$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer File: d6d708e8-5964-4587-8db1-e22545ec38a3.cer (raw, json) Hash identifier: Oir13LkL2/svURZyMiFfM96d/CGv5CgbHlNSz5EC4ns= Subject key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E2107734CB9D87E2D6806CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Jun 2026 20:45:12 +0000 Certificate not after: Tue 12 Sep 2028 20:45:12 +0000 Subordinate resources: AS: 11107 AS: 15331 AS: 21947 AS: 30374 IP: 64.25.128.0/20 IP: 66.109.128.0/19 IP: 69.51.64.0/18 IP: 69.165.112.0/20 IP: 192.150.152.0/21 IP: 192.225.176.0/20 IP: 199.195.120.0/21 IP: 204.11.244.0/22 IP: 209.137.224.0/19 IP: 209.200.192.0/19 IP: 216.14.224.0/19 IP: 216.47.48.0/20 IP: 2001:1940::/32 IP: 2604:300::/32 IP: 2607:f8e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:07:73:4c:b9:d8:7e:2d:68:06:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 10 20:45:12 2026 GMT Not After : Sep 12 20:45:12 2028 GMT Subject: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:5b:87:ab:64:87:4a:a9:6b:fb:9e:b6:a8: 72:3f:66:4b:46:55:a4:2d:ce:b7:4f:9d:cf:e5:67: af:49:b6:c4:b6:3e:f6:98:ff:33:ab:a5:b9:ef:f8: 32:b3:9e:b1:0c:0c:88:c2:6a:57:cd:5a:3e:90:15: af:c5:fd:dd:8e:00:7b:e2:79:ed:d2:2a:57:39:96: ef:90:02:1c:f4:79:09:14:6e:6f:e2:d6:3d:a4:d8: c0:c0:79:7e:50:a3:16:6f:57:06:a1:03:89:42:ed: 97:2c:64:f0:46:ed:a8:57:c6:ea:03:68:60:08:04: e7:bf:16:3f:9b:b8:0f:1e:89:36:22:10:d3:28:b3: c6:ad:1d:91:ee:7b:83:eb:5e:31:59:bc:eb:c6:de: a4:60:8f:25:35:18:53:fa:fa:76:d9:b8:5d:48:c1: e0:ef:e3:0d:f7:d8:d0:ec:22:5b:e2:6a:25:85:26: fa:44:c5:ed:af:19:a5:4b:1b:e6:99:8c:6c:00:69: fd:e8:b6:b3:5c:d7:b0:71:4f:01:03:c9:f1:88:ad: 60:57:04:2a:8f:de:ac:17:a3:bb:70:29:35:18:9f: 78:2e:de:06:a8:2c:18:d6:12:00:91:fb:ce:72:d7: 8a:b4:69:39:3b:44:c5:29:fc:b7:4a:9c:fe:c4:bd: e5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.25.128.0/20 66.109.128.0/19 69.51.64.0/18 69.165.112.0/20 192.150.152.0/21 192.225.176.0/20 199.195.120.0/21 204.11.244.0/22 209.137.224.0/19 209.200.192.0/19 216.14.224.0/19 216.47.48.0/20 IPv6: 2001:1940::/32 2604:300::/32 2607:f8e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11107 15331 21947 30374 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:18:6f:c9:09:b8:3d:6a:18:b2:bb:b6:e3:5d:12:0e:0f:77: 83:e7:15:d6:77:01:57:21:1f:b6:7a:55:4f:8c:0a:78:9f:5f: 5d:96:ee:40:57:48:c8:43:67:33:a9:c5:d1:5c:61:ad:cf:8d: b7:34:02:09:1c:8c:a5:f3:bd:a6:4c:e2:81:85:ac:6c:df:32: 80:c2:be:6a:2d:81:5c:7e:65:64:a0:4f:ad:c4:3d:31:38:81: a7:f6:0b:34:f4:43:bc:93:fd:2c:71:58:31:a2:1b:6d:b1:7a: ae:83:4e:b7:f0:91:ea:9d:1b:52:f5:e1:3a:84:e0:f8:e7:e8: 3f:01:94:90:56:ff:55:39:78:c3:fa:c5:d5:31:f3:b8:7e:27: cc:02:87:67:39:ba:f3:0c:08:20:29:c9:b4:90:76:22:7a:b0: 93:e3:dd:91:25:71:cf:73:07:a8:2f:17:b1:72:46:bd:d1:79: e1:fd:f0:b7:bb:0f:83:f5:9b:fc:2e:b3:33:29:f0:fd:52:3b: 77:a9:af:7f:4f:6a:48:b7:45:00:df:5f:24:cc:49:6c:cb:3d: b8:26:1a:c9:45:5d:99:30:56:61:a7:88:40:52:20:5b:ce:79: 50:cf:53:89:1f:5b:cc:1d:f6:05:60:69:ae:a4:82:2d:7f:04: ed:41:72:bc -----BEGIN CERTIFICATE----- MIIHczCCBlugAwIBAgIUAQ0Mn0MoWE4hB3NMudh+LWgGzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYxMDIwNDUxMloXDTI4MDkxMjIwNDUxMlowLzEtMCsGA1UEAxMk ZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMzOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnpbh6tkh0qpa/uetqhyP2ZLRlWkLc63T53P 5WevSbbEtj72mP8zq6W57/gys56xDAyIwmpXzVo+kBWvxf3djgB74nnt0ipXOZbv kAIc9HkJFG5v4tY9pNjAwHl+UKMWb1cGoQOJQu2XLGTwRu2oV8bqA2hgCATnvxY/ m7gPHok2IhDTKLPGrR2R7nuD614xWbzrxt6kYI8lNRhT+vp22bhdSMHg7+MN99jQ 7CJb4molhSb6RMXtrxmlSxvmmYxsAGn96LazXNewcU8BA8nxiK1gVwQqj96sF6O7 cCk1GJ94Lt4GqCwY1hIAkfvOcteKtGk5O0TFKfy3Spz+xL3lMQIDAQABo4IEhTCC BIEwHQYDVR0OBBYEFJZPcVM4iNrGla5agm/srzoaXyx0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k NmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04 ZGIxLWUyMjU0NWVjMzhhMy9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVl YzM4YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwfgYIKwYBBQUH AQcBAf8EbzBtME4EAgABMEgDBARAGYADBAVCbYADBAZFM0ADBARFpXADBAPAlpgD BATA4bADBAPHw3gDBALMC/QDBAXRieADBAXRyMADBAXYDuADBATYLzAwGwQCAAIw FQMFACABGUADBQAmBAMAAwUAJgf44DAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgIr YwICO+MCAlW7AgJ2pjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+GG/JCbg9ahiyu7bjXRIOD3eD5xXWdwFX IR+2elVPjAp4n19dlu5AV0jIQ2czqcXRXGGtz423NAIJHIyl872mTOKBhaxs3zKA wr5qLYFcfmVkoE+txD0xOIGn9gs09EO8k/0scVgxohttsXqug0638JHqnRtS9eE6 hOD45+g/AZSQVv9VOXjD+sXVMfO4fifMAodnObrzDAggKcm0kHYierCT492RJXHP cweoLxexcka90Xnh/fC3uw+D9Zv8LrMzKfD9Ujt3qa9/T2pIt0UA318kzElsyz24 JhrJRV2ZMFZhp4hAUiBbznlQz1OJH1vMHfYFYGmupIItfwTtQXK8 -----END CERTIFICATE-----Generated at Sat Jun 13 09:18:11 2026 by rpki-client