$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer File: 2f9f859b-6735-4c5f-8f00-0526da777ec4.cer (raw, json) Hash identifier: i5bk/zM+t36/AQj5lIqQl4kvjMtplX6LYSfcNOR8JI4= Subject key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584F5BA3E732E49DA4C1E93B5F30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 13:24:15 +0000 Certificate not after: Mon 24 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 397966 IP: 134.195.136.0/22 IP: 165.140.164.0/22 IP: 170.205.52.0/22 IP: 209.87.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:a3:e7:32:e4:9d:a4:c1:e9:3b:5f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 1 13:24:15 2026 GMT Not After : Jul 24 12:45:17 2028 GMT Subject: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:7a:c5:5f:fb:a3:2a:50:78:a7:dd:29:40: 84:85:ea:b0:e2:9a:1b:05:52:a4:85:60:e6:f4:2f: 98:5f:08:dd:be:1f:9c:bd:ca:1f:f8:0d:ed:29:62: 13:d3:1b:a7:a2:8c:6e:37:d7:a4:b2:1e:72:5a:f1: a4:6c:5c:d5:6b:af:88:ca:25:a5:38:b2:31:0a:7f: 86:a9:cb:fc:56:08:c9:9b:f8:b6:2a:22:4f:91:af: f0:c5:68:e8:55:ea:5d:62:04:cf:9c:c4:5f:6f:44: e5:8d:e9:74:9d:a8:6e:b2:e1:fc:b3:32:a2:b3:65: 83:3a:d0:5e:45:c0:c3:12:20:b1:6b:bb:08:64:2c: e6:d1:62:68:72:0e:a4:5c:35:e9:df:3b:63:a4:91: e9:ae:9d:f2:c1:87:03:44:60:d8:30:21:12:76:83: 54:87:81:97:73:d6:c5:6b:02:f5:f2:fd:34:dd:61: e6:9c:31:a0:ff:be:ac:76:05:e6:23:f6:36:ab:7f: 8c:46:fe:46:21:b7:97:b8:0d:94:32:72:88:09:dc: da:0b:8e:90:e6:40:80:11:17:0b:a2:aa:ee:23:dc: bd:d1:74:01:6d:fa:9f:77:c9:65:87:5c:ca:d6:95: f3:ad:21:77:6e:3c:92:aa:55:62:1d:38:08:e5:5b: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 134.195.136.0/22 165.140.164.0/22 170.205.52.0/22 209.87.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397966 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:39:04:2f:72:cd:81:45:b2:7e:d4:74:4c:e5:62:6b:b9:b3: 0d:e9:00:70:40:b1:fe:66:b9:dd:90:1b:b7:5d:b3:fd:52:65: 21:5f:53:de:93:ec:a5:08:a7:27:44:f4:cb:2d:94:4b:22:86: 13:4f:aa:4b:e7:03:b0:48:99:10:e0:d9:ca:e2:ed:8f:13:79: 12:3d:f2:e7:13:16:73:c9:e8:8d:f6:a6:7f:62:26:b1:26:3e: ee:ad:16:b1:68:f5:1c:c4:82:b3:41:f2:8d:6f:ba:83:ab:b3: 11:18:0d:6d:f8:3b:26:55:2b:74:37:0b:50:f7:6e:1b:2a:a4: 70:06:d2:f6:55:b8:1f:e3:18:4e:5e:a7:e3:67:1a:3b:a7:15: d1:7d:44:37:2e:ea:96:19:f3:e1:c6:d9:de:2b:d9:13:49:84: de:86:96:a1:30:e8:5c:b1:5f:a6:6f:80:21:49:b3:71:28:58: 47:92:35:e5:9c:42:71:e9:c7:ec:04:1a:1e:67:5e:ba:f6:db: a2:fe:0b:c7:7c:59:52:bd:95:aa:be:0a:cf:94:d6:d9:6a:fc: 75:68:08:aa:4e:5b:44:f6:3d:2c:31:cf:40:1f:d5:be:59:3d: 3e:52:7e:86:66:7c:2c:22:bf:51:08:2d:b9:60:ef:f3:14:2e: bd:67:8c:3f -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWE9bo+cy5J2kwek7XzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MTAwMTEzMjQxNVoXDTI4MDcyNDEyNDUxN1owLzEtMCsGA1UEAxMk MmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ax6xV/7oypQeKfdKUCEheqw4pobBVKkhWDm 9C+YXwjdvh+cvcof+A3tKWIT0xunooxuN9eksh5yWvGkbFzVa6+IyiWlOLIxCn+G qcv8VgjJm/i2KiJPka/wxWjoVepdYgTPnMRfb0Tljel0nahusuH8szKis2WDOtBe RcDDEiCxa7sIZCzm0WJocg6kXDXp3ztjpJHprp3ywYcDRGDYMCESdoNUh4GXc9bF awL18v003WHmnDGg/76sdgXmI/Y2q3+MRv5GIbeXuA2UMnKICdzaC46Q5kCAERcL oqruI9y90XQBbfqfd8llh1zK1pXzrSF3bjySqlViHTgI5VtBHQIDAQABo4IELTCC BCkwHQYDVR0OBBYEFFiPn0dLWuheS7b1D2wuvHaYlKsrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y ZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzJmOWY4NTliLTY3MzUtNGM1Zi04 ZjAwLTA1MjZkYTc3N2VjNC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3 NzdlYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAKGw4gDBAKljKQDBAKqzTQDBALRV7QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBhKOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAc5BC9yzYFFsn7UdEzlYmu5 sw3pAHBAsf5mud2QG7dds/1SZSFfU96T7KUIpydE9MstlEsihhNPqkvnA7BImRDg 2cri7Y8TeRI98ucTFnPJ6I32pn9iJrEmPu6tFrFo9RzEgrNB8o1vuoOrsxEYDW34 OyZVK3Q3C1D3bhsqpHAG0vZVuB/jGE5ep+NnGjunFdF9RDcu6pYZ8+HG2d4r2RNJ hN6GlqEw6FyxX6ZvgCFJs3EoWEeSNeWcQnHpx+wEGh5nXrr226L+C8d8WVK9laq+ Cs+U1tlq/HVoCKpOW0T2PSwxz0Af1b5ZPT5SfoZmfCwiv1EILblg7/MULr1njD8= -----END CERTIFICATE-----Generated at Tue Oct 27 09:23:51 2026 by rpki-client