$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.cer File: cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.cer (raw, json) Hash identifier: 64Tqzos46WB8g3hzdIa1fCcxhtaYvgFlXSGQ3zJHZEo= Subject key identifier: 3D:1E:D6:70:B7:AC:D6:61:A8:3C:E5:AB:EB:A0:9F:FE:4B:4C:E7:68 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E235C88DB141D9105866349C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jun 2026 16:48:15 +0000 Certificate not after: Tue 15 Aug 2028 12:04:27 +0000 Subordinate resources: AS: 402622 IP: 142.248.159.0/24 IP: 2602:f504::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:23:5c:88:db:14:1d:91:05:86:63:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 11 16:48:15 2026 GMT Not After : Aug 15 12:04:27 2028 GMT Subject: CN=cc0e351b-a6aa-47c5-8ac7-b5248ac2666b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:95:46:43:00:34:57:2a:d1:37:37:ee:02: 0c:1c:d7:dd:f3:2d:94:c2:93:df:2c:0c:ef:1b:f2: e4:68:45:ae:fc:9f:e4:06:d7:4c:78:d6:bc:b1:ac: 77:4b:4c:a6:cd:c7:df:b1:26:78:01:6c:9e:60:52: 6d:ed:9d:8b:ed:91:ee:e8:49:00:38:b4:4a:9e:33: 9d:b1:17:10:12:4e:19:1c:67:9c:44:88:3f:86:94: a2:25:67:a7:c7:97:f9:d6:c7:55:f0:e6:7d:89:91: 7c:8e:0d:78:64:e5:32:24:de:3b:41:74:7e:d4:dc: a2:2a:f4:8d:34:de:45:70:16:f4:89:1e:7d:9b:f5: f2:c2:89:f8:d6:d5:27:72:3a:c2:54:f0:d8:11:46: d6:2d:6f:aa:f4:3e:20:e2:28:07:3d:3c:92:93:cf: 6c:b6:ef:eb:f3:7c:b8:6e:2e:d0:b5:65:ab:b9:82: 04:61:2c:42:98:93:53:cb:e1:c4:d8:60:5b:31:29: e2:34:6d:ae:a6:7f:3c:a9:09:90:8b:86:1d:a2:b9: 4a:5d:f5:2f:5d:53:9a:82:61:26:19:3e:df:ed:5d: dc:f8:f3:61:1e:52:85:23:39:4a:54:92:67:90:a1: f4:39:0d:0b:10:d0:e9:f5:8c:1f:51:f1:b8:c5:bf: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:D6:70:B7:AC:D6:61:A8:3C:E5:AB:EB:A0:9F:FE:4B:4C:E7:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 142.248.159.0/24 IPv6: 2602:f504::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402622 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b0:a1:b3:2b:2e:20:3d:37:80:5d:82:62:19:e1:31:74:17: df:6b:51:23:8d:85:e9:a6:6a:f8:b5:5a:cf:da:f2:46:92:1d: e7:d7:df:50:7c:91:b5:1f:bb:e5:9d:65:9b:24:18:0f:cf:f9: fd:a6:e6:a0:c9:d0:09:f3:13:20:c2:fe:97:4b:11:f2:c8:a6: 0f:ed:a7:84:11:70:c8:90:46:d2:03:9b:0c:85:4e:c2:53:7b: 4c:d2:41:5b:d0:f2:eb:c2:35:71:2b:2a:33:8f:5f:01:44:74: ba:45:f8:66:72:3d:b5:30:56:57:fd:f1:ae:5c:eb:bb:de:4f: 4e:e2:fd:32:63:23:c8:6c:70:9e:87:79:85:ba:f8:f7:16:0d: a3:c1:b1:9c:b9:92:c0:63:36:fc:c2:9e:2c:89:ed:84:f2:aa: 15:ce:3f:0e:cc:9b:43:83:bb:8e:37:ef:2c:b1:c5:c5:42:56: 96:3e:24:d9:06:c4:52:ac:94:68:b6:ae:ea:16:2f:dc:89:2c: 69:94:47:94:1f:87:02:1f:ea:16:89:21:72:fe:a8:d3:ea:10: dc:23:8c:02:bc:0c:b8:a5:f2:03:d5:67:59:b2:1c:02:30:bc: 13:88:e6:e6:b2:5b:a0:9d:07:c1:d5:38:4e:8e:d7:07:6f:e7: dd:0f:1b:df -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE4jXIjbFB2RBYZjScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYxMTE2NDgxNVoXDTI4MDgxNTEyMDQyN1owLzEtMCsGA1UEAxMk Y2MwZTM1MWItYTZhYS00N2M1LThhYzctYjUyNDhhYzI2NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdCVRkMANFcq0Tc37gIMHNfd8y2UwpPfLAzv G/LkaEWu/J/kBtdMeNa8sax3S0ymzcffsSZ4AWyeYFJt7Z2L7ZHu6EkAOLRKnjOd sRcQEk4ZHGecRIg/hpSiJWenx5f51sdV8OZ9iZF8jg14ZOUyJN47QXR+1NyiKvSN NN5FcBb0iR59m/Xywon41tUncjrCVPDYEUbWLW+q9D4g4igHPTySk89stu/r83y4 bi7QtWWruYIEYSxCmJNTy+HE2GBbMSniNG2upn88qQmQi4YdorlKXfUvXVOagmEm GT7f7V3c+PNhHlKFIzlKVJJnkKH0OQ0LENDp9YwfUfG4xb+ICwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFD0e1nC3rNZhqDzlq+ugn/5LTOdoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j YzBlMzUxYi1hNmFhLTQ3YzUtOGFjNy1iNTI0OGFjMjY2NmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2NjMGUzNTFiLWE2YWEtNDdjNS04 YWM3LWI1MjQ4YWMyNjY2Yi9jYzBlMzUxYi1hNmFhLTQ3YzUtOGFjNy1iNTI0OGFj MjY2NmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACO+J8wDgQCAAIwCAMGACYC9QQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkvjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGsKGzKy4gPTeAXYJiGeExdBff a1EjjYXppmr4tVrP2vJGkh3n199QfJG1H7vlnWWbJBgPz/n9puagydAJ8xMgwv6X SxHyyKYP7aeEEXDIkEbSA5sMhU7CU3tM0kFb0PLrwjVxKyozj18BRHS6Rfhmcj21 MFZX/fGuXOu73k9O4v0yYyPIbHCeh3mFuvj3Fg2jwbGcuZLAYzb8wp4sie2E8qoV zj8OzJtDg7uON+8sscXFQlaWPiTZBsRSrJRotq7qFi/ciSxplEeUH4cCH+oWiSFy /qjT6hDcI4wCvAy4pfID1WdZshwCMLwTiObmslugnQfB1ThOjtcHb+fdDxvf -----END CERTIFICATE-----Generated at Sat Jun 13 07:54:31 2026 by rpki-client