$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer File: 89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer (raw, json) Hash identifier: rfYeLqz6zHyDUDx5dK/Ruht+sC9dvFIb3q16zGWy2Iw= Subject key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DBA334DF25AD1B9B697459080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 00:45:18 +0000 Certificate not after: Mon 07 Aug 2028 00:45:18 +0000 Subordinate resources: AS: 14237 IP: 216.152.248.0/21 IP: 2606:e580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:33:4d:f2:5a:d1:b9:b6:97:45:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 5 00:45:18 2026 GMT Not After : Aug 7 00:45:18 2028 GMT Subject: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:50:99:3d:80:47:a1:c1:4e:1d:30:f8:d2: 51:ff:7c:6f:3f:6b:26:3e:69:fe:8e:7a:29:e0:09: 70:90:f8:e9:10:7f:8e:12:62:a2:b1:6c:eb:a3:1c: 79:78:91:a5:59:dc:e7:7f:e5:06:d5:7a:d4:52:b1: e3:c2:ae:2d:6b:2d:78:76:13:bd:ff:bc:e1:0d:e3: 65:1b:e4:eb:38:76:5c:76:79:f9:82:84:74:0d:3f: 2a:2d:59:39:55:cc:0c:db:bf:35:dc:8c:a3:c5:3c: fb:a3:34:a5:cc:4e:dc:b4:11:ec:65:23:a7:4e:b7: 19:9d:78:80:bc:be:3a:d9:8a:db:26:f1:fe:d7:58: cf:59:53:1f:21:6d:c7:fb:09:7b:cc:df:b9:08:b2: 95:38:28:61:6c:6d:49:93:ce:44:48:65:30:0a:b4: b7:a6:ae:9b:5b:7e:0f:e0:5a:b5:6e:cc:bb:33:d8: 83:94:87:08:80:4d:58:07:f6:c7:d3:78:63:8a:6e: 4e:e0:9d:6c:92:09:88:95:c7:f3:e0:c5:4f:7c:48: c1:3e:e7:e7:d9:16:08:68:c2:01:5b:58:58:bb:dd: 44:e2:9f:d4:f2:81:4c:86:52:78:f3:84:ab:da:da: f9:f3:8d:ea:e1:39:8c:8e:9d:cf:cb:7e:7b:be:8d: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 216.152.248.0/21 IPv6: 2606:e580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14237 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:93:54:11:d0:b5:05:d1:1f:46:07:f5:5f:27:85:eb:a5:d2: 1e:1a:bd:62:84:13:f8:e9:b7:5f:0b:3b:17:86:a1:e1:3e:0a: ab:98:48:70:6e:ce:ae:16:7a:64:05:5d:03:2d:f9:5e:22:55: f1:6a:ce:e9:48:05:a9:5c:ce:ba:c7:c4:54:0a:d3:5d:39:d1: 34:33:76:29:91:0d:c6:52:b5:13:6b:ca:2a:20:27:be:da:09: ee:1f:8c:e0:5c:0f:5d:5c:ea:d0:32:8d:3d:89:2c:aa:b7:7a: 01:11:63:86:ce:41:82:94:83:14:cd:ee:f1:79:24:76:60:1f: 47:64:33:40:b2:c1:07:7b:2a:a3:b5:8c:c3:00:c6:43:f0:db: a4:b3:13:45:07:78:bf:e2:40:ac:3f:ac:c6:7b:69:ce:c4:40: 4a:6b:fa:bf:8c:69:a4:e4:e1:fc:eb:54:ff:df:eb:d4:fc:2f: 83:4f:29:46:01:97:d0:20:b6:b7:4a:ae:91:08:c5:20:01:51: ec:21:8e:7e:11:f9:63:c3:cb:9a:de:b2:32:a2:51:a9:bb:26: 9f:ab:83:47:d2:1b:a5:8b:fc:f1:f1:09:4e:4a:43:f5:96:4a: 04:b5:14:42:c2:97:d3:28:a0:84:8d:6b:30:64:1c:f6:94:9e: 01:c9:aa:ac -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE26M03yWtG5tpdFkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwNTAwNDUxOFoXDTI4MDgwNzAwNDUxOFowLzEtMCsGA1UEAxMk ODliZTJlZmEtM2MyZi00NmQyLWI1ZTctY2I4ZDk1MzY5MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbdQmT2AR6HBTh0w+NJR/3xvP2smPmn+jnop 4AlwkPjpEH+OEmKisWzroxx5eJGlWdznf+UG1XrUUrHjwq4tay14dhO9/7zhDeNl G+TrOHZcdnn5goR0DT8qLVk5VcwM27813IyjxTz7ozSlzE7ctBHsZSOnTrcZnXiA vL462YrbJvH+11jPWVMfIW3H+wl7zN+5CLKVOChhbG1Jk85ESGUwCrS3pq6bW34P 4Fq1bsy7M9iDlIcIgE1YB/bH03hjim5O4J1skgmIlcfz4MVPfEjBPufn2RYIaMIB W1hYu91E4p/U8oFMhlJ484Sr2tr5843q4TmMjp3Py357vo1mLQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFCuuUnnCEE5nBRk8BUy4J+4cpZWrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUzNjkwNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg5YmUyZWZhLTNjMmYtNDZkMi1i NWU3LWNiOGQ5NTM2OTA2My84OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUz NjkwNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPYmPgwDQQCAAIwBwMFACYG5YAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICN50wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKpNUEdC1BdEfRgf1XyeF66XSHhq9 YoQT+Om3Xws7F4ah4T4Kq5hIcG7OrhZ6ZAVdAy35XiJV8WrO6UgFqVzOusfEVArT XTnRNDN2KZENxlK1E2vKKiAnvtoJ7h+M4FwPXVzq0DKNPYksqrd6ARFjhs5BgpSD FM3u8XkkdmAfR2QzQLLBB3sqo7WMwwDGQ/DbpLMTRQd4v+JArD+sxntpzsRASmv6 v4xppOTh/OtU/9/r1Pwvg08pRgGX0CC2t0qukQjFIAFR7CGOfhH5Y8PLmt6yMqJR qbsmn6uDR9IbpYv88fEJTkpD9ZZKBLUUQsKX0yighI1rMGQc9pSeAcmqrA== -----END CERTIFICATE-----Generated at Tue May 12 22:09:13 2026 by rpki-client