$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer File: 3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer (raw, json) Hash identifier: o9G+sdSDTN+bTajcvRS/NPEiiAOn7FbwjuJ3yz3+opg= Subject key identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F74B0AC712ED17A7DDBDBDD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Oct 2026 12:45:11 +0000 Certificate not after: Fri 12 Jan 2029 13:45:11 +0000 Subordinate resources: AS: 399568 IP: 23.181.48.0/24 IP: 45.41.38.0/24 IP: 2602:fc6f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b0:ac:71:2e:d1:7a:7d:db:db:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 10 12:45:11 2026 GMT Not After : Jan 12 13:45:11 2029 GMT Subject: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:56:69:64:89:7a:88:00:9e:ea:94:2d:42: d1:c6:a9:cb:50:c2:14:3b:9f:2c:24:e1:54:96:e5: 46:be:b7:40:9c:b3:88:9a:9a:2f:30:37:61:b9:23: af:c8:46:37:53:f2:6c:bb:2e:8d:8f:ad:75:e9:e2: 8c:55:7a:3d:d7:fe:70:54:3d:e5:ad:e3:96:d0:7f: b3:93:6b:cf:34:95:7f:b6:e3:1a:7d:5b:41:a8:56: 26:e8:9c:36:28:ec:67:4a:86:96:99:2f:c7:41:04: 99:ec:60:fd:46:40:3f:43:ed:02:d6:f3:4b:47:63: 14:2a:b5:b6:68:a2:47:f5:62:ef:a0:b7:16:03:a9: a7:ef:04:d0:06:5c:b5:8e:5a:a5:7c:26:2e:db:98: 62:1f:14:44:cc:3a:86:08:fa:ff:67:ad:f8:1d:4f: 43:1a:9a:f3:3d:f1:58:75:ec:25:58:d8:bb:6f:0c: 3f:2b:7a:f4:ee:2c:bb:fd:17:e6:68:bf:61:10:79: 95:7e:40:d4:34:38:b4:79:f9:4d:c5:23:dc:e9:ed: 43:cc:23:ea:cc:ca:23:38:4a:d0:3d:dd:06:2b:1d: 3b:d4:91:8e:c1:f3:a9:77:1a:a7:d2:73:5b:5e:c6: 95:4f:c5:5c:5e:8d:2d:fd:3d:2d:f0:9e:10:c8:ad: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.181.48.0/24 45.41.38.0/24 IPv6: 2602:fc6f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399568 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:02:e5:9f:2a:0e:68:b2:be:53:83:08:e6:00:4d:aa:b6:83: 59:2b:b1:e2:0d:24:cf:fb:e9:56:be:a2:18:08:a3:e9:10:2e: 7a:32:9f:46:23:fa:65:73:fc:48:c9:80:ae:9e:3f:45:12:55: 25:ba:4b:0b:65:15:ed:f4:2d:93:95:af:10:d2:aa:c3:37:11: fe:eb:1c:57:72:85:dc:b6:e9:d3:d4:8e:b0:87:8e:7a:37:73: 02:62:2d:bc:9f:78:63:49:1a:81:d9:fe:73:da:7e:27:39:3e: 20:22:eb:38:f2:52:65:0a:d9:f8:0e:b5:98:4e:f0:eb:7c:30: 4f:ec:ce:86:e2:58:5c:d0:d5:4a:48:5a:8c:e7:6e:72:a9:35: 16:a5:ac:73:ad:5a:58:a6:9d:3e:9b:61:8d:d9:e3:55:8c:0c: a7:7e:8c:27:9b:b8:4e:fe:c0:c2:bd:b8:94:f9:80:70:f3:54: cb:f9:f2:d2:78:ba:f5:1d:0c:0e:dc:cd:5a:b2:70:e1:1a:f6: 46:15:e5:2b:40:52:70:e3:e1:05:98:fb:17:90:ba:fe:36:d8: 04:36:b7:bb:c2:f0:14:51:8d:71:62:e6:c1:d2:2d:f5:6b:55: bb:e4:74:18:86:78:7c:24:55:2a:6b:60:41:8a:ed:1b:fc:0b: 13:c2:27:fe -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE90sKxxLtF6fdvb3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAxMDEyNDUxMVoXDTI5MDExMjEzNDUxMVowLzEtMCsGA1UEAxMk M2Y2N2ViODgtYTVkNC00NjZjLTliYmEtYWRhZmM1N2NmNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw1WaWSJeogAnuqULULRxqnLUMIUO58sJOFU luVGvrdAnLOImpovMDdhuSOvyEY3U/Jsuy6Nj6116eKMVXo91/5wVD3lreOW0H+z k2vPNJV/tuMafVtBqFYm6Jw2KOxnSoaWmS/HQQSZ7GD9RkA/Q+0C1vNLR2MUKrW2 aKJH9WLvoLcWA6mn7wTQBly1jlqlfCYu25hiHxREzDqGCPr/Z634HU9DGprzPfFY dewlWNi7bww/K3r07iy7/RfmaL9hEHmVfkDUNDi0eflNxSPc6e1DzCPqzMojOErQ Pd0GKx071JGOwfOpdxqn0nNbXsaVT8VcXo0t/T0t8J4QyK03ZwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFL0N/qjyvKAcojXiisimV0rCxTZbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z ZjY3ZWI4OC1hNWQ0LTQ2NmMtOWJiYS1hZGFmYzU3Y2Y0ZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNmNjdlYjg4LWE1ZDQtNDY2Yy05 YmJhLWFkYWZjNTdjZjRlNi8zZjY3ZWI4OC1hNWQ0LTQ2NmMtOWJiYS1hZGFmYzU3 Y2Y0ZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXtTADBAAtKSYwDgQCAAIwCAMGBCYC/G8AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYY0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqAuWfKg5osr5Tgwjm AE2qtoNZK7HiDSTP++lWvqIYCKPpEC56Mp9GI/plc/xIyYCunj9FElUluksLZRXt 9C2Tla8Q0qrDNxH+6xxXcoXctunT1I6wh456N3MCYi28n3hjSRqB2f5z2n4nOT4g Ius48lJlCtn4DrWYTvDrfDBP7M6G4lhc0NVKSFqM525yqTUWpaxzrVpYpp0+m2GN 2eNVjAynfownm7hO/sDCvbiU+YBw81TL+fLSeLr1HQwO3M1asnDhGvZGFeUrQFJw 4+EFmPsXkLr+NtgENre7wvAUUY1xYubB0i31a1W75HQYhnh8JFUqa2BBiu0b/AsT wif+ -----END CERTIFICATE-----Generated at Mon Oct 12 00:54:38 2026 by rpki-client