$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer File: 7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer (raw, json) Hash identifier: qmsd9dXd9Yrc/UoAXHwkwOx9YtHMwW+BxxBruUl06GY= Subject key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DBB98A62FD52667DDB99CBFD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 12:45:18 +0000 Certificate not after: Mon 07 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 401388 IP: 167.253.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:98:a6:2f:d5:26:67:dd:b9:9c:bf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 5 12:45:18 2026 GMT Not After : Aug 7 12:45:18 2028 GMT Subject: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:54:eb:2a:66:eb:8e:06:55:ae:c3:3b:ab: 1b:3d:26:86:eb:9d:67:79:70:85:be:c4:87:67:02: 3d:fb:ca:13:9a:d2:fb:aa:80:ca:74:c0:81:ba:c2: 1d:db:8d:fb:52:70:b2:8f:40:cf:10:a6:91:bd:3e: 63:d5:8b:1c:db:79:12:80:8f:61:56:f7:2b:a3:90: 03:48:30:2d:48:7b:0e:39:dc:81:0d:1d:0e:a9:eb: 7f:94:e1:d8:ad:70:93:e5:a9:7d:fc:08:9f:8a:7a: 06:6d:43:cf:3a:c9:10:03:aa:5e:37:77:e1:82:b4: bd:30:b3:03:c4:1f:f9:15:7d:5a:4a:73:57:f0:7b: 60:7d:7a:7e:9d:5f:59:ca:5a:a9:73:c7:1b:d6:90: 36:45:49:d7:8c:51:5b:6a:ca:b4:64:cd:42:3a:1f: 4f:23:8d:48:0e:16:00:87:fb:93:f6:c5:a4:0c:6a: 2b:26:a5:f9:c6:59:3a:4e:c4:e4:92:42:a1:51:1f: fa:9c:68:8f:aa:7f:a2:2b:9b:4a:4e:d6:58:99:8c: 7e:39:01:9a:ac:57:c8:98:6a:0a:ad:28:e4:be:57: 7c:95:ab:1a:fb:9c:12:77:4a:ff:14:f9:34:1f:a9: c8:dc:78:cd:ea:27:9f:bf:34:db:8a:b8:25:2b:67: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 167.253.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401388 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0a:dc:f5:b2:00:67:7f:ae:35:ab:da:39:d9:ae:a6:2f:89: e7:10:c6:ab:43:a5:1d:4a:d2:63:f5:e5:2a:a8:62:13:1c:a8: 26:c4:d5:b6:6e:cf:c2:90:16:73:6d:d0:03:f1:cc:e5:a5:81: a9:5a:d3:7b:ab:61:b1:27:be:e1:cb:63:d3:3f:ee:91:f8:bf: c8:f5:69:0a:da:a8:81:87:51:bd:e3:b8:36:d2:1f:d2:73:1e: d8:21:6c:e6:b8:9d:a7:e4:ae:20:de:27:89:b1:ab:91:12:cc: 88:2a:d8:11:cd:c9:fd:83:a5:25:9c:0c:c0:b1:49:19:fb:59: ca:06:f1:c7:c2:70:dc:ee:55:ae:99:28:d1:b7:f0:d8:d1:1f: 30:b2:c5:fa:8e:41:c6:02:62:2e:75:49:bf:0a:ef:82:74:d5: b8:a2:b9:70:f9:c6:47:4a:1b:1d:f4:91:0f:da:d3:91:23:c2: fe:3f:df:0f:d4:84:42:38:97:46:06:d6:46:0b:0f:4e:b3:02: ab:d4:34:10:d7:51:38:b0:5b:69:bf:27:f0:85:b5:fe:32:18: e4:6b:02:aa:bf:9d:db:f3:f4:ec:1b:12:9d:3b:c7:29:80:3d: 30:89:5e:6a:ff:2a:46:28:f7:72:99:65:ac:10:e6:1c:f7:6a: 13:a2:8a:cb -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE27mKYv1SZn3bmcv9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwNTEyNDUxOFoXDTI4MDgwNzEyNDUxOFowLzEtMCsGA1UEAxMk N2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFhM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOJU6ypm644GVa7DO6sbPSaG651neXCFvsSH ZwI9+8oTmtL7qoDKdMCBusId2437UnCyj0DPEKaRvT5j1Ysc23kSgI9hVvcro5AD SDAtSHsOOdyBDR0Oqet/lOHYrXCT5al9/AifinoGbUPPOskQA6peN3fhgrS9MLMD xB/5FX1aSnNX8HtgfXp+nV9Zylqpc8cb1pA2RUnXjFFbasq0ZM1COh9PI41IDhYA h/uT9sWkDGorJqX5xlk6TsTkkkKhUR/6nGiPqn+iK5tKTtZYmYx+OQGarFfImGoK rSjkvld8lasa+5wSd0r/FPk0H6nI3HjN6iefvzTbirglK2dlSwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFK8Jy9VKPSBNFX5TBRAgfyFIv5RaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdlZTY3MGYzLTg0ZDYtNGE3Ny04 NmMyLThjNmJjNmJhYTNiMi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZi YWEzYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/XQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh/sMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHIK3PWyAGd/rjWr2jnZrqYviecQxqtDpR1K0mP15SqoYhMc qCbE1bZuz8KQFnNt0APxzOWlgala03urYbEnvuHLY9M/7pH4v8j1aQraqIGHUb3j uDbSH9JzHtghbOa4nafkriDeJ4mxq5ESzIgq2BHNyf2DpSWcDMCxSRn7WcoG8cfC cNzuVa6ZKNG38NjRHzCyxfqOQcYCYi51Sb8K74J01biiuXD5xkdKGx30kQ/a05Ej wv4/3w/UhEI4l0YG1kYLD06zAqvUNBDXUTiwW2m/J/CFtf4yGORrAqq/ndvz9Owb Ep07xymAPTCJXmr/KkYo93KZZawQ5hz3ahOiiss= -----END CERTIFICATE-----Generated at Wed May 13 00:19:08 2026 by rpki-client