$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer File: c9d5fed8-9c87-4745-b68b-390b14873b57.cer (raw, json) Hash identifier: ijB6/TwLMaGH92uJbY/1QIhIxVKall80maCxKMd6K5Y= Subject key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F6125E447134DF18224DED880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Oct 2026 12:45:12 +0000 Certificate not after: Fri 05 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 29960 IP: 64.69.212.0/24 IP: 98.97.248.0/21 IP: 139.60.152.0/22 IP: 162.247.216.0/22 IP: 2607:28c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:25:e4:47:13:4d:f1:82:24:de:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 3 12:45:12 2026 GMT Not After : Jan 5 13:45:12 2029 GMT Subject: CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:e4:3b:b6:13:19:0f:15:bf:51:9b:cd:5d: e7:20:0a:92:08:44:06:73:2e:d1:68:6d:39:79:da: ba:2d:54:2c:7a:75:c7:e4:59:18:3b:d1:ae:2a:79: 7f:19:06:8b:43:65:90:f3:b8:1b:e6:83:92:92:a9: b1:e6:90:2d:cb:e1:60:e1:e9:1a:75:d6:22:0d:d3: 59:8e:88:9e:76:a2:cd:07:46:f6:8a:4e:9a:a3:19: 36:69:9a:c8:f9:75:03:88:83:21:e7:56:b4:4d:7b: c9:89:77:ec:d0:15:78:b5:cf:9f:f6:24:08:ab:16: 10:9b:11:39:0b:ce:13:f6:3c:f7:95:15:7f:38:38: 08:e8:4f:79:45:d6:6a:01:a0:d4:3b:fc:88:38:00: 5e:53:08:1d:c3:91:8e:b5:73:2b:29:8e:ca:c4:a0: ce:15:75:d1:90:6b:46:cf:48:6c:e5:8d:21:7d:5c: 03:d1:d1:0e:de:d6:ad:88:99:25:2c:09:ae:8d:b8: a1:1d:58:00:db:cc:98:22:93:f3:ed:e3:fa:05:89: 2b:12:50:d0:f1:ca:1c:a6:d1:87:b8:47:b1:ed:63: ec:8c:b3:27:e9:9d:e5:4c:d8:4c:e3:8e:70:a7:09: 44:fe:49:4b:65:72:a7:75:38:52:6e:99:c0:5d:60: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.69.212.0/24 98.97.248.0/21 139.60.152.0/22 162.247.216.0/22 IPv6: 2607:28c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3a:4b:2d:47:51:2c:6d:53:f9:dd:59:84:b6:a8:d4:e6:80: f4:2a:5b:e9:a2:24:dc:91:61:14:b7:0b:0a:50:05:e7:4a:bb: a0:42:97:41:55:af:8b:59:47:5c:a0:6b:f0:e0:12:78:23:88: e3:4a:ee:4d:e4:42:53:7e:b1:db:bc:83:3c:4f:c1:48:56:53: 90:57:ea:00:46:73:00:f2:6e:6d:a5:29:f5:8e:20:d6:81:34: fa:5c:68:fb:f8:07:b3:41:97:fd:07:5d:5a:67:bc:1f:7a:5d: a2:2d:71:a8:c0:3c:5d:4a:81:f0:9a:0d:63:d4:2a:14:1d:1d: 1d:1c:85:76:20:f5:05:d5:75:a4:9d:5b:eb:3e:83:0d:27:ba: ff:eb:48:47:b8:bc:4c:17:15:ec:a8:cf:18:ee:c3:87:96:48: 6d:d9:17:b0:84:c3:5f:90:e3:36:58:83:55:0c:8f:18:31:5e: 14:76:6f:eb:57:ff:f9:69:94:3f:e5:84:38:a9:05:f4:07:03: 4f:72:00:fa:3b:02:63:e5:32:27:f6:37:ff:dd:e8:bc:ef:17: b8:3f:10:f1:77:a7:10:58:8e:8a:44:31:a3:fd:8d:2f:61:53: 93:7e:a2:4a:c5:49:65:36:ad:af:44:ad:aa:1b:42:d6:dd:dd: 69:24:84:a8 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE9hJeRHE03xgiTe2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAwMzEyNDUxMloXDTI5MDEwNTEzNDUxMlowLzEtMCsGA1UEAxMk YzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODczYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T/kO7YTGQ8Vv1GbzV3nIAqSCEQGcy7RaG05 edq6LVQsenXH5FkYO9GuKnl/GQaLQ2WQ87gb5oOSkqmx5pAty+Fg4ekaddYiDdNZ joiedqLNB0b2ik6aoxk2aZrI+XUDiIMh51a0TXvJiXfs0BV4tc+f9iQIqxYQmxE5 C84T9jz3lRV/ODgI6E95RdZqAaDUO/yIOABeUwgdw5GOtXMrKY7KxKDOFXXRkGtG z0hs5Y0hfVwD0dEO3tatiJklLAmujbihHVgA28yYIpPz7eP6BYkrElDQ8cocptGH uEex7WPsjLMn6Z3lTNhM445wpwlE/klLZXKndThSbpnAXWC26QIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFA1mDP3w7x+lS50kXLlnkXkf6tugMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j OWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2M5ZDVmZWQ4LTljODctNDc0NS1i NjhiLTM5MGIxNDg3M2I1Ny9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4 NzNiNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBABARdQDBANiYfgDBAKLPJgDBAKi99gwDQQCAAIw BwMFACYHKMAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdQgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVzpL LUdRLG1T+d1ZhLao1OaA9Cpb6aIk3JFhFLcLClAF50q7oEKXQVWvi1lHXKBr8OAS eCOI40ruTeRCU36x27yDPE/BSFZTkFfqAEZzAPJubaUp9Y4g1oE0+lxo+/gHs0GX /QddWme8H3pdoi1xqMA8XUqB8JoNY9QqFB0dHRyFdiD1BdV1pJ1b6z6DDSe6/+tI R7i8TBcV7KjPGO7Dh5ZIbdkXsITDX5DjNliDVQyPGDFeFHZv61f/+WmUP+WEOKkF 9AcDT3IA+jsCY+UyJ/Y3/93ovO8XuD8Q8XenEFiOikQxo/2NL2FTk36iSsVJZTat r0StqhtC1t3daSSEqA== -----END CERTIFICATE-----Generated at Tue Oct 20 17:11:16 2026 by rpki-client