$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee.cer File: aa0e6fba-e370-45c9-9b11-9af9568150ee.cer (raw, json) Hash identifier: lQ5JqaDyH7Ln9bEdd06P7biNFkHzHeYNUYtZAol0L70= Subject key identifier: 05:8F:12:27:0F:96:D8:C6:F6:C2:1E:59:79:00:FF:79:58:71:15:32 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F2FA23FC597DFB5E31D9B6080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/aa0e6fba-e370-45c9-9b11-9af9568150ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Sep 2026 19:05:21 +0000 Certificate not after: Mon 18 Dec 2028 20:05:21 +0000 Subordinate resources: AS: 400804 IP: 23.143.180.0/24 IP: 2604:1ae0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:a2:3f:c5:97:df:b5:e3:1d:9b:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 15 19:05:21 2026 GMT Not After : Dec 18 20:05:21 2028 GMT Subject: CN=aa0e6fba-e370-45c9-9b11-9af9568150ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:d5:6a:cc:22:8e:53:dc:2c:9e:16:4e:af: 0a:42:37:e5:fc:2f:42:5e:56:db:cf:58:a6:60:dc: 18:24:e1:73:d9:a5:5c:52:74:ba:98:3f:20:f1:b4: 9e:de:f9:18:cc:c9:ad:1a:0f:70:c2:94:92:06:de: 07:e2:eb:10:00:0a:c4:9f:48:85:d8:0a:1a:6d:aa: c0:9a:99:1c:7a:2b:ac:fc:7b:0e:50:8d:80:e3:1f: 46:b5:6d:6f:7f:11:8a:c8:67:43:4d:59:fa:fd:87: 34:7d:f1:d8:17:f2:8b:b1:79:9d:96:e0:17:7e:d6: f3:31:ed:53:b6:cc:52:fa:01:62:20:bf:8c:a6:bb: d3:40:16:83:75:c3:36:b5:e8:b2:60:57:08:b3:19: a5:38:49:47:cd:bd:9e:50:a7:f0:ef:9a:33:64:fd: a7:0e:bb:b3:0c:92:e0:97:04:e0:bb:bc:16:44:98: d7:58:2a:dc:cd:38:5a:dc:db:7d:43:45:3b:eb:8e: d3:7f:3c:15:97:79:84:2e:57:4e:33:7d:f9:7d:aa: 90:b8:71:c9:14:d3:d6:7a:af:03:30:dc:42:9b:ed: 73:86:72:50:89:88:d4:c1:f7:75:ef:60:97:f1:55: 61:f1:c0:85:24:f4:eb:6b:08:15:fc:8d:5c:3e:08: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8F:12:27:0F:96:D8:C6:F6:C2:1E:59:79:00:FF:79:58:71:15:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/aa0e6fba-e370-45c9-9b11-9af9568150ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.143.180.0/24 IPv6: 2604:1ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400804 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7b:7a:16:c6:c0:37:62:75:4d:39:d2:b0:e2:65:23:fa:89: 08:67:19:4e:f6:24:7c:b3:1a:52:b6:45:ee:c2:d1:aa:6e:c6: f4:7e:52:40:e6:07:d4:e3:b4:2d:91:e5:50:95:0f:42:db:be: 43:13:d9:e4:07:3e:4b:d2:3c:8c:79:0d:89:fe:46:56:0d:c7: 10:04:c3:4c:5e:f5:3c:76:dd:3c:b8:27:da:d1:a2:6a:56:5b: f0:15:19:f6:99:8d:3f:e4:99:a7:88:27:de:41:b3:fb:7b:66: 44:af:5a:9a:d5:95:d0:d3:5f:8f:cf:51:c7:a6:89:1f:73:ae: 23:9f:2f:39:b3:c2:99:71:0f:a0:be:be:a4:8b:6a:29:8a:70: 9b:b1:f8:5c:78:94:b6:b8:7c:07:b8:a3:e8:d0:94:86:b6:88: 2e:fc:fa:60:71:6b:fd:50:93:2b:38:ec:e9:49:3a:67:7e:6f: 1c:82:8a:11:18:e8:dd:fd:3e:9e:af:1d:22:fb:ad:45:69:d9: ad:e6:81:60:10:ae:45:9c:83:73:e5:e4:1e:d6:38:e3:75:80: 36:fc:89:17:eb:27:e6:aa:e8:a5:8a:63:82:cc:fd:46:87:5d: 1f:37:30:03:0b:7f:73:f7:ba:35:22:5b:6f:f9:7d:dc:0e:21: 80:a9:20:4e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE8voj/Fl9+14x2bYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNTE5MDUyMVoXDTI4MTIxODIwMDUyMVowLzEtMCsGA1UEAxMk YWEwZTZmYmEtZTM3MC00NWM5LTliMTEtOWFmOTU2ODE1MGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJHVaswijlPcLJ4WTq8KQjfl/C9CXlbbz1im YNwYJOFz2aVcUnS6mD8g8bSe3vkYzMmtGg9wwpSSBt4H4usQAArEn0iF2AoabarA mpkceius/HsOUI2A4x9GtW1vfxGKyGdDTVn6/Yc0ffHYF/KLsXmdluAXftbzMe1T tsxS+gFiIL+MprvTQBaDdcM2teiyYFcIsxmlOElHzb2eUKfw75ozZP2nDruzDJLg lwTgu7wWRJjXWCrczTha3Nt9Q0U7647TfzwVl3mELldOM335faqQuHHJFNPWeq8D MNxCm+1zhnJQiYjUwfd172CX8VVh8cCFJPTrawgV/I1cPgjTrQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAWPEicPltjG9sIeWXkA/3lYcRUyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h YTBlNmZiYS1lMzcwLTQ1YzktOWIxMS05YWY5NTY4MTUwZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2FhMGU2ZmJhLWUzNzAtNDVjOS05 YjExLTlhZjk1NjgxNTBlZS9hYTBlNmZiYS1lMzcwLTQ1YzktOWIxMS05YWY5NTY4 MTUwZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXj7QwDQQCAAIwBwMFACYEGuAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh2kMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB97ehbGwDdidU050rDiZSP6iQhn GU72JHyzGlK2Re7C0apuxvR+UkDmB9TjtC2R5VCVD0LbvkMT2eQHPkvSPIx5DYn+ RlYNxxAEw0xe9Tx23Ty4J9rRompWW/AVGfaZjT/kmaeIJ95Bs/t7ZkSvWprVldDT X4/PUcemiR9zriOfLzmzwplxD6C+vqSLaimKcJux+Fx4lLa4fAe4o+jQlIa2iC78 +mBxa/1Qkys47OlJOmd+bxyCihEY6N39Pp6vHSL7rUVp2a3mgWAQrkWcg3Pl5B7W OON1gDb8iRfrJ+aq6KWKY4LM/UaHXR83MAMLf3P3ujUiW2/5fdwOIYCpIE4= -----END CERTIFICATE-----Generated at Wed Sep 16 11:28:24 2026 by rpki-client