$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.cer File: b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.cer (raw, json) Hash identifier: 6O5FJacTL3UKDjPSy9zFZau6++4L0TJe1+ECF996b5I= Subject key identifier: 96:7E:79:55:0B:6B:8C:47:A6:70:47:B3:4B:B6:B5:67:1C:F5:BC:4C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E03B743021E05C375C8D83A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 May 2026 08:45:11 +0000 Certificate not after: Sat 02 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 62535 AS: 396136 IP: 23.189.64.0/23 IP: 2602:fe71::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:03:b7:43:02:1e:05:c3:75:c8:d8:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 31 08:45:11 2026 GMT Not After : Sep 2 08:45:11 2028 GMT Subject: CN=b6ece90f-e28e-4958-bcc3-3fa4be6f5db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:08:ba:f4:59:75:6b:16:24:2b:25:eb:28:6c: aa:a0:a9:b0:29:2a:4e:83:d3:7f:62:63:49:6a:11: b5:ca:aa:aa:56:11:e4:08:33:90:0e:e7:c9:f5:4d: 4f:e1:69:78:a7:11:53:c5:46:8c:b6:40:6d:1d:a6: b0:d8:5c:06:3d:9d:ac:c2:ad:09:b9:70:e1:ac:10: 53:b4:dd:2c:c3:d7:e4:f3:a8:af:ba:10:bf:da:b0: 4b:24:d7:63:e3:ac:c1:e1:5c:77:9a:70:5f:7b:44: 21:10:be:ae:9a:04:9c:89:5f:54:9f:38:01:93:cb: 19:05:7c:d0:90:22:e1:df:8c:1a:b1:1f:59:63:94: e9:15:cb:fa:a9:95:a3:fd:27:57:0a:c3:fe:0f:90: 80:18:16:36:8a:c3:7d:df:cf:84:ed:d2:c3:6f:d2: bf:d0:84:24:f2:4c:a0:71:dd:ac:de:cb:86:46:81: c8:d9:f9:be:4d:09:af:43:30:45:88:1e:a9:e0:89: 3e:6a:13:20:12:c7:d4:51:85:28:6d:d6:71:7b:67: 4c:88:f3:03:c0:59:81:e9:1c:15:ae:10:5b:d1:bf: 06:21:ea:13:c0:5b:2e:e7:45:2c:b6:8f:86:7e:b6: e0:23:1c:4b:cd:5e:40:9c:65:ed:34:e6:49:a2:85: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7E:79:55:0B:6B:8C:47:A6:70:47:B3:4B:B6:B5:67:1C:F5:BC:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.189.64.0/23 IPv6: 2602:fe71::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62535 396136 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ea:94:de:92:95:e9:8f:2a:85:03:40:ce:00:ff:2e:ad:dd: 1e:19:b4:59:87:57:55:41:b0:ea:a1:d2:bf:cf:ba:68:1c:91: aa:e5:4c:05:6e:22:ff:b4:99:75:58:44:17:b5:36:63:11:2b: 5a:21:5c:7c:4d:84:f6:d9:6e:31:9d:81:e1:ab:8e:f6:9d:c6: 0f:72:1a:f0:d7:09:6b:1c:88:84:8e:c5:2c:1c:d8:39:60:02: 61:10:31:68:8a:d7:70:c9:24:0e:24:17:d7:a1:74:91:93:87: 5c:e4:5e:d2:d0:ed:fd:64:aa:52:2f:4b:e4:9b:c2:61:8b:37: 21:a8:8d:a0:62:91:fd:ac:a4:9b:a4:a5:45:cf:af:4d:4f:a1: 00:04:3b:b1:05:7e:b8:d8:9e:1d:4d:ba:2f:bd:15:85:8e:9d: 7f:63:44:bf:6c:b9:37:33:d4:97:7a:73:01:c7:fc:94:6a:87: 0b:26:a9:44:62:40:f3:62:89:ad:d8:4b:77:05:ec:46:45:06: c3:3f:03:ee:f4:2a:23:6e:4b:ec:0a:4c:a2:14:bb:ff:ec:2a: b9:68:1f:66:40:d5:64:87:37:8d:cf:ef:ef:ac:dc:ea:be:39: 5c:e2:e2:05:4b:92:21:3d:2f:35:5c:00:86:46:81:3e:0d:0b: 66:60:2b:3a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE4Dt0MCHgXDdcjYOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUzMTA4NDUxMVoXDTI4MDkwMjA4NDUxMVowLzEtMCsGA1UEAxMk YjZlY2U5MGYtZTI4ZS00OTU4LWJjYzMtM2ZhNGJlNmY1ZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAi69Fl1axYkKyXrKGyqoKmwKSpOg9N/YmNJ ahG1yqqqVhHkCDOQDufJ9U1P4Wl4pxFTxUaMtkBtHaaw2FwGPZ2swq0JuXDhrBBT tN0sw9fk86ivuhC/2rBLJNdj46zB4Vx3mnBfe0QhEL6umgSciV9UnzgBk8sZBXzQ kCLh34wasR9ZY5TpFcv6qZWj/SdXCsP+D5CAGBY2isN938+E7dLDb9K/0IQk8kyg cd2s3suGRoHI2fm+TQmvQzBFiB6p4Ik+ahMgEsfUUYUobdZxe2dMiPMDwFmB6RwV rhBb0b8GIeoTwFsu50Usto+GfrbgIxxLzV5AnGXtNOZJooVZNQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJZ+eVULa4xHpnBHs0u2tWcc9bxMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NmVjZTkwZi1lMjhlLTQ5NTgtYmNjMy0zZmE0YmU2ZjVkYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I2ZWNlOTBmLWUyOGUtNDk1OC1i Y2MzLTNmYTRiZTZmNWRiNC9iNmVjZTkwZi1lMjhlLTQ5NTgtYmNjMy0zZmE0YmU2 ZjVkYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXvUAwDgQCAAIwCAMGBCYC/nEAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwD0RwIDBgtoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAbqlN6SlemPKoUDQM4A /y6t3R4ZtFmHV1VBsOqh0r/PumgckarlTAVuIv+0mXVYRBe1NmMRK1ohXHxNhPbZ bjGdgeGrjvadxg9yGvDXCWsciISOxSwc2DlgAmEQMWiK13DJJA4kF9ehdJGTh1zk XtLQ7f1kqlIvS+SbwmGLNyGojaBikf2spJukpUXPr01PoQAEO7EFfrjYnh1Nui+9 FYWOnX9jRL9suTcz1Jd6cwHH/JRqhwsmqURiQPNiia3YS3cF7EZFBsM/A+70KiNu S+wKTKIUu//sKrloH2ZA1WSHN43P7++s3Oq+OVzi4gVLkiE9LzVcAIZGgT4NC2Zg Kzo= -----END CERTIFICATE-----Generated at Mon Jun 15 12:36:56 2026 by rpki-client