$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9.cer File: b89079f3-1ef5-4439-acbe-c02752ca44c9.cer (raw, json) Hash identifier: 2VLZ7N3t3lJ8E1XdflgCCrO8+bgpv3dlfBs+n11sFY0= Subject key identifier: 1A:07:61:0C:E5:F6:B4:F3:A9:D6:1A:DC:97:52:B9:FC:EB:D1:34:53 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DCAF3677BE1C7C7D5BC7C2E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/b89079f3-1ef5-4439-acbe-c02752ca44c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 00:45:17 +0000 Certificate not after: Sun 13 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 394583 AS: 397433 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:f3:67:7b:e1:c7:c7:d5:bc:7c:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 11 00:45:17 2026 GMT Not After : Aug 13 00:45:17 2028 GMT Subject: CN=b89079f3-1ef5-4439-acbe-c02752ca44c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:8f:d1:da:86:70:14:c1:fa:7a:25:bd:48: 8c:8b:c2:75:ee:df:75:36:7e:e4:1e:85:d1:36:35: 04:77:8f:6c:f2:a9:45:45:a2:8e:ce:c7:a1:4f:a3: c1:6e:84:8a:20:0c:95:4f:1c:98:f1:2b:51:16:7e: 0b:5a:7d:2a:15:51:6f:75:cc:d4:eb:87:d8:6a:2a: 20:25:4b:8d:d4:fa:eb:c9:81:f5:21:44:18:4f:78: e5:15:d4:d8:f9:28:cf:69:db:47:6b:61:d8:3f:38: c4:e2:ef:93:4d:74:10:ec:3a:dd:a1:ce:25:6a:aa: 0f:69:6e:db:0b:a0:1f:1a:36:80:2a:3e:3a:a3:dc: 1e:c9:c9:19:40:0d:0d:f6:7a:83:2b:77:d6:94:e3: ca:47:26:ec:bd:7f:3f:f5:5c:d7:2d:eb:93:fe:ec: bc:dc:84:72:ea:82:47:f2:cf:20:62:93:6d:f4:4f: a5:52:d3:21:c6:74:0b:14:97:6d:38:ab:a9:46:b9: 69:34:a8:80:a1:11:3d:16:05:79:f3:66:01:c1:91: bd:ab:e6:c0:fd:1a:22:6d:80:a4:29:2f:87:b3:ac: 40:d8:cb:b5:e4:e1:f2:25:52:d9:56:3c:b2:4d:01: 3e:8e:b1:ee:2b:e0:49:01:97:11:e1:00:6b:8d:0b: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:07:61:0C:E5:F6:B4:F3:A9:D6:1A:DC:97:52:B9:FC:EB:D1:34:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/b89079f3-1ef5-4439-acbe-c02752ca44c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 394583 397433 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:24:b8:08:3c:d7:11:59:53:12:e2:9b:1d:2b:a0:40:fe:7d: 64:2d:94:1f:9f:26:71:d6:39:77:79:81:b1:4e:ae:30:3d:38: 67:cb:26:44:38:fc:67:72:94:ba:bc:e0:96:52:7f:17:9a:1e: 28:3d:34:19:b0:ae:d9:ac:44:c1:7c:55:5d:c0:94:ac:bb:42: ef:59:8f:1a:48:ab:02:c1:91:db:e2:8a:46:79:f7:d6:4f:f3: 2a:ec:99:70:63:56:c2:c7:6e:3a:f8:27:48:0f:cb:11:05:c3: 79:8b:90:7b:0a:be:5b:ea:00:dd:f2:31:90:59:31:d4:3c:9b: 25:7c:d2:69:57:cd:12:d7:77:d9:d7:cb:80:97:c1:23:29:1d: 6f:74:93:36:2c:42:2c:a8:a7:c4:d1:f1:36:69:44:c4:9c:63: 70:01:5d:16:1d:bb:2f:58:8a:82:0d:fc:1e:e1:ae:d9:fe:62: 31:51:42:8e:0e:b4:b7:cf:ed:11:9f:7f:05:6f:d0:a0:81:e9: 98:29:e1:ad:84:54:b6:da:77:e3:34:a1:be:d7:77:bd:50:79: ef:ba:6e:40:46:23:91:96:8b:da:85:c4:c6:31:2d:87:94:a4: f8:5c:d0:fa:11:b4:f9:df:d2:b9:4f:22:4e:89:a7:73:cc:f2: 96:76:d3:25 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3K82d74cfH1bx8LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxMTAwNDUxN1oXDTI4MDgxMzAwNDUxN1owLzEtMCsGA1UEAxMk Yjg5MDc5ZjMtMWVmNS00NDM5LWFjYmUtYzAyNzUyY2E0NGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZOP0dqGcBTB+nolvUiMi8J17t91Nn7kHoXR NjUEd49s8qlFRaKOzsehT6PBboSKIAyVTxyY8StRFn4LWn0qFVFvdczU64fYaiog JUuN1PrryYH1IUQYT3jlFdTY+SjPadtHa2HYPzjE4u+TTXQQ7Drdoc4laqoPaW7b C6AfGjaAKj46o9weyckZQA0N9nqDK3fWlOPKRybsvX8/9VzXLeuT/uy83IRy6oJH 8s8gYpNt9E+lUtMhxnQLFJdtOKupRrlpNKiAoRE9FgV582YBwZG9q+bA/RoibYCk KS+Hs6xA2Mu15OHyJVLZVjyyTQE+jrHuK+BJAZcR4QBrjQuvswIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBoHYQzl9rTzqdYa3JdSufzr0TRTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i ODkwNzlmMy0xZWY1LTQ0MzktYWNiZS1jMDI3NTJjYTQ0YzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I4OTA3OWYzLTFlZjUtNDQzOS1h Y2JlLWMwMjc1MmNhNDRjOS9iODkwNzlmMy0xZWY1LTQ0MzktYWNiZS1jMDI3NTJj YTQ0YzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDBgVXAgMGEHkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAciS4CDzXEVlTEuKbHSug QP59ZC2UH58mcdY5d3mBsU6uMD04Z8smRDj8Z3KUurzgllJ/F5oeKD00GbCu2axE wXxVXcCUrLtC71mPGkirAsGR2+KKRnn31k/zKuyZcGNWwsduOvgnSA/LEQXDeYuQ ewq+W+oA3fIxkFkx1DybJXzSaVfNEtd32dfLgJfBIykdb3STNixCLKinxNHxNmlE xJxjcAFdFh27L1iKgg38HuGu2f5iMVFCjg60t8/tEZ9/BW/QoIHpmCnhrYRUttp3 4zShvtd3vVB577puQEYjkZaL2oXExjEth5Sk+FzQ+hG0+d/SuU8iTomnc8zylnbT JQ== -----END CERTIFICATE-----Generated at Wed May 13 01:30:20 2026 by rpki-client