$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer File: 8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer (raw, json) Hash identifier: mR5wvqBdKsSP6HjtAc3s6eRLFb+Q5dD2PUbtcRZ0A1A= Subject key identifier: CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DF0A3A3EE4B983CD8AC620480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 May 2026 12:45:17 +0000 Certificate not after: Sat 26 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 23.133.236.0/24 IP: 2602:f6ff::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:a3:a3:ee:4b:98:3c:d8:ac:62:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 24 12:45:17 2026 GMT Not After : Aug 26 12:45:17 2028 GMT Subject: CN=8b2c8fdb-4736-46fb-9328-319b0c9b78d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:83:fa:7f:35:a9:37:59:3b:bd:25:06:74:9e: f4:4a:c3:4d:1e:32:d8:98:53:91:ae:da:eb:42:c2: db:4b:8e:bb:a0:05:7a:85:00:e0:84:68:7d:a5:b5: 9a:06:a2:22:8a:5b:09:d6:66:96:30:c2:ab:0c:e4: 67:01:3f:9d:1e:44:53:f3:d4:43:73:c7:dc:ae:bd: 4b:d6:9a:a1:f0:4e:2d:6e:9a:29:f0:50:62:7a:4c: bd:3e:19:d7:54:a9:65:64:fe:3f:c8:50:37:d9:20: 0a:c0:d5:a7:bc:0f:0e:72:0d:09:fe:11:65:c7:8d: 39:3b:c5:07:60:fc:4c:19:19:3c:32:17:9e:0b:7c: f0:59:90:87:f0:75:08:01:5e:b4:d7:e0:85:2c:45: 81:27:dc:6a:12:e7:2f:c5:4b:97:c8:68:2f:49:16: 2b:97:22:6b:25:dd:c3:e0:25:75:4d:84:a0:c8:d3: ff:0e:41:32:df:64:d7:bd:6e:8a:98:40:66:7c:a4: 94:dd:03:ea:94:58:05:86:8a:0a:ab:27:f3:20:d8: 00:bc:35:7a:0e:dd:d8:88:e2:f0:89:52:81:ed:f4: ac:c4:52:3f:e8:e2:fc:20:93:a3:b6:f2:da:98:75: 29:df:49:bf:f0:73:e4:84:27:58:ff:eb:26:81:09: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.236.0/24 IPv6: 2602:f6ff::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2d:cf:a6:ec:0b:0c:d3:44:6b:3f:a0:a9:48:8b:84:31:24: 71:a8:67:8f:47:30:50:e5:2c:68:aa:29:53:09:a3:2e:04:ed: 83:68:65:d9:99:69:ce:f0:4b:b0:6a:b7:c5:46:7d:ae:09:de: 86:29:06:58:2e:2e:8f:ef:91:24:2e:ec:d0:e4:77:7d:2e:c9: 56:9f:5b:d0:00:9c:e7:a3:94:31:44:31:51:a1:98:45:a1:8f: d0:4b:40:95:74:cc:ec:dc:c2:67:ff:cd:e3:9f:f8:97:c2:85: fc:c7:5f:5d:01:96:ac:a8:a1:8a:82:9c:63:8b:68:fd:4a:d3: bd:72:69:0e:b4:b4:8d:7b:ea:75:b2:c3:57:2f:11:ef:3d:33: 16:7b:51:4a:c6:d7:16:49:08:88:7e:d8:24:f6:75:e6:9c:4c: d7:40:a8:34:84:70:9a:f0:eb:5e:39:d9:dc:fd:d4:17:b7:cd: 62:57:3e:8a:b2:fb:11:d4:08:e1:43:31:3e:0f:8c:a7:d6:a6: 3d:80:2f:35:4b:2a:c3:1c:10:d2:86:93:c3:bc:09:02:04:20: 1d:b3:64:f4:10:2d:a7:68:e2:43:9e:82:e4:56:ac:b2:7f:a5: 0c:8e:93:44:8d:67:25:e6:ec:0c:74:65:97:21:58:c6:73:de: c1:c9:e8:ba -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3wo6PuS5g82KxiBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyNDEyNDUxN1oXDTI4MDgyNjEyNDUxN1owLzEtMCsGA1UEAxMk OGIyYzhmZGItNDczNi00NmZiLTkzMjgtMzE5YjBjOWI3OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYP6fzWpN1k7vSUGdJ70SsNNHjLYmFORrtrr QsLbS467oAV6hQDghGh9pbWaBqIiilsJ1maWMMKrDORnAT+dHkRT89RDc8fcrr1L 1pqh8E4tbpop8FBieky9PhnXVKllZP4/yFA32SAKwNWnvA8Ocg0J/hFlx405O8UH YPxMGRk8MheeC3zwWZCH8HUIAV601+CFLEWBJ9xqEucvxUuXyGgvSRYrlyJrJd3D 4CV1TYSgyNP/DkEy32TXvW6KmEBmfKSU3QPqlFgFhooKqyfzINgAvDV6Dt3YiOLw iVKB7fSsxFI/6OL8IJOjtvLamHUp30m/8HPkhCdY/+smgQlZKwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMoGtt+8BBxmAh6s4or4Qi5A7ZXJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 YjJjOGZkYi00NzM2LTQ2ZmItOTMyOC0zMTliMGM5Yjc4ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhiMmM4ZmRiLTQ3MzYtNDZmYi05 MzI4LTMxOWIwYzliNzhkMC84YjJjOGZkYi00NzM2LTQ2ZmItOTMyOC0zMTliMGM5 Yjc4ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhewwDgQCAAIwCAMGACYC9v8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADAtz6bsCwzTRGs/oKlIi4QxJHGoZ49HMFDlLGiqKVMJoy4E7YNoZdmZac7wS7Bq t8VGfa4J3oYpBlguLo/vkSQu7NDkd30uyVafW9AAnOejlDFEMVGhmEWhj9BLQJV0 zOzcwmf/zeOf+JfChfzHX10BlqyooYqCnGOLaP1K071yaQ60tI176nWyw1cvEe89 MxZ7UUrG1xZJCIh+2CT2deacTNdAqDSEcJrw61452dz91Be3zWJXPoqy+xHUCOFD MT4PjKfWpj2ALzVLKsMcENKGk8O8CQIEIB2zZPQQLado4kOeguRWrLJ/pQyOk0SN ZyXm7Ax0ZZchWMZz3sHJ6Lo= -----END CERTIFICATE-----Generated at Sat Jun 13 09:17:30 2026 by rpki-client