$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer File: 9caf23fc-9cbc-4f40-aea8-07653211f665.cer (raw, json) Hash identifier: mF3UF8sh1U4H1OovRcFwkrSBM0y6IwqTJ8JmXyHsFtQ= Subject key identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DF0A3A3F91C34830E18686C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 May 2026 12:45:17 +0000 Certificate not after: Sat 26 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 23.134.36.0/24 IP: 2602:f6fa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:a3:a3:f9:1c:34:83:0e:18:68:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 24 12:45:17 2026 GMT Not After : Aug 26 12:45:17 2028 GMT Subject: CN=9caf23fc-9cbc-4f40-aea8-07653211f665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:d6:50:31:28:b7:9a:7c:ec:b2:a8:13:0d: a1:9e:07:ce:13:10:31:eb:82:86:ec:70:94:95:0d: 75:d1:4a:be:3b:8b:9d:0a:87:b2:a6:8a:66:b2:57: ef:b1:ac:4f:fc:5f:13:8c:2e:50:8f:77:1d:65:e4: ee:49:c5:62:d0:0a:70:42:5c:bf:77:70:29:75:b2: 0f:5f:f7:db:3e:6b:03:25:61:d4:e1:e0:a4:51:d6: 90:8d:07:8d:14:c0:9f:85:42:7e:66:e7:89:7a:61: 99:95:c6:d6:22:4b:6b:23:27:0b:55:ee:2c:79:de: b8:c9:74:de:7a:b2:9a:6f:f7:e9:5c:93:11:59:1a: 9b:b9:69:e4:08:47:9f:06:e6:78:90:89:c4:04:ac: 4b:67:79:3f:63:ef:df:58:fe:f7:e6:45:4e:ef:9b: 89:0c:68:24:79:95:bc:cb:16:d9:04:b5:6b:d7:12: 9f:65:cd:8e:5e:08:17:47:8b:d2:ea:54:2d:3f:a9: f4:bc:d7:c9:8e:90:ca:36:db:d1:09:84:20:95:a5: c6:74:40:68:80:b0:6f:61:79:b0:05:bc:c0:4f:4a: 3b:14:7f:b4:3d:00:b9:1e:f3:b5:56:8f:13:4b:05: 96:64:91:0c:ba:d6:41:42:c4:dc:83:d2:64:b2:9d: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.36.0/24 IPv6: 2602:f6fa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:05:f4:22:4a:4c:47:7f:84:10:91:cb:f2:e2:02:31:4a:13: 37:fb:9c:e6:81:9d:f8:7c:71:e8:18:b8:d1:a5:2e:bd:4f:de: 2f:80:b4:8a:04:8d:50:31:d4:e4:b9:b1:18:64:c8:92:0d:87: 66:7b:1b:76:32:bd:21:a0:61:03:0d:85:55:56:f3:86:65:51: a2:13:fc:80:8d:b7:ae:ab:2f:7b:49:80:c6:0b:fc:03:da:6e: aa:b6:ae:d4:3b:45:c0:5b:bc:fb:37:8c:24:e1:4c:1d:be:c9: ff:7f:1e:52:0a:8b:80:39:86:ee:a1:1f:19:a7:c2:ba:28:84: 18:38:3c:9e:bc:5c:1d:c6:50:04:11:5f:02:a4:35:8b:9c:c9: 61:fa:f2:b8:69:59:72:0b:bb:d7:4e:45:89:e2:a8:dc:32:18: 66:53:0c:e5:20:6d:6c:07:f0:05:c0:25:3b:a0:41:d2:3d:84: 75:8c:54:f0:64:14:86:9b:0c:5e:4d:12:a6:6d:04:d6:50:86: ab:c3:cf:b7:1f:83:12:7f:55:60:cb:ab:7b:8b:96:84:b2:36: 37:ca:a5:93:de:5f:39:71:a4:ec:b0:9e:22:99:6f:73:71:b2: 58:8f:fe:65:62:db:7f:0d:3c:b3:4f:a0:c3:c6:9d:70:1b:c2: b8:ba:cb:69 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3wo6P5HDSDDhhobAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyNDEyNDUxN1oXDTI4MDgyNjEyNDUxN1owLzEtMCsGA1UEAxMk OWNhZjIzZmMtOWNiYy00ZjQwLWFlYTgtMDc2NTMyMTFmNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrHWUDEot5p87LKoEw2hngfOExAx64KG7HCU lQ110Uq+O4udCoeypopmslfvsaxP/F8TjC5Qj3cdZeTuScVi0ApwQly/d3ApdbIP X/fbPmsDJWHU4eCkUdaQjQeNFMCfhUJ+ZueJemGZlcbWIktrIycLVe4sed64yXTe erKab/fpXJMRWRqbuWnkCEefBuZ4kInEBKxLZ3k/Y+/fWP735kVO75uJDGgkeZW8 yxbZBLVr1xKfZc2OXggXR4vS6lQtP6n0vNfJjpDKNtvRCYQglaXGdEBogLBvYXmw BbzAT0o7FH+0PQC5HvO1Vo8TSwWWZJEMutZBQsTcg9Jksp3lfQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEzsk7GhjvXIUAKuV0CY8yGYcx3PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 Y2FmMjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1MzIxMWY2NjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzljYWYyM2ZjLTljYmMtNGY0MC1h ZWE4LTA3NjUzMjExZjY2NS85Y2FmMjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1MzIx MWY2NjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhiQwDgQCAAIwCAMGACYC9voAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABEF9CJKTEd/hBCRy/LiAjFKEzf7nOaBnfh8cegYuNGlLr1P3i+AtIoEjVAx1OS5 sRhkyJINh2Z7G3YyvSGgYQMNhVVW84ZlUaIT/ICNt66rL3tJgMYL/APabqq2rtQ7 RcBbvPs3jCThTB2+yf9/HlIKi4A5hu6hHxmnwroohBg4PJ68XB3GUAQRXwKkNYuc yWH68rhpWXILu9dORYniqNwyGGZTDOUgbWwH8AXAJTugQdI9hHWMVPBkFIabDF5N EqZtBNZQhqvDz7cfgxJ/VWDLq3uLloSyNjfKpZPeXzlxpOywniKZb3NxsliP/mVi 238NPLNPoMPGnXAbwri6y2k= -----END CERTIFICATE-----Generated at Sat Jun 13 08:09:39 2026 by rpki-client