$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f.cer File: 7fc1763a-202c-4a11-8d74-3d052b92bf6f.cer (raw, json) Hash identifier: Msbp7Y+qhk+ZQjwQ6Pz6oS4XHHbtGe7JtYWvfHiXtwo= Subject key identifier: 38:8D:A3:97:5F:F3:55:6A:88:B4:5A:77:BD:4F:29:C7:58:17:11:EE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E07E74A83F16D4365A5E82E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/7fc1763a-202c-4a11-8d74-3d052b92bf6f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jun 2026 20:45:11 +0000 Certificate not after: Sun 03 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 23.135.44.0/24 IP: 2602:f6d9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:e7:4a:83:f1:6d:43:65:a5:e8:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 1 20:45:11 2026 GMT Not After : Sep 3 20:45:11 2028 GMT Subject: CN=7fc1763a-202c-4a11-8d74-3d052b92bf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:3d:ee:5f:cc:1e:2a:e6:cb:7d:4a:65:e0: de:33:a5:fd:f4:99:d5:9c:cc:41:4e:f9:eb:05:c4: 42:a6:d1:60:7e:19:43:00:e6:88:f3:4b:ba:82:37: 24:1d:e2:58:2b:63:e3:10:96:3c:32:65:cf:84:f6: b2:59:ff:7e:dd:87:7b:20:26:04:49:ef:d6:d0:92: 89:45:e8:98:13:88:03:cf:f7:f6:ac:d0:5c:e2:5c: 23:f8:be:3f:b5:e8:71:a2:88:e0:ed:24:a8:b5:67: b0:60:cb:7d:90:e6:04:d7:e9:e8:35:7c:81:f7:6f: 27:a1:9b:61:b0:72:28:10:e5:e1:6e:be:6f:ae:df: e7:5a:60:0b:77:18:30:73:84:d0:06:54:1d:73:36: bb:54:da:fb:10:e6:9e:ee:5c:b2:71:d2:e1:10:53: 57:d5:52:b6:c7:1d:3e:99:6e:77:db:0b:c2:55:ea: e7:29:ab:85:56:3e:97:b6:99:a8:01:f6:71:26:ee: 7e:65:f9:84:40:97:56:8a:37:d7:90:e5:55:ee:26: 03:2f:10:f2:eb:fc:be:79:5f:94:ea:a4:9a:cf:94: e0:6c:5e:53:cf:a8:f3:13:0d:e8:4f:1c:40:76:af: c6:07:6f:25:2f:52:22:40:56:f9:80:85:0f:7a:7b: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:A3:97:5F:F3:55:6A:88:B4:5A:77:BD:4F:29:C7:58:17:11:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/7fc1763a-202c-4a11-8d74-3d052b92bf6f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.44.0/24 IPv6: 2602:f6d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5f:e9:ab:1a:fd:00:75:55:30:52:f1:ee:34:aa:06:08:4f: f6:5a:80:bb:43:8e:b6:64:a4:97:ff:16:3f:30:26:c2:8b:a5: 2b:d9:a6:2a:48:81:6c:b6:09:6f:ef:11:01:fc:2c:0b:23:58: d0:0d:3d:64:47:fe:a9:0e:ec:89:17:88:23:33:f0:82:f2:50: 43:8c:af:6b:51:d1:00:d1:62:37:04:36:43:37:52:06:c5:07: 29:9e:46:89:4b:cf:31:74:33:62:10:44:ef:94:ab:d4:6b:91: ff:97:0f:c9:b4:7e:1c:92:81:8e:24:c8:c4:0a:41:00:53:bb: 44:28:25:3a:50:88:af:47:0b:76:42:f8:73:07:8e:b4:b2:11: 9e:f8:aa:52:99:8d:21:0d:12:f1:d2:6f:af:2a:b2:61:56:6b: e5:c5:a3:a6:a5:c5:a0:8c:01:e4:c0:09:f3:64:d5:d5:9a:90: 8d:9d:d2:b7:7b:45:10:f9:9d:fe:50:54:31:f7:19:27:f0:26: 43:1e:17:f3:15:48:16:f9:d7:0b:17:30:bd:f6:22:88:4a:c7: 34:f4:b3:25:3f:b4:eb:b6:0d:0b:fe:bf:8e:61:5e:1a:14:0d: 35:4b:5c:01:b4:24:f8:bf:a4:5e:b9:07:1c:bf:e7:8d:27:e2: 83:ce:61:d2 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE4H50qD8W1DZaXoLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYwMTIwNDUxMVoXDTI4MDkwMzIwNDUxMVowLzEtMCsGA1UEAxMk N2ZjMTc2M2EtMjAyYy00YTExLThkNzQtM2QwNTJiOTJiZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolk97l/MHirmy31KZeDeM6X99JnVnMxBTvnr BcRCptFgfhlDAOaI80u6gjckHeJYK2PjEJY8MmXPhPayWf9+3Yd7ICYESe/W0JKJ ReiYE4gDz/f2rNBc4lwj+L4/tehxoojg7SSotWewYMt9kOYE1+noNXyB928noZth sHIoEOXhbr5vrt/nWmALdxgwc4TQBlQdcza7VNr7EOae7lyycdLhEFNX1VK2xx0+ mW532wvCVernKauFVj6XtpmoAfZxJu5+ZfmEQJdWijfXkOVV7iYDLxDy6/y+eV+U 6qSaz5TgbF5Tz6jzEw3oTxxAdq/GB28lL1IiQFb5gIUPenv0yQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDiNo5df81VqiLRad71PKcdYFxHuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZmMxNzYzYS0yMDJjLTRhMTEtOGQ3NC0zZDA1MmI5MmJmNmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdmYzE3NjNhLTIwMmMtNGExMS04 ZDc0LTNkMDUyYjkyYmY2Zi83ZmMxNzYzYS0yMDJjLTRhMTEtOGQ3NC0zZDA1MmI5 MmJmNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhywwDgQCAAIwCAMGACYC9tkAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABtf6asa/QB1VTBS8e40qgYIT/ZagLtDjrZkpJf/Fj8wJsKLpSvZpipIgWy2CW/v EQH8LAsjWNANPWRH/qkO7IkXiCMz8ILyUEOMr2tR0QDRYjcENkM3UgbFBymeRolL zzF0M2IQRO+Uq9Rrkf+XD8m0fhySgY4kyMQKQQBTu0QoJTpQiK9HC3ZC+HMHjrSy EZ74qlKZjSENEvHSb68qsmFWa+XFo6alxaCMAeTACfNk1dWakI2d0rd7RRD5nf5Q VDH3GSfwJkMeF/MVSBb51wsXML32IohKxzT0syU/tOu2DQv+v45hXhoUDTVLXAG0 JPi/pF65Bxy/540n4oPOYdI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:16:45 2026 by rpki-client