$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer File: 1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer (raw, json) Hash identifier: yk2wz9QtLVOGMCMeLWp2jMdzTw+jugi+rudUIJKTR3I= Subject key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F295033B9E966D10242AD4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Sep 2026 12:45:11 +0000 Certificate not after: Sat 16 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 394854 IP: 162.120.94.0/24 IP: 209.188.101.0/24 IP: 2607:21c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:50:33:b9:e9:66:d1:02:42:ad:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 13 12:45:11 2026 GMT Not After : Dec 16 13:45:11 2028 GMT Subject: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:31:32:6a:4b:40:78:cd:69:49:1a:b5:c2: 8d:b9:77:6c:4c:17:bf:68:46:fa:4e:65:b8:a3:e6: e2:7d:6a:a4:75:5c:0e:13:9b:07:53:f3:fe:8b:8c: 52:1d:f7:2d:e8:4d:9a:b1:c0:d6:a8:03:2c:4a:dd: fb:39:0e:d9:b5:9f:de:b3:79:a4:47:b7:e2:a0:ff: 78:be:46:65:a9:1b:5d:6e:99:3f:e9:4e:5d:9b:87: ed:13:5f:bd:f1:f5:ac:66:0d:e6:c0:a1:98:00:a9: 78:71:5a:4a:9b:c1:c8:d2:1c:db:13:5e:c5:84:f7: 84:cb:4a:cc:af:e9:35:6e:90:91:03:e8:e2:8b:e9: 8d:b4:d4:8e:00:2d:59:88:87:75:d3:b4:01:45:1f: c7:b0:26:ec:54:ce:f9:28:fc:d3:40:53:c8:c0:c3: ae:28:aa:92:07:3c:9d:c8:57:9b:6d:93:4f:44:59: 39:06:53:aa:83:fa:5c:28:b2:e9:9c:12:d4:43:ef: 76:28:4c:98:f1:57:30:a2:86:17:60:46:bb:54:01: bc:48:a3:b9:4f:75:1b:58:07:d1:cc:4d:28:58:ff: ce:e9:40:0a:04:d9:96:da:59:76:30:db:a4:90:bc: 04:a7:a6:6e:72:bf:18:e6:88:36:f9:db:e6:d0:89: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 162.120.94.0/24 209.188.101.0/24 IPv6: 2607:21c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394854 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3a:c2:e2:53:8a:5d:63:c9:8c:c8:f3:8c:18:65:16:e5:80: 61:ef:32:08:b6:2f:f3:39:d2:3d:97:ea:73:22:cf:31:59:a6: 92:2d:92:16:02:32:d4:55:6f:eb:9d:f8:b3:a3:e8:bc:f0:ee: ca:8f:5c:3c:fe:02:44:f0:7b:6b:e3:64:9d:7a:ad:40:7b:16: 10:db:cc:47:d3:1d:d2:fe:49:bf:79:c3:90:38:8b:3c:a5:e3: 24:a1:f1:33:2b:15:f0:ea:43:e4:57:a2:fc:fb:95:11:02:c9: 98:90:17:ed:97:58:b7:19:d3:25:49:9f:7b:cf:a7:11:d8:16: 1d:41:cb:78:95:60:26:ac:9b:88:1c:57:4e:5d:73:e2:de:c4: c9:85:34:c6:44:93:d4:72:17:e8:4c:b5:d5:ff:63:43:6f:f0: 30:11:b1:40:17:22:a6:c8:52:75:9a:fc:69:d8:c9:bd:31:00: 46:9c:ff:7c:15:38:4c:83:1b:4a:87:8c:cc:21:ca:5d:ca:b0: dc:65:bf:ee:0e:d3:d9:20:66:7f:5e:bf:81:b5:f3:7c:6f:79: 3b:e1:0c:77:52:e3:95:b9:c5:62:c2:e2:cc:a0:98:e5:3b:31: aa:00:02:90:12:70:db:8e:7e:9b:ca:e6:d7:a2:8d:0b:3a:90: 6d:2e:5a:4d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE8pUDO56WbRAkKtQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkxMzEyNDUxMVoXDTI4MTIxNjEzNDUxMVowLzEtMCsGA1UEAxMk MWMxN2MxZDEtNzU5NS00NzdlLWFhY2ItZjhlZjQyYzRiYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicsxMmpLQHjNaUkatcKNuXdsTBe/aEb6TmW4 o+bifWqkdVwOE5sHU/P+i4xSHfct6E2ascDWqAMsSt37OQ7ZtZ/es3mkR7fioP94 vkZlqRtdbpk/6U5dm4ftE1+98fWsZg3mwKGYAKl4cVpKm8HI0hzbE17FhPeEy0rM r+k1bpCRA+jii+mNtNSOAC1ZiId107QBRR/HsCbsVM75KPzTQFPIwMOuKKqSBzyd yFebbZNPRFk5BlOqg/pcKLLpnBLUQ+92KEyY8VcwooYXYEa7VAG8SKO5T3UbWAfR zE0oWP/O6UAKBNmW2ll2MNukkLwEp6Zucr8Y5og2+dvm0ImGGwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFK3W/PjZ8DHUUuCpbY/7sbNge49eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJjNGJhOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFjMTdjMWQxLTc1OTUtNDc3ZS1h YWNiLWY4ZWY0MmM0YmE4ZS8xYzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJj NGJhOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACieF4DBADRvGUwDQQCAAIwBwMFACYHIcAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgZmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB46wuJTil1jyYzI84wY ZRblgGHvMgi2L/M50j2X6nMizzFZppItkhYCMtRVb+ud+LOj6Lzw7sqPXDz+AkTw e2vjZJ16rUB7FhDbzEfTHdL+Sb95w5A4izyl4ySh8TMrFfDqQ+RXovz7lRECyZiQ F+2XWLcZ0yVJn3vPpxHYFh1By3iVYCasm4gcV05dc+LexMmFNMZEk9RyF+hMtdX/ Y0Nv8DARsUAXIqbIUnWa/GnYyb0xAEac/3wVOEyDG0qHjMwhyl3KsNxlv+4O09kg Zn9ev4G183xveTvhDHdS45W5xWLC4sygmOU7MaoAApAScNuOfpvK5teijQs6kG0u Wk0= -----END CERTIFICATE-----Generated at Sat Sep 19 00:55:39 2026 by rpki-client