$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/64e77990-6157-4349-adab-342f8dfde172.cer File: 64e77990-6157-4349-adab-342f8dfde172.cer (raw, json) Hash identifier: /uxCQufvADRwre7w+I28VWZGRMEyEsJiDfKyT4BUYf4= Subject key identifier: 39:4B:D8:E1:88:00:08:DD:4C:18:7A:08:6B:B0:25:09:E3:ED:C7:8E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DF4D3AA63C372198DCAC9D200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/64e77990-6157-4349-adab-342f8dfde172/64e77990-6157-4349-adab-342f8dfde172.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/64e77990-6157-4349-adab-342f8dfde172/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 00:45:17 +0000 Certificate not after: Mon 28 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 401500 IP: 204.144.148.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:d3:aa:63:c3:72:19:8d:ca:c9:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 26 00:45:17 2026 GMT Not After : Aug 28 00:45:17 2028 GMT Subject: CN=64e77990-6157-4349-adab-342f8dfde172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:57:f0:75:9d:df:ac:4f:eb:50:1e:fa:95: 76:74:3a:38:4d:57:78:f6:22:4c:a2:df:f0:d6:72: 57:21:d9:20:5d:3c:ca:26:01:51:e4:89:24:ee:9d: 02:f9:be:b9:12:6d:c0:fb:db:84:7f:0b:30:3f:73: 97:62:67:4e:87:32:9d:5f:f7:d2:88:16:12:8d:3f: 96:47:f7:75:18:ea:40:a4:82:6f:eb:64:28:5a:90: f1:77:e8:fd:54:e1:6f:3f:37:ed:43:f4:fc:ad:dc: 63:50:9e:c2:8c:23:2d:20:d6:57:74:b5:35:3d:9c: 6c:54:20:47:ee:9f:3a:3a:92:59:ae:a1:fa:50:50: 33:8e:d7:6c:b3:2e:cf:8d:8b:9d:af:6c:15:af:61: 2b:3f:fa:f7:fb:78:a9:6a:db:39:0f:d8:9a:d3:9f: d8:ac:82:32:88:d3:94:3a:3a:aa:d6:90:3a:15:fa: 77:3d:7d:f2:8b:a1:86:05:ee:df:c3:9c:ba:f1:1c: 0d:12:a0:93:92:58:bc:b2:4a:8c:05:66:18:c1:76: 45:d2:be:4c:cf:93:66:f9:57:7f:6b:9d:f4:4c:de: 18:bc:28:24:dc:4f:2d:48:b4:ec:fa:a2:bb:0f:94: c5:97:b4:93:02:8d:db:93:fe:72:75:ce:0b:b5:a1: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4B:D8:E1:88:00:08:DD:4C:18:7A:08:6B:B0:25:09:E3:ED:C7:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/64e77990-6157-4349-adab-342f8dfde172/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/64e77990-6157-4349-adab-342f8dfde172/64e77990-6157-4349-adab-342f8dfde172.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 204.144.148.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401500 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:32:bb:94:80:7d:7d:ef:23:94:7e:f0:aa:33:a9:9a:07:37: f7:7a:c6:af:12:8b:22:6d:f0:7c:fa:4a:d0:52:be:c6:7b:bd: 1a:97:70:bf:2e:8e:fd:7c:ce:67:47:ea:67:6b:c3:f2:a6:61: 5c:26:0c:4c:cb:3a:76:ba:39:ba:72:24:a2:a9:b0:c8:c1:18: 4d:7c:cf:42:b2:cd:4d:d9:1f:84:9a:a8:50:9b:0e:40:59:eb: 78:ff:89:cd:85:23:91:d1:51:b5:25:c8:ad:71:a3:73:43:49: 93:1b:9e:85:4b:ce:a4:e9:b7:4c:8b:33:06:a7:3e:13:86:e7: 05:af:38:43:03:d2:35:75:29:1b:95:b1:32:89:74:3c:3f:1f: 2b:49:90:01:84:da:aa:45:78:fe:10:e9:ab:1f:2c:14:48:04: 47:d5:78:bc:9f:1f:b3:6c:12:26:02:bc:b7:1a:e9:f1:af:02: ca:e6:39:7a:40:89:bf:81:96:34:73:41:ad:b6:e4:6a:0b:df: 4f:2a:9b:e4:eb:99:45:18:f1:3f:ed:dd:31:89:72:b7:a0:37: 9b:fe:8f:66:a2:4a:3d:84:a5:4f:53:8a:45:13:56:8e:d2:e7: 15:0a:83:9e:05:8e:d2:22:1a:f9:65:03:65:b7:df:b0:0b:3f: 1c:83:e2:ce -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3006pjw3IZjcrJ0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyNjAwNDUxN1oXDTI4MDgyODAwNDUxN1owLzEtMCsGA1UEAxMk NjRlNzc5OTAtNjE1Ny00MzQ5LWFkYWItMzQyZjhkZmRlMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAlX8HWd36xP61Ae+pV2dDo4TVd49iJMot/w 1nJXIdkgXTzKJgFR5Ikk7p0C+b65Em3A+9uEfwswP3OXYmdOhzKdX/fSiBYSjT+W R/d1GOpApIJv62QoWpDxd+j9VOFvPzftQ/T8rdxjUJ7CjCMtINZXdLU1PZxsVCBH 7p86OpJZrqH6UFAzjtdssy7PjYudr2wVr2ErP/r3+3ipats5D9ia05/YrIIyiNOU Ojqq1pA6Ffp3PX3yi6GGBe7fw5y68RwNEqCTkli8skqMBWYYwXZF0r5Mz5Nm+Vd/ a530TN4YvCgk3E8tSLTs+qK7D5TFl7STAo3bk/5ydc4LtaGwjwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDlL2OGIAAjdTBh6CGuwJQnj7ceOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 NGU3Nzk5MC02MTU3LTQzNDktYWRhYi0zNDJmOGRmZGUxNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY0ZTc3OTkwLTYxNTctNDM0OS1h ZGFiLTM0MmY4ZGZkZTE3Mi82NGU3Nzk5MC02MTU3LTQzNDktYWRhYi0zNDJmOGRm ZGUxNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMkJQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiBcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIcyu5SAfX3vI5R+8KozqZoHN/d6xq8SiyJt8Hz6StBSvsZ7 vRqXcL8ujv18zmdH6mdrw/KmYVwmDEzLOna6ObpyJKKpsMjBGE18z0KyzU3ZH4Sa qFCbDkBZ63j/ic2FI5HRUbUlyK1xo3NDSZMbnoVLzqTpt0yLMwanPhOG5wWvOEMD 0jV1KRuVsTKJdDw/HytJkAGE2qpFeP4Q6asfLBRIBEfVeLyfH7NsEiYCvLca6fGv AsrmOXpAib+BljRzQa225GoL308qm+TrmUUY8T/t3TGJcregN5v+j2aiSj2EpU9T ikUTVo7S5xUKg54FjtIiGvllA2W337ALPxyD4s4= -----END CERTIFICATE-----Generated at Sat Jun 13 08:09:46 2026 by rpki-client