$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bae26c6a-49c3-4321-a5a4-4ed74ab25ff3.cer File: bae26c6a-49c3-4321-a5a4-4ed74ab25ff3.cer (raw, json) Hash identifier: XQVsfKUoctdW2OdKpj0AAraAeGxo1g+zVFBuiNq+XFI= Subject key identifier: FA:6B:2F:05:A9:89:B6:46:82:93:FB:5A:1F:3F:09:BC:C5:0C:91:27 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FA9FD74F2F341159DF8DA3C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bae26c6a-49c3-4321-a5a4-4ed74ab25ff3/bae26c6a-49c3-4321-a5a4-4ed74ab25ff3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bae26c6a-49c3-4321-a5a4-4ed74ab25ff3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 14:57:45 +0000 Certificate not after: Wed 31 Jan 2029 15:57:45 +0000 Subordinate resources: AS: 400885 IP: 23.162.216.0/24 IP: 2607:6dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a9:fd:74:f2:f3:41:15:9d:f8:da:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 29 14:57:45 2026 GMT Not After : Jan 31 15:57:45 2029 GMT Subject: CN=bae26c6a-49c3-4321-a5a4-4ed74ab25ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:34:3d:0d:68:cf:40:5a:a8:d4:32:5a:b1: 9c:6a:cb:29:25:a8:7f:ef:8a:cf:5a:94:08:48:eb: 03:d6:27:ab:66:bf:6e:37:73:45:b4:84:24:31:bd: b0:d0:a8:2e:c9:0e:e9:e0:bf:a0:f8:b1:75:b7:a3: 33:da:22:e3:9b:2a:c5:43:0b:79:59:3c:ce:40:a9: 3e:5d:e4:6e:7f:e6:c2:e9:3b:e9:fb:1b:30:e9:61: bb:6d:86:cc:27:19:14:95:c3:ef:45:f8:fc:20:a4: 64:ac:47:9a:1a:ab:b6:3e:89:59:a8:de:cd:ff:06: a9:8a:05:b7:25:7f:c5:25:3c:24:0e:0f:60:7b:2d: 14:ef:28:32:6a:cd:2a:68:d5:38:77:50:3a:11:61: 4b:25:f7:73:ae:a1:fc:3c:2b:48:25:e6:44:e3:f3: 00:96:95:f9:e3:9f:22:1d:51:d4:a6:21:c8:10:7a: 69:29:a5:e8:d9:18:10:64:20:c4:c9:5f:3e:e1:b7: d1:8a:f8:43:42:78:43:d2:62:f3:98:d8:2f:c2:05: 0f:f7:54:5d:f0:56:b3:1f:1a:a2:03:cd:3b:b8:00: e3:7c:f0:86:ab:4e:3f:a1:59:eb:c8:c3:0c:7c:fd: b6:40:37:72:5d:ad:6f:8b:a9:72:77:22:25:ad:00: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:2F:05:A9:89:B6:46:82:93:FB:5A:1F:3F:09:BC:C5:0C:91:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bae26c6a-49c3-4321-a5a4-4ed74ab25ff3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bae26c6a-49c3-4321-a5a4-4ed74ab25ff3/bae26c6a-49c3-4321-a5a4-4ed74ab25ff3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.162.216.0/24 IPv6: 2607:6dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400885 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5a:be:ae:b5:90:d2:11:0f:2b:6d:b3:29:6f:56:a6:7e:b6: 5d:a7:10:64:3d:46:22:c2:bd:0c:29:3b:86:3c:92:3f:74:87: 5e:e9:09:40:fa:fd:d7:5c:fa:7b:de:9e:5a:7e:f7:c6:eb:d1: 96:f7:80:08:37:d3:38:2c:05:e9:b1:d1:b4:6b:fd:d8:e0:b3: 68:5d:cf:94:19:a2:90:c3:03:4b:cf:08:9d:fe:68:39:8f:6d: 43:67:a3:ea:ec:2e:7a:2a:7a:85:dd:e7:e3:b5:8c:94:5b:0a: 03:19:b3:9d:0b:d6:d4:29:33:9c:00:15:7c:61:c6:35:be:0c: 03:5a:27:94:2a:9e:9e:90:da:a1:32:dd:0c:54:28:d6:9a:4a: 53:fb:1c:6e:f1:92:c7:27:f6:38:40:19:76:33:b2:1d:65:76: b2:21:7e:54:01:03:23:e8:40:40:ec:3a:71:da:70:3f:8b:da: 88:f1:ff:c1:77:84:0d:f8:9e:49:ed:6e:1f:e8:49:65:40:69: 0e:10:e4:6e:48:02:50:ed:3a:68:d8:92:07:37:08:ee:0b:25: 42:29:48:ee:9b:b1:ec:56:df:fa:92:5a:10:6a:5e:12:18:8a: ed:fa:45:ba:5e:a4:0a:7c:30:fc:5f:3e:95:c9:29:6c:b4:a4: b4:29:27:89 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE+p/XTy80EVnfjaPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTAyOTE0NTc0NVoXDTI5MDEzMTE1NTc0NVowLzEtMCsGA1UEAxMk YmFlMjZjNmEtNDljMy00MzIxLWE1YTQtNGVkNzRhYjI1ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkw0PQ1oz0BaqNQyWrGcasspJah/74rPWpQI SOsD1ierZr9uN3NFtIQkMb2w0KguyQ7p4L+g+LF1t6Mz2iLjmyrFQwt5WTzOQKk+ XeRuf+bC6Tvp+xsw6WG7bYbMJxkUlcPvRfj8IKRkrEeaGqu2PolZqN7N/wapigW3 JX/FJTwkDg9gey0U7ygyas0qaNU4d1A6EWFLJfdzrqH8PCtIJeZE4/MAlpX5458i HVHUpiHIEHppKaXo2RgQZCDEyV8+4bfRivhDQnhD0mLzmNgvwgUP91Rd8FazHxqi A807uADjfPCGq04/oVnryMMMfP22QDdyXa1vi6lydyIlrQC1WwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPprLwWpibZGgpP7Wh8/CbzFDJEnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i YWUyNmM2YS00OWMzLTQzMjEtYTVhNC00ZWQ3NGFiMjVmZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JhZTI2YzZhLTQ5YzMtNDMyMS1h NWE0LTRlZDc0YWIyNWZmMy9iYWUyNmM2YS00OWMzLTQzMjEtYTVhNC00ZWQ3NGFi MjVmZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXotgwDQQCAAIwBwMFACYHbcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh31MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHhavq61kNIRDyttsylvVqZ+tl2n EGQ9RiLCvQwpO4Y8kj90h17pCUD6/ddc+nvenlp+98br0Zb3gAg30zgsBemx0bRr /djgs2hdz5QZopDDA0vPCJ3+aDmPbUNno+rsLnoqeoXd5+O1jJRbCgMZs50L1tQp M5wAFXxhxjW+DANaJ5Qqnp6Q2qEy3QxUKNaaSlP7HG7xkscn9jhAGXYzsh1ldrIh flQBAyPoQEDsOnHacD+L2ojx/8F3hA34nkntbh/oSWVAaQ4Q5G5IAlDtOmjYkgc3 CO4LJUIpSO6bsexW3/qSWhBqXhIYiu36RbpepAp8MPxfPpXJKWy0pLQpJ4k= -----END CERTIFICATE-----Generated at Thu Nov 5 07:34:58 2026 by rpki-client