$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer File: 98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer (raw, json) Hash identifier: 7Mvu1vh9kptVS/Vv1AzKV7Gtc0C6+AYVa0S4am4xWTQ= Subject key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D04DAA78C0E41AA08FF24C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Mar 2026 01:45:22 +0000 Certificate not after: Sat 03 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 400843 IP: 205.142.48.0/22 IP: 216.153.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:da:a7:8c:0e:41:aa:08:ff:24:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 1 01:45:22 2026 GMT Not After : Jun 3 00:45:22 2028 GMT Subject: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:39:f3:07:66:3d:8c:b2:bf:1b:1a:8a:a0: f6:d1:ce:22:34:a3:77:36:4f:c0:4a:49:7a:46:b9: 97:eb:ab:7f:cd:99:f6:fa:dd:2d:19:f3:b0:72:19: 45:54:7a:f2:98:83:72:ab:e1:a8:0a:35:28:bb:20: 53:73:6a:32:0b:ef:1c:e6:c4:9f:b2:04:e6:5a:18: b8:24:9b:9d:6a:3f:71:d0:26:e7:8a:d4:06:ca:8a: a7:cc:74:26:5b:17:c0:a1:7d:ad:7c:b1:1a:40:11: e6:3b:4d:8f:be:c8:d2:2d:49:9b:10:9d:5f:27:e1: 30:aa:b3:72:f9:44:25:82:64:55:97:74:14:20:7c: 2c:b5:77:77:26:58:a0:69:cb:94:f8:99:60:f9:5b: f8:00:12:2e:23:6a:72:78:dc:cc:4e:0b:61:a8:77: 06:b9:fe:9d:43:a3:50:32:7a:2e:85:1b:c4:59:6f: 48:14:85:94:b7:cf:87:11:80:5b:45:90:a4:36:7c: c6:18:b4:be:e3:1a:70:00:2d:ef:d4:bf:ea:f0:be: 0c:13:bc:f2:c8:9e:8a:84:48:4d:62:0f:e4:28:f7: 08:8d:93:e7:01:39:c0:f0:3f:36:0c:67:6a:74:f9: 54:b8:b6:59:ca:6d:d6:e5:56:c6:97:7e:46:a6:0a: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 205.142.48.0/22 216.153.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400843 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6c:92:97:b8:5b:ca:2c:8f:ef:07:d7:b2:2d:c0:2a:8d:a0: 1c:38:63:7a:d8:51:18:2d:bb:f1:e8:ed:37:a6:39:ad:5b:c9: 73:6c:d5:1e:b2:dd:df:24:9b:51:98:d7:01:38:45:ce:e3:65: c2:fb:d9:41:db:ad:8d:07:c5:a0:00:d7:82:c8:fc:f5:1b:a8: b0:17:6d:9c:38:f3:23:62:fc:73:64:3b:5e:e2:80:29:da:e8: cc:ce:59:43:1e:84:f2:26:43:43:ac:83:c2:6c:3f:ad:57:8b: fb:65:74:0f:88:a3:76:d1:8d:91:8e:aa:ed:6f:3f:5e:0b:33: 69:62:c3:6b:67:a3:4f:34:6b:ae:49:57:4c:d5:1d:34:ed:5e: fd:4d:21:1e:d1:22:ae:28:85:ee:58:c2:b2:a1:8e:9d:75:d3: 56:80:55:78:84:54:84:e0:59:4f:e2:1d:8d:b8:76:54:44:6b: 4f:e6:26:a7:16:1f:ae:a4:f6:73:5e:91:41:15:54:da:56:e5: 25:19:a4:f6:44:65:73:0f:b9:01:99:01:85:d8:2f:b2:fc:25: 6a:b2:21:f6:db:55:dc:40:76:1a:73:87:2a:6f:17:5d:16:48: 11:93:22:cd:e2:ea:58:16:91:93:e2:08:34:42:67:97:d1:10: 69:7e:4d:62 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE0E2qeMDkGqCP8kxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMTAxNDUyMloXDTI4MDYwMzAwNDUyMlowLzEtMCsGA1UEAxMk OThmNThmM2QtNzA3YS00ZGMxLThkMjUtNWNkYzk1ZmIxNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPE58wdmPYyyvxsaiqD20c4iNKN3Nk/ASkl6 RrmX66t/zZn2+t0tGfOwchlFVHrymINyq+GoCjUouyBTc2oyC+8c5sSfsgTmWhi4 JJudaj9x0CbnitQGyoqnzHQmWxfAoX2tfLEaQBHmO02PvsjSLUmbEJ1fJ+EwqrNy +UQlgmRVl3QUIHwstXd3JligacuU+Jlg+Vv4ABIuI2pyeNzMTgthqHcGuf6dQ6NQ MnouhRvEWW9IFIWUt8+HEYBbRZCkNnzGGLS+4xpwAC3v1L/q8L4ME7zyyJ6KhEhN Yg/kKPcIjZPnATnA8D82DGdqdPlUuLZZym3W5VbGl35GpgoR0QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIgKBx0Zd7Xv/wINDrVsyYKgRF70MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVmYjE3NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk4ZjU4ZjNkLTcwN2EtNGRjMS04 ZDI1LTVjZGM5NWZiMTc0Ni85OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVm YjE3NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALNjjADBALYmRwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBh3LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHZskpe4W8osj+8H17ItwCqNoBw4Y3rYURgtu/Ho 7TemOa1byXNs1R6y3d8km1GY1wE4Rc7jZcL72UHbrY0HxaAA14LI/PUbqLAXbZw4 8yNi/HNkO17igCna6MzOWUMehPImQ0Osg8JsP61Xi/tldA+Io3bRjZGOqu1vP14L M2liw2tno080a65JV0zVHTTtXv1NIR7RIq4ohe5YwrKhjp1101aAVXiEVITgWU/i HY24dlREa0/mJqcWH66k9nNekUEVVNpW5SUZpPZEZXMPuQGZAYXYL7L8JWqyIfbb VdxAdhpzhypvF10WSBGTIs3i6lgWkZPiCDRCZ5fREGl+TWI= -----END CERTIFICATE-----Generated at Mon Mar 2 00:22:33 2026 by rpki-client