$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer File: b43c5615-9630-4bab-8258-f3b32e00f304.cer (raw, json) Hash identifier: DjYGsdfJ93nnQBcmXQGbypFVN93sRQmmlElfpDFkPFg= Subject key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584C8B432B49632B4C81DE46A570 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Jan 2026 12:27:20 +0000 Certificate not after: Thu 10 Jun 2027 03:44:47 +0000 Subordinate resources: AS: 36832 IP: 23.132.172.0/24 IP: 130.12.160.0/22 IP: 2602:f8c4::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8b:43:2b:49:63:2b:4c:81:de:46:a5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 16 12:27:20 2026 GMT Not After : Jun 10 03:44:47 2027 GMT Subject: CN=b43c5615-9630-4bab-8258-f3b32e00f304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:ab:c9:e6:69:9b:31:f6:5a:ea:38:50:20: 13:e8:e9:3b:b4:b4:a9:85:ad:8d:77:d2:f1:89:d3: 70:07:92:8b:64:9e:bf:10:4b:c8:02:42:8d:64:08: ee:c2:87:44:1e:3b:36:9e:34:e3:bf:06:ef:db:c8: 51:d0:2b:31:67:a2:5a:df:5c:1c:ad:a6:75:04:e8: bd:0d:f6:e7:3b:86:f7:17:0d:dd:4d:df:f0:1b:84: c2:c9:53:9e:1c:f3:e5:e0:b9:36:98:8c:2a:9a:1b: 76:f7:58:ee:74:3d:42:27:7a:5b:e5:3c:9c:c3:b0: 54:dc:f6:df:b1:4c:a9:29:d7:81:59:f8:fe:28:8a: 57:c6:23:48:0f:8a:9f:a0:00:f0:c2:57:97:c9:ec: d3:4e:db:fd:b4:e1:7f:56:bd:01:37:46:07:18:99: 6a:96:09:42:da:5f:c9:5b:92:91:59:23:8e:a2:44: b9:85:f7:bc:75:47:c0:99:fc:c7:d0:b4:05:0b:2f: 75:ad:cb:24:55:10:6f:8b:10:dd:56:12:a9:d1:e7: 8c:1f:72:1d:b0:52:af:7c:9b:81:eb:04:ee:24:2c: 64:ad:c6:31:29:17:39:31:12:6c:4f:01:b6:12:a8: b0:e4:91:21:36:47:84:a6:64:1e:90:62:f4:a9:bb: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.172.0/24 130.12.160.0/22 IPv6: 2602:f8c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36832 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c4:62:a9:5f:2e:49:fb:a3:a1:53:23:a3:de:a1:44:4a:a2: 22:1b:44:71:18:ed:36:45:85:6e:c5:48:5a:b3:bb:66:3f:77: f5:81:ab:2a:7d:c8:d2:aa:a2:83:22:f4:0b:15:b9:be:02:1c: 98:69:28:fb:74:e9:3d:91:5f:53:d6:f0:95:95:49:3a:d9:16: 7b:ff:5f:7a:b2:c8:49:fa:8c:28:68:e1:36:32:06:e0:c5:cc: 9e:64:3a:67:71:d8:32:6e:e3:79:97:cf:1a:6f:bc:18:50:0f: af:83:d5:e5:df:1f:57:f8:08:d2:16:a6:df:a2:6e:07:3d:21: 52:57:29:81:32:5d:45:12:ae:41:36:03:29:d0:f4:42:50:22: 89:b6:6e:d2:d2:b9:e7:94:8c:d5:18:35:a0:4d:2c:22:e0:b0: 0c:06:02:2a:07:86:f3:8a:3f:b2:45:cb:41:5b:91:ba:5c:0a: 6f:ea:45:7d:87:f8:40:63:b6:f3:e5:f7:a6:33:0d:b9:84:87: f1:fd:da:56:b3:39:f4:45:e2:13:64:f9:05:55:67:15:92:16: 1a:10:cd:0b:2d:ec:c1:bc:ca:d1:75:80:b4:96:9c:11:64:c8: f0:ac:bb:7a:2b:37:83:b4:75:00:f4:e0:4f:bb:a0:58:34:9a: c2:29:33:10 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEyLQytJYytMgd5GpXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDExNjEyMjcyMFoXDTI3MDYxMDAzNDQ0N1owLzEtMCsGA1UEAxMk YjQzYzU2MTUtOTYzMC00YmFiLTgyNTgtZjNiMzJlMDBmMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDaryeZpmzH2Wuo4UCAT6Ok7tLSpha2Nd9Lx idNwB5KLZJ6/EEvIAkKNZAjuwodEHjs2njTjvwbv28hR0CsxZ6Ja31wcraZ1BOi9 DfbnO4b3Fw3dTd/wG4TCyVOeHPPl4Lk2mIwqmht291judD1CJ3pb5Tycw7BU3Pbf sUypKdeBWfj+KIpXxiNID4qfoADwwleXyezTTtv9tOF/Vr0BN0YHGJlqlglC2l/J W5KRWSOOokS5hfe8dUfAmfzH0LQFCy91rcskVRBvixDdVhKp0eeMH3IdsFKvfJuB 6wTuJCxkrcYxKRc5MRJsTwG2Eqiw5JEhNkeEpmQekGL0qbugpwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPhoZNgCbt1RzTxU9YG/6KChMPwsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NDNjNTYxNS05NjMwLTRiYWItODI1OC1mM2IzMmUwMGYzMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I0M2M1NjE1LTk2MzAtNGJhYi04 MjU4LWYzYjMyZTAwZjMwNC9iNDNjNTYxNS05NjMwLTRiYWItODI1OC1mM2IzMmUw MGYzMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXhKwDBAKCDKAwDQQCAAIwBwMFACYC+MQwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAI/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJnEYqlfLkn7o6FTI6Pe oURKoiIbRHEY7TZFhW7FSFqzu2Y/d/WBqyp9yNKqooMi9AsVub4CHJhpKPt06T2R X1PW8JWVSTrZFnv/X3qyyEn6jCho4TYyBuDFzJ5kOmdx2DJu43mXzxpvvBhQD6+D 1eXfH1f4CNIWpt+ibgc9IVJXKYEyXUUSrkE2AynQ9EJQIom2btLSueeUjNUYNaBN LCLgsAwGAioHhvOKP7JFy0FbkbpcCm/qRX2H+EBjtvPl96YzDbmEh/H92lazOfRF 4hNk+QVVZxWSFhoQzQst7MG8ytF1gLSWnBFkyPCsu3orN4O0dQD04E+7oFg0msIp MxA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:21 2026 by rpki-client