$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6.cer File: 8c95706c-2f3b-4326-9d35-a617f24781e6.cer (raw, json) Hash identifier: 6WzANK8s33uGoh3O3EoUscYtFv+Uhj5p7N9Ud4QFQnc= Subject key identifier: 69:FE:86:18:AB:09:49:A7:56:8C:CB:D2:CB:4E:31:E4:B4:04:B7:A3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E215FE501CB5194BA4A776B4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/8c95706c-2f3b-4326-9d35-a617f24781e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Jun 2026 23:43:24 +0000 Certificate not after: Tue 12 Sep 2028 23:43:24 +0000 Subordinate resources: AS: 402549 IP: 198.153.148.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:5f:e5:01:cb:51:94:ba:4a:77:6b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 10 23:43:24 2026 GMT Not After : Sep 12 23:43:24 2028 GMT Subject: CN=8c95706c-2f3b-4326-9d35-a617f24781e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:c4:e1:7d:c5:6a:d0:c8:ba:f8:48:01:70: 73:61:ee:f6:b7:41:91:ea:20:7c:56:f3:50:99:71: a0:94:43:9e:75:b9:7c:14:69:39:93:97:01:81:2c: 5e:43:9c:61:a0:b8:0d:64:c5:e3:7f:d6:a1:87:de: 58:69:4c:8e:01:79:4a:a4:55:10:69:fa:43:48:f2: 8b:71:52:f8:bf:10:66:3d:1b:26:27:cc:2f:06:df: 8c:20:83:4f:89:b7:22:db:a3:0f:90:a8:a4:ab:51: e3:3f:a1:41:18:f5:29:65:21:cd:d5:da:37:3f:d1: b8:08:10:a9:97:31:9b:e2:58:a9:73:da:e7:dc:0d: ae:b4:17:5f:4c:ff:58:72:c9:a9:69:6e:36:50:d8: 80:c8:18:55:cd:19:8b:f6:16:42:c1:45:76:ac:54: dd:ed:08:1a:5b:a9:1c:c6:8c:45:f5:61:6e:c1:1d: ac:32:a2:f5:50:cb:ea:2a:46:0f:2b:0e:5a:f2:68: 3e:71:25:d0:a1:36:7a:6b:a3:dd:8b:4b:8b:6b:7a: e1:8a:4f:a5:55:89:d6:f1:2f:5c:ec:f8:0a:c3:1b: 2c:92:bd:f2:da:78:36:a5:56:aa:6e:a1:73:16:b0: ca:18:c7:71:b8:12:41:e1:c2:8d:c8:17:64:b3:b6: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FE:86:18:AB:09:49:A7:56:8C:CB:D2:CB:4E:31:E4:B4:04:B7:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/8c95706c-2f3b-4326-9d35-a617f24781e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 198.153.148.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402549 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e0:7b:ad:34:0a:9f:a8:a6:36:f3:bf:e0:d9:f1:da:3a:0f: 3a:08:29:d9:91:a9:13:da:12:5d:87:34:dd:3d:11:34:78:f5: 7b:6a:aa:ea:cf:c1:85:f2:29:cc:98:53:36:0a:83:a2:9d:b9: f9:d0:cc:83:c6:d3:e6:b0:a7:fd:ee:1f:10:99:2b:15:0b:12: ae:93:ab:5f:97:e8:47:bd:84:ce:6b:b2:25:5e:3d:bf:6e:12: f8:ac:18:57:2d:6a:5e:db:70:4d:c7:48:74:b4:05:3e:e2:ec: d2:f4:55:00:e2:1d:3b:c3:0a:e4:05:54:b3:75:4c:fe:fd:8f: 8f:cf:8a:ab:7e:bd:af:6f:a3:dc:a7:76:7e:79:3c:a4:5b:5e: 8c:10:12:14:5d:72:cb:18:1c:ea:06:88:1f:0c:9d:7c:cc:60: 03:e8:d1:38:b8:bc:b0:08:40:0b:01:40:62:12:a4:96:74:3e: f6:85:02:32:e1:62:92:77:ce:1c:22:93:c1:1b:db:f5:6d:67: 69:56:2a:2a:ce:d6:e3:56:dc:4b:c3:58:26:6e:05:4a:a4:61: 3d:08:65:76:b4:3a:14:33:bf:d6:4c:1a:a2:26:94:18:2e:6b: 88:6b:96:ec:6d:ad:a6:bf:37:2b:0c:f1:b6:59:f9:61:71:bb: 81:9e:99:50 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE4hX+UBy1GUukp3a04wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYxMDIzNDMyNFoXDTI4MDkxMjIzNDMyNFowLzEtMCsGA1UEAxMk OGM5NTcwNmMtMmYzYi00MzI2LTlkMzUtYTYxN2YyNDc4MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuafE4X3FatDIuvhIAXBzYe72t0GR6iB8VvNQ mXGglEOedbl8FGk5k5cBgSxeQ5xhoLgNZMXjf9ahh95YaUyOAXlKpFUQafpDSPKL cVL4vxBmPRsmJ8wvBt+MIINPibci26MPkKikq1HjP6FBGPUpZSHN1do3P9G4CBCp lzGb4lipc9rn3A2utBdfTP9YcsmpaW42UNiAyBhVzRmL9hZCwUV2rFTd7QgaW6kc xoxF9WFuwR2sMqL1UMvqKkYPKw5a8mg+cSXQoTZ6a6Pdi0uLa3rhik+lVYnW8S9c 7PgKwxsskr3y2ng2pVaqbqFzFrDKGMdxuBJB4cKNyBdks7Y6KwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGn+hhirCUmnVozL0stOMeS0BLejMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 Yzk1NzA2Yy0yZjNiLTQzMjYtOWQzNS1hNjE3ZjI0NzgxZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhjOTU3MDZjLTJmM2ItNDMyNi05 ZDM1LWE2MTdmMjQ3ODFlNi84Yzk1NzA2Yy0yZjNiLTQzMjYtOWQzNS1hNjE3ZjI0 NzgxZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGmZQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiR1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGvge600Cp+opjbzv+DZ8do6DzoIKdmRqRPaEl2HNN09ETR4 9XtqqurPwYXyKcyYUzYKg6KdufnQzIPG0+awp/3uHxCZKxULEq6Tq1+X6Ee9hM5r siVePb9uEvisGFctal7bcE3HSHS0BT7i7NL0VQDiHTvDCuQFVLN1TP79j4/Piqt+ va9vo9yndn55PKRbXowQEhRdcssYHOoGiB8MnXzMYAPo0Ti4vLAIQAsBQGISpJZ0 PvaFAjLhYpJ3zhwik8Eb2/VtZ2lWKirO1uNW3EvDWCZuBUqkYT0IZXa0OhQzv9ZM GqImlBgua4hrluxtraa/NysM8bZZ+WFxu4GemVA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:31 2026 by rpki-client