$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer File: e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer (raw, json) Hash identifier: P6o7LufSlcNIyYlfVJxm42T7+ytKmnyBeTLfMsqeouM= Subject key identifier: DE:2F:43:B6:C4:85:E6:DC:33:B0:1E:76:7C:AB:3C:9A:D0:6C:6F:71 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F2AB58A027D908838F96B6B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 00:45:11 +0000 Certificate not after: Sun 17 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 401760 IP: 23.140.20.0/24 IP: 2620:d9:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:b5:8a:02:7d:90:88:38:f9:6b:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 14 00:45:11 2026 GMT Not After : Dec 17 01:45:11 2028 GMT Subject: CN=e91c6482-7261-4772-b3f7-fd5fa4ae995c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:95:74:09:18:6c:d2:e2:52:0a:2f:e5:a3: 15:c7:e8:f5:3a:aa:f5:4c:a0:0b:f7:8b:47:ca:04: 86:8b:30:bb:43:d3:63:4f:d8:60:39:2f:26:14:ea: 9a:6b:b6:34:70:d9:09:81:82:c7:31:ad:dc:1a:92: 11:2f:ac:aa:2e:60:3b:69:3a:cd:6c:df:d7:3d:45: 17:b8:63:cb:a3:9c:fc:8e:38:7f:7f:f8:54:b5:7e: 9f:1c:9d:ab:d7:bf:f8:98:9d:6b:96:fc:f8:df:16: 00:ae:db:f8:08:ef:66:ba:58:4f:61:86:e8:23:74: c5:6f:fb:f7:b4:6d:32:15:82:0e:7f:ba:8e:59:4b: 51:98:82:51:06:80:e9:79:a4:5a:77:33:27:69:9b: 38:47:5f:35:56:27:b3:38:dd:bf:1e:61:31:68:4b: d9:b8:fb:31:8b:91:05:e1:61:6b:76:91:98:99:da: 14:63:62:5b:67:95:3b:ca:f6:34:af:fc:29:5d:a0: bc:2c:e9:7c:89:b1:75:15:23:24:7d:77:6a:d7:80: a6:4c:7e:f8:0e:29:5f:bf:36:e9:a1:61:be:02:bf: ae:85:8f:57:48:8d:07:45:bc:47:1a:66:50:c6:37: c7:94:e5:8b:42:89:6a:28:09:e7:e1:ad:0f:af:83: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:43:B6:C4:85:E6:DC:33:B0:1E:76:7C:AB:3C:9A:D0:6C:6F:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.20.0/24 IPv6: 2620:d9:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401760 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1f:3a:0b:e7:84:ee:39:58:59:1f:88:79:e5:77:54:32:00: 44:c5:09:0d:42:92:88:a1:dd:8d:85:ca:f8:cf:81:8a:da:bc: f5:ab:e6:2a:03:5d:13:e0:0f:8b:a8:ca:c2:df:54:99:a2:1a: 0a:03:9f:94:55:bc:55:03:7b:e7:01:83:ff:b4:88:5b:35:c7: 72:48:47:f8:a0:56:a2:15:91:1d:0c:3d:6d:a2:fc:4f:f8:d1: d5:0c:44:19:e1:50:df:06:22:bf:45:8e:4e:62:41:40:5d:5e: 16:65:06:43:6f:d2:71:de:6c:dd:31:8e:07:b2:ca:ab:9b:b1: d9:59:b3:a6:8b:ee:19:45:80:82:9a:4b:3c:df:4b:e5:22:e4: f5:78:df:7b:59:63:5b:ec:dc:ae:28:0f:e8:c0:5d:8f:e4:9b: 67:52:d8:fb:df:c2:49:7f:e7:30:2a:53:bb:61:5f:ed:b1:00: 5d:6c:21:b0:69:77:33:92:d7:3f:68:8d:fd:43:11:39:f6:19: 41:0c:26:9f:d2:83:0f:db:09:d0:bb:9c:72:4d:18:da:b5:33: a9:72:7a:be:48:c8:12:13:0f:4b:91:48:b2:41:18:8d:55:91: db:9d:fb:87:91:be:e4:79:f3:ef:b2:34:00:fc:10:28:52:e2: 44:3f:56:9d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE8qtYoCfZCIOPlrawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkxNDAwNDUxMVoXDTI4MTIxNzAxNDUxMVowLzEtMCsGA1UEAxMk ZTkxYzY0ODItNzI2MS00NzcyLWIzZjctZmQ1ZmE0YWU5OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEyVdAkYbNLiUgov5aMVx+j1Oqr1TKAL94tH ygSGizC7Q9NjT9hgOS8mFOqaa7Y0cNkJgYLHMa3cGpIRL6yqLmA7aTrNbN/XPUUX uGPLo5z8jjh/f/hUtX6fHJ2r17/4mJ1rlvz43xYArtv4CO9mulhPYYboI3TFb/v3 tG0yFYIOf7qOWUtRmIJRBoDpeaRadzMnaZs4R181ViezON2/HmExaEvZuPsxi5EF 4WFrdpGYmdoUY2JbZ5U7yvY0r/wpXaC8LOl8ibF1FSMkfXdq14CmTH74Dilfvzbp oWG+Ar+uhY9XSI0HRbxHGmZQxjfHlOWLQolqKAnn4a0Pr4OxrwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFN4vQ7bEhebcM7AednyrPJrQbG9xMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l OTFjNjQ4Mi03MjYxLTQ3NzItYjNmNy1mZDVmYTRhZTk5NWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U5MWM2NDgyLTcyNjEtNDc3Mi1i M2Y3LWZkNWZhNGFlOTk1Yy9lOTFjNjQ4Mi03MjYxLTQ3NzItYjNmNy1mZDVmYTRh ZTk5NWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXjBQwDwQCAAIwCQMHACYgANkgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABB86C+eE7jlYWR+IeeV3VDIA RMUJDUKSiKHdjYXK+M+Bitq89avmKgNdE+APi6jKwt9UmaIaCgOflFW8VQN75wGD /7SIWzXHckhH+KBWohWRHQw9baL8T/jR1QxEGeFQ3wYiv0WOTmJBQF1eFmUGQ2/S cd5s3TGOB7LKq5ux2VmzpovuGUWAgppLPN9L5SLk9Xjfe1ljW+zcrigP6MBdj+Sb Z1LY+9/CSX/nMCpTu2Ff7bEAXWwhsGl3M5LXP2iN/UMROfYZQQwmn9KDD9sJ0Luc ck0Y2rUzqXJ6vkjIEhMPS5FIskEYjVWR2537h5G+5Hnz77I0APwQKFLiRD9WnQ== -----END CERTIFICATE-----Generated at Wed Sep 16 05:51:27 2026 by rpki-client