$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer File: 5eb9af5e-8450-4404-b673-e166c036c6a6.cer (raw, json) Hash identifier: Bn0LukiT+wUq9nt/FG/3Uvma+pD8u2rZj8yZscZE5S0= Subject key identifier: C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D94EC735DA20D352BC086D9E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 16:17:38 +0000 Certificate not after: Mon 24 Jul 2028 16:17:38 +0000 Subordinate resources: AS: 33669 IP: 192.136.67.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ec:73:5d:a2:0d:35:2b:c0:86:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 21 16:17:38 2026 GMT Not After : Jul 24 16:17:38 2028 GMT Subject: CN=5eb9af5e-8450-4404-b673-e166c036c6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:a4:12:b2:b5:eb:9f:a5:57:fa:f7:14:1d: a3:3d:fc:cc:c5:63:76:4a:12:0b:30:11:5b:f8:8d: 0f:6f:22:99:c6:df:92:29:7e:e3:0f:1b:77:7d:ac: c2:82:8b:cb:46:d8:50:f7:58:2e:1a:4d:dd:c0:45: a0:31:fb:eb:63:2d:46:61:35:55:ba:77:70:f2:61: f0:df:d2:a5:7a:26:b4:72:3c:27:8e:e5:54:0f:d4: 3a:12:4d:2b:ce:d6:b4:28:84:cc:41:7a:59:67:3e: 4e:f4:58:55:fc:36:e8:e1:c5:6b:c8:b2:3f:a4:5a: b6:06:6f:00:65:41:11:ac:cb:5f:dc:d8:bf:55:a3: 93:93:73:4f:f7:f0:8e:27:f0:6b:b3:1d:fc:c4:e2: 75:5a:d7:0d:e8:1f:88:41:05:b4:12:9c:84:d9:04: 1d:81:cd:d1:0a:4c:1e:00:52:b4:b7:1c:17:f1:4b: 0a:08:bb:39:13:34:5a:f4:31:bd:8a:3e:2b:b3:ae: c1:17:1e:70:14:d0:38:bc:e5:26:fa:12:ae:21:59: 51:3a:21:d9:af:aa:7d:d9:05:bd:4e:f0:05:bb:cc: 43:05:8e:70:14:cc:6e:17:a2:e0:bf:b6:d3:e4:c7: e7:35:d9:78:b6:1b:f8:3b:df:b3:5d:c1:9f:4a:3d: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.136.67.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33669 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:59:5b:28:da:74:ec:90:3c:8b:6a:1d:71:7d:14:f4:99:6c: 96:47:c4:3c:9e:39:ac:7f:11:b0:5a:40:d0:73:12:3f:a6:10: 8e:4d:9d:5d:53:bd:62:52:a9:99:c7:e0:17:fb:60:58:5d:3d: 8d:21:da:5f:17:17:98:b1:19:ff:8e:b9:db:ae:a7:6b:d8:93: 45:3e:d6:50:ed:e2:ae:1a:6e:d1:a8:f1:7b:98:53:f8:3c:78: 11:56:d5:a7:49:f0:94:4f:2b:fe:02:88:67:b1:f8:35:3a:02: 6b:21:f6:15:f9:ff:77:89:d4:90:9f:f8:f1:42:dc:26:5b:f7: 09:4c:68:71:a8:d9:1b:3c:f2:eb:33:15:62:01:d3:cc:e8:6f: d0:87:b0:23:8e:da:fa:a7:e4:72:91:59:79:8f:c5:4f:57:0a: 7a:a8:de:c7:14:1f:38:69:14:78:a6:62:a0:f8:0c:d2:5f:36: 08:82:4d:f3:fc:2e:3b:77:f4:ab:59:b9:12:2d:e4:a5:21:4f: 07:a8:02:8f:9a:a1:e0:d1:74:57:4f:91:07:3d:0f:2b:ab:fa: 0e:9f:67:01:ad:e8:d9:c8:a0:5d:6a:df:33:4e:d4:c7:a1:16: 4e:1c:4d:73:50:01:55:d3:6d:6f:88:b4:39:48:b2:00:43:d2: cc:92:84:00 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2U7HNdog01K8CG2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyMTE2MTczOFoXDTI4MDcyNDE2MTczOFowLzEtMCsGA1UEAxMk NWViOWFmNWUtODQ1MC00NDA0LWI2NzMtZTE2NmMwMzZjNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZOkErK165+lV/r3FB2jPfzMxWN2ShILMBFb +I0PbyKZxt+SKX7jDxt3fazCgovLRthQ91guGk3dwEWgMfvrYy1GYTVVundw8mHw 39Kleia0cjwnjuVUD9Q6Ek0rzta0KITMQXpZZz5O9FhV/Dbo4cVryLI/pFq2Bm8A ZUERrMtf3Ni/VaOTk3NP9/COJ/Brsx38xOJ1WtcN6B+IQQW0EpyE2QQdgc3RCkwe AFK0txwX8UsKCLs5EzRa9DG9ij4rs67BFx5wFNA4vOUm+hKuIVlROiHZr6p92QW9 TvAFu8xDBY5wFMxuF6Lgv7bT5MfnNdl4thv4O9+zXcGfSj3howIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMCOIf52LiYWVxC7wJppaHRYUGtNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 ZWI5YWY1ZS04NDUwLTQ0MDQtYjY3My1lMTY2YzAzNmM2YTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVlYjlhZjVlLTg0NTAtNDQwNC1i NjczLWUxNjZjMDM2YzZhNi81ZWI5YWY1ZS04NDUwLTQ0MDQtYjY3My1lMTY2YzAz NmM2YTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAiEMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIOFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAdZWyjadOyQPItqHXF9FPSZbJZHxDyeOax/EbBaQNBzEj+m EI5NnV1TvWJSqZnH4Bf7YFhdPY0h2l8XF5ixGf+Ouduup2vYk0U+1lDt4q4abtGo 8XuYU/g8eBFW1adJ8JRPK/4CiGex+DU6Amsh9hX5/3eJ1JCf+PFC3CZb9wlMaHGo 2Rs88uszFWIB08zob9CHsCOO2vqn5HKRWXmPxU9XCnqo3scUHzhpFHimYqD4DNJf NgiCTfP8Ljt39KtZuRIt5KUhTweoAo+aoeDRdFdPkQc9Dyur+g6fZwGt6NnIoF1q 3zNO1MehFk4cTXNQAVXTbW+ItDlIsgBD0syShAA= -----END CERTIFICATE-----Generated at Tue May 12 22:05:52 2026 by rpki-client