$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer File: 5482ccc0-e4dd-479e-a029-460a79acc9cc.cer (raw, json) Hash identifier: gZ4EfV1ulxguPK0KqOYJiQpy1ri3goKH67tt0pj5Pcs= Subject key identifier: 69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584EE64FC932DADCED5446DEC2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Aug 2026 12:45:11 +0000 Certificate not after: Wed 22 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 32809 IP: 63.141.0.0/20 IP: 65.23.160.0/19 IP: 209.188.64.0/20 IP: 2607:f0f8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:4f:c9:32:da:dc:ed:54:46:de:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 20 12:45:11 2026 GMT Not After : Nov 22 13:45:11 2028 GMT Subject: CN=5482ccc0-e4dd-479e-a029-460a79acc9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:37:97:b4:ed:5b:86:04:41:2d:2b:98:a4: 7c:9b:ab:3c:31:b8:6c:e5:00:21:b5:35:0a:c0:8c: ff:15:1b:f3:5a:42:91:dd:6b:72:c1:09:cb:f2:d3: 65:78:df:9d:24:99:b9:d1:87:3b:4b:d3:3a:f4:80: 59:ca:b2:c1:fc:70:b5:a9:9b:51:c7:39:77:25:a8: ac:f5:cf:e1:45:46:c7:9e:c6:e9:35:4d:2b:4e:37: a9:d1:4c:94:6b:08:2d:00:39:6c:ba:61:db:00:db: 1a:75:06:83:34:c5:66:ad:a6:1d:bb:8b:b8:2c:36: 1c:b7:a1:de:43:64:bc:b3:8e:24:30:13:2d:5d:37: bc:c9:d2:e6:81:a0:5b:8a:6b:a7:86:bb:76:d4:97: f7:44:b6:50:46:26:85:fb:f0:87:8f:0e:79:57:e6: fe:78:64:40:1e:67:59:14:a0:e2:38:a6:23:13:e3: c8:74:15:4d:a3:1a:e9:a4:13:26:2b:13:6a:6f:1c: 51:3e:a6:c7:95:6f:54:e5:b1:58:90:f5:07:74:de: 55:86:9b:99:36:76:8a:f2:92:1a:75:d5:c1:cb:a9: e4:3f:6f:4c:2f:57:8e:d7:09:a1:59:fb:9a:95:04: 2a:0c:c1:04:9f:d3:69:21:54:03:ae:a9:90:64:ec: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 63.141.0.0/20 65.23.160.0/19 209.188.64.0/20 IPv6: 2607:f0f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32809 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e6:e8:69:81:f9:0a:dc:4e:f7:ff:5b:33:25:a8:21:44:65: d5:9d:46:bf:00:9c:cc:91:43:e0:ee:27:9a:e0:fb:75:53:40: d4:6c:6c:7a:c4:6b:b1:c2:d8:3a:70:ef:f0:58:72:bf:72:51: 7d:ef:e1:44:35:f6:84:6c:58:90:4d:4b:17:3f:fb:62:cd:c3: 63:bf:68:53:91:39:4d:0f:49:4c:ef:6b:ef:a3:1a:36:13:55: 52:15:61:2a:a7:01:46:5b:16:db:a5:7e:fc:26:59:47:ee:b0: 6e:ee:41:51:60:14:17:93:70:94:10:12:04:68:c4:d4:fe:57: 71:28:2b:38:09:27:03:29:b8:98:bc:29:48:55:32:8f:58:ef: 20:a8:b1:fb:54:41:45:20:8f:fd:e4:37:7c:e9:c2:07:18:f3: 61:96:ea:85:25:f7:33:d4:d4:d6:69:f9:05:bf:52:0c:18:30: f1:d6:2b:fe:67:17:51:14:bc:9d:a3:8a:c7:8b:24:98:30:86: 4e:c3:30:e1:b7:d0:de:db:d3:12:c9:05:73:51:fb:d0:3a:fb: 37:b0:49:e0:fd:8d:5e:e9:ba:0c:01:1a:e2:71:bb:ec:0b:71: 85:c2:c4:73:d6:50:be:ef:6a:b5:51:40:46:73:a6:3a:72:3e: c6:47:af:dd -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE7mT8ky2tztVEbewsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDgyMDEyNDUxMVoXDTI4MTEyMjEzNDUxMVowLzEtMCsGA1UEAxMk NTQ4MmNjYzAtZTRkZC00NzllLWEwMjktNDYwYTc5YWNjOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvM3l7TtW4YEQS0rmKR8m6s8Mbhs5QAhtTUK wIz/FRvzWkKR3WtywQnL8tNleN+dJJm50Yc7S9M69IBZyrLB/HC1qZtRxzl3Jais 9c/hRUbHnsbpNU0rTjep0UyUawgtADlsumHbANsadQaDNMVmraYdu4u4LDYct6He Q2S8s44kMBMtXTe8ydLmgaBbimunhrt21Jf3RLZQRiaF+/CHjw55V+b+eGRAHmdZ FKDiOKYjE+PIdBVNoxrppBMmKxNqbxxRPqbHlW9U5bFYkPUHdN5VhpuZNnaK8pIa ddXBy6nkP29ML1eO1wmhWfualQQqDMEEn9NpIVQDrqmQZOwtuQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFGmdFU/g8jP6Pl+3vSK/obA+lY3sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 NDgyY2NjMC1lNGRkLTQ3OWUtYTAyOS00NjBhNzlhY2M5Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU0ODJjY2MwLWU0ZGQtNDc5ZS1h MDI5LTQ2MGE3OWFjYzljYy81NDgyY2NjMC1lNGRkLTQ3OWUtYTAyOS00NjBhNzlh Y2M5Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAQ/jQADBAVBF6ADBATRvEAwDQQCAAIwBwMFACYH 8PgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIApMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAHm6GmB+Qrc Tvf/WzMlqCFEZdWdRr8AnMyRQ+DuJ5rg+3VTQNRsbHrEa7HC2Dpw7/BYcr9yUX3v 4UQ19oRsWJBNSxc/+2LNw2O/aFOROU0PSUzva++jGjYTVVIVYSqnAUZbFtulfvwm WUfusG7uQVFgFBeTcJQQEgRoxNT+V3EoKzgJJwMpuJi8KUhVMo9Y7yCosftUQUUg j/3kN3zpwgcY82GW6oUl9zPU1NZp+QW/UgwYMPHWK/5nF1EUvJ2jiseLJJgwhk7D MOG30N7b0xLJBXNR+9A6+zewSeD9jV7pugwBGuJxu+wLcYXCxHPWUL7varVRQEZz pjpyPsZHr90= -----END CERTIFICATE-----Generated at Fri Aug 21 19:35:24 2026 by rpki-client