$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer File: e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer (raw, json) Hash identifier: aP7KDCxxZxJxb+sFNlQ+upbk0qoSiK/u4yIiOLWpLF0= Subject key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F453B0ABF86B24601441DDBA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 12:45:11 +0000 Certificate not after: Tue 26 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 64245 IP: 104.145.224.0/20 IP: 104.250.96.0/19 IP: 2602:ffb0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:3b:0a:bf:86:b2:46:01:44:1d:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 23 12:45:11 2026 GMT Not After : Dec 26 13:45:11 2028 GMT Subject: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:21:9e:16:3d:1e:76:e7:4a:fc:7d:51:1b: 3e:29:d9:b2:a4:6c:af:12:5a:09:83:e3:d6:23:17: 10:3f:f4:9f:9c:5f:70:a3:43:83:71:37:cd:e1:22: 5b:13:2f:ef:7f:64:6b:b2:8d:bb:9c:1b:9e:59:23: 50:8c:8c:59:8b:5d:b7:3f:24:e7:74:c5:de:57:46: cc:f0:1c:df:68:09:38:72:db:1d:9d:af:55:30:71: 72:cf:a3:c8:48:0d:3e:04:a4:10:a0:40:ae:0c:26: d8:c6:c5:56:70:97:ea:69:e7:13:cf:32:87:f3:ee: ca:74:1e:f0:71:d3:5b:8f:c2:25:05:ce:f3:ae:bd: 31:9e:a6:02:1c:35:d3:5d:41:02:c8:44:5b:73:60: 73:97:b2:37:39:ae:e2:36:98:f6:98:86:42:24:71: 32:da:30:92:a9:de:e5:cd:ac:9c:a7:f5:fe:a1:f6: 65:70:6d:ea:7d:e3:b5:19:45:65:77:ba:3d:8c:58: 04:c8:08:a6:06:ec:61:3b:6e:7e:f8:eb:81:e8:e6: 49:db:2b:e3:7f:1e:20:32:ba:68:51:a3:bd:87:30: d6:ab:81:df:cf:b8:75:5c:c5:29:78:45:65:3c:40: c1:c3:e5:94:17:12:20:15:b2:aa:be:b7:76:c2:33: bc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.145.224.0/20 104.250.96.0/19 IPv6: 2602:ffb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64245 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a3:f1:3b:eb:8b:9a:78:6b:76:cd:7f:af:bc:68:aa:66:1f: 3f:15:e8:96:c8:32:29:3f:c9:0d:4d:17:0d:70:b3:6b:28:b3: 27:04:4b:55:d6:fc:e1:06:38:e2:4e:d2:2a:54:ab:4b:dc:14: 3d:9a:46:49:fc:77:42:32:1d:fa:87:b3:a5:2c:c4:8a:24:55: a6:a3:4e:2c:ac:1e:fc:ff:06:26:c7:83:45:9f:d8:d6:eb:4b: c6:76:4e:c4:93:10:e5:bd:d8:81:cc:95:55:c8:d0:8c:ab:a7: b2:ca:6f:23:a2:00:12:2d:e2:af:6c:69:eb:8c:f8:d4:70:78: a2:a4:ff:4e:87:2e:49:2d:97:9b:a4:6c:60:92:07:98:ee:57: 87:ed:0a:0c:78:8f:da:63:f5:7d:ff:18:cd:45:db:5c:f5:fc: 84:26:66:be:b6:a5:1e:c9:83:77:56:72:36:e8:ec:74:fd:08: 8e:d7:ea:ce:d6:cb:f0:7e:2c:1a:ee:e4:b3:f8:0c:d0:04:6e: 19:4b:62:00:22:d6:4c:3c:48:8b:7d:b5:51:dd:75:3a:b7:62: bb:08:57:05:cd:66:ad:d9:2f:45:d3:75:00:16:e2:8c:0f:5a: 24:71:02:c1:43:c4:f6:b6:4a:ba:fd:6d:d4:4f:08:33:78:13: 04:c6:ee:b0 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9FOwq/hrJGAUQd26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkyMzEyNDUxMVoXDTI4MTIyNjEzNDUxMVowLzEtMCsGA1UEAxMk ZTRlNmQzMWQtMzhmMS00YTlmLTkwYTUtNzhhZDMzZjJmYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf4hnhY9HnbnSvx9URs+KdmypGyvEloJg+PW IxcQP/SfnF9wo0ODcTfN4SJbEy/vf2Rrso27nBueWSNQjIxZi123PyTndMXeV0bM 8BzfaAk4ctsdna9VMHFyz6PISA0+BKQQoECuDCbYxsVWcJfqaecTzzKH8+7KdB7w cdNbj8IlBc7zrr0xnqYCHDXTXUECyERbc2Bzl7I3Oa7iNpj2mIZCJHEy2jCSqd7l zaycp/X+ofZlcG3qfeO1GUVld7o9jFgEyAimBuxhO25++OuB6OZJ2yvjfx4gMrpo UaO9hzDWq4Hfz7h1XMUpeEVlPEDBw+WUFxIgFbKqvrd2wjO81wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFn1tPWuIJ13w358v6X5TSS203gqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l NGU2ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFkMzNmMmZjODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U0ZTZkMzFkLTM4ZjEtNGE5Zi05 MGE1LTc4YWQzM2YyZmM4Ny9lNGU2ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFkMzNm MmZjODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARokeADBAVo+mAwDQQCAAIwBwMFACYC/7AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPr1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADaj8Tvri5p4a3bNf6+8 aKpmHz8V6JbIMik/yQ1NFw1ws2sosycES1XW/OEGOOJO0ipUq0vcFD2aRkn8d0Iy HfqHs6UsxIokVaajTiysHvz/BibHg0Wf2NbrS8Z2TsSTEOW92IHMlVXI0Iyrp7LK byOiABIt4q9saeuM+NRweKKk/06HLkktl5ukbGCSB5juV4ftCgx4j9pj9X3/GM1F 21z1/IQmZr62pR7Jg3dWcjbo7HT9CI7X6s7Wy/B+LBru5LP4DNAEbhlLYgAi1kw8 SIt9tVHddTq3YrsIVwXNZq3ZL0XTdQAW4owPWiRxAsFDxPa2Srr9bdRPCDN4EwTG 7rA= -----END CERTIFICATE-----Generated at Mon Oct 26 19:04:06 2026 by rpki-client