$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer File: f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer (raw, json) Hash identifier: r1BO3JXAFW0SXdaLDp15KGLSxZwAUPOHsGmVCXTMx9M= Subject key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584DBF059898FD0BD6F8C4022DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 18:12:15 +0000 Certificate not after: Sat 29 Apr 2028 00:45:20 +0000 Subordinate resources: IP: 143.223.88.0/21 IP: 153.57.128.0/18 IP: 161.115.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:05:98:98:fd:0b:d6:f8:c4:02:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: May 6 18:12:15 2026 GMT Not After : Apr 29 00:45:20 2028 GMT Subject: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:94:a4:3a:9f:0a:ab:af:93:57:cc:55:aa: 72:9d:a2:63:53:26:d6:be:bb:e4:05:64:5b:b2:20: d3:6f:bf:f6:da:34:09:8d:ba:9e:95:22:a6:d0:d9: 98:91:98:ac:8b:54:db:cd:08:da:82:a0:b7:62:2b: 27:8d:7d:09:c0:53:b1:9b:78:aa:6d:03:85:c4:36: 8c:ed:35:49:3d:1f:c4:c0:1b:42:47:2f:99:25:70: c6:cb:2f:18:19:6d:57:c8:a6:c2:0e:f9:80:40:79: 3d:e4:c7:40:d0:2b:e5:1f:7a:8f:b4:73:2c:38:1c: 7a:91:0e:3c:7d:92:32:4e:87:3e:fd:f7:39:5c:95: 7f:79:e4:81:9d:a9:44:bc:6e:da:3e:18:e9:1d:a5: ce:b4:f6:fb:de:b0:0e:fb:ae:22:e0:71:22:d5:3d: 85:9d:6c:35:f4:56:cc:1f:32:2c:35:ff:53:98:48: 92:17:9d:eb:5e:a5:e0:27:67:01:29:f7:42:73:37: ce:3f:15:a2:53:bf:c7:4e:6b:a9:70:e4:cb:bc:83: d0:6a:b0:78:65:f7:c4:1d:c3:fe:aa:59:d6:fa:69: 38:6c:1c:ab:f0:4b:53:3f:84:6e:43:85:3f:d4:b1: 04:ef:be:d0:ac:a1:f3:a4:40:24:0a:0f:ca:66:38: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 143.223.88.0/21 153.57.128.0/18 161.115.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2e:5b:c0:38:08:d7:cb:fd:42:bd:ed:8d:5a:65:b8:11:6d: e8:06:6c:1f:30:62:41:92:a3:ca:ba:9e:07:3f:30:03:a8:1c: 5b:52:e5:72:c5:1a:14:bb:69:b0:25:b8:fc:9e:b5:fc:50:7c: 23:89:cf:c2:2a:db:16:6f:fa:df:3c:e5:e7:f8:41:d3:8d:aa: 2b:25:22:02:e3:f2:56:fc:d6:ef:9c:65:c0:79:23:d8:9a:a7: 93:0a:7e:8f:cb:cf:3f:1b:b9:88:e0:14:0f:62:e5:7a:8a:db: df:6b:a6:28:f4:10:dd:15:34:66:ee:a5:92:18:37:46:4d:4e: cc:78:f3:6d:ca:00:69:39:82:57:2f:ea:a5:ba:a7:40:a7:b4: 03:c0:0d:07:6e:9b:0b:78:7f:27:c4:03:67:f9:b1:df:0a:dc: c0:ed:6d:50:f5:d4:5b:42:f2:4f:85:94:47:91:5d:ec:7c:d4: 6b:20:22:d1:3e:99:7b:dc:31:7c:1d:10:07:bb:1d:d8:bb:05: 74:20:40:8f:ef:82:87:0f:5a:b1:42:4d:b8:e7:f0:dd:00:ed: fb:92:69:cf:8d:e9:36:f9:db:d3:40:fb:49:56:88:e0:26:15: c3:07:56:19:a3:34:2d:e5:d8:cc:16:29:0f:3b:1d:db:28:06: 73:cd:ab:04 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE2/BZiY/QvW+MQCLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDUwNjE4MTIxNVoXDTI4MDQyOTAwNDUyMFowLzEtMCsGA1UEAxMk Zjc5NTkxZWItZjhmZi00OGY1LTlhYzYtZTFhZmEyM2U1M2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq+UpDqfCquvk1fMVapynaJjUybWvrvkBWRb siDTb7/22jQJjbqelSKm0NmYkZisi1TbzQjagqC3YisnjX0JwFOxm3iqbQOFxDaM 7TVJPR/EwBtCRy+ZJXDGyy8YGW1XyKbCDvmAQHk95MdA0CvlH3qPtHMsOBx6kQ48 fZIyToc+/fc5XJV/eeSBnalEvG7aPhjpHaXOtPb73rAO+64i4HEi1T2FnWw19FbM HzIsNf9TmEiSF53rXqXgJ2cBKfdCczfOPxWiU7/HTmupcOTLvIPQarB4ZffEHcP+ qlnW+mk4bByr8EtTP4RuQ4U/1LEE777QrKHzpEAkCg/KZjjkrQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFAt650meOHTfmyz1VfNbMpdsOCN1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m Nzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIzZTUzZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y3OTU5MWViLWY4ZmYtNDhmNS05 YWM2LWUxYWZhMjNlNTNmYi9mNzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIz ZTUzZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAOP31gDBAaZOYADBAWhc6AwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjy5b wDgI18v9Qr3tjVpluBFt6AZsHzBiQZKjyrqeBz8wA6gcW1LlcsUaFLtpsCW4/J61 /FB8I4nPwirbFm/63zzl5/hB042qKyUiAuPyVvzW75xlwHkj2Jqnkwp+j8vPPxu5 iOAUD2Lleorb32umKPQQ3RU0Zu6lkhg3Rk1OzHjzbcoAaTmCVy/qpbqnQKe0A8AN B26bC3h/J8QDZ/mx3wrcwO1tUPXUW0LyT4WUR5Fd7HzUayAi0T6Ze9wxfB0QB7sd 2LsFdCBAj++Chw9asUJNuOfw3QDt+5Jpz43pNvnb00D7SVaI4CYVwwdWGaM0LeXY zBYpDzsd2ygGc82rBA== -----END CERTIFICATE-----Generated at Wed May 13 07:27:52 2026 by rpki-client