$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer File: 647c9192-235d-4283-a432-fa5f0508c594.cer (raw, json) Hash identifier: 3b/cODtOwPW6N6uJE7MnHEAkev6iJRv/ge0KjjCKF1o= Subject key identifier: CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E0681F2C2996FAE0FE4DE29C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jun 2026 08:45:11 +0000 Certificate not after: Sun 03 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 23.135.188.0/24 IP: 45.45.132.0/22 IP: 2604:6a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:06:81:f2:c2:99:6f:ae:0f:e4:de:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 1 08:45:11 2026 GMT Not After : Sep 3 08:45:11 2028 GMT Subject: CN=647c9192-235d-4283-a432-fa5f0508c594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:b2:98:2b:0a:44:5c:39:59:bb:3e:ee:a2: 79:78:9e:44:dc:ae:60:ca:b4:9e:b2:22:c1:7c:35: 44:9b:59:53:4d:4b:43:c1:7c:f8:19:2d:77:ee:db: 36:ec:0f:dd:20:d5:af:da:24:e4:7c:16:7c:77:15: c9:93:d2:ed:42:be:90:d2:48:80:96:71:68:ec:09: d1:99:04:38:70:54:03:37:08:75:5d:88:a5:f1:ad: 97:10:16:be:c8:46:a2:d2:61:a1:67:9f:94:7e:42: 37:4f:92:f9:02:d6:10:0e:f6:a8:80:ba:e8:72:47: 96:86:f6:31:d6:fb:50:e3:64:4f:85:8d:bc:94:84: a9:56:39:b6:7b:67:5c:b7:10:44:ca:02:d2:98:1b: 40:96:8f:17:2a:64:c4:e5:b4:27:91:bf:0a:a3:1d: 66:c8:21:f4:3a:99:4c:66:30:ec:44:2d:2b:79:2b: 00:67:a7:24:92:6e:82:7e:a3:9c:f0:e8:bc:6f:75: 1b:00:44:a0:5c:59:fc:d8:91:c7:75:b9:a6:7a:b8: 99:ee:f3:22:1a:00:c1:d6:4b:a9:b9:6a:b4:dc:13: 26:ec:86:c1:14:ce:0a:6d:e2:2c:fd:dd:af:73:1d: 4f:8b:42:23:b0:1e:5f:69:82:68:9e:9f:e0:03:7a: 23:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.188.0/24 45.45.132.0/22 IPv6: 2604:6a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:79:a6:8a:62:87:7d:d6:19:bd:3e:c7:fc:32:56:12:e5:13: 7a:2f:6c:19:54:c3:d6:f4:fc:72:64:1a:d6:47:da:27:bb:be: 15:ec:59:e9:52:79:bf:52:34:d9:0c:cb:2f:5b:55:99:12:75: 52:82:6f:02:08:88:9f:20:0e:58:fa:11:59:82:00:96:c3:d7: 5e:17:62:c1:81:2f:c0:7a:e8:44:7f:7e:ad:52:dc:4f:b6:ff: 76:ee:36:4a:27:12:4a:5b:c8:b0:56:6a:10:7f:4d:03:71:62: 9d:2a:89:0f:94:61:3e:81:8d:34:c5:36:d3:89:f6:d5:47:26: 96:72:41:5c:fa:eb:96:2d:55:45:7e:84:ef:6f:58:e6:fc:b7: 73:81:4f:2d:99:52:37:d7:b5:20:b5:c0:58:ee:65:67:0c:9c: b5:95:14:e3:17:dd:0b:7b:b7:c5:01:a9:25:d4:36:a6:53:96: 7b:56:94:b4:7c:ed:91:ad:6f:b4:b9:90:f0:bf:49:63:2c:8f: ff:47:06:8a:94:9b:e1:71:a9:9d:07:76:d6:ae:47:91:26:0f: b2:b4:f0:cc:86:a8:39:05:a1:7b:66:2c:ec:fd:1c:f0:35:86: 24:5b:54:c7:73:c2:cb:2b:68:99:c6:f4:a5:ff:c6:63:f4:e8: 9d:56:f9:94 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWE4GgfLCmW+uD+TeKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYwMTA4NDUxMVoXDTI4MDkwMzA4NDUxMVowLzEtMCsGA1UEAxMk NjQ3YzkxOTItMjM1ZC00MjgzLWE0MzItZmE1ZjA1MDhjNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVqymCsKRFw5Wbs+7qJ5eJ5E3K5gyrSesiLB fDVEm1lTTUtDwXz4GS137ts27A/dINWv2iTkfBZ8dxXJk9LtQr6Q0kiAlnFo7AnR mQQ4cFQDNwh1XYil8a2XEBa+yEai0mGhZ5+UfkI3T5L5AtYQDvaogLrockeWhvYx 1vtQ42RPhY28lISpVjm2e2dctxBEygLSmBtAlo8XKmTE5bQnkb8Kox1myCH0OplM ZjDsRC0reSsAZ6ckkm6CfqOc8Oi8b3UbAESgXFn82JHHdbmmeriZ7vMiGgDB1kup uWq03BMm7IbBFM4KbeIs/d2vcx1Pi0IjsB5faYJonp/gA3ojSQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFM0xH3Zz9JhTr0/TJV9TtLpPR8kBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 NDdjOTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVmMDUwOGM1OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY0N2M5MTkyLTIzNWQtNDI4My1h NDMyLWZhNWYwNTA4YzU5NC82NDdjOTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVmMDUw OGM1OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXh7wDBAItLYQwDQQCAAIwBwMFACYEBqAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAHmmimKHfdYZvT7H/DJWEuUTei9sGVTD1vT8cmQa1kfaJ7u+FexZ6VJ5 v1I02QzLL1tVmRJ1UoJvAgiInyAOWPoRWYIAlsPXXhdiwYEvwHroRH9+rVLcT7b/ du42SicSSlvIsFZqEH9NA3FinSqJD5RhPoGNNMU204n21UcmlnJBXPrrli1VRX6E 729Y5vy3c4FPLZlSN9e1ILXAWO5lZwyctZUU4xfdC3u3xQGpJdQ2plOWe1aUtHzt ka1vtLmQ8L9JYyyP/0cGipSb4XGpnQd21q5HkSYPsrTwzIaoOQWhe2Ys7P0c8DWG JFtUx3PCyytomcb0pf/GY/TonVb5lA== -----END CERTIFICATE-----Generated at Sat Jun 13 09:53:43 2026 by rpki-client