$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer File: d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer (raw, json) Hash identifier: 0niUASgXPIgFvFCTXrzOQGbYHVIAKBOuVn7bdwKFJ2I= Subject key identifier: 7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D52E7FC1B2879E05B28B43D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Mar 2026 00:45:17 +0000 Certificate not after: Sat 01 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 192.245.230.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:e7:fc:1b:28:79:e0:5b:28:b4:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 29 00:45:17 2026 GMT Not After : Jul 1 00:45:17 2028 GMT Subject: CN=d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:a2:6c:10:d7:9a:6a:47:41:0b:4b:78:c5: dd:0f:52:37:ed:9b:cc:af:f8:b2:34:f7:70:2a:1a: 43:84:8c:2c:51:07:8e:87:cc:3e:cc:a4:a7:60:4e: bb:04:1c:ce:c1:9b:3c:81:be:47:bc:0f:10:7b:9a: e3:8a:6c:c7:95:c0:05:0a:2d:a9:60:e1:9f:f5:83: 36:f1:7f:24:22:ad:18:7a:69:ba:2b:45:09:e3:ac: 35:20:20:bc:19:11:db:63:2e:30:21:c3:b2:d5:30: e7:1e:84:7e:66:b8:32:6b:0b:63:3d:f2:6b:e2:5d: 52:bb:9e:16:b5:dc:e6:1e:30:70:46:ce:5f:c1:71: f4:49:cf:51:d1:64:39:c0:1f:0c:97:ae:c4:e1:62: 81:cd:7d:ad:fa:8c:5d:ce:b4:81:a0:43:4f:44:fe: fc:ca:c5:b7:db:bb:20:01:0c:07:25:9d:f5:66:52: 78:bf:98:1d:47:4a:6c:47:dd:22:c5:33:e7:92:e2: 36:a1:16:12:21:5b:ca:cd:3e:af:15:a9:3c:0a:fe: 89:8b:3c:46:46:4d:c3:67:18:2e:03:3d:6f:90:14: 07:a7:d5:10:31:f4:aa:c9:ed:4d:5f:a7:41:db:ef: b7:d8:2b:8f:6e:64:cf:c1:d2:40:82:f5:a7:64:19: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.245.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:53:8c:c0:15:83:da:80:38:29:0b:c6:3e:6b:17:08:d6:6e: 5b:b7:80:82:2c:3d:19:73:92:f9:80:5f:e3:b5:27:c3:f6:83: 2f:d3:65:e3:f3:e4:5e:6a:dd:49:3c:c9:24:95:45:43:00:a6: b6:75:a2:f7:06:04:f5:82:41:51:3f:5a:8d:87:42:64:60:46: 7a:77:6c:ab:4b:83:fe:0a:a2:dc:69:05:5f:3a:0b:3a:57:5e: 31:a1:49:a5:2b:a0:f6:1d:3c:8d:89:88:1d:e3:f1:7c:49:6d: 39:04:c3:83:d8:44:18:cf:51:ad:8c:66:65:a4:f6:25:0c:ea: 53:09:5f:8b:fb:4b:91:88:49:2e:2a:2d:40:3e:17:c0:3c:62: f3:4c:3d:f7:6c:8b:f5:7b:a9:96:ad:13:34:56:c6:ac:8d:69: 6f:dc:91:03:6b:97:e8:98:6b:75:2d:f0:6a:3a:30:23:6d:5f: 27:2d:28:55:27:f2:80:93:d7:f0:4f:47:64:49:f9:24:aa:a7: dc:33:8c:e5:b5:22:3b:2f:55:3e:4a:de:e3:05:87:65:42:8d: 56:21:af:74:87:58:c4:2d:1f:0a:8e:61:ae:1b:5d:b6:98:7c: a5:00:b1:b3:fb:fc:82:37:8e:04:4d:9a:c7:a3:fd:a6:d5:ba: db:8f:1a:30 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1S5/wbKHngWyi0PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyOTAwNDUxN1oXDTI4MDcwMTAwNDUxN1owLzEtMCsGA1UEAxMk ZDlkMGNmMWEtY2NlZi00Njg4LThiNDgtNTVlYjBlZjVkMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFKibBDXmmpHQQtLeMXdD1I37ZvMr/iyNPdw KhpDhIwsUQeOh8w+zKSnYE67BBzOwZs8gb5HvA8Qe5rjimzHlcAFCi2pYOGf9YM2 8X8kIq0Yemm6K0UJ46w1ICC8GRHbYy4wIcOy1TDnHoR+ZrgyawtjPfJr4l1Su54W tdzmHjBwRs5fwXH0Sc9R0WQ5wB8Ml67E4WKBzX2t+oxdzrSBoENPRP78ysW327sg AQwHJZ31ZlJ4v5gdR0psR90ixTPnkuI2oRYSIVvKzT6vFak8Cv6JizxGRk3DZxgu Az1vkBQHp9UQMfSqye1NX6dB2++32CuPbmTPwdJAgvWnZBk2lQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFH4Nlu8XFyW66ZwitN59P7ZG+AmLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k OWQwY2YxYS1jY2VmLTQ2ODgtOGI0OC01NWViMGVmNWQyZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q5ZDBjZjFhLWNjZWYtNDY4OC04 YjQ4LTU1ZWIwZWY1ZDJlMy9kOWQwY2YxYS1jY2VmLTQ2ODgtOGI0OC01NWViMGVm NWQyZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA9eYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAklOMwBWD2oA4KQvGPmsX CNZuW7eAgiw9GXOS+YBf47Unw/aDL9Nl4/PkXmrdSTzJJJVFQwCmtnWi9wYE9YJB UT9ajYdCZGBGendsq0uD/gqi3GkFXzoLOldeMaFJpSug9h08jYmIHePxfEltOQTD g9hEGM9RrYxmZaT2JQzqUwlfi/tLkYhJLiotQD4XwDxi80w992yL9Xuplq0TNFbG rI1pb9yRA2uX6JhrdS3wajowI21fJy0oVSfygJPX8E9HZEn5JKqn3DOM5bUiOy9V Pkre4wWHZUKNViGvdIdYxC0fCo5hrhtdtph8pQCxs/v8gjeOBE2ax6P9ptW6248a MA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:16:48 2026 by rpki-client