$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer File: 6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer (raw, json) Hash identifier: CK8LMZ3UYmOTJ7Mx0t5424586n5R0yvwYYkvyKsMyqM= Subject key identifier: B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D5B480889F231147DE0F60E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Apr 2026 00:45:16 +0000 Certificate not after: Tue 04 Jul 2028 00:45:16 +0000 Subordinate resources: IP: 209.20.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:48:08:89:f2:31:14:7d:e0:f6:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 1 00:45:16 2026 GMT Not After : Jul 4 00:45:16 2028 GMT Subject: CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:22:4f:1f:07:4d:6c:1e:7d:61:d9:16:39: 06:34:a4:a0:9a:f9:6b:41:f2:f2:30:b1:d7:b2:71: 74:bd:e4:53:f6:45:86:7f:2c:aa:e2:46:41:da:63: a2:27:0a:3b:c5:0e:49:03:1f:3c:60:7a:51:51:aa: ad:27:07:04:8e:cc:d7:54:69:79:89:47:f0:36:8e: b9:34:d1:74:56:c3:d0:bc:48:fd:3e:32:cc:0f:d5: 6a:25:d1:d0:e1:e3:a2:31:24:9d:f7:19:57:87:32: 14:97:3f:44:88:19:fb:18:fc:25:9a:85:47:40:6e: aa:9b:40:5c:b6:24:d4:92:ad:db:ae:9e:3b:a6:49: e1:20:58:19:f5:c9:e0:c3:50:94:07:31:76:3e:8d: 84:33:f2:86:01:fd:90:dc:d0:b6:8d:c4:fa:ca:10: 3d:f8:5f:6a:e7:cd:dd:7f:01:93:7d:69:1f:ce:4c: ee:18:b7:73:7d:6e:1e:a5:3f:21:e5:de:6e:06:f9: 97:bd:26:45:d7:b4:ad:35:5e:91:37:34:be:bd:16: ea:be:36:b2:5a:08:5d:73:a6:db:30:58:b0:c5:4b: 43:1c:d7:41:93:66:33:6f:b4:aa:0b:44:93:cd:9d: 17:27:18:c3:e4:bb:81:e8:0b:73:56:3e:d3:64:bf: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 209.20.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f0:ef:d4:39:cb:4b:cd:66:12:ad:f1:ca:2e:01:d1:a2:3b: f1:de:6a:79:37:f1:06:48:d4:ab:54:d1:91:24:ca:6d:8f:21: ac:ba:9b:88:94:25:93:9f:46:f8:c0:01:30:cb:c4:b9:6e:2d: 54:91:23:23:cd:2e:7b:96:7c:14:9a:d1:84:a6:fb:60:04:b6: b0:42:4f:48:a7:88:a7:c1:f9:c4:14:9d:64:6a:c1:ff:61:71: 9e:51:4d:64:66:82:b7:75:6c:e1:68:9e:80:1f:6b:dd:72:e9: ae:41:1f:c2:15:ce:9c:2c:77:47:99:a7:22:8c:61:bf:e0:07: 24:0e:5b:8b:5b:a9:dc:64:d6:25:f8:26:c9:af:ce:2b:eb:12: 03:94:f5:d5:e9:4c:eb:d7:e0:f1:4b:fd:c1:ba:cd:8e:dc:06: ba:91:1c:1f:67:b5:ad:45:85:d7:25:1c:36:b3:6e:e6:95:ef: 16:ef:6e:e7:59:9e:bc:2f:91:a8:ba:f4:90:88:fc:f4:c3:f5: 3e:a7:0b:7f:92:d6:09:7c:7e:05:51:bb:90:88:3c:24:f2:d0: bd:13:93:6c:87:0c:c0:2e:15:88:11:cc:ba:b7:0c:cd:21:db: 36:cc:c0:0a:45:cc:97:5a:d5:2a:cf:ee:d6:90:dd:d3:83:51: 27:44:ee:a3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1bSAiJ8jEUfeD2DmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQwMTAwNDUxNloXDTI4MDcwNDAwNDUxNlowLzEtMCsGA1UEAxMk NjA5NGZmNDgtMmNkYy00ZWUwLTg3OWItOGNjMjVkZGI4NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxciTx8HTWwefWHZFjkGNKSgmvlrQfLyMLHX snF0veRT9kWGfyyq4kZB2mOiJwo7xQ5JAx88YHpRUaqtJwcEjszXVGl5iUfwNo65 NNF0VsPQvEj9PjLMD9VqJdHQ4eOiMSSd9xlXhzIUlz9EiBn7GPwlmoVHQG6qm0Bc tiTUkq3brp47pknhIFgZ9cngw1CUBzF2Po2EM/KGAf2Q3NC2jcT6yhA9+F9q583d fwGTfWkfzkzuGLdzfW4epT8h5d5uBvmXvSZF17StNV6RNzS+vRbqvjayWghdc6bb MFiwxUtDHNdBk2Yzb7SqC0STzZ0XJxjD5LuB6AtzVj7TZL8VywIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLYGZyhklgo9s/cYJku+O59feSs5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 MDk0ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2MyNWRkYjg1NWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzYwOTRmZjQ4LTJjZGMtNGVlMC04 NzliLThjYzI1ZGRiODU1Yi82MDk0ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2MyNWRk Yjg1NWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALRFJAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlPDv1DnLS81mEq3xyi4B 0aI78d5qeTfxBkjUq1TRkSTKbY8hrLqbiJQlk59G+MABMMvEuW4tVJEjI80ue5Z8 FJrRhKb7YAS2sEJPSKeIp8H5xBSdZGrB/2FxnlFNZGaCt3Vs4WiegB9r3XLprkEf whXOnCx3R5mnIoxhv+AHJA5bi1up3GTWJfgmya/OK+sSA5T11elM69fg8Uv9wbrN jtwGupEcH2e1rUWF1yUcNrNu5pXvFu9u51mevC+RqLr0kIj89MP1PqcLf5LWCXx+ BVG7kIg8JPLQvROTbIcMwC4ViBHMurcMzSHbNszACkXMl1rVKs/u1pDd04NRJ0Tu ow== -----END CERTIFICATE-----Generated at Fri Apr 17 06:20:03 2026 by rpki-client