$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer File: 6988a68c-ec5c-4d72-9ee1-27118af98380.cer (raw, json) Hash identifier: wbYT3mKSPb970PDQBErFRVxmnZcMBTQr/+buYVQjBqU= Subject key identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D04DAA7C69D4EC16F8E564780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Mar 2026 01:45:22 +0000 Certificate not after: Sat 03 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 29953 IP: 69.41.192.0/20 IP: 97.107.48.0/20 IP: 2605:1100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:da:a7:c6:9d:4e:c1:6f:8e:56:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 1 01:45:22 2026 GMT Not After : Jun 3 00:45:22 2028 GMT Subject: CN=6988a68c-ec5c-4d72-9ee1-27118af98380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:ec:cf:a1:36:63:5b:8e:2b:9b:ea:9c:88: a5:2d:37:9d:b3:2f:d2:fa:c9:fa:e7:e2:be:21:c0: 4e:71:bf:c4:4e:88:06:64:bb:d7:80:0b:ba:d6:d5: 49:8c:29:c6:73:49:94:77:64:88:f2:e2:ff:a3:1b: 5e:db:f9:01:e4:8b:5d:6f:09:e2:d1:f3:fe:fb:8f: 77:cb:01:47:c1:dc:7f:f7:6a:be:27:43:37:3b:8c: 80:95:e9:33:1c:bd:22:be:79:0c:4d:ca:45:6c:2c: 73:fc:45:d8:23:7c:df:80:5c:39:0e:29:c6:a1:72: aa:02:a9:3c:e1:9b:9f:cf:2a:9f:88:75:75:d7:53: 08:b0:4a:8f:f6:3b:d5:68:72:c0:cc:9d:d0:1f:67: 3e:02:f8:57:80:be:b2:3e:99:e3:03:eb:2d:1a:c1: a4:9c:00:3f:fb:da:04:5e:9d:15:6f:2b:44:0a:4b: 34:ba:76:ad:f6:99:be:c8:37:f2:5e:7d:e9:34:d2: 2a:c2:89:f3:e1:52:56:fa:82:48:56:e1:0f:0e:1a: 98:19:54:96:17:1c:c0:c1:85:76:19:2f:26:81:d2: a7:44:85:52:48:81:7e:fc:da:91:bc:3e:7e:aa:f2: dd:3c:be:5f:41:87:24:18:98:8b:73:a9:a7:25:14: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 69.41.192.0/20 97.107.48.0/20 IPv6: 2605:1100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29953 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:da:9c:75:2c:f7:4b:5a:34:a2:ad:1c:02:99:09:bf:ee:c4: 79:64:0b:2e:8c:59:ec:5e:ea:d0:21:fb:c5:2e:7b:89:d7:7e: 13:64:64:77:1e:85:84:59:19:99:d8:47:c4:9d:cf:e5:02:dc: 33:95:7b:bb:21:0c:22:9c:98:73:e1:31:45:fd:89:02:49:f9: ce:a4:f7:65:f6:ca:78:7c:4d:ad:9b:81:e6:73:34:da:8e:c0: 69:8e:51:8c:9c:c8:fa:ce:a5:09:25:13:a5:8c:90:e1:ce:1e: 27:a3:e5:6f:bf:03:6a:13:fc:70:a3:22:59:3b:42:a4:71:3d: 91:98:2c:6b:2a:48:5f:08:4f:04:b0:37:d9:8e:37:59:ae:88: 23:4a:a7:4b:6b:92:2a:ad:30:9b:7e:ce:b0:e2:1d:ca:cd:7e: c5:f0:d7:e1:f9:d2:16:f8:1c:ce:41:cc:fb:98:72:19:7d:23: 74:b3:be:23:71:b6:ab:5b:9a:ea:59:4e:a6:75:81:ac:42:96: 34:b7:b9:58:fd:e2:83:08:a0:5b:8a:c2:76:99:54:04:0e:2e: 2e:73:52:db:a8:2b:82:db:33:92:ff:93:f9:c9:67:d5:91:bf: 35:2c:8a:47:d8:e9:d7:8c:9d:73:67:57:ee:b5:93:90:a7:ee: e4:14:12:6b -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE0E2qfGnU7Bb45WR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMTAxNDUyMloXDTI4MDYwMzAwNDUyMlowLzEtMCsGA1UEAxMk Njk4OGE2OGMtZWM1Yy00ZDcyLTllZTEtMjcxMThhZjk4MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpvsz6E2Y1uOK5vqnIilLTedsy/S+sn65+K+ IcBOcb/ETogGZLvXgAu61tVJjCnGc0mUd2SI8uL/oxte2/kB5Itdbwni0fP++493 ywFHwdx/92q+J0M3O4yAlekzHL0ivnkMTcpFbCxz/EXYI3zfgFw5DinGoXKqAqk8 4ZufzyqfiHV111MIsEqP9jvVaHLAzJ3QH2c+AvhXgL6yPpnjA+stGsGknAA/+9oE Xp0VbytECks0unat9pm+yDfyXn3pNNIqwonz4VJW+oJIVuEPDhqYGVSWFxzAwYV2 GS8mgdKnRIVSSIF+/NqRvD5+qvLdPL5fQYckGJiLc6mnJRQmmQIDAQABo4IELzCC BCswHQYDVR0OBBYEFFN0Kx5/edIa0ClIRZqTXLpU7nM7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 OTg4YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzExOGFmOTgzODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY5ODhhNjhjLWVjNWMtNGQ3Mi05 ZWUxLTI3MTE4YWY5ODM4MC82OTg4YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzExOGFm OTgzODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARFKcADBARhazAwDQQCAAIwBwMFACYFEQAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICdQEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhdqcdSz3S1o0oq0cApkJ v+7EeWQLLoxZ7F7q0CH7xS57idd+E2Rkdx6FhFkZmdhHxJ3P5QLcM5V7uyEMIpyY c+ExRf2JAkn5zqT3ZfbKeHxNrZuB5nM02o7AaY5RjJzI+s6lCSUTpYyQ4c4eJ6Pl b78DahP8cKMiWTtCpHE9kZgsaypIXwhPBLA32Y43Wa6II0qnS2uSKq0wm37OsOId ys1+xfDX4fnSFvgczkHM+5hyGX0jdLO+I3G2q1ua6llOpnWBrEKWNLe5WP3igwig W4rCdplUBA4uLnNS26grgtszkv+T+cln1ZG/NSyKR9jp14ydc2dX7rWTkKfu5BQS aw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:14 2026 by rpki-client