$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5.cer File: 017daff1-6a0f-45af-8ab5-802438ab1ef5.cer (raw, json) Hash identifier: s4b0lU6K+dS9RrUyFPyYBPGuiB1RwYL7UUUnLgPsko8= Subject key identifier: B7:DD:88:25:05:2C:1F:7A:79:57:E2:86:9B:AB:FB:B3:30:D1:2A:C6 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F6C509F42FAFCFE1DA7F2C400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/017daff1-6a0f-45af-8ab5-802438ab1ef5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 12:45:12 +0000 Certificate not after: Tue 09 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 396903 IP: 148.59.43.0/24 IP: 2620:4c:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:50:9f:42:fa:fc:fe:1d:a7:f2:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 7 12:45:12 2026 GMT Not After : Jan 9 13:45:12 2029 GMT Subject: CN=017daff1-6a0f-45af-8ab5-802438ab1ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:41:64:9a:80:5f:12:7e:0b:53:30:2f:d0: e4:85:89:d5:d8:25:24:63:25:ed:5c:39:d1:21:d3: 31:be:7e:87:24:8c:b0:7a:73:cf:88:06:f3:08:9f: 6a:83:1d:92:0b:41:d0:46:ef:d2:7d:31:c1:59:4a: f1:00:a3:b1:2b:53:3b:4d:36:69:21:c0:1e:21:74: 02:4a:f6:e1:c1:91:63:85:05:26:0f:e6:eb:f9:e2: c4:53:46:7b:70:43:6d:f4:df:d1:ca:0a:58:65:f3: 22:74:3b:1e:df:e5:75:3d:10:6f:68:03:58:d9:a8: b1:1c:39:a5:90:83:f0:4f:b4:b0:3b:a4:45:01:8e: 98:1b:df:ec:58:f1:44:98:ee:7e:c2:5d:4d:50:6d: 63:01:35:af:67:da:28:a8:ef:3d:88:c8:27:dc:d0: f6:43:50:83:4b:60:9d:d7:1f:3d:62:96:94:d1:22: 7a:6f:e1:41:9a:eb:4b:94:1b:0f:82:7d:f9:45:d8: 0a:20:65:96:a0:16:ae:1d:df:07:4b:ac:c3:f8:49: 48:8b:97:bf:af:a0:1f:df:3c:d3:b9:e6:cf:95:90: 58:5d:f6:4c:b2:b0:9a:48:c9:8a:f2:0a:ea:80:31: a8:77:ca:fb:26:ad:c6:4a:39:9f:1b:30:a3:25:58: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:88:25:05:2C:1F:7A:79:57:E2:86:9B:AB:FB:B3:30:D1:2A:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/017daff1-6a0f-45af-8ab5-802438ab1ef5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 148.59.43.0/24 IPv6: 2620:4c:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396903 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e1:e2:ae:57:8d:db:5d:50:cf:be:92:55:b4:e7:4a:e3:4e: 87:81:5e:28:ae:1b:39:e2:8a:95:70:3d:d2:59:09:ba:af:d7: 07:77:73:f0:7a:0d:ce:98:55:39:9c:5e:64:5c:08:8e:d4:7a: f7:da:ed:30:0a:fd:0f:d9:ee:f4:7c:8b:e4:cd:19:7b:4c:ab: 09:3b:9d:f3:9f:68:ba:c1:4c:b0:a1:b2:26:7d:d4:c2:ae:ff: 87:ec:ff:f5:3f:f1:61:ff:19:d4:ec:b2:dc:05:a8:6d:c0:8e: a0:ec:2e:61:ea:08:57:cd:4f:e2:72:59:cb:ab:3a:e8:36:b8: 46:47:47:0f:e3:28:2f:54:54:40:fd:72:e0:78:ac:cc:26:2c: b6:7d:b0:38:82:bc:11:25:01:02:ff:32:48:fe:8a:0d:bd:a6: 2c:66:5a:9f:f8:fc:30:e8:b9:f6:14:5a:24:1c:4f:4a:a3:39: 66:ee:de:2a:c9:7c:f3:e5:df:88:05:1c:a1:0d:2b:a6:f9:5a: a3:90:11:76:69:98:b4:ab:cc:7a:20:7c:db:af:8d:62:58:d2: ea:91:01:04:e1:02:62:41:86:91:0f:08:bb:29:0b:d4:45:e1: df:8a:e2:ea:d1:cf:bc:78:59:c7:2a:dc:1c:b6:2d:a7:d7:e7: a5:3b:e6:fe -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9sUJ9C+vz+HafyxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAwNzEyNDUxMloXDTI5MDEwOTEzNDUxMlowLzEtMCsGA1UEAxMk MDE3ZGFmZjEtNmEwZi00NWFmLThhYjUtODAyNDM4YWIxZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEFBZJqAXxJ+C1MwL9DkhYnV2CUkYyXtXDnR IdMxvn6HJIywenPPiAbzCJ9qgx2SC0HQRu/SfTHBWUrxAKOxK1M7TTZpIcAeIXQC SvbhwZFjhQUmD+br+eLEU0Z7cENt9N/RygpYZfMidDse3+V1PRBvaANY2aixHDml kIPwT7SwO6RFAY6YG9/sWPFEmO5+wl1NUG1jATWvZ9ooqO89iMgn3ND2Q1CDS2Cd 1x89YpaU0SJ6b+FBmutLlBsPgn35RdgKIGWWoBauHd8HS6zD+ElIi5e/r6Af3zzT uebPlZBYXfZMsrCaSMmK8grqgDGod8r7Jq3GSjmfGzCjJVi6CwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFLfdiCUFLB96eVfihpur+7Mw0SrGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w MTdkYWZmMS02YTBmLTQ1YWYtOGFiNS04MDI0MzhhYjFlZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAxN2RhZmYxLTZhMGYtNDVhZi04 YWI1LTgwMjQzOGFiMWVmNS8wMTdkYWZmMS02YTBmLTQ1YWYtOGFiNS04MDI0Mzhh YjFlZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACUOyswDwQCAAIwCQMHACYgAEwgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGDmcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb+HirleN211Qz76SVbTnSuNO h4FeKK4bOeKKlXA90lkJuq/XB3dz8HoNzphVOZxeZFwIjtR699rtMAr9D9nu9HyL 5M0Ze0yrCTud859ousFMsKGyJn3Uwq7/h+z/9T/xYf8Z1Oyy3AWobcCOoOwuYeoI V81P4nJZy6s66Da4RkdHD+MoL1RUQP1y4HiszCYstn2wOIK8ESUBAv8ySP6KDb2m LGZan/j8MOi59hRaJBxPSqM5Zu7eKsl88+XfiAUcoQ0rpvlao5ARdmmYtKvMeiB8 26+NYljS6pEBBOECYkGGkQ8IuykL1EXh34ri6tHPvHhZxyrcHLYtp9fnpTvm/g== -----END CERTIFICATE-----Generated at Tue Oct 13 21:31:09 2026 by rpki-client