS21tC 1Uce/TT3EBOL81MKaASAgL3KkXFdfK8qmZVbOLrz0cPbzucITBTj93Ai1rxLbvBs WKbgLWUQybj3xSXmYpvMolrvxL5e0Glc2S2YYSpD1EIXoz5V+M8E9ibdG8gTnwl7 eJbPImFZ5tF0bzkKmfcfLz8= -----END CERTIFICATE-----Generated at Sat Jun 13 15:20:42 2026 by rpki-client