$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer File: db131796-a27d-48da-80e5-76b8e7c0cbd3.cer (raw, json) Hash identifier: KcXS0D/agMv8+GMio6WfJ98lNfJQq1AmxYYJlzDx9R4= Subject key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584DBE6352E77CB8AF5823C3DF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 12:45:17 +0000 Certificate not after: Tue 08 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 2902 IP: 129.72.0.0/16 IP: 192.65.143.0/24 IP: 192.84.113.0/24 IP: 192.160.49.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:63:52:e7:7c:b8:af:58:23:c3:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 6 12:45:17 2026 GMT Not After : Aug 8 12:45:17 2028 GMT Subject: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:d5:f3:c0:5a:ff:5d:86:42:ed:93:5a:ff: ed:0f:46:e9:52:19:33:6a:b7:8c:b0:85:47:2a:10: ef:93:d6:20:a5:73:84:c3:62:d8:3e:5c:2b:40:cf: 09:e5:6f:18:ab:c8:10:f6:e9:77:3c:f7:66:bf:aa: 6c:ea:61:c1:81:a7:54:f7:6c:78:e0:64:f4:4b:5c: f2:16:b6:26:dd:ad:50:19:79:ea:17:66:0b:eb:59: 22:71:11:7f:8e:1f:73:6d:25:e5:17:47:81:1c:3f: 77:b7:c7:60:8f:d3:9e:32:da:6b:a6:6d:a8:36:e0: 4e:14:d7:f8:df:1a:26:c5:05:2a:8c:47:65:58:73: 1f:51:fe:df:d7:00:08:78:e6:21:c5:b2:a2:15:f8: bd:3e:e3:6e:68:56:be:82:b5:fb:60:06:0c:b4:dd: da:9a:d7:a6:fa:48:1b:55:56:68:e0:7c:73:8a:ba: 80:5b:88:5f:af:2d:9a:2d:28:00:e9:3b:31:5d:51: 64:9d:9e:93:84:20:67:67:6b:28:c9:19:82:99:3e: 37:db:ae:23:b5:d5:77:5c:ce:39:d0:3c:65:a2:37: 5d:b4:60:f6:cf:a4:6f:95:c1:d1:2a:1c:66:c1:05: 2d:77:c3:ae:9e:fb:62:12:14:bb:45:9b:c5:fe:78: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 129.72.0.0/16 192.65.143.0/24 192.84.113.0/24 192.160.49.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2902 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a7:b2:4c:2a:e8:06:e8:38:05:a7:e1:b5:82:6d:77:bd:f7: 8e:ad:e7:02:e0:09:93:29:c0:2e:ad:48:aa:07:70:fc:a0:bf: 4a:d8:20:d4:3b:09:21:4b:71:c9:99:a2:78:7e:bc:d9:49:80: 27:e8:69:b7:f3:99:0c:69:3d:94:6d:93:0a:ad:05:27:d5:a8: 44:45:dd:70:cd:7a:e3:5c:12:53:19:99:f5:d9:92:c0:ca:05: cb:a8:f8:a4:6f:c7:e5:ee:d9:bd:46:14:a4:be:f8:92:5b:57: d9:f4:80:c3:24:d9:ec:a2:97:96:d1:6b:6a:94:90:bd:1a:6d: 1e:83:ae:ae:ad:fc:ad:51:28:6c:4c:20:6a:f5:d8:db:a5:ac: e5:e1:35:8c:83:42:86:b1:a4:42:6d:5c:3c:6a:71:ed:58:9a: 1e:f8:9d:ae:55:76:62:1c:1e:2e:5a:e6:6f:01:ff:cd:36:85: e9:ee:0a:29:57:83:b1:21:07:49:be:15:a6:42:5b:ff:56:0d: eb:af:9a:f1:59:52:c5:f5:b9:24:6c:ba:fe:8a:00:7c:4c:1f: af:dc:6c:96:0f:b1:e8:a9:f0:db:68:6e:ec:b4:64:b6:1a:73: 4e:73:f8:fd:8a:20:d5:0b:c5:45:a5:b3:a7:bd:51:a9:a9:e8: 48:e4:90:8e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2+Y1LnfLivWCPD30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDUwNjEyNDUxN1oXDTI4MDgwODEyNDUxN1owLzEtMCsGA1UEAxMk ZGIxMzE3OTYtYTI3ZC00OGRhLTgwZTUtNzZiOGU3YzBjYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p7V88Ba/12GQu2TWv/tD0bpUhkzareMsIVH KhDvk9YgpXOEw2LYPlwrQM8J5W8Yq8gQ9ul3PPdmv6ps6mHBgadU92x44GT0S1zy FrYm3a1QGXnqF2YL61kicRF/jh9zbSXlF0eBHD93t8dgj9OeMtprpm2oNuBOFNf4 3xomxQUqjEdlWHMfUf7f1wAIeOYhxbKiFfi9PuNuaFa+grX7YAYMtN3amtem+kgb VVZo4HxzirqAW4hfry2aLSgA6TsxXVFknZ6ThCBnZ2soyRmCmT43264jtdV3XM45 0DxlojddtGD2z6RvlcHRKhxmwQUtd8OunvtiEhS7RZvF/ngtmwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLntyt6pB1KJVfar4BWInvdzEfaVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k YjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdjMGNiZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RiMTMxNzk2LWEyN2QtNDhkYS04 MGU1LTc2YjhlN2MwY2JkMy9kYjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdj MGNiZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCBSAMEAMBBjwMEAMBUcQMEAMCgMTAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgILVjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGp7JMKugG6DgFp+G1gm13vfeO recC4AmTKcAurUiqB3D8oL9K2CDUOwkhS3HJmaJ4frzZSYAn6Gm385kMaT2UbZMK rQUn1ahERd1wzXrjXBJTGZn12ZLAygXLqPikb8fl7tm9RhSkvviSW1fZ9IDDJNns opeW0WtqlJC9Gm0eg66urfytUShsTCBq9djbpazl4TWMg0KGsaRCbVw8anHtWJoe +J2uVXZiHB4uWuZvAf/NNoXp7gopV4OxIQdJvhWmQlv/Vg3rr5rxWVLF9bkkbLr+ igB8TB+v3GyWD7HoqfDbaG7stGS2GnNOc/j9iiDVC8VFpbOnvVGpqehI5JCO -----END CERTIFICATE-----Generated at Wed May 6 23:39:45 2026 by rpki-client