$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9a49615f-900e-4d21-a4ce-b62621c53141.cer File: 9a49615f-900e-4d21-a4ce-b62621c53141.cer (raw, json) Hash identifier: PeRBHCtUxe78ueN692uWbWLog3CNI4JxqW+TABJvtUQ= Subject key identifier: 40:74:47:F4:CB:DF:9D:43:55:8B:19:06:FF:34:6C:C4:D1:0B:41:05 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F5F214179F096546CA05B6E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9a49615f-900e-4d21-a4ce-b62621c53141/9a49615f-900e-4d21-a4ce-b62621c53141.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9a49615f-900e-4d21-a4ce-b62621c53141/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 19:24:15 +0000 Certificate not after: Mon 25 Sep 2028 05:31:28 +0000 Subordinate resources: AS: 40792 AS: 402446 IP: 23.160.100.0/24 IP: 143.203.196.0/22 IP: 2602:f3e1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:21:41:79:f0:96:54:6c:a0:5b:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 2 19:24:15 2026 GMT Not After : Sep 25 05:31:28 2028 GMT Subject: CN=9a49615f-900e-4d21-a4ce-b62621c53141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:55:45:40:8c:5d:a1:c4:a2:ce:59:da:f5: 08:73:a3:77:4b:e8:1c:aa:d7:6c:9f:b3:e2:46:bf: b8:05:98:dc:a9:9e:08:35:6b:2b:58:f1:be:1a:ac: 4c:af:69:b9:7d:84:d2:e3:b7:9f:bf:cb:a1:d3:60: 04:85:e7:70:b4:20:b3:07:b9:d1:59:e5:47:d5:94: b5:d0:d9:ac:51:18:1d:ef:fb:37:de:2e:2d:fa:64: 87:28:00:cc:19:ba:67:e8:c2:d5:69:2f:cf:b4:d0: 9c:0b:98:bd:09:a2:18:4d:3e:ec:fe:94:38:df:e7: 81:03:d8:2f:05:65:86:7b:9a:d7:d0:98:2a:24:d7: bf:d4:25:a4:09:05:0a:d5:25:a0:6f:dc:bb:3a:58: a6:98:eb:88:1b:f3:ae:8e:fd:6d:e4:21:50:85:be: d9:73:2b:cc:03:66:f8:04:06:25:6a:d2:f5:b8:bd: 84:5b:5c:1a:45:3b:58:1c:76:1b:83:63:3c:f5:7e: 20:1a:0b:54:9d:1b:7f:3f:13:8a:65:b4:89:aa:8c: 28:59:82:26:5b:b4:ed:d0:92:6a:bc:58:e0:2f:88: 94:2c:f4:ae:fb:8c:02:51:e0:53:24:a3:94:4d:b3: e0:a2:7c:45:1d:45:d8:c6:b4:d1:99:21:1a:5e:b9: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:74:47:F4:CB:DF:9D:43:55:8B:19:06:FF:34:6C:C4:D1:0B:41:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9a49615f-900e-4d21-a4ce-b62621c53141/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9a49615f-900e-4d21-a4ce-b62621c53141/9a49615f-900e-4d21-a4ce-b62621c53141.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.160.100.0/24 143.203.196.0/22 IPv6: 2602:f3e1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40792 402446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1b:a5:2f:f9:36:14:db:15:d1:16:fe:60:48:4f:e6:78:26: a4:99:4a:9d:e3:c2:68:8a:92:b2:60:82:cc:51:2e:f5:98:71: 76:46:15:40:3c:b1:51:1a:8a:8a:0d:24:6f:1d:90:a4:cf:b6: 35:56:dc:6c:b4:8f:cd:11:dd:dc:5c:2a:d7:19:fa:29:2c:35: 13:a2:6d:58:46:34:21:57:ff:36:0c:49:be:56:a6:78:06:14: 3e:35:00:e3:5c:4b:e4:aa:75:ee:1c:87:b5:1e:ae:8e:e7:cb: d2:e0:3e:28:80:75:22:bb:91:33:91:a9:86:c0:f8:01:27:23: 13:60:35:c9:22:ea:09:ac:72:76:c7:d2:53:fb:a7:e8:ee:a0: 2f:63:32:dc:c9:aa:a0:40:38:da:11:ea:dc:8a:aa:44:b2:7f: dd:69:11:f7:ca:50:6a:c7:7b:3b:51:f1:c5:b9:f8:6c:2f:1c: 3d:dd:79:c7:be:3b:1c:e5:0e:77:eb:a1:88:72:92:f5:d1:fc: bd:05:6d:4c:77:f7:f4:44:bf:31:d9:34:a9:6c:5f:9b:64:cf: c5:88:9e:80:1d:f6:02:eb:cc:81:ac:af:56:03:b1:70:e5:58: f4:0f:98:67:34:bc:6e:b4:a7:ab:b2:a7:9d:b7:fe:41:a2:21: 30:df:4b:5a -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9fIUF58JZUbKBbbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwMjE5MjQxNVoXDTI4MDkyNTA1MzEyOFowLzEtMCsGA1UEAxMk OWE0OTYxNWYtOTAwZS00ZDIxLWE0Y2UtYjYyNjIxYzUzMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWxVRUCMXaHEos5Z2vUIc6N3S+gcqtdsn7Pi Rr+4BZjcqZ4INWsrWPG+GqxMr2m5fYTS47efv8uh02AEhedwtCCzB7nRWeVH1ZS1 0NmsURgd7/s33i4t+mSHKADMGbpn6MLVaS/PtNCcC5i9CaIYTT7s/pQ43+eBA9gv BWWGe5rX0JgqJNe/1CWkCQUK1SWgb9y7OlimmOuIG/Oujv1t5CFQhb7ZcyvMA2b4 BAYlatL1uL2EW1waRTtYHHYbg2M89X4gGgtUnRt/PxOKZbSJqowoWYImW7Tt0JJq vFjgL4iULPSu+4wCUeBTJKOUTbPgonxFHUXYxrTRmSEaXrn7GwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFEB0R/TL351DVYsZBv80bMTRC0EFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 YTQ5NjE1Zi05MDBlLTRkMjEtYTRjZS1iNjI2MjFjNTMxNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzlhNDk2MTVmLTkwMGUtNGQyMS1h NGNlLWI2MjYyMWM1MzE0MS85YTQ5NjE1Zi05MDBlLTRkMjEtYTRjZS1iNjI2MjFj NTMxNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXoGQDBAKPy8QwDgQCAAIwCAMGBCYC8+EAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCfWAIDBiQOMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGkbpS/5NhTb FdEW/mBIT+Z4JqSZSp3jwmiKkrJggsxRLvWYcXZGFUA8sVEaiooNJG8dkKTPtjVW 3Gy0j80R3dxcKtcZ+iksNROibVhGNCFX/zYMSb5WpngGFD41AONcS+Sqde4ch7Ue ro7ny9LgPiiAdSK7kTORqYbA+AEnIxNgNcki6gmscnbH0lP7p+juoC9jMtzJqqBA ONoR6tyKqkSyf91pEffKUGrHeztR8cW5+GwvHD3dece+OxzlDnfroYhykvXR/L0F bUx39/REvzHZNKlsX5tkz8WInoAd9gLrzIGsr1YDsXDlWPQPmGc0vG60p6uyp523 /kGiITDfS1o= -----END CERTIFICATE-----Generated at Thu Oct 22 20:07:19 2026 by rpki-client