$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer File: d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer (raw, json) Hash identifier: bsFjOnIq1tZj2K+T6KZfTF7tBI3f966WeQO6VgHVwxs= Subject key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584DBE6353B23F9E110968D80DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 12:45:17 +0000 Certificate not after: Tue 08 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 25887 IP: 65.254.96.0/19 IP: 2606:fd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:63:53:b2:3f:9e:11:09:68:d8:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 6 12:45:17 2026 GMT Not After : Aug 8 12:45:17 2028 GMT Subject: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:77:ef:b1:d6:34:ec:70:a6:cb:1b:6f:6b: cd:ae:b6:4a:d2:c8:dc:04:6b:a3:69:53:25:bc:6e: 78:bf:ac:77:3d:c7:a6:30:9a:d6:b0:bc:72:dc:2b: 49:1a:1c:47:fa:82:40:08:45:3b:18:89:35:14:6d: 88:95:f1:0c:4a:10:43:d9:16:ee:77:aa:9d:58:a3: 40:84:ef:10:b9:0a:9d:f2:8d:5f:9f:c8:7e:06:83: 52:28:3b:85:58:07:af:25:90:47:7e:a1:3d:f7:a3: f6:30:78:72:d2:07:71:22:d0:6e:b4:84:4f:81:48: e0:e6:4a:2b:d5:ea:d2:2e:b0:c2:51:71:0a:52:a6: 04:fa:91:59:20:38:8f:bb:39:37:f9:af:83:1a:26: 2f:ff:4c:4d:fd:27:0a:e3:31:ba:b8:51:09:3a:99: 68:59:2d:e4:d1:65:98:25:0c:e4:75:66:69:11:7d: ba:f5:17:2b:db:01:84:f4:ef:c4:82:27:ca:77:53: d9:68:9a:76:59:68:96:ef:c6:1d:c5:33:d4:1b:8f: 9d:56:66:be:70:9c:2d:8e:1d:42:16:16:af:bf:a4: 51:b8:a7:d1:1a:ec:74:69:05:dd:b0:83:8e:cd:86: fb:9a:9c:2f:14:97:a0:f2:7b:57:d3:b4:b1:15:3f: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 65.254.96.0/19 IPv6: 2606:fd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25887 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a7:fe:dd:aa:5d:48:bd:e7:3a:f6:ba:9d:f2:b4:bf:69:8b: 91:79:20:49:eb:df:c3:27:21:d7:3b:cd:66:e5:24:b1:ec:73: e5:9f:64:5f:83:b1:ee:7b:2a:80:3d:d5:f2:ec:60:55:c6:8f: 18:53:c8:e7:fa:87:31:7d:94:04:fb:d1:68:b4:de:97:1f:4d: c4:41:f7:31:6b:b8:d7:31:30:34:fe:96:d9:0e:ea:1d:eb:c2: 71:a1:78:92:67:6f:0f:09:64:0a:42:3e:5a:01:6b:f0:48:cf: 5b:a7:24:91:54:43:42:1a:4e:9e:81:89:3b:af:a6:16:0f:5f: 61:20:a6:7e:b9:31:3d:83:d4:e5:d8:35:4b:48:b5:8c:f0:4a: 84:a4:1d:54:e5:14:c7:d4:ec:67:b0:66:53:10:a3:b7:24:0f: 8a:0b:1d:4e:f3:9a:f7:c5:5c:a4:33:c0:7d:ae:de:bb:b8:4e: 03:0b:a1:5b:11:1e:5c:6a:1d:6d:20:55:e7:73:ec:fa:d9:38: bd:b2:ff:b5:54:42:b1:2b:9b:35:09:3b:06:4d:06:a8:74:9a: 1f:26:35:d6:f8:fb:e3:a2:c3:ef:4a:e7:48:00:8f:4d:5b:95: 56:e8:4f:00:99:f8:de:be:be:cb:a1:69:2f:c3:c9:53:30:b0: d8:39:e0:67 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE2+Y1OyP54RCWjYDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDUwNjEyNDUxN1oXDTI4MDgwODEyNDUxN1owLzEtMCsGA1UEAxMk ZDIyOTRlNjUtNGRhMS00YzA3LTliYzAtODIwY2RiMWUyYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxp377HWNOxwpssbb2vNrrZK0sjcBGujaVMl vG54v6x3PcemMJrWsLxy3CtJGhxH+oJACEU7GIk1FG2IlfEMShBD2Rbud6qdWKNA hO8QuQqd8o1fn8h+BoNSKDuFWAevJZBHfqE996P2MHhy0gdxItButIRPgUjg5kor 1erSLrDCUXEKUqYE+pFZIDiPuzk3+a+DGiYv/0xN/ScK4zG6uFEJOploWS3k0WWY JQzkdWZpEX269Rcr2wGE9O/EgifKd1PZaJp2WWiW78YdxTPUG4+dVma+cJwtjh1C Fhavv6RRuKfRGux0aQXdsIOOzYb7mpwvFJeg8ntX07SxFT8AjQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFKL6JpNu4tHw1k9EcZNmMw3zJ6H1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k MjI5NGU2NS00ZGExLTRjMDctOWJjMC04MjBjZGIxZTJjNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2QyMjk0ZTY1LTRkYTEtNGMwNy05 YmMwLTgyMGNkYjFlMmM0OC9kMjI5NGU2NS00ZGExLTRjMDctOWJjMC04MjBjZGIx ZTJjNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAVB/mAwDQQCAAIwBwMFACYG/YAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZR8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANKf+3apdSL3nOva6nfK0v2mLkXkg Sevfwych1zvNZuUksexz5Z9kX4Ox7nsqgD3V8uxgVcaPGFPI5/qHMX2UBPvRaLTe lx9NxEH3MWu41zEwNP6W2Q7qHevCcaF4kmdvDwlkCkI+WgFr8EjPW6ckkVRDQhpO noGJO6+mFg9fYSCmfrkxPYPU5dg1S0i1jPBKhKQdVOUUx9TsZ7BmUxCjtyQPigsd TvOa98VcpDPAfa7eu7hOAwuhWxEeXGodbSBV53Ps+tk4vbL/tVRCsSubNQk7Bk0G qHSaHyY11vj746LD70rnSACPTVuVVuhPAJn43r6+y6FpL8PJUzCw2DngZw== -----END CERTIFICATE-----Generated at Wed May 13 02:52:57 2026 by rpki-client