$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0.cer File: b586df36-3c71-4c6f-974d-2c9545c25eb0.cer (raw, json) Hash identifier: U1IRbFhLdwsCuHcJHVeoSYxh+nPG9gMyOTlF1D61fu0= Subject key identifier: 68:AB:98:AC:87:47:4A:49:7C:C5:C2:06:7B:E0:29:E8:7F:D2:EF:AA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E1A0CBDE2109B7B2EE2192280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Jun 2026 08:45:12 +0000 Certificate not after: Sun 10 Sep 2028 08:45:12 +0000 Subordinate resources: AS: 25972 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:0c:bd:e2:10:9b:7b:2e:e2:19:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 8 08:45:12 2026 GMT Not After : Sep 10 08:45:12 2028 GMT Subject: CN=b586df36-3c71-4c6f-974d-2c9545c25eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:13:d0:27:91:cc:fb:d0:cb:ac:2b:99:6e: d3:72:e5:10:4e:c4:ae:b4:7d:f0:88:00:7a:f3:e8: 09:41:c0:ae:34:1a:df:bd:bb:06:14:b3:23:bd:63: 51:e0:a0:70:9c:20:1e:e8:58:a9:a5:de:26:c9:93: 0d:20:96:f3:af:c0:05:c1:1d:c7:01:14:a8:1a:65: 34:00:8b:53:e8:f8:7a:87:15:d2:fa:96:84:24:17: 1d:1a:a2:2c:71:59:64:5a:c5:41:7a:b3:46:3b:76: 58:ee:09:0f:0f:8d:ce:5b:b7:9b:45:09:8f:ed:c2: 33:78:3a:4e:a8:b5:9d:02:0d:46:bf:fe:cc:7d:77: f3:0f:18:d5:72:06:52:93:29:0f:3a:2b:99:80:23: 45:b8:8e:a0:c4:9f:1e:e3:09:76:6e:48:a4:a8:1f: 0b:7e:76:4b:33:b3:d5:fe:86:1c:50:81:43:42:ef: 82:21:25:1d:b0:78:0d:8a:36:a2:1c:00:2b:7f:37: 9a:17:82:de:5f:04:af:e4:45:68:f5:b4:15:6d:20: f0:0d:76:0b:a8:17:6f:4b:2c:fa:87:d4:bd:5c:71: 83:04:4d:4f:f0:fd:68:8b:40:f1:3d:3b:d1:de:f5: bb:d4:47:58:2c:3c:8b:f4:82:66:44:75:65:9f:4a: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AB:98:AC:87:47:4A:49:7C:C5:C2:06:7B:E0:29:E8:7F:D2:EF:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 25972 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f3:88:f2:a3:5a:f1:0e:79:85:45:2b:bd:21:7c:8d:48:c0: c0:5f:19:49:e8:75:58:da:82:f8:5c:64:26:a8:12:56:9a:cf: 61:3b:36:b0:5d:90:fd:a0:e4:1a:cd:3a:d5:05:e8:07:e9:a7: 30:86:99:9d:6b:04:93:ef:a0:28:62:b7:6b:f2:ec:a6:ea:4e: 03:ab:4b:6c:89:25:52:ec:60:55:32:19:6e:06:c5:f5:bf:8d: f9:08:c1:0e:0c:65:e6:29:38:69:8b:94:a7:ae:b0:1c:36:33: 12:b2:0f:eb:62:f7:00:cf:0b:2d:8e:ed:1f:30:bd:9d:25:34: ad:b8:3f:6d:7f:bf:2a:df:ba:b9:84:85:0a:8f:18:f6:56:27: 8c:a2:15:1f:4f:9b:0c:4c:d2:5a:a8:3c:0d:26:84:48:4b:15: a2:2e:01:71:4d:42:a1:66:d5:91:f2:fa:78:24:a2:3e:e7:ac: 9c:fd:49:35:67:33:d8:34:07:72:d9:af:89:a8:f9:ad:99:aa: da:69:07:89:29:b5:d5:92:d2:02:e2:67:79:a9:fe:98:95:21: 7f:24:57:a8:68:73:97:98:36:9a:3c:af:a9:e3:5f:a6:46:bb: ca:70:6f:94:17:1a:de:64:e8:7c:47:72:77:52:ab:07:3e:a5: c8:72:b1:46 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE4aDL3iEJt7LuIZIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYwODA4NDUxMloXDTI4MDkxMDA4NDUxMlowLzEtMCsGA1UEAxMk YjU4NmRmMzYtM2M3MS00YzZmLTk3NGQtMmM5NTQ1YzI1ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPIT0CeRzPvQy6wrmW7TcuUQTsSutH3wiAB6 8+gJQcCuNBrfvbsGFLMjvWNR4KBwnCAe6Fippd4myZMNIJbzr8AFwR3HARSoGmU0 AItT6Ph6hxXS+paEJBcdGqIscVlkWsVBerNGO3ZY7gkPD43OW7ebRQmP7cIzeDpO qLWdAg1Gv/7MfXfzDxjVcgZSkykPOiuZgCNFuI6gxJ8e4wl2bkikqB8LfnZLM7PV /oYcUIFDQu+CISUdsHgNijaiHAArfzeaF4LeXwSv5EVo9bQVbSDwDXYLqBdvSyz6 h9S9XHGDBE1P8P1oi0DxPTvR3vW71EdYLDyL9IJmRHVln0r4NQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFGirmKyHR0pJfMXCBnvgKeh/0u+qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NTg2ZGYzNi0zYzcxLTRjNmYtOTc0ZC0yYzk1NDVjMjVlYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I1ODZkZjM2LTNjNzEtNGM2Zi05 NzRkLTJjOTU0NWMyNWViMC9iNTg2ZGYzNi0zYzcxLTRjNmYtOTc0ZC0yYzk1NDVj MjVlYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZXQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfvOI8qNa8Q55hUUrvSF8jUjAwF8Z Seh1WNqC+FxkJqgSVprPYTs2sF2Q/aDkGs061QXoB+mnMIaZnWsEk++gKGK3a/Ls pupOA6tLbIklUuxgVTIZbgbF9b+N+QjBDgxl5ik4aYuUp66wHDYzErIP62L3AM8L LY7tHzC9nSU0rbg/bX+/Kt+6uYSFCo8Y9lYnjKIVH0+bDEzSWqg8DSaESEsVoi4B cU1CoWbVkfL6eCSiPuesnP1JNWcz2DQHctmviaj5rZmq2mkHiSm11ZLSAuJnean+ mJUhfyRXqGhzl5g2mjyvqeNfpka7ynBvlBca3mTofEdyd1KrBz6lyHKxRg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:08:11 2026 by rpki-client