$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer File: c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer (raw, json) Hash identifier: NTI8Xvl1GvoOuNSHgNFADjYQWrX7iYcjk84NzYpRIRk= Subject key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F55FB26812E5F41AA27A19180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Sep 2026 12:45:12 +0000 Certificate not after: Mon 01 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 23.151.40.0/24 IP: 199.188.196.0/22 IP: 2602:2c6::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:55:fb:26:81:2e:5f:41:aa:27:a1:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 29 12:45:12 2026 GMT Not After : Jan 1 13:45:12 2029 GMT Subject: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:15:52:9a:00:b5:4c:4b:b0:28:fa:07:c3: c0:20:79:3c:bf:ea:d9:f8:c3:bd:03:75:33:38:36: 18:77:6e:4e:ce:0b:3a:2c:d0:88:26:59:d0:69:1a: 0b:4f:2a:2a:a3:46:b1:15:68:e5:de:0f:5f:83:ca: 2b:7e:da:5f:dd:d3:07:89:89:8b:b9:82:61:af:7a: f9:00:d2:a4:5d:43:31:39:a6:fb:72:68:dc:34:a3: e9:b6:cc:79:16:79:5e:7e:76:c1:85:0a:ba:a8:fd: 30:9a:3b:e7:eb:f4:a7:5c:88:e2:e6:b5:75:78:7a: c8:1e:62:2e:2f:f3:34:03:cf:86:e7:6e:f8:65:fa: fc:9b:9f:b5:cf:7f:d4:e8:ad:6e:dd:bd:70:d1:70: 53:7c:3d:04:9c:fc:56:32:09:86:3f:2a:b0:cd:6e: 43:da:07:64:2b:fc:4d:95:ee:12:b6:54:4e:50:b4: 99:c2:c0:fc:a7:36:d9:20:ee:01:ce:c9:8d:0e:45: be:f9:a2:53:53:c3:d5:f2:b0:a7:0d:1b:e2:f9:cf: 45:23:eb:a8:70:74:89:61:30:3e:a4:61:60:39:93: 97:2d:8a:ba:64:81:66:48:cc:59:4c:67:b8:48:87: e6:40:ee:7c:ca:fd:d1:53:a4:95:88:f7:46:18:f5: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.151.40.0/24 199.188.196.0/22 IPv6: 2602:2c6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:19:a2:5c:9a:d7:77:87:79:4e:d5:eb:ba:f0:1a:76:56:f7: 86:5e:55:61:b0:28:5c:d9:31:f4:ef:e0:dc:29:e2:64:f8:72: f8:52:0c:f8:43:46:60:b4:f0:29:bd:21:27:3a:45:9b:c0:45: 15:30:0e:e8:98:68:fc:6e:1a:0e:20:c6:5e:0c:3a:eb:cf:64: 01:52:ea:61:5e:b4:6a:fe:12:df:01:86:e7:ba:50:a2:ec:ce: 92:33:ed:b0:fe:c3:ce:05:da:4c:b2:b0:50:8c:45:0f:0e:66: 6b:7c:0c:ed:0f:ac:fd:0a:63:b0:b3:b7:8c:63:ad:10:f6:15: d2:3a:bd:58:23:ce:42:2c:9e:5f:33:f8:55:1c:76:34:8b:8f: 3d:30:f1:16:20:a9:e6:a4:dc:38:6d:42:21:ce:c7:da:bf:db: be:b3:ef:8d:32:fa:80:ac:32:a1:3d:da:7b:1b:61:b5:36:1f: d6:cf:89:4d:38:b0:d3:84:57:1c:23:37:36:88:be:5c:30:83: 42:be:98:4e:66:58:e7:6f:90:78:2f:f5:24:7a:20:74:f7:95: 0c:17:0e:55:58:9a:f7:91:c1:aa:cd:45:96:41:bf:d5:44:fb: 6f:c1:89:a7:95:0b:b1:ad:ac:f7:94:ad:40:09:09:7e:d8:53: 27:69:5d:6d -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE9V+yaBLl9BqiehkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkyOTEyNDUxMloXDTI5MDEwMTEzNDUxMlowLzEtMCsGA1UEAxMk YzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFiYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZUVUpoAtUxLsCj6B8PAIHk8v+rZ+MO9A3Uz ODYYd25Ozgs6LNCIJlnQaRoLTyoqo0axFWjl3g9fg8orftpf3dMHiYmLuYJhr3r5 ANKkXUMxOab7cmjcNKPptsx5FnlefnbBhQq6qP0wmjvn6/SnXIji5rV1eHrIHmIu L/M0A8+G5274Zfr8m5+1z3/U6K1u3b1w0XBTfD0EnPxWMgmGPyqwzW5D2gdkK/xN le4StlROULSZwsD8pzbZIO4BzsmNDkW++aJTU8PV8rCnDRvi+c9FI+uocHSJYTA+ pGFgOZOXLYq6ZIFmSMxZTGe4SIfmQO58yv3RU6SViPdGGPWs2QIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFCUsZdErK+WmgEU4mOBrZ9v1Cu44MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j NDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M0NjY4MTQ3LWE3MWItNGZiMy05 ZWQ5LWUxZTA0MDYxYmJkZC9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2 MWJiZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlygDBALHvMQwDgQCAAIwCAMGBCYCAsYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8Zolya13eHeU7V67rwGnZW94ZeVWGwKFzZMfTv4Nwp4mT4cvhSDPhD RmC08Cm9ISc6RZvARRUwDuiYaPxuGg4gxl4MOuvPZAFS6mFetGr+Et8Bhue6UKLs zpIz7bD+w84F2kyysFCMRQ8OZmt8DO0PrP0KY7Czt4xjrRD2FdI6vVgjzkIsnl8z +FUcdjSLjz0w8RYgqeak3DhtQiHOx9q/276z740y+oCsMqE92nsbYbU2H9bPiU04 sNOEVxwjNzaIvlwwg0K+mE5mWOdvkHgv9SR6IHT3lQwXDlVYmveRwarNRZZBv9VE +2/BiaeVC7GtrPeUrUAJCX7YUydpXW0= -----END CERTIFICATE-----Generated at Sun Oct 18 06:04:57 2026 by rpki-client