$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer File: f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer (raw, json) Hash identifier: Qmi96QtOkqkA0cDu8gTuFKLvu2KNUzXKHEVwyl9Fr8o= Subject key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F777B5CA74497DD816D569BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 12:45:12 +0000 Certificate not after: Sat 13 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 5119 IP: 192.104.81.0/24 IP: 192.160.189.0/24 IP: 204.106.17.0 -- 204.106.31.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:7b:5c:a7:44:97:dd:81:6d:56:9b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 11 12:45:12 2026 GMT Not After : Jan 13 13:45:12 2029 GMT Subject: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:fc:04:3e:12:61:27:d4:d3:23:dc:ef:6e: 6b:0f:49:36:03:54:bc:00:47:45:23:89:44:de:d3: 38:53:3a:e0:3b:bd:4a:96:1b:7b:5a:fb:f5:c1:c2: 2e:6c:9b:48:f7:39:b3:60:f7:7f:9b:1f:05:5c:4e: 0a:3e:36:14:f7:41:5d:8a:2a:36:ea:ec:ad:3e:1f: 47:17:d3:d7:c5:a7:c8:84:e5:8b:97:b4:43:59:57: 9a:7b:ae:5b:e1:d2:dd:a2:0d:18:1b:c7:34:92:c6: ba:19:a1:4a:05:9d:9e:38:6c:fc:9e:eb:5b:9e:b3: d8:b2:fd:a5:ec:53:1a:0d:16:de:10:a9:48:ee:0c: 37:74:21:0d:82:4f:71:aa:74:b4:88:55:95:09:6d: 43:a5:a8:5e:35:f6:ac:e8:09:12:f9:52:03:86:7c: d3:2c:bb:2a:da:62:3b:e3:79:08:e1:3d:63:c6:71: 4b:8d:a7:7b:3c:cd:64:c4:8f:58:9e:a0:fc:f7:ab: 8e:ab:2a:01:ca:07:ba:3b:88:f7:b3:d3:28:5e:db: 35:45:1d:70:90:d2:0a:2f:67:11:ae:5c:e4:27:b6: b6:f2:94:54:7a:da:da:37:c2:3c:a0:31:b9:25:57: 1b:39:2b:e8:7c:52:48:82:5c:5f:76:d5:05:a7:73: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.104.81.0/24 192.160.189.0/24 204.106.17.0-204.106.31.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5119 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3f:0d:48:37:76:4c:f8:f3:3c:8c:9f:89:c0:ef:4c:38:63: 2f:d0:a2:a9:cd:31:1e:1f:41:bc:29:e5:d8:66:a8:23:2e:ba: b3:c3:af:f8:d5:9f:5f:d0:3d:fc:0f:31:a9:0a:6d:db:9e:16: b0:38:31:14:ad:0f:0b:44:f6:e8:1d:ee:7c:c8:42:c9:7c:ef: a7:4f:83:07:bd:69:c6:68:f0:b3:2e:23:07:b9:22:43:d6:52: 3b:fd:d8:81:eb:3f:24:03:6b:c6:56:0e:59:42:12:b7:16:7f: 43:c8:de:27:e3:2d:99:96:db:1d:d6:38:1a:1e:d8:41:71:89: eb:84:ad:f5:13:ba:f3:f6:53:28:0f:25:5f:e9:24:6e:97:32: 0b:c0:6c:52:38:77:ff:82:b5:1b:e2:d6:2e:55:2e:4d:f9:07: b7:32:3d:af:4c:f2:1a:a4:66:0e:99:c9:a5:fa:7d:1f:37:dc: ec:7e:ff:7e:44:0e:bc:3b:97:ff:68:ff:57:92:7d:9a:be:82: f3:72:23:53:c6:2e:06:d3:36:e0:2b:68:a5:e0:75:1e:00:c5: 8b:fc:41:4e:e0:91:d6:b6:c4:d5:08:b4:d0:d1:8a:0c:96:ff: c3:85:85:72:76:e7:fe:1b:ec:09:03:86:1a:97:af:e7:78:39: ed:0a:af:31 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWE93e1ynRJfdgW1Wm6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MTAxMTEyNDUxMloXDTI5MDExMzEzNDUxMlowLzEtMCsGA1UEAxMk ZjhmNmFjNzktYmVlZS00ZWJhLWE2OWEtYTNmMjhmNjI1ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2T8BD4SYSfU0yPc725rD0k2A1S8AEdFI4lE 3tM4UzrgO71Klht7Wvv1wcIubJtI9zmzYPd/mx8FXE4KPjYU90Fdiio26uytPh9H F9PXxafIhOWLl7RDWVeae65b4dLdog0YG8c0ksa6GaFKBZ2eOGz8nutbnrPYsv2l 7FMaDRbeEKlI7gw3dCENgk9xqnS0iFWVCW1DpaheNfas6AkS+VIDhnzTLLsq2mI7 43kI4T1jxnFLjad7PM1kxI9YnqD896uOqyoByge6O4j3s9MoXts1RR1wkNIKL2cR rlzkJ7a28pRUetraN8I8oDG5JVcbOSvofFJIglxfdtUFp3MmnQIDAQABo4IELjCC BCowHQYDVR0OBBYEFDez6HWEOq5VzPP1J+5H3QqxDwODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m OGY2YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2YyOGY2MjVmNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Y4ZjZhYzc5LWJlZWUtNGViYS1h NjlhLWEzZjI4ZjYyNWY0ZS9mOGY2YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2YyOGY2 MjVmNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBADAaFEDBADAoL0wDAMEAMxqEQMEBcxqADAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgIT/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuPw1IN3ZM+PM8jJ+JwO9M OGMv0KKpzTEeH0G8KeXYZqgjLrqzw6/41Z9f0D38DzGpCm3bnhawODEUrQ8LRPbo He58yELJfO+nT4MHvWnGaPCzLiMHuSJD1lI7/diB6z8kA2vGVg5ZQhK3Fn9DyN4n 4y2Zltsd1jgaHthBcYnrhK31E7rz9lMoDyVf6SRulzILwGxSOHf/grUb4tYuVS5N +Qe3Mj2vTPIapGYOmcml+n0fN9zsfv9+RA68O5f/aP9Xkn2avoLzciNTxi4G0zbg K2il4HUeAMWL/EFO4JHWtsTVCLTQ0YoMlv/DhYVyduf+G+wJA4Yal6/neDntCq8x -----END CERTIFICATE-----Generated at Wed Oct 28 13:08:06 2026 by rpki-client