$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer File: d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer (raw, json) Hash identifier: P96LsZUMyjgkPVDWEi0k1cVIAYhX9c/qUdmcCqNneXg= Subject key identifier: 30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D85284E8951326563C9AD2580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Apr 2026 00:45:18 +0000 Certificate not after: Wed 19 Jul 2028 00:45:18 +0000 Subordinate resources: AS: 31986 IP: 208.87.148.0/22 IP: 2602:817:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:28:4e:89:51:32:65:63:c9:ad:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 16 00:45:18 2026 GMT Not After : Jul 19 00:45:18 2028 GMT Subject: CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:a5:09:6e:84:33:90:c9:86:10:21:5f:45: 28:40:b7:c4:1f:ee:cf:d2:1e:3b:07:96:b5:5f:c9: 0f:aa:5c:7a:2a:4a:b0:e6:9b:c4:6a:14:7b:91:99: a2:af:2a:f1:8b:57:5f:da:5c:f6:b9:c4:fc:e2:c6: e0:5d:e0:b8:95:8c:d5:69:aa:f7:c7:c7:66:53:de: 30:76:f7:85:59:f0:af:ea:97:b3:b7:39:a7:5a:31: 7a:bd:09:f3:ff:f7:2e:47:f8:5f:a5:4e:2c:32:05: a7:49:32:20:43:df:8f:e3:26:57:51:59:df:57:99: 4d:6d:8c:77:07:ae:1a:6f:27:71:41:40:f6:06:04: 49:41:64:5f:1e:82:e6:87:85:a4:45:da:c5:45:b0: 1b:31:49:aa:32:55:4f:08:5b:92:87:b3:23:16:5e: e5:cb:ca:84:2f:9c:22:75:15:8f:c5:7d:42:d0:4a: f8:64:c0:ac:3d:c7:8e:6f:60:2d:f2:d0:22:33:67: 95:b5:41:b3:b1:b1:91:ab:2a:76:ed:8f:d8:df:86: 4b:00:29:ea:5b:1e:51:3e:1d:f1:ba:82:03:1e:d7: 92:a9:f4:4f:19:0e:60:a7:7b:11:0a:ed:01:f5:3b: f3:7e:c4:db:96:b4:b3:63:bf:a2:40:96:aa:f9:d1: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 208.87.148.0/22 IPv6: 2602:817:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31986 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:74:a0:93:f7:db:ab:94:75:1f:ec:de:52:16:78:36:81:4f: 61:8e:e7:b5:84:9c:ff:ad:10:3d:44:b4:80:79:0a:cb:fe:68: 5d:fc:96:16:8c:b4:fb:72:ac:3c:6c:4f:46:d2:c4:67:16:b5: 6a:d6:c8:6f:e2:2d:41:b2:01:ff:62:0c:e2:72:f6:ac:b6:07: af:47:00:76:ae:4a:03:90:cb:e7:e1:0e:7d:50:ef:5d:fb:d9: f6:ae:b6:4d:6a:e2:78:40:43:35:1f:09:b0:a9:da:11:b3:b4: 97:73:72:d3:3b:47:4e:1d:14:a4:0c:90:38:a6:13:d7:78:07: f4:04:16:c9:8b:67:f0:aa:e6:b2:61:22:54:dc:a6:4e:16:d8: 81:a7:74:ef:76:50:14:ef:f5:a7:f9:eb:f0:89:41:3e:f9:03: d8:ad:6b:c2:ba:32:3d:cd:b0:88:0c:36:3a:af:37:2d:ca:9d: 68:83:ef:a6:c9:18:96:44:02:d2:e3:1e:e2:20:15:40:ab:3a: fc:29:c3:cb:2e:44:d7:1a:ba:2b:e7:8c:1d:fc:48:e4:85:24: 45:67:61:4c:75:bc:8c:97:a3:68:67:c4:68:40:41:f8:21:6d: 5f:64:dc:06:79:4a:3a:1e:d6:67:b9:24:f6:6e:cb:01:ea:3e: 65:7d:18:34 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2FKE6JUTJlY8mtJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNjAwNDUxOFoXDTI4MDcxOTAwNDUxOFowLzEtMCsGA1UEAxMk ZDhiOGMzMDMtN2JjZi00NWY0LWE2OTMtMjRmYjlkNTQwMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfSlCW6EM5DJhhAhX0UoQLfEH+7P0h47B5a1 X8kPqlx6Kkqw5pvEahR7kZmiryrxi1df2lz2ucT84sbgXeC4lYzVaar3x8dmU94w dveFWfCv6peztzmnWjF6vQnz//cuR/hfpU4sMgWnSTIgQ9+P4yZXUVnfV5lNbYx3 B64abydxQUD2BgRJQWRfHoLmh4WkRdrFRbAbMUmqMlVPCFuSh7MjFl7ly8qEL5wi dRWPxX1C0Er4ZMCsPceOb2At8tAiM2eVtUGzsbGRqyp27Y/Y34ZLACnqWx5RPh3x uoIDHteSqfRPGQ5gp3sRCu0B9TvzfsTblrSzY7+iQJaq+dEFfQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDBrAfSEIuXNJPCg6aU1Q5iRVc32MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k OGI4YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZiOWQ1NDAxMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q4YjhjMzAzLTdiY2YtNDVmNC1h NjkzLTI0ZmI5ZDU0MDEwYy9kOGI4YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZiOWQ1 NDAxMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALQV5QwDwQCAAIwCQMHBCYCCBegADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ88jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNdKCT99urlHUf7N5SFng2gU9h jue1hJz/rRA9RLSAeQrL/mhd/JYWjLT7cqw8bE9G0sRnFrVq1shv4i1BsgH/Ygzi cvastgevRwB2rkoDkMvn4Q59UO9d+9n2rrZNauJ4QEM1HwmwqdoRs7SXc3LTO0dO HRSkDJA4phPXeAf0BBbJi2fwquayYSJU3KZOFtiBp3TvdlAU7/Wn+evwiUE++QPY rWvCujI9zbCIDDY6rzctyp1og++myRiWRALS4x7iIBVAqzr8KcPLLkTXGror54wd /EjkhSRFZ2FMdbyMl6NoZ8RoQEH4IW1fZNwGeUo6HtZnuST2bssB6j5lfRg0 -----END CERTIFICATE-----Generated at Fri Apr 17 11:52:21 2026 by rpki-client