$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer File: 5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer (raw, json) Hash identifier: BPj5UE9dIhv8krl8wdpdJ0reMWPvXNrfY0CCfFiPnqI= Subject key identifier: D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584F5F27384B17CEB9A0D29852A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 19:36:16 +0000 Certificate not after: Tue 05 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 402695 AS: 402946 -- 402947 IP: 23.166.40.0/24 IP: 143.203.216.0/22 IP: 2602:f34c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:27:38:4b:17:ce:b9:a0:d2:98:52:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 2 19:36:16 2026 GMT Not After : Sep 5 20:45:11 2028 GMT Subject: CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:e3:e4:15:9e:dc:08:63:cf:0b:5a:cd:28: cb:59:d1:8e:cf:3c:48:da:69:bf:18:27:7e:e2:3c: a7:f0:f5:49:a7:8c:43:cf:1f:32:0d:50:08:9a:f1: 1b:cb:10:d1:8a:9a:0c:a9:c0:d5:36:32:74:8b:a4: 9c:59:d2:55:1f:da:c2:78:7c:3a:b7:27:69:a5:c5: 35:54:e7:2f:fa:70:b8:35:f6:45:dd:be:38:5a:63: ba:7f:d8:79:51:d9:91:ef:ca:cf:ca:02:be:1f:4d: bc:4e:ec:00:59:d3:e2:b6:41:0b:3e:7a:87:53:96: f0:49:2e:90:d3:f6:91:f1:c9:bc:2d:14:de:49:ff: b0:0f:81:1c:2f:38:58:e0:b4:de:77:fe:d2:cb:75: 9a:95:32:d5:41:75:7e:ca:a5:58:af:81:07:bb:ef: db:f3:90:de:67:78:48:b0:52:48:9d:73:95:49:38: c6:23:00:cd:34:03:63:14:cd:26:59:ca:bb:16:ca: 2c:cd:32:39:3d:ae:df:fc:1e:fd:70:a5:0f:05:f3: 82:ea:6d:30:6e:1a:22:e9:b9:4e:c7:70:15:29:3d: 2a:5c:bf:b3:fb:9a:09:fc:48:45:6e:e2:55:b5:77: c2:68:d2:22:5a:97:b7:0c:5d:22:dc:3d:5a:03:50: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.166.40.0/24 143.203.216.0/22 IPv6: 2602:f34c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402695 402946-402947 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2a:96:b0:41:1e:d2:2c:ee:71:09:88:24:05:12:72:9d:26: e3:a0:ff:2f:77:e5:f6:5a:48:cf:23:9a:91:5b:81:45:c5:09: f9:0e:50:08:f3:d8:b6:e4:24:b4:59:9e:72:aa:b2:d0:e2:e8: 55:d1:bb:21:2e:f1:0d:94:f5:15:ab:11:59:41:db:d1:24:7f: 80:ef:23:c7:d5:d8:36:0d:ce:3f:e4:a7:ce:b5:a3:44:0a:5c: 5b:df:55:17:33:79:82:d8:9f:b1:20:2b:cd:90:6a:65:ba:8d: ec:9c:6a:c0:0a:52:0f:ff:8e:a6:16:23:0f:5b:04:e1:48:cb: ee:50:2b:12:39:29:b3:6d:aa:7b:90:86:25:51:33:db:b2:3f: 13:19:b3:f3:3d:69:33:32:b9:a3:3a:42:fa:da:9c:61:11:c1: 5b:40:71:41:e1:4c:eb:d6:a4:6e:a1:b2:bc:9d:be:0a:82:52: 13:f8:1e:94:03:e3:90:83:e9:30:7c:17:4a:65:f7:d9:4f:e7: ea:f8:99:30:c8:3c:aa:93:5a:1b:f0:08:f1:70:3e:79:74:a6: 92:99:37:a8:a8:d5:c9:20:53:dd:4e:0e:02:1c:33:bb:67:8e: ba:db:dc:9f:d7:5f:55:5b:12:7c:3d:ca:dc:b4:06:5e:f8:3c: d9:60:22:68 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWE9fJzhLF865oNKYUqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MTAwMjE5MzYxNloXDTI4MDkwNTIwNDUxMVowLzEtMCsGA1UEAxMk NWRkNDQyOWMtNTA4MC00ZGE5LTljZjYtYzVjZGNjMWIyMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuHj5BWe3AhjzwtazSjLWdGOzzxI2mm/GCd+ 4jyn8PVJp4xDzx8yDVAImvEbyxDRipoMqcDVNjJ0i6ScWdJVH9rCeHw6tydppcU1 VOcv+nC4NfZF3b44WmO6f9h5UdmR78rPygK+H028TuwAWdPitkELPnqHU5bwSS6Q 0/aR8cm8LRTeSf+wD4EcLzhY4LTed/7Sy3WalTLVQXV+yqVYr4EHu+/b85DeZ3hI sFJInXOVSTjGIwDNNANjFM0mWcq7FsoszTI5Pa7f/B79cKUPBfOC6m0wbhoi6blO x3AVKT0qXL+z+5oJ/EhFbuJVtXfCaNIiWpe3DF0i3D1aA1CixQIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFNlkw7WucXD1a9QHbspRnrovi6VAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 ZGQ0NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNkY2MxYjIxNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzVkZDQ0MjljLTUwODAtNGRhOS05 Y2Y2LWM1Y2RjYzFiMjE0My81ZGQ0NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNkY2Mx YjIxNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXpigDBAKPy9gwDgQCAAIwCAMGACYC80wAMCYG CCsGAQUFBwEIAQH/BBcwFaATMBECAwYlBzAKAgMGJgICAwYmAzBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBd KpawQR7SLO5xCYgkBRJynSbjoP8vd+X2WkjPI5qRW4FFxQn5DlAI89i25CS0WZ5y qrLQ4uhV0bshLvENlPUVqxFZQdvRJH+A7yPH1dg2Dc4/5KfOtaNEClxb31UXM3mC 2J+xICvNkGpluo3snGrAClIP/46mFiMPWwThSMvuUCsSOSmzbap7kIYlUTPbsj8T GbPzPWkzMrmjOkL62pxhEcFbQHFB4Uzr1qRuobK8nb4KglIT+B6UA+OQg+kwfBdK ZffZT+fq+JkwyDyqk1ob8AjxcD55dKaSmTeoqNXJIFPdTg4CHDO7Z46629yf119V WxJ8PcrctAZe+DzZYCJo -----END CERTIFICATE-----Generated at Sun Oct 11 06:52:36 2026 by rpki-client