$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer File: 9997fd34-06bd-4758-a8a8-358043eb8cfd.cer (raw, json) Hash identifier: hvkN2gMQrRdvvD85wtwxckfOPNaFoz8rcX+tgqg5J/Y= Subject key identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DF903A12C0A756B0708DD8B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 May 2026 12:45:10 +0000 Certificate not after: Tue 29 Aug 2028 12:45:10 +0000 Subordinate resources: IP: 132.212.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:03:a1:2c:0a:75:6b:07:08:dd:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 27 12:45:10 2026 GMT Not After : Aug 29 12:45:10 2028 GMT Subject: CN=9997fd34-06bd-4758-a8a8-358043eb8cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:75:a9:7a:d0:62:d2:28:88:f2:0a:ae:5e: ce:03:c0:b4:07:cc:44:97:0f:64:76:48:9d:53:7d: 7d:7e:0c:f0:a7:95:0f:a4:18:a1:2e:0a:d5:35:aa: e4:30:c4:c1:05:19:be:34:11:c5:c4:8a:55:bd:43: 31:4c:01:cf:b8:81:e5:8c:8b:00:03:55:b5:0e:d4: d6:3a:96:28:45:34:13:86:63:bf:70:53:6f:8b:3d: 7b:f0:3f:2b:97:54:30:54:70:3f:a0:53:5a:05:04: 64:86:4f:c6:73:77:24:df:69:b7:d5:99:10:5f:f4: d7:99:60:2b:4c:25:b6:0c:96:94:c9:76:aa:7b:0b: 6e:80:d6:c0:f2:66:91:6e:98:87:6e:9b:0c:5f:38: 60:d7:e3:4d:ad:2a:62:f3:35:f9:5e:63:a4:64:7b: 0e:3f:ef:1c:ec:65:66:29:34:87:0f:00:da:b7:b1: d4:0b:81:39:55:c0:5b:28:d2:3e:42:42:3a:42:d2: 53:cf:a0:3b:8f:5d:71:4e:1a:2a:db:91:bc:ea:49: 7e:40:c8:4b:d5:8a:35:24:20:ee:f5:fb:3e:1e:36: 58:5e:ca:ba:4f:ea:44:10:58:19:4b:6a:71:1c:2e: 2f:db:e9:b4:de:9c:53:d8:c6:54:ae:f5:62:03:97: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 132.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:72:0c:b5:ef:90:d1:ba:43:4e:fd:36:0f:0e:ed:59:eb:1c: dd:3c:64:5f:0b:02:40:e0:d8:f8:c8:f8:20:cb:99:b4:03:22: e2:47:f6:d6:d4:08:af:35:ab:18:29:d6:85:67:88:f7:2a:e3: fd:49:a0:79:cd:5d:fc:40:37:11:d0:13:85:e9:a5:a9:1f:68: 28:ba:f4:1b:46:75:30:40:5b:b4:32:1f:b5:81:0c:74:19:c8: c5:50:d2:f3:69:64:47:ff:77:ae:4d:9e:b7:a7:13:5f:4d:bc: de:cf:32:aa:0b:d2:5a:e7:23:87:08:ab:f7:37:ac:01:0d:eb: dc:ee:52:8f:b5:9f:7a:b7:97:b8:2e:21:ae:4f:12:f4:ea:23: c9:a3:d9:b8:8d:3e:66:0a:b2:94:49:44:6f:7f:b8:3a:49:6f: 5a:af:ba:51:35:54:f3:af:b1:6c:e7:4e:90:cc:e1:ed:26:12: 7f:6d:66:5a:5b:43:74:d9:54:70:82:54:3b:31:96:e5:a1:04: 57:9c:ad:57:02:4e:71:da:37:ee:85:7b:39:0d:67:eb:6e:de: 24:9a:13:72:f9:44:ad:c0:03:7f:ae:01:ed:cd:09:75:71:5c: 0d:ac:cf:30:f1:0b:f3:29:14:38:a0:f0:fe:d3:60:9f:19:5e: 6a:33:a5:92 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE35A6EsCnVrBwjdi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyNzEyNDUxMFoXDTI4MDgyOTEyNDUxMFowLzEtMCsGA1UEAxMk OTk5N2ZkMzQtMDZiZC00NzU4LWE4YTgtMzU4MDQzZWI4Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRZ1qXrQYtIoiPIKrl7OA8C0B8xElw9kdkid U319fgzwp5UPpBihLgrVNarkMMTBBRm+NBHFxIpVvUMxTAHPuIHljIsAA1W1DtTW OpYoRTQThmO/cFNviz178D8rl1QwVHA/oFNaBQRkhk/Gc3ck32m31ZkQX/TXmWAr TCW2DJaUyXaqewtugNbA8maRbpiHbpsMXzhg1+NNrSpi8zX5XmOkZHsOP+8c7GVm KTSHDwDat7HUC4E5VcBbKNI+QkI6QtJTz6A7j11xThoq25G86kl+QMhL1Yo1JCDu 9fs+HjZYXsq6T+pEEFgZS2pxHC4v2+m03pxT2MZUrvViA5ciMwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFFymSlEuFBMKuwBmvCGgo4O3/OrZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 OTk3ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgwNDNlYjhjZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk5OTdmZDM0LTA2YmQtNDc1OC1h OGE4LTM1ODA0M2ViOGNmZC85OTk3ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgwNDNl YjhjZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCE1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2cgy175DRukNO/TYPDu1Z 6xzdPGRfCwJA4Nj4yPggy5m0AyLiR/bW1AivNasYKdaFZ4j3KuP9SaB5zV38QDcR 0BOF6aWpH2gouvQbRnUwQFu0Mh+1gQx0GcjFUNLzaWRH/3euTZ63pxNfTbzezzKq C9Ja5yOHCKv3N6wBDevc7lKPtZ96t5e4LiGuTxL06iPJo9m4jT5mCrKUSURvf7g6 SW9ar7pRNVTzr7Fs506QzOHtJhJ/bWZaW0N02VRwglQ7MZbloQRXnK1XAk5x2jfu hXs5DWfrbt4kmhNy+UStwAN/rgHtzQl1cVwNrM8w8QvzKRQ4oPD+02CfGV5qM6WS -----END CERTIFICATE-----Generated at Wed Jun 17 12:24:17 2026 by rpki-client