$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer File: 3505b615-7597-4cdc-9539-0a0a5c49dee8.cer (raw, json) Hash identifier: xWK3J2mNV/AbyiYoIEC9pxBrLe9V+ItTK3BnnxFVRMk= Subject key identifier: 31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D5245CFCD768A40925CD4CF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Mar 2026 19:18:31 +0000 Certificate not after: Fri 30 Jun 2028 19:18:31 +0000 Subordinate resources: AS: 25608 IP: 66.85.7.0/24 IP: 2620:8b:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:45:cf:cd:76:8a:40:92:5c:d4:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 28 19:18:31 2026 GMT Not After : Jun 30 19:18:31 2028 GMT Subject: CN=3505b615-7597-4cdc-9539-0a0a5c49dee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:1e:41:f7:fe:47:bc:c8:9f:48:c5:15:84: 4f:a3:17:ea:8a:5a:02:aa:2e:6f:97:8c:63:05:09: 9e:30:06:32:d9:2f:71:3b:f0:26:4a:3a:77:4a:66: 55:1b:5f:93:36:62:90:c1:73:74:21:5f:84:52:55: c6:e6:b8:eb:77:28:8d:dd:c0:75:84:1a:34:9a:54: 0a:2c:85:62:e0:82:fc:1e:8c:a8:67:70:ad:91:38: 0a:8c:13:f7:ba:80:e3:ad:b6:7d:e2:0b:47:4a:5b: 1d:dd:9a:08:3a:b7:04:02:1a:95:47:b3:7f:8b:e3: 95:b2:43:8b:7a:ad:61:f7:b7:66:75:77:02:38:f7: 23:f3:9a:44:61:0b:1f:1a:97:cb:19:35:2f:43:34: 59:55:2a:92:4d:39:ec:4e:e0:c1:75:10:48:c0:7f: 1b:dc:75:8a:41:91:63:32:bc:0c:ca:f5:5e:33:64: 78:fd:c9:b8:6e:23:37:0b:70:7a:ee:79:e2:80:b1: f6:73:e7:1d:ba:b6:61:ff:ae:b8:5e:84:70:db:d9: 6f:54:23:0e:47:e8:64:23:c6:e6:45:47:80:b2:54: b9:9e:28:a5:82:36:a6:46:7f:85:fc:36:c0:ad:1e: ae:81:db:1b:60:4c:5a:3d:03:4f:99:55:7f:69:25: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.85.7.0/24 IPv6: 2620:8b:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25608 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:4a:12:df:66:34:76:67:66:81:94:e1:a8:37:e0:d4:77:ec: 89:d8:58:d0:69:6f:96:20:b0:9c:70:8e:b2:a3:9d:c2:01:e0: fc:4b:a8:c5:c3:42:28:f1:ac:41:54:23:f5:3c:58:11:ff:85: 0c:f6:83:68:0a:05:a5:e5:8b:ee:0a:de:e7:61:3e:9b:b4:04: 9d:74:63:be:94:3b:96:47:b2:76:98:8a:07:f6:1b:d6:2d:c0: 0d:d2:c3:e9:90:89:51:4b:0d:e0:ec:e5:33:5f:c7:5e:80:10: 1b:dd:40:ba:02:ee:ba:57:8d:60:97:6e:62:ee:d4:03:e1:82: b8:0e:66:05:82:a4:b4:26:ec:42:d3:cb:eb:b9:96:2b:5d:b5: 36:e2:07:b8:da:dc:52:bc:83:b3:e8:8b:d7:c6:9e:2a:d3:bd: fd:38:e0:58:17:d4:27:aa:06:14:19:c7:2c:7a:03:1c:ed:2f: 19:04:6f:27:42:83:1d:90:ef:97:8a:92:3c:d7:4b:d9:62:7a: 08:e2:4c:b5:8f:45:3c:64:6d:7c:1f:52:bb:c0:93:ec:81:09: b2:6b:1a:7c:0c:ec:6a:44:8c:4a:98:17:ce:e3:10:ef:b8:f2: db:49:11:dc:0e:6a:d7:80:9f:c4:9f:06:b7:24:03:11:61:1a: c5:3b:87:d2 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1SRc/NdopAklzUzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyODE5MTgzMVoXDTI4MDYzMDE5MTgzMVowLzEtMCsGA1UEAxMk MzUwNWI2MTUtNzU5Ny00Y2RjLTk1MzktMGEwYTVjNDlkZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYIeQff+R7zIn0jFFYRPoxfqiloCqi5vl4xj BQmeMAYy2S9xO/AmSjp3SmZVG1+TNmKQwXN0IV+EUlXG5rjrdyiN3cB1hBo0mlQK LIVi4IL8HoyoZ3CtkTgKjBP3uoDjrbZ94gtHSlsd3ZoIOrcEAhqVR7N/i+OVskOL eq1h97dmdXcCOPcj85pEYQsfGpfLGTUvQzRZVSqSTTnsTuDBdRBIwH8b3HWKQZFj MrwMyvVeM2R4/cm4biM3C3B67nnigLH2c+cdurZh/664XoRw29lvVCMOR+hkI8bm RUeAslS5niilgjamRn+F/DbArR6ugdsbYExaPQNPmVV/aSUC4wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDFVq+cwGiv0QKYBC6fLD8O0nfW0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z NTA1YjYxNS03NTk3LTRjZGMtOTUzOS0wYTBhNWM0OWRlZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzM1MDViNjE1LTc1OTctNGNkYy05 NTM5LTBhMGE1YzQ5ZGVlOC8zNTA1YjYxNS03NTk3LTRjZGMtOTUzOS0wYTBhNWM0 OWRlZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABCVQcwDwQCAAIwCQMHACYgAItgADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJkCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoShLfZjR2Z2aBlOGoN+DUd+yJ 2FjQaW+WILCccI6yo53CAeD8S6jFw0Io8axBVCP1PFgR/4UM9oNoCgWl5YvuCt7n YT6btASddGO+lDuWR7J2mIoH9hvWLcAN0sPpkIlRSw3g7OUzX8degBAb3UC6Au66 V41gl25i7tQD4YK4DmYFgqS0JuxC08vruZYrXbU24ge42txSvIOz6IvXxp4q0739 OOBYF9QnqgYUGccsegMc7S8ZBG8nQoMdkO+XipI810vZYnoI4ky1j0U8ZG18H1K7 wJPsgQmyaxp8DOxqRIxKmBfO4xDvuPLbSRHcDmrXgJ/Enwa3JAMRYRrFO4fS -----END CERTIFICATE-----Generated at Fri Apr 17 03:51:58 2026 by rpki-client