$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer File: 69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer (raw, json) Hash identifier: XVamw3kAX4Qsd8gIhs5F8g0IWFjZMdvlEhJ52PSekzY= Subject key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F777B5CB7017808A8A2362840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 12:45:12 +0000 Certificate not after: Sat 13 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 74.112.112.0/21 IP: 168.100.180.0/22 IP: 204.8.8.0/21 IP: 208.70.40.0/21 IP: 208.88.248.0/21 IP: 2606:5d00::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:7b:5c:b7:01:78:08:a8:a2:36:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 11 12:45:12 2026 GMT Not After : Jan 13 13:45:12 2029 GMT Subject: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:4e:a1:92:19:47:18:75:4d:0e:3a:a1:02: 0a:a5:5f:cf:8d:ba:f4:b8:57:ce:4c:b7:0c:d6:98: c1:b8:78:22:0a:7f:e1:68:19:ca:31:ba:b8:fd:3f: 45:fa:d6:4b:55:58:f9:c0:2a:cb:ba:dd:dd:a5:5c: 3d:ea:d5:52:5b:6f:a6:25:a2:8f:cc:4f:fe:ba:dd: c6:08:e7:c9:54:6d:40:a9:6b:5a:3e:2b:a0:d6:7b: 65:f1:40:58:8d:fb:41:6c:c7:41:30:e8:d4:47:fc: db:be:29:37:89:2c:ec:71:57:a4:f0:7c:96:54:b3: c6:80:42:4b:ba:77:ee:ef:a8:be:ba:e2:2f:60:b2: ca:16:a1:a5:77:14:d4:96:4b:eb:ed:8d:83:7c:43: 9c:d0:b1:b3:d5:1e:a4:33:1e:3e:21:b3:30:a0:f0: 3c:26:43:7e:a0:d6:96:33:c5:ce:4e:c9:fc:54:6a: f8:f5:e2:11:c1:a8:de:f9:1e:54:5d:ca:a6:d6:1c: 20:45:37:f7:52:60:d0:85:43:1c:0e:3c:e7:b8:37: 62:9e:d4:ad:70:c3:fe:91:a8:3a:b5:6d:02:f8:7b: 9b:75:14:b5:9c:b5:b9:19:f9:b9:8e:e8:85:81:8e: 0e:37:bd:93:5a:fb:dc:44:9e:fc:80:96:38:3b:50: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.112.112.0/21 168.100.180.0/22 204.8.8.0/21 208.70.40.0/21 208.88.248.0/21 IPv6: 2606:5d00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3a:47:9a:61:0d:4d:1b:08:25:30:d2:19:70:8f:6a:25:48: 4d:1b:24:2d:55:e2:88:e7:e9:a5:5d:6e:02:53:49:89:78:d1: e2:02:66:99:76:d7:ef:b0:12:6d:d7:b7:e8:ec:8a:75:be:5e: 73:06:5f:04:5d:31:22:10:39:01:a7:81:a7:d7:71:c8:82:3d: ca:bc:c2:70:c7:3c:f8:a8:f4:50:fe:fb:d0:5d:7f:67:66:45: 1c:df:28:8b:ab:03:d4:58:ec:b7:c7:18:79:12:88:d4:3a:bd: da:a4:3a:9c:8c:7a:61:d1:e9:bd:f8:40:2b:8e:f3:4c:52:b7: ee:ea:cc:81:a5:7c:34:ae:f5:b4:ea:ce:03:7a:90:2b:b5:9d: 73:bb:cd:ed:80:49:1c:a7:da:64:16:6f:f1:29:44:47:9a:0c: 88:60:71:d0:ce:8f:88:dd:80:1b:b9:8d:f3:3a:79:6f:19:44: 44:54:2e:e7:69:2f:c0:7e:dd:19:d2:48:15:4d:a7:e4:e9:06: d7:e9:23:9f:ff:56:88:64:19:e9:f3:c8:f3:53:bf:3c:74:25: 19:63:a4:54:3d:c1:b7:ea:8d:ca:c0:90:d7:1f:4d:61:e9:31: a5:fc:53:81:b0:57:d6:41:43:b9:16:54:19:36:43:3f:c5:c6: 04:c6:1d:cc -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE93e1y3AXgIqKI2KEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAxMTEyNDUxMloXDTI5MDExMzEzNDUxMlowLzEtMCsGA1UEAxMk NjllOWJkMGUtZGFlZC00Yjk0LTk2YTUtZTI4YjY5OGU5ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVxOoZIZRxh1TQ46oQIKpV/Pjbr0uFfOTLcM 1pjBuHgiCn/haBnKMbq4/T9F+tZLVVj5wCrLut3dpVw96tVSW2+mJaKPzE/+ut3G COfJVG1AqWtaPiug1ntl8UBYjftBbMdBMOjUR/zbvik3iSzscVek8HyWVLPGgEJL unfu76i+uuIvYLLKFqGldxTUlkvr7Y2DfEOc0LGz1R6kMx4+IbMwoPA8JkN+oNaW M8XOTsn8VGr49eIRwaje+R5UXcqm1hwgRTf3UmDQhUMcDjznuDdintStcMP+kag6 tW0C+HubdRS1nLW5Gfm5juiFgY4ON72TWvvcRJ78gJY4O1DG/wIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFAbudOE89Kv5B4x22SkrmuSNc66+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 OWU5YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhiNjk4ZTlkMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY5ZTliZDBlLWRhZWQtNGI5NC05 NmE1LWUyOGI2OThlOWQzNy82OWU5YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhiNjk4 ZTlkMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBANKcHADBAKoZLQDBAPMCAgDBAPQRigDBAPQWPgw DQQCAAIwBwMFBCYGXQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIzpHmmENTRsIJTDSGXCPaiVITRskLVXi iOfppV1uAlNJiXjR4gJmmXbX77ASbde36OyKdb5ecwZfBF0xIhA5AaeBp9dxyII9 yrzCcMc8+Kj0UP770F1/Z2ZFHN8oi6sD1Fjst8cYeRKI1Dq92qQ6nIx6YdHpvfhA K47zTFK37urMgaV8NK71tOrOA3qQK7Wdc7vN7YBJHKfaZBZv8SlER5oMiGBx0M6P iN2AG7mN8zp5bxlERFQu52kvwH7dGdJIFU2n5OkG1+kjn/9WiGQZ6fPI81O/PHQl GWOkVD3Bt+qNysCQ1x9NYekxpfxTgbBX1kFDuRZUGTZDP8XGBMYdzA== -----END CERTIFICATE-----Generated at Mon Oct 12 02:26:56 2026 by rpki-client