$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346.cer File: 789d5664-f06e-4109-b1d3-3b74abba3346.cer (raw, json) Hash identifier: x8hVGMMvHtzcS0TMzpwFnrxmlV9Imtan5BSGHRB69x4= Subject key identifier: 33:62:E5:22:3C:C3:FE:3D:EF:55:3A:24:E8:04:6E:4F:37:CA:2A:A4 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F6A101E5F0BF5DA986F207E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 17:23:37 +0000 Certificate not after: Mon 08 Jan 2029 18:23:37 +0000 Subordinate resources: IP: 169.139.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:10:1e:5f:0b:f5:da:98:6f:20:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 6 17:23:37 2026 GMT Not After : Jan 8 18:23:37 2029 GMT Subject: CN=789d5664-f06e-4109-b1d3-3b74abba3346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b2:ce:e5:43:9f:8c:84:c5:35:ce:67:d3:ca: d5:e0:a7:a0:10:8a:1c:97:9a:54:5f:f3:af:26:94: f6:ea:54:86:e1:3c:66:56:1f:8d:de:cc:28:8c:b7: bb:b0:99:b6:43:73:ec:9c:d1:be:5e:32:ce:8f:ee: 36:88:49:97:43:2b:cb:84:5c:e3:9a:fa:d0:a5:ef: e1:12:9c:6b:d7:34:49:54:80:d7:7f:ed:4a:91:a1: 23:17:7e:e2:7f:5b:a4:bd:34:71:96:0d:3d:3e:2e: 68:8f:3e:ab:21:2f:9c:4b:45:4c:be:8a:27:09:87: 07:6b:15:2f:1e:80:56:9c:b7:ea:f7:c1:8f:cc:53: 3a:91:4f:da:62:3f:9d:c9:a9:30:c8:7f:89:2a:d0: 79:ab:2e:a7:44:02:e5:76:38:eb:f2:37:34:42:62: 14:52:9e:bd:65:ee:2e:69:63:19:04:a9:57:74:79: 74:44:77:9f:ab:ae:50:e2:b3:d9:8d:b4:3a:c2:68: 9c:69:90:1c:8f:7d:8f:10:e6:e3:7e:4f:32:c5:5f: 11:70:9d:0b:74:63:d5:ca:1c:54:83:dd:f0:4d:68: 30:cc:f6:19:49:09:ce:7e:6c:08:2a:7d:3c:cf:bc: de:2e:1d:d7:58:64:95:c2:2c:8e:bc:9d:4c:33:b0: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:62:E5:22:3C:C3:FE:3D:EF:55:3A:24:E8:04:6E:4F:37:CA:2A:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 169.139.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a9:09:e2:3b:03:f0:b9:41:44:09:bc:bb:05:ed:69:e1:47: 17:c8:af:70:1c:25:c8:d9:c5:4b:71:be:85:52:92:d8:76:05: 1a:ab:05:d6:33:31:8f:1a:7e:ac:8a:1d:1f:80:50:0c:d9:09: b6:63:44:58:2c:43:46:ed:47:80:cd:9c:f1:2a:99:88:57:b1: c4:c0:df:dd:df:2b:4e:21:31:94:4c:02:9c:f9:d6:9b:a0:81: 0e:d5:62:fa:64:6b:e5:5d:1a:f0:87:8b:c4:e2:a0:62:7f:0b: dc:3c:c5:bc:0e:c9:38:04:41:c9:5f:1a:32:d4:c8:06:71:68: f9:84:39:12:42:2e:40:81:2f:97:ed:9e:8e:24:08:7b:c5:e1: ee:a8:1f:f0:ee:05:d0:aa:2c:ff:12:8b:5a:b2:9b:91:12:a6: 01:35:25:99:1d:74:92:e3:e7:ed:44:64:6c:4a:84:8f:51:be: a2:7e:8f:af:25:57:0c:fe:c9:f1:8e:f5:ca:07:50:2b:45:a1: a2:98:b4:67:b7:7c:74:88:de:04:23:8f:66:68:5c:6e:04:23: 12:86:0a:c4:cd:cf:b5:ea:5f:3c:f1:eb:0c:c8:fb:73:ba:50: d7:03:8c:6d:e3:d4:7c:00:19:45:bc:1c:b4:a0:e3:06:6b:15: 50:8c:40:08 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE9qEB5fC/XamG8gfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAwNjE3MjMzN1oXDTI5MDEwODE4MjMzN1owLzEtMCsGA1UEAxMk Nzg5ZDU2NjQtZjA2ZS00MTA5LWIxZDMtM2I3NGFiYmEzMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7LO5UOfjITFNc5n08rV4KegEIocl5pUX/Ov JpT26lSG4TxmVh+N3swojLe7sJm2Q3PsnNG+XjLOj+42iEmXQyvLhFzjmvrQpe/h Epxr1zRJVIDXf+1KkaEjF37if1ukvTRxlg09Pi5ojz6rIS+cS0VMvoonCYcHaxUv HoBWnLfq98GPzFM6kU/aYj+dyakwyH+JKtB5qy6nRALldjjr8jc0QmIUUp69Ze4u aWMZBKlXdHl0RHefq65Q4rPZjbQ6wmicaZAcj32PEObjfk8yxV8RcJ0LdGPVyhxU g93wTWgwzPYZSQnOfmwIKn08z7zeLh3XWGSVwiyOvJ1MM7CCSwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFDNi5SI8w/4971U6JOgEbk83yiqkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 ODlkNTY2NC1mMDZlLTQxMDktYjFkMy0zYjc0YWJiYTMzNDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc4OWQ1NjY0LWYwNmUtNDEwOS1i MWQzLTNiNzRhYmJhMzM0Ni83ODlkNTY2NC1mMDZlLTQxMDktYjFkMy0zYjc0YWJi YTMzNDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCpizBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGqQniOwPwuUFECby7Be1p 4UcXyK9wHCXI2cVLcb6FUpLYdgUaqwXWMzGPGn6sih0fgFAM2Qm2Y0RYLENG7UeA zZzxKpmIV7HEwN/d3ytOITGUTAKc+daboIEO1WL6ZGvlXRrwh4vE4qBifwvcPMW8 Dsk4BEHJXxoy1MgGcWj5hDkSQi5AgS+X7Z6OJAh7xeHuqB/w7gXQqiz/EotaspuR EqYBNSWZHXSS4+ftRGRsSoSPUb6ifo+vJVcM/snxjvXKB1ArRaGimLRnt3x0iN4E I49maFxuBCMShgrEzc+16l888esMyPtzulDXA4xt49R8ABlFvBy0oOMGaxVQjEAI -----END CERTIFICATE-----Generated at Thu Oct 8 10:32:08 2026 by rpki-client