$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer File: 59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer (raw, json) Hash identifier: a3iSBvz6gTE/8iGHSw8udICvneZ216Tf0bi9tB1ZyrI= Subject key identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E00EC934578199D3E6E9C5900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 May 2026 08:45:11 +0000 Certificate not after: Fri 01 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 23.133.228.0/24 IP: 2602:f6fb::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:ec:93:45:78:19:9d:3e:6e:9c:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 30 08:45:11 2026 GMT Not After : Sep 1 08:45:11 2028 GMT Subject: CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:5f:de:ec:2e:de:5a:26:67:e5:e6:aa:86: 87:c6:bf:c5:21:29:a9:ae:91:fd:fc:14:de:16:d4: a2:97:43:10:07:04:95:0a:4a:0f:cd:2f:d7:a1:b1: 51:20:1b:79:b6:66:68:1b:9b:8f:92:be:04:1d:84: 32:ac:84:25:e6:8d:97:13:c3:8c:5a:89:9e:7f:2a: 79:cf:41:26:c8:60:99:f8:05:88:b3:68:9c:7c:45: 04:49:fe:62:d8:c0:37:4d:82:8b:02:45:1f:bb:2f: 53:d3:b4:ca:99:bb:52:b8:e7:49:6f:6c:57:f4:89: e2:e3:49:59:b1:ca:16:64:c0:92:39:a7:98:dd:0b: 59:01:45:87:90:8b:df:66:fa:20:6d:f5:3c:ba:de: 26:f3:f1:d0:69:81:a4:83:aa:2a:62:87:e9:00:ce: f1:4e:87:ad:8a:c8:ab:1a:66:5f:3a:58:3e:e0:d8: 2c:b8:14:b3:d1:3c:a7:3a:18:b4:c6:2a:53:a5:51: b0:5f:b0:1c:33:1f:e7:1a:22:b2:fc:2b:04:6c:4c: 76:51:7d:b7:a3:9d:7f:e4:91:1e:26:ee:62:43:ab: 4d:00:91:0c:e9:91:3d:7f:96:20:b4:e2:da:d3:e9: a4:63:99:07:aa:d8:44:27:1f:b8:c9:da:97:54:1d: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.228.0/24 IPv6: 2602:f6fb::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4f:15:f7:17:08:f7:0d:fa:44:e6:4f:6c:05:11:00:72:c8: dd:1d:e5:89:6b:72:8d:e4:6d:b1:36:20:3b:39:36:11:6b:30: 5b:41:01:e5:73:4a:64:1d:17:ef:93:b4:12:a5:96:ee:2a:9b: 25:98:82:90:fc:9d:8e:95:b2:9c:0e:1d:0d:c3:3d:31:34:b2: 07:af:57:71:7e:94:73:00:a9:9b:23:1f:cf:e9:c2:0b:4e:b2: b3:df:a1:9f:cb:96:82:ff:32:ba:d5:da:2e:fb:6c:2a:51:95: e5:49:56:da:e6:c9:80:1a:58:a7:fc:8c:db:da:95:cf:a0:a0: e8:d2:c2:44:0d:01:e1:c5:7d:70:19:84:f4:34:8f:b1:62:bb: 50:8f:4a:86:ff:66:17:8b:9e:93:46:15:57:a1:1e:66:d2:50: 66:45:a3:07:16:b7:a8:99:72:91:09:e0:44:a8:f9:75:f1:2f: 88:a8:20:5b:78:75:54:1f:c5:6c:3e:95:82:a3:95:07:93:b4: c5:17:fa:d6:da:b5:94:33:f3:4b:a4:be:bb:54:bf:75:8a:19: 99:05:f2:d7:78:fe:2a:19:95:b8:27:c8:2d:ff:64:d4:0e:a6: 07:15:f8:e2:f1:6d:03:be:04:25:34:5c:27:4f:ce:94:52:64: f4:60:69:ca -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE4A7JNFeBmdPm6cWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUzMDA4NDUxMVoXDTI4MDkwMTA4NDUxMVowLzEtMCsGA1UEAxMk NTlmNmU1NDUtMTk0NC00Y2EwLWExNTUtNjlkZWQyY2RiMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5INf3uwu3lomZ+XmqoaHxr/FISmprpH9/BTe FtSil0MQBwSVCkoPzS/XobFRIBt5tmZoG5uPkr4EHYQyrIQl5o2XE8OMWomefyp5 z0EmyGCZ+AWIs2icfEUESf5i2MA3TYKLAkUfuy9T07TKmbtSuOdJb2xX9Ini40lZ scoWZMCSOaeY3QtZAUWHkIvfZvogbfU8ut4m8/HQaYGkg6oqYofpAM7xToetisir GmZfOlg+4NgsuBSz0TynOhi0xipTpVGwX7AcMx/nGiKy/CsEbEx2UX23o51/5JEe Ju5iQ6tNAJEM6ZE9f5YgtOLa0+mkY5kHqthEJx+4ydqXVB3UFwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLa/rz4d6s48jHnhPHVCG//DZDeTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 OWY2ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRlZDJjZGIxZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU5ZjZlNTQ1LTE5NDQtNGNhMC1h MTU1LTY5ZGVkMmNkYjFmZi81OWY2ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRlZDJj ZGIxZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXheQwDgQCAAIwCAMGACYC9vsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADhPFfcXCPcN+kTmT2wFEQByyN0d5Ylrco3kbbE2IDs5NhFrMFtBAeVzSmQdF++T tBKllu4qmyWYgpD8nY6VspwOHQ3DPTE0sgevV3F+lHMAqZsjH8/pwgtOsrPfoZ/L loL/MrrV2i77bCpRleVJVtrmyYAaWKf8jNvalc+goOjSwkQNAeHFfXAZhPQ0j7Fi u1CPSob/ZheLnpNGFVehHmbSUGZFowcWt6iZcpEJ4ESo+XXxL4ioIFt4dVQfxWw+ lYKjlQeTtMUX+tbatZQz80ukvrtUv3WKGZkF8td4/ioZlbgnyC3/ZNQOpgcV+OLx bQO+BCU0XCdPzpRSZPRgaco= -----END CERTIFICATE-----Generated at Sat Jun 13 11:15:09 2026 by rpki-client