$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer File: e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer (raw, json) Hash identifier: ZDtFXCr845Ktol7idYBqZDqASQ5tX+k76Avkpp1yM5A= Subject key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584D919C135035459AC9E6C2BAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 11:48:15 +0000 Certificate not after: Wed 21 Jul 2027 21:19:51 +0000 Subordinate resources: AS: 32529 AS: 394922 IP: 140.232.184.0/21 IP: 199.180.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:9c:13:50:35:45:9a:c9:e6:c2:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 20 11:48:15 2026 GMT Not After : Jul 21 21:19:51 2027 GMT Subject: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:1f:df:57:e0:98:c1:75:80:3a:f8:3b:04: 1c:19:01:76:e8:81:dd:c2:35:a9:b1:40:27:55:37: e0:e5:fd:93:f7:2f:da:89:fa:d2:ec:e2:6b:7b:ce: 4e:43:87:7d:14:e0:46:43:de:9c:80:95:c5:4f:d2: ae:95:ef:48:29:ee:6f:02:f3:aa:f1:cc:ab:7a:16: 20:8d:50:03:1d:b1:f0:0f:d2:9c:4d:4b:58:ae:ee: 37:8f:5b:9e:91:7a:b2:97:1d:7e:41:54:6e:24:be: be:9a:12:15:7a:81:8a:54:a4:67:77:3b:a2:24:28: cf:e1:4c:4c:d0:21:b6:6a:b4:60:98:a7:f8:18:10: ab:ac:ef:59:8e:2a:79:a6:d2:1c:a2:48:fd:85:0b: f7:8e:e1:3d:05:94:3b:9d:a3:f2:db:86:f1:64:25: 2d:5c:b6:c6:3c:5a:f6:14:95:d3:c9:a8:de:93:07: c0:99:b6:05:1a:b8:a5:4f:d3:f0:de:50:b8:4f:f4: 63:a7:c6:e0:c0:b2:52:62:f7:f1:cc:5a:d6:b4:08: be:57:c5:4c:1d:b7:8e:1e:90:7d:0d:2e:64:20:7f: ac:2f:e8:de:32:6e:da:f1:2f:64:fd:33:bf:9b:20: 87:8f:ef:35:73:ae:af:15:22:2a:30:e3:ab:bd:76: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 140.232.184.0/21 199.180.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32529 394922 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:19:e6:13:84:bd:a4:ca:37:d4:8c:09:28:c7:9d:3b:52:9a: e6:df:8e:28:00:43:82:e9:33:f4:6f:77:d8:2c:e4:4f:34:1a: 08:08:35:bc:b4:9a:f1:f8:ff:e4:eb:66:ee:7d:2e:3e:10:d0: bf:ae:7c:25:5c:a1:11:7e:6e:80:28:05:a3:c8:c7:7e:6f:8b: 9a:85:a4:af:fe:b9:84:14:1c:0b:cb:2f:10:30:c7:bd:fa:29: 42:87:58:ea:c0:0d:72:e7:68:49:c8:36:1c:95:b0:c2:99:31: a8:e4:38:bd:30:88:d2:c2:57:c6:70:d2:1d:e7:a0:72:8b:56: 23:b3:b9:51:cf:b5:68:49:a6:f2:15:83:1e:01:d9:94:0d:f1: 57:f3:22:5b:fa:c5:6f:cc:d2:b4:a2:e1:2a:64:89:64:cb:ae: bb:6e:09:b8:43:fb:a7:55:0c:89:72:93:0f:c3:78:9b:ea:b2: 06:4b:43:97:0f:47:73:b2:de:95:51:cb:6c:f0:dc:56:40:d1: a1:80:38:9e:90:3d:03:a3:a6:b9:88:ec:83:29:b4:c8:ba:ce: cf:06:7f:f9:0f:15:a2:f5:57:39:f9:e2:73:2d:ea:69:13:cd: 45:41:c9:52:e4:b7:eb:d9:0f:92:28:ff:bc:6a:38:8c:02:83: 45:a3:c6:e8 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE2RnBNQNUWayebCusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDQyMDExNDgxNVoXDTI3MDcyMTIxMTk1MVowLzEtMCsGA1UEAxMk ZTFlYzZlZjctZjc2MC00MmNkLWExZjMtYzZjMDM5M2IyNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3sf31fgmMF1gDr4OwQcGQF26IHdwjWpsUAn VTfg5f2T9y/aifrS7OJre85OQ4d9FOBGQ96cgJXFT9Kule9IKe5vAvOq8cyrehYg jVADHbHwD9KcTUtYru43j1uekXqylx1+QVRuJL6+mhIVeoGKVKRndzuiJCjP4UxM 0CG2arRgmKf4GBCrrO9Zjip5ptIcokj9hQv3juE9BZQ7naPy24bxZCUtXLbGPFr2 FJXTyajekwfAmbYFGrilT9Pw3lC4T/Rjp8bgwLJSYvfxzFrWtAi+V8VMHbeOHpB9 DS5kIH+sL+jeMm7a8S9k/TO/myCHj+81c66vFSIqMOOrvXYlVwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFIHRTenD5KhMEKFKiW6jyuMrvr4AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l MWVjNmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMwMzkzYjI1MTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2UxZWM2ZWY3LWY3NjAtNDJjZC1h MWYzLWM2YzAzOTNiMjUxNy9lMWVjNmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMwMzkz YjI1MTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOM6LgDBALHtLwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICfxECAwYGqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQGeYThL2kyjfUjAkox507Uprm344oAEOC 6TP0b3fYLORPNBoICDW8tJrx+P/k62bufS4+ENC/rnwlXKERfm6AKAWjyMd+b4ua haSv/rmEFBwLyy8QMMe9+ilCh1jqwA1y52hJyDYclbDCmTGo5Di9MIjSwlfGcNId 56Byi1Yjs7lRz7VoSabyFYMeAdmUDfFX8yJb+sVvzNK0ouEqZIlky667bgm4Q/un VQyJcpMPw3ib6rIGS0OXD0dzst6VUcts8NxWQNGhgDiekD0Do6a5iOyDKbTIus7P Bn/5DxWi9Vc5+eJzLeppE81FQclS5Lfr2Q+SKP+8ajiMAoNFo8bo -----END CERTIFICATE-----Generated at Wed May 13 13:10:21 2026 by rpki-client