$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0.cer File: 89a9da60-7fcc-4f46-92c6-c30382b880a0.cer (raw, json) Hash identifier: 6TGASbJNf6wQ1vCdpKkWGyQYP1NCtRtbyPoFD5xPytI= Subject key identifier: 66:D8:CD:9E:75:37:F8:2D:1E:84:97:C8:B6:60:09:AB:8C:26:0A:A3 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D83A8FBD58435F9BD059A2E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/89a9da60-7fcc-4f46-92c6-c30382b880a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Apr 2026 11:52:57 +0000 Certificate not after: Tue 18 Jul 2028 11:52:57 +0000 Subordinate resources: AS: 402402 IP: 23.156.116.0/24 IP: 2602:f3f6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:a8:fb:d5:84:35:f9:bd:05:9a:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 15 11:52:57 2026 GMT Not After : Jul 18 11:52:57 2028 GMT Subject: CN=89a9da60-7fcc-4f46-92c6-c30382b880a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:e6:50:19:66:6b:7d:b4:aa:30:e4:1d:c9: 39:94:f2:74:83:55:7f:0c:bd:68:81:7a:a4:55:f9: 0d:4c:fd:19:43:34:e6:5b:8b:ff:09:5a:c0:c6:5c: 81:da:e2:22:02:18:c6:9b:50:b0:81:2d:92:d1:26: ed:33:32:bc:ba:00:87:e9:74:fb:c1:dc:83:38:30: 5c:dc:1d:b4:30:6f:77:a2:e4:09:3e:e5:36:75:ed: fc:35:4b:42:1a:cb:b5:2f:0f:4e:48:be:a4:b7:9a: f9:0c:d0:a8:9c:10:4a:d8:d5:c7:bc:ce:a0:03:e1: ef:71:4a:9b:49:99:d8:23:d3:a7:e9:89:2d:bc:bc: 9e:3b:dc:23:7f:5e:86:b7:ac:28:0f:cc:d0:34:04: b7:f5:a0:8e:02:9a:0b:a2:d2:4b:73:01:d1:26:cb: 50:bd:ee:34:3d:58:f2:16:16:38:ae:aa:ae:01:2d: f5:7d:bb:2a:74:43:bd:47:06:2d:40:52:32:b0:df: f3:4e:8e:ce:0d:26:1c:46:00:06:db:11:eb:92:e9: 52:30:e8:15:5d:c4:16:e9:9a:73:b3:01:fa:d2:3c: 59:f7:ed:d9:ab:24:36:62:03:35:44:2a:10:48:3e: 05:22:b8:45:e3:b4:a2:65:26:7e:c5:8c:14:23:d8: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D8:CD:9E:75:37:F8:2D:1E:84:97:C8:B6:60:09:AB:8C:26:0A:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/89a9da60-7fcc-4f46-92c6-c30382b880a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.156.116.0/24 IPv6: 2602:f3f6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c1:f5:3c:d5:02:7d:66:8f:55:f4:74:b8:75:0e:a2:d5:4d: 88:05:2f:87:ca:6c:9e:14:c4:da:c2:5d:1c:96:16:c2:26:1a: b9:69:7c:07:71:fc:c3:75:97:3e:bd:41:05:bf:29:d8:ca:5a: 50:b5:cb:b9:aa:91:64:9b:5d:13:cf:b4:8e:8b:62:33:2c:aa: 88:4a:9d:ee:fe:0b:f8:c1:fd:d9:57:24:ba:c9:15:1a:57:c2: d8:65:16:9c:ee:09:97:af:2c:3f:0b:0f:6e:af:fa:ce:3a:ab: 22:a6:9b:75:bd:86:ea:c5:02:13:8b:98:0e:b5:98:3c:66:71: 61:e7:fe:49:f6:41:48:81:a2:5e:f2:84:7e:dd:e1:9b:ca:08: 15:06:f8:28:db:d6:cb:a8:5c:ac:00:3b:23:40:ef:e3:05:27: 85:7b:12:a3:82:93:5d:10:09:f4:39:4e:de:df:fd:6e:73:10: 8e:98:b9:00:70:b9:ae:31:ff:58:63:1d:30:a7:43:3a:c2:27: d3:27:24:10:ed:86:3e:37:93:31:39:11:30:be:a2:29:fa:e4: a6:fa:1c:fe:97:8c:f3:43:45:6b:36:91:82:ce:9e:73:db:eb: 6e:29:d1:88:2a:2b:61:8a:de:a3:02:8a:a1:3b:61:98:f3:a3: bb:d6:70:28 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2DqPvVhDX5vQWaLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxNTExNTI1N1oXDTI4MDcxODExNTI1N1owLzEtMCsGA1UEAxMk ODlhOWRhNjAtN2ZjYy00ZjQ2LTkyYzYtYzMwMzgyYjg4MGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2/mUBlma320qjDkHck5lPJ0g1V/DL1ogXqk VfkNTP0ZQzTmW4v/CVrAxlyB2uIiAhjGm1CwgS2S0SbtMzK8ugCH6XT7wdyDODBc 3B20MG93ouQJPuU2de38NUtCGsu1Lw9OSL6kt5r5DNConBBK2NXHvM6gA+HvcUqb SZnYI9On6YktvLyeO9wjf16Gt6woD8zQNAS39aCOApoLotJLcwHRJstQve40PVjy FhY4rqquAS31fbsqdEO9RwYtQFIysN/zTo7ODSYcRgAG2xHrkulSMOgVXcQW6Zpz swH60jxZ9+3ZqyQ2YgM1RCoQSD4FIrhF47SiZSZ+xYwUI9h58wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGbYzZ51N/gtHoSXyLZgCauMJgqjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 OWE5ZGE2MC03ZmNjLTRmNDYtOTJjNi1jMzAzODJiODgwYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzg5YTlkYTYwLTdmY2MtNGY0Ni05 MmM2LWMzMDM4MmI4ODBhMC84OWE5ZGE2MC03ZmNjLTRmNDYtOTJjNi1jMzAzODJi ODgwYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnHQwDgQCAAIwCAMGACYC8/YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYj4jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5wfU81QJ9Zo9V9HS4dQ6i1U2I BS+HymyeFMTawl0clhbCJhq5aXwHcfzDdZc+vUEFvynYylpQtcu5qpFkm10Tz7SO i2IzLKqISp3u/gv4wf3ZVyS6yRUaV8LYZRac7gmXryw/Cw9ur/rOOqsippt1vYbq xQITi5gOtZg8ZnFh5/5J9kFIgaJe8oR+3eGbyggVBvgo29bLqFysADsjQO/jBSeF exKjgpNdEAn0OU7e3/1ucxCOmLkAcLmuMf9YYx0wp0M6wifTJyQQ7YY+N5MxOREw vqIp+uSm+hz+l4zzQ0VrNpGCzp5z2+tuKdGIKithit6jAoqhO2GY86O71nAo -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:21 2026 by rpki-client