$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541.cer File: 8d51925e-a23b-408e-92ac-aab0dd904541.cer (raw, json) Hash identifier: DXU4WzNWaBD7+9nwVTekSv0FDuRscRouw0KHE+7z2Wk= Subject key identifier: 8F:54:EA:C7:14:87:D2:28:68:31:C3:88:6E:1F:4F:21:CA:81:C8:55 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F7CE88EE6A29BA3F3CA205780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/8d51925e-a23b-408e-92ac-aab0dd904541.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 11:24:16 +0000 Certificate not after: Mon 08 Jan 2029 18:53:25 +0000 Subordinate resources: AS: 21873 IP: 66.199.192.0/19 IP: 2604:8680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:e8:8e:e6:a2:9b:a3:f3:ca:20:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 13 11:24:16 2026 GMT Not After : Jan 8 18:53:25 2029 GMT Subject: CN=8d51925e-a23b-408e-92ac-aab0dd904541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:1f:6d:f7:dc:cc:31:29:1e:07:7c:9e:5c: 1e:c2:dd:e9:2c:b4:79:82:c0:b5:86:50:00:8c:20: 5d:8d:b7:a8:96:60:08:b1:01:ee:15:66:2d:9a:2f: bd:72:ba:ac:72:fe:be:63:41:b3:f1:ce:a7:5a:a8: 30:ce:88:3e:50:a7:41:e9:35:28:3f:3c:5b:4d:6b: 47:d4:40:53:3f:3a:f2:08:83:95:3e:49:ef:c9:8e: e8:24:48:97:24:aa:b1:ff:19:c8:8d:d6:2a:fe:da: 68:83:b0:6d:ea:83:b1:8d:c1:75:98:b1:73:57:52: 9d:30:23:1d:af:3c:76:6c:2d:98:a6:67:9e:8e:1b: 27:9c:c7:a6:67:f1:72:9b:2b:f8:f1:e9:82:84:ea: b9:87:2a:cd:f7:14:70:0a:b3:9c:3d:e4:29:2f:ea: 5a:7e:49:76:61:8e:7c:72:e0:a0:67:db:e5:6c:b7: e5:16:09:ff:9e:c9:a2:99:3b:c6:4d:83:07:d1:8c: 71:d0:d1:9d:d5:96:d4:2f:76:81:83:9f:db:fe:ac: f3:91:ab:d6:69:30:f4:3b:9d:23:4a:ac:ef:d0:00: 40:54:64:ee:b9:c7:21:12:e2:46:8a:d5:f9:3d:a1: 68:8a:4b:08:eb:26:9b:60:eb:78:10:6c:bd:4e:b0: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:54:EA:C7:14:87:D2:28:68:31:C3:88:6E:1F:4F:21:CA:81:C8:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/8d51925e-a23b-408e-92ac-aab0dd904541.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.199.192.0/19 IPv6: 2604:8680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21873 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6b:e3:ce:75:18:16:df:8d:ba:8f:e0:45:bd:e8:4e:ec:11: 4e:2f:b0:7e:bf:49:c9:8c:3b:73:0b:05:08:9d:28:8c:7f:61: 65:ff:1c:e2:38:f4:8b:bd:2f:dc:66:6d:0e:e1:5d:3f:78:4e: 4c:74:b8:5a:5f:f0:a1:fa:31:04:60:9c:30:a1:7d:f9:a2:01: ca:ae:43:6c:39:6f:73:c5:35:54:79:cf:e1:86:81:0a:5d:98: 9c:62:08:ac:0e:fc:84:08:b4:e4:09:7f:f6:71:6a:60:67:2b: 6c:53:be:8a:a2:c6:05:b2:28:35:09:13:5d:77:b9:7e:9f:00: b2:dc:25:fa:0e:a7:42:3d:f5:62:25:86:c0:d7:b8:56:fa:19: 32:4e:15:31:f5:39:ff:2d:b8:1b:07:f1:76:3e:a7:89:48:a7: 10:b2:18:60:be:f6:6c:60:69:7b:4c:48:dc:fa:99:8c:d7:94: 54:5d:4f:35:33:ba:16:a0:72:d9:a2:68:91:d2:6c:12:40:aa: f3:49:02:f8:84:62:c8:bb:d9:e0:f2:60:1f:3c:47:51:8d:66: de:61:e1:89:7a:f7:8d:e7:91:d1:33:da:81:95:0c:40:c5:ec: 7b:ad:d7:76:f7:d9:52:90:52:0c:71:44:22:db:9d:81:81:21: 88:31:fa:45 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE986I7mopuj88ogV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MTAxMzExMjQxNloXDTI5MDEwODE4NTMyNVowLzEtMCsGA1UEAxMk OGQ1MTkyNWUtYTIzYi00MDhlLTkyYWMtYWFiMGRkOTA0NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpEfbffczDEpHgd8nlwewt3pLLR5gsC1hlAA jCBdjbeolmAIsQHuFWYtmi+9crqscv6+Y0Gz8c6nWqgwzog+UKdB6TUoPzxbTWtH 1EBTPzryCIOVPknvyY7oJEiXJKqx/xnIjdYq/tpog7Bt6oOxjcF1mLFzV1KdMCMd rzx2bC2YpmeejhsnnMemZ/Fymyv48emChOq5hyrN9xRwCrOcPeQpL+pafkl2YY58 cuCgZ9vlbLflFgn/nsmimTvGTYMH0Yxx0NGd1ZbUL3aBg5/b/qzzkavWaTD0O50j Sqzv0ABAVGTuucchEuJGitX5PaFoiksI6yabYOt4EGy9TrB+qwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFI9U6scUh9IoaDHDiG4fTyHKgchVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 ZDUxOTI1ZS1hMjNiLTQwOGUtOTJhYy1hYWIwZGQ5MDQ1NDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhkNTE5MjVlLWEyM2ItNDA4ZS05 MmFjLWFhYjBkZDkwNDU0MS84ZDUxOTI1ZS1hMjNiLTQwOGUtOTJhYy1hYWIwZGQ5 MDQ1NDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAVCx8AwDQQCAAIwBwMFACYEhoAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVXEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE2vjznUYFt+Nuo/gRb3oTuwRTi+w fr9JyYw7cwsFCJ0ojH9hZf8c4jj0i70v3GZtDuFdP3hOTHS4Wl/wofoxBGCcMKF9 +aIByq5DbDlvc8U1VHnP4YaBCl2YnGIIrA78hAi05Al/9nFqYGcrbFO+iqLGBbIo NQkTXXe5fp8Astwl+g6nQj31YiWGwNe4VvoZMk4VMfU5/y24Gwfxdj6niUinELIY YL72bGBpe0xI3PqZjNeUVF1PNTO6FqBy2aJokdJsEkCq80kC+IRiyLvZ4PJgHzxH UY1m3mHhiXr3jeeR0TPagZUMQMXse63XdvfZUpBSDHFEItudgYEhiDH6RQ== -----END CERTIFICATE-----Generated at Mon Oct 19 22:40:24 2026 by rpki-client