$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer File: de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer (raw, json) Hash identifier: 0sLBJ2UXDTNi8wRUXtG21M7nf5zYcp0DFzF3KLPiAXY= Subject key identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DBA334DE7811FEAF6D4917838 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 00:45:18 +0000 Certificate not after: Mon 07 Aug 2028 00:45:18 +0000 Subordinate resources: AS: 13864 IP: 199.180.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:33:4d:e7:81:1f:ea:f6:d4:91:78:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 5 00:45:18 2026 GMT Not After : Aug 7 00:45:18 2028 GMT Subject: CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:95:9c:6e:c4:3b:ed:7c:f1:b4:bc:11:2e: d1:ad:53:4f:d4:ca:54:bc:af:ee:6e:17:d0:b4:e0: b1:a9:1a:e6:db:f1:b1:d3:91:a5:76:21:e1:c5:21: a4:5d:af:d0:66:05:69:c7:d0:9c:db:50:a4:ae:38: bc:ad:fc:15:99:4f:13:99:2e:05:6b:3e:c9:ba:1f: 16:f5:82:42:38:9d:0a:bc:bc:17:3c:94:61:89:10: 68:3a:ae:52:c3:61:dc:8e:91:1e:bb:81:38:1d:7e: 0f:23:cb:59:5e:e4:e7:61:3b:5d:73:38:dd:30:be: b2:a1:bc:8f:b7:90:e1:c8:f4:54:be:3d:e5:80:73: a2:0f:de:09:a5:a3:8c:bc:24:45:0d:8d:bd:91:cf: d5:63:9a:03:ec:49:e0:75:b3:78:52:d8:31:0f:19: 41:94:6e:7d:a2:1a:5d:93:16:23:0a:31:cc:34:40: ad:00:ec:59:ee:78:5a:60:7b:5c:1a:09:74:1b:49: e4:7d:eb:85:38:6b:b1:de:71:8d:cd:39:4c:34:5d: bd:5c:da:d1:fa:d5:59:b0:5d:5d:8c:8c:ac:0d:e6: 00:1c:15:6f:47:40:05:6e:c6:6c:3b:23:55:f4:5c: cf:e0:c3:0e:64:60:67:a7:05:99:bc:51:c1:75:45: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.180.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13864 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ae:86:dc:f2:6c:ff:87:76:f2:6c:63:0c:fd:88:b3:44:2f: 55:bc:6b:27:22:21:2b:c9:0a:93:8b:e7:55:46:c6:16:e8:6d: 18:64:b0:9d:84:d0:35:41:c1:dc:72:35:0e:cc:36:a6:98:80: d1:c7:b8:1d:b8:ba:9b:4a:19:c6:4c:0d:98:f6:0a:97:cf:35: 46:b8:72:a0:d8:0b:67:57:59:53:b4:79:55:9f:8e:01:8e:f5: 8e:82:a0:88:ef:ec:85:ec:86:0c:29:43:99:fe:7e:96:29:ff: 30:d1:16:95:fd:aa:21:29:45:a0:81:dd:f7:2e:c6:80:aa:56: c1:90:1e:19:dc:85:ae:dd:65:af:7b:82:0f:07:4b:88:dd:e6: c2:56:a4:86:5d:30:25:e5:ec:94:3d:11:4b:47:07:ae:d5:ec: 86:a9:6f:83:f8:54:71:cb:09:60:50:e2:93:a9:9c:9d:bb:c2: b6:22:fe:61:08:97:c2:26:0d:8e:75:e3:f7:8d:0e:df:54:48: f5:71:ee:0b:7d:13:2f:ba:f8:bc:47:35:4c:a1:b8:f4:5e:f4: 1d:62:46:10:cf:dd:29:fe:e5:2f:61:e8:d8:19:f2:90:df:5c: 51:65:97:7e:e2:98:70:ce:d9:86:10:18:60:c7:0f:04:2d:57: 65:67:47:b3 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE26M03ngR/q9tSReDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUwNTAwNDUxOFoXDTI4MDgwNzAwNDUxOFowLzEtMCsGA1UEAxMk ZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4MzQtNTc0ZTliYjJlODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPGVnG7EO+188bS8ES7RrVNP1MpUvK/ubhfQ tOCxqRrm2/Gx05GldiHhxSGkXa/QZgVpx9Cc21Ckrji8rfwVmU8TmS4Faz7Juh8W 9YJCOJ0KvLwXPJRhiRBoOq5Sw2HcjpEeu4E4HX4PI8tZXuTnYTtdczjdML6yobyP t5DhyPRUvj3lgHOiD94JpaOMvCRFDY29kc/VY5oD7EngdbN4UtgxDxlBlG59ohpd kxYjCjHMNECtAOxZ7nhaYHtcGgl0G0nkfeuFOGux3nGNzTlMNF29XNrR+tVZsF1d jIysDeYAHBVvR0AFbsZsOyNV9FzP4MMOZGBnpwWZvFHBdUWfbQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHtvJgqRMce8pQKBCsDavahvRFGyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k ZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJiMmU4MmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2RlMWJjODBmLTVkNTctNGI5Ni04 ODM0LTU3NGU5YmIyZTgyZC9kZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJi MmU4MmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHtDQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NigwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAPa6G3PJs/4d28mxjDP2Is0QvVbxrJyIhK8kKk4vnVUbGFuht GGSwnYTQNUHB3HI1Dsw2ppiA0ce4Hbi6m0oZxkwNmPYKl881RrhyoNgLZ1dZU7R5 VZ+OAY71joKgiO/sheyGDClDmf5+lin/MNEWlf2qISlFoIHd9y7GgKpWwZAeGdyF rt1lr3uCDwdLiN3mwlakhl0wJeXslD0RS0cHrtXshqlvg/hUccsJYFDik6mcnbvC tiL+YQiXwiYNjnXj940O31RI9XHuC30TL7r4vEc1TKG49F70HWJGEM/dKf7lL2Ho 2BnykN9cUWWXfuKYcM7ZhhAYYMcPBC1XZWdHsw== -----END CERTIFICATE-----Generated at Tue May 12 22:30:59 2026 by rpki-client