$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer File: 89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer (raw, json) Hash identifier: Q/dJHb3oMZKhq+dFOUZNS4xBt4frk5Fg3HqfH4T2MiY= Subject key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584DAAD88B6823B1C69FC3C83AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Apr 2026 12:45:18 +0000 Certificate not after: Tue 01 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 62715 IP: 64.207.222.0/23 IP: 67.222.252.0/22 IP: 68.65.192.0/21 IP: 103.8.239.0/24 IP: 162.222.40.0/21 IP: 216.9.196.0 -- 216.9.198.255 IP: 2606:4a80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:d8:8b:68:23:b1:c6:9f:c3:c8:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 29 12:45:18 2026 GMT Not After : Aug 1 12:45:18 2028 GMT Subject: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:1e:3e:aa:c6:4d:ca:e6:17:a1:88:2e:be: 68:af:be:f2:38:a0:32:bc:99:4a:21:83:8e:cc:bd: 65:70:ac:7c:96:f4:21:a6:fd:98:ca:88:1a:27:9e: 8e:9d:9e:d1:29:d3:34:a7:ef:0d:f0:90:6d:ce:f1: 4e:c3:39:2f:31:47:4f:c3:29:8c:8a:1b:bd:a1:4a: 67:d2:81:e8:9c:77:88:5e:6b:02:75:17:d1:7e:71: 7b:ed:d1:4c:99:f9:9a:6a:4e:16:88:31:67:3b:2e: 4c:87:52:69:b4:c5:f2:ea:42:49:26:24:f5:be:42: d4:7c:05:d9:68:38:5a:4e:34:55:5f:e1:e8:bc:65: 02:b7:ac:65:aa:6c:e1:c7:4f:bc:7f:e8:b6:ed:07: 4b:8a:36:a4:f0:84:e8:f3:aa:b7:d6:75:62:49:77: 61:82:d3:8e:df:6f:e6:8d:de:2d:aa:b7:5f:b9:ce: d4:11:b7:87:df:4c:3f:02:88:da:00:ea:88:d8:18: b5:94:43:50:70:3d:93:a6:e7:59:d7:9d:ef:c2:b0: 35:37:35:ed:0c:6e:16:2c:e4:85:ad:78:e3:40:3e: b5:d8:7a:42:cb:e9:04:45:0e:f7:cc:55:fc:fd:b4: 14:48:5b:54:fd:37:5a:3e:49:d5:21:df:83:4c:84: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.252.0/22 68.65.192.0/21 103.8.239.0/24 162.222.40.0/21 216.9.196.0-216.9.198.255 IPv6: 2606:4a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62715 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c0:f9:08:cf:62:88:d8:77:7f:cc:f4:6b:8f:02:0d:f2:1d: 22:0d:98:58:15:01:5e:5e:1a:a8:1f:a1:ed:c3:34:e9:6d:ea: cc:b3:17:3b:ef:b1:58:4c:95:af:1a:ef:70:74:a2:44:f4:58: 69:40:32:de:7d:4e:ef:03:89:3b:ce:d7:99:28:f8:7b:79:d5: c3:85:e2:01:60:77:64:c9:ee:80:fb:01:c0:a6:98:76:8a:bf: c4:22:2b:40:2c:08:32:a2:e0:28:11:8d:2f:ae:e0:63:ee:39: 2c:cd:14:9e:4b:44:21:fc:57:6d:d6:18:79:3f:60:c6:2a:46: ad:d9:f2:7e:6c:36:dd:87:8b:6e:19:44:ae:48:67:1b:43:0b: 20:3b:b6:af:9f:89:f7:0b:6f:8d:e7:7a:97:89:5a:6a:4f:28: 4a:19:89:e4:4b:9e:a6:58:f0:e5:8f:e6:e3:4b:af:b4:2a:c1: 91:5f:3a:82:3f:b6:47:33:7d:86:e1:98:56:f3:74:62:33:1b: a6:7d:bd:70:25:e9:8f:c3:9b:57:e9:6a:b1:9b:00:25:8b:fb: 1d:c5:d1:b3:ab:b6:c2:33:13:eb:a3:d8:14:6a:eb:78:47:12: c8:b8:4b:14:a2:ec:68:6d:8b:d5:ed:ee:3e:3d:78:80:a4:46: fe:9f:5c:09 -----BEGIN CERTIFICATE----- MIIHPjCCBiagAwIBAgIUAQ0Mn0MoWE2q2ItoI7HGn8PIOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDQyOTEyNDUxOFoXDTI4MDgwMTEyNDUxOFowLzEtMCsGA1UEAxMk ODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4ZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSAePqrGTcrmF6GILr5or77yOKAyvJlKIYOO zL1lcKx8lvQhpv2YyogaJ56OnZ7RKdM0p+8N8JBtzvFOwzkvMUdPwymMihu9oUpn 0oHonHeIXmsCdRfRfnF77dFMmfmaak4WiDFnOy5Mh1JptMXy6kJJJiT1vkLUfAXZ aDhaTjRVX+HovGUCt6xlqmzhx0+8f+i27QdLijak8ITo86q31nViSXdhgtOO32/m jd4tqrdfuc7UEbeH30w/AojaAOqI2Bi1lENQcD2TpudZ153vwrA1NzXtDG4WLOSF rXjjQD612HpCy+kERQ73zFX8/bQUSFtU/TdaPknVId+DTIQhvwIDAQABo4IEUDCC BEwwHQYDVR0OBBYEFAt3ayFs2zJcIbFIi+RVS4l3DBsfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg5ZTNjZGUxLThhYjItNDM0My1h NTk3LTI0ZTZkYjVjOGZlNS84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1 YzhmZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMDIEAgABMCwDBAFAz94DBAJD3vwDBANEQcADBABnCO8DBAOi3igw DAMEAtgJxAMEANgJxjANBAIAAjAHAwUAJgZKgDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA9PswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAPsD5CM9iiNh3f8z0a48CDfIdIg2YWBUBXl4aqB+h 7cM06W3qzLMXO++xWEyVrxrvcHSiRPRYaUAy3n1O7wOJO87XmSj4e3nVw4XiAWB3 ZMnugPsBwKaYdoq/xCIrQCwIMqLgKBGNL67gY+45LM0UnktEIfxXbdYYeT9gxipG rdnyfmw23YeLbhlErkhnG0MLIDu2r5+J9wtvjed6l4laak8oShmJ5Euepljw5Y/m 40uvtCrBkV86gj+2RzN9huGYVvN0YjMbpn29cCXpj8ObV+lqsZsAJYv7HcXRs6u2 wjMT66PYFGrreEcSyLhLFKLsaG2L1e3uPj14gKRG/p9cCQ== -----END CERTIFICATE-----Generated at Wed May 13 04:57:01 2026 by rpki-client