$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer File: 34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer (raw, json) Hash identifier: Pms5mGTFU0bMJssW+zkv1/iQJK+xwDuYkW+FBSmym5s= Subject key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F5B90858689F6FE6886645680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 12:45:12 +0000 Certificate not after: Wed 03 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 55079 IP: 162.208.108.0/22 IP: 2604:ab80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:90:85:86:89:f6:fe:68:86:64:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 1 12:45:12 2026 GMT Not After : Jan 3 13:45:12 2029 GMT Subject: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:b3:43:84:32:7d:57:87:97:a3:e5:63:e2: 4f:f8:f3:77:82:88:98:f5:7f:66:18:c7:1c:ba:15: b3:05:0a:3b:a9:f5:b2:6a:a2:10:60:19:fb:84:b8: 76:36:23:da:54:2b:0b:a6:db:19:30:b9:9e:8f:b0: 67:40:ca:8a:ad:c2:2e:b4:de:25:b7:7a:37:8f:2a: 43:2b:9a:9a:01:15:20:22:7f:fc:b6:76:22:8b:09: 95:4c:8b:4e:87:5e:52:1b:a9:8f:02:e2:ac:76:94: a8:dd:c3:93:af:33:53:d8:e9:4e:76:e2:0e:df:4e: 65:53:c2:21:a2:14:a0:6f:79:27:9d:44:97:e9:ce: bd:54:83:7d:5c:d1:22:94:25:1f:e3:bf:db:da:2f: 25:50:32:fc:34:64:dd:aa:67:2c:73:90:39:95:6d: 96:21:b9:f2:30:23:75:1a:5a:f1:94:38:ec:c5:9f: 61:0f:4e:d4:9e:7b:5d:07:1a:c1:df:93:cb:0f:c8: e5:22:95:42:04:e8:b6:f7:1a:03:2f:cc:8a:c8:71: d2:75:30:f9:42:cd:de:66:6c:b3:2b:70:83:17:0c: c2:45:19:44:93:f7:fb:e5:84:69:ee:4f:70:07:ed: 2b:2d:18:3f:c7:58:c2:ab:cf:4a:5a:3b:60:6a:38: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.208.108.0/22 IPv6: 2604:ab80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55079 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8f:a4:47:4a:b4:cf:7e:bc:fa:ab:2e:bc:d9:92:b6:94:e7: bd:54:f1:80:a1:e0:9c:cc:f7:7d:6b:d5:ef:4d:70:63:68:1b: d8:f5:fd:77:f1:57:1c:ae:50:42:2b:20:9b:9d:3b:83:24:a2: 5f:95:69:b7:e6:5c:f1:3d:21:9d:4b:b8:05:7e:65:b5:e1:56: f8:8e:5a:1b:6b:1a:62:2b:3b:9c:e2:83:27:ab:d9:b5:e0:12: d5:e2:df:39:78:22:46:12:6e:db:92:1a:c9:8b:a9:f4:c1:91: 3b:7c:06:09:dd:e2:cc:a0:d8:83:49:5e:4e:f2:f5:32:ec:ee: 28:ac:83:49:f0:61:02:30:e1:26:bd:9b:98:94:03:92:0a:86: e2:0b:35:4e:17:57:bb:ea:a1:70:87:19:52:dc:44:8e:8f:f5: bf:2e:e4:9c:cc:1d:ae:f8:31:24:66:08:6f:39:6b:33:1f:d0: 3c:69:48:73:df:cd:d7:ce:29:a8:52:67:88:09:2b:8a:af:e7: 14:81:de:ab:a6:6b:96:98:33:ae:9a:d3:46:16:0f:79:e5:d7: 5e:18:a7:cb:c5:1d:2b:bd:50:e4:b8:61:6b:cd:4e:0b:c7:34: 5f:0d:77:63:50:08:38:20:2e:c4:a7:72:eb:07:3d:5e:21:25: ae:11:12:55 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE9bkIWGifb+aIZkVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAwMTEyNDUxMloXDTI5MDEwMzEzNDUxMlowLzEtMCsGA1UEAxMk MzRlMjgzM2QtYTllYS00MjJkLWE1YjUtYmEyYjlhYTk0ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhCzQ4QyfVeHl6PlY+JP+PN3goiY9X9mGMcc uhWzBQo7qfWyaqIQYBn7hLh2NiPaVCsLptsZMLmej7BnQMqKrcIutN4lt3o3jypD K5qaARUgIn/8tnYiiwmVTItOh15SG6mPAuKsdpSo3cOTrzNT2OlOduIO305lU8Ih ohSgb3knnUSX6c69VIN9XNEilCUf47/b2i8lUDL8NGTdqmcsc5A5lW2WIbnyMCN1 GlrxlDjsxZ9hD07UnntdBxrB35PLD8jlIpVCBOi29xoDL8yKyHHSdTD5Qs3eZmyz K3CDFwzCRRlEk/f75YRp7k9wB+0rLRg/x1jCq89KWjtgajhWFQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFgazRovog630HA8IJtZSv6pacShMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z NGUyODMzZC1hOWVhLTQyMmQtYTViNS1iYTJiOWFhOTQ4NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM0ZTI4MzNkLWE5ZWEtNDIyZC1h NWI1LWJhMmI5YWE5NDg2YS8zNGUyODMzZC1hOWVhLTQyMmQtYTViNS1iYTJiOWFh OTQ4NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKi0GwwDQQCAAIwBwMFACYEq4AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANcnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEaPpEdKtM9+vPqrLrzZkraU571U 8YCh4JzM931r1e9NcGNoG9j1/XfxVxyuUEIrIJudO4Mkol+VabfmXPE9IZ1LuAV+ ZbXhVviOWhtrGmIrO5zigyer2bXgEtXi3zl4IkYSbtuSGsmLqfTBkTt8Bgnd4syg 2INJXk7y9TLs7iisg0nwYQIw4Sa9m5iUA5IKhuILNU4XV7vqoXCHGVLcRI6P9b8u 5JzMHa74MSRmCG85azMf0DxpSHPfzdfOKahSZ4gJK4qv5xSB3quma5aYM66a00YW D3nl114Yp8vFHSu9UOS4YWvNTgvHNF8Nd2NQCDggLsSncusHPV4hJa4RElU= -----END CERTIFICATE-----Generated at Thu Oct 8 19:47:25 2026 by rpki-client