$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer File: 77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer (raw, json) Hash identifier: pTAqXE7NoCJZUL5W5eUVwGRmPqT6RwUEmBP+CaL9wsw= Subject key identifier: B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E0251EB80C658CFD24F67A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 May 2026 20:45:11 +0000 Certificate not after: Fri 01 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 19173 IP: 2620:d2:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:02:51:eb:80:c6:58:cf:d2:4f:67:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 30 20:45:11 2026 GMT Not After : Sep 1 20:45:11 2028 GMT Subject: CN=77f46e12-3017-4d5d-8a8d-3f77476d79ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:56:f3:52:84:0d:36:ac:f3:4b:d4:4d:91: 6e:e6:f3:10:d1:76:e0:e1:36:2c:e6:eb:60:0a:52: b2:90:85:16:a5:10:32:1d:62:43:8d:42:c1:cc:65: 2c:00:43:0c:a6:a4:4c:45:c8:d4:9a:15:8e:b2:cf: b3:71:9c:5a:59:e7:97:89:57:28:c0:96:95:df:c0: 27:01:44:46:6e:be:77:7b:20:f0:30:f6:f7:bc:6f: 34:19:fb:ad:81:62:74:ef:91:4d:d5:b4:ea:6f:dc: 62:8e:ca:f6:14:b8:a9:30:1a:db:51:b6:71:78:75: 07:c5:a3:75:9b:f9:85:b4:23:81:12:99:4d:a4:c3: 50:ea:41:0d:67:26:e2:07:37:6c:f2:00:e4:f8:d9: 39:e0:18:52:c1:fe:2f:d7:e4:de:29:a0:97:be:cf: 85:6a:35:00:7e:d6:31:4e:65:8a:63:01:23:52:cb: f0:18:61:02:a1:dd:2c:4c:cd:74:87:d2:0b:cf:dd: 9a:2e:d2:7f:03:f1:72:5b:ea:cb:37:34:7c:01:e0: 37:a9:48:84:1d:f1:6e:11:3f:c9:9d:8d:09:4e:90: c0:12:48:4b:e9:eb:4a:72:0d:bd:a2:b7:cd:e7:fe: 95:b5:95:1c:83:d9:8d:4a:da:33:c4:87:62:08:e6: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:d2:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19173 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:58:d2:2c:8c:fb:93:d0:31:a2:70:9c:90:b1:d4:da:c8:bf: 88:f8:88:7e:2a:f5:06:52:d1:54:6f:ef:6a:ff:03:cf:e8:5f: b2:9b:79:f5:5c:af:31:39:57:ba:f2:10:14:ef:30:89:79:6a: a8:ad:65:dc:5b:75:51:c0:00:d3:e3:b0:72:5d:53:4f:ea:6c: e8:02:4a:a1:c6:8a:df:ec:64:90:58:62:60:40:98:66:e2:35: 69:98:da:75:d8:8e:46:8f:5e:3a:f1:2b:3f:9a:94:47:27:3b: 92:de:83:e1:20:97:7c:16:ec:b4:74:1d:1d:70:f9:8b:c9:70: 29:24:81:4d:2a:aa:ff:2c:54:9c:2d:a3:b5:77:53:20:0e:e9: aa:6c:13:50:24:51:0b:84:37:77:bd:84:e9:33:fb:26:de:73: 27:df:19:d1:10:c0:36:46:8c:0a:33:be:ac:47:9c:66:bf:a3: 02:d8:3d:77:ed:c1:c1:fc:e0:9d:34:4a:5f:8f:59:e3:54:b6: 06:ab:8d:e4:0d:3f:cb:b7:69:86:10:72:a0:ea:5d:e8:4f:22: ef:cb:e1:44:de:27:35:3c:8e:4b:28:e9:77:f0:64:cc:1c:aa: 9b:78:8b:96:55:48:93:75:a1:4d:63:6f:11:2d:61:1d:96:4c: aa:44:19:40 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE4CUeuAxljP0k9npoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUzMDIwNDUxMVoXDTI4MDkwMTIwNDUxMVowLzEtMCsGA1UEAxMk NzdmNDZlMTItMzAxNy00ZDVkLThhOGQtM2Y3NzQ3NmQ3OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zFW81KEDTas80vUTZFu5vMQ0Xbg4TYs5utg ClKykIUWpRAyHWJDjULBzGUsAEMMpqRMRcjUmhWOss+zcZxaWeeXiVcowJaV38An AURGbr53eyDwMPb3vG80GfutgWJ075FN1bTqb9xijsr2FLipMBrbUbZxeHUHxaN1 m/mFtCOBEplNpMNQ6kENZybiBzds8gDk+Nk54BhSwf4v1+TeKaCXvs+FajUAftYx TmWKYwEjUsvwGGECod0sTM10h9ILz92aLtJ/A/FyW+rLNzR8AeA3qUiEHfFuET/J nY0JTpDAEkhL6etKcg29orfN5/6VtZUcg9mNStozxIdiCObBbwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLkZvycSEw4splwGkcGP/K8hmMr8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 N2Y0NmUxMi0zMDE3LTRkNWQtOGE4ZC0zZjc3NDc2ZDc5Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc3ZjQ2ZTEyLTMwMTctNGQ1ZC04 YThkLTNmNzc0NzZkNzljZS83N2Y0NmUxMi0zMDE3LTRkNWQtOGE4ZC0zZjc3NDc2 ZDc5Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADSoAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICSuUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABVjSLIz7k9AxonCckLHU2si/iPiIfir1BlLRVG/vav8D z+hfspt59VyvMTlXuvIQFO8wiXlqqK1l3Ft1UcAA0+Owcl1TT+ps6AJKocaK3+xk kFhiYECYZuI1aZjaddiORo9eOvErP5qURyc7kt6D4SCXfBbstHQdHXD5i8lwKSSB TSqq/yxUnC2jtXdTIA7pqmwTUCRRC4Q3d72E6TP7Jt5zJ98Z0RDANkaMCjO+rEec Zr+jAtg9d+3BwfzgnTRKX49Z41S2BquN5A0/y7dphhByoOpd6E8i78vhRN4nNTyO Syjpd/BkzByqm3iLllVIk3WhTWNvES1hHZZMqkQZQA== -----END CERTIFICATE-----Generated at Sat Jun 13 10:28:39 2026 by rpki-client