$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer File: 0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer (raw, json) Hash identifier: Ui14ONZmIui+uRMfbZBdSN6lBKfuRNXzoHM9ynSJWYw= Subject key identifier: CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F51CB1E903255C04928E9B970 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 00:45:11 +0000 Certificate not after: Sun 31 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 198.202.27.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:cb:1e:90:32:55:c0:49:28:e9:b9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 28 00:45:11 2026 GMT Not After : Dec 31 01:45:11 2028 GMT Subject: CN=0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e0:14:91:56:15:e7:7d:8f:12:0b:af:00:b8: 8b:c9:0e:0a:ae:4d:ad:ba:2a:d7:6b:d2:e8:31:87: 5e:ac:16:1d:22:9b:3d:8f:d6:68:dc:a3:67:90:98: 46:7c:7d:9c:dc:1e:61:6f:ed:a8:d0:23:d3:26:fc: 9e:20:a0:8f:fa:83:36:a9:be:2d:1f:96:1d:98:d6: 54:eb:bd:aa:5d:f0:e4:e0:44:10:a4:7c:9a:fd:0b: cf:be:d7:81:63:b2:ed:95:53:ad:19:45:89:2b:c6: 9c:bf:f0:6b:3a:e2:5b:09:fa:d3:98:41:b5:04:e0: 0a:43:4d:a9:dc:fc:07:03:8d:54:8f:ba:25:ba:8a: 4e:a4:bc:6b:b0:bb:dd:cd:4a:04:e5:e1:89:15:c3: 0d:87:fb:ff:f9:f8:f6:b9:cc:6e:d6:f2:e3:da:cb: 56:62:fd:0f:d8:4d:23:eb:1b:bf:01:bd:c8:a2:fe: 00:9b:1b:d3:a5:de:5b:22:df:89:f5:e8:c7:b9:53: 8a:10:0d:ab:ed:7e:45:b2:2d:8c:ef:ff:4d:00:21: 15:05:12:bb:3f:04:54:93:ea:75:4d:26:01:6f:f9: 9b:00:0c:e7:38:de:75:9f:4e:85:c7:e4:7c:93:f7: fa:e9:47:92:e8:ff:c9:ac:dc:f6:9a:31:e2:79:af: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.202.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:55:79:13:a1:5c:44:52:8c:22:1a:ee:d7:94:78:9b:0c:13: 43:5e:1f:49:c2:4a:39:d8:dd:57:be:28:9e:34:a7:ec:ac:14: 0e:43:d4:c0:c3:b5:f0:5f:35:c3:af:ae:2e:d7:ca:55:2d:e8: df:ba:21:2c:90:a7:97:a2:b3:cd:7b:1e:52:77:d5:43:74:5a: 3c:96:79:32:15:6d:45:4e:7d:6b:a1:34:3c:2b:47:1d:6b:dd: 4f:e4:ad:ff:85:3b:f6:2e:5c:29:f7:2d:21:bf:2d:70:78:1a: 10:97:d4:36:03:be:28:72:ed:a5:fd:cb:e8:c6:53:87:db:8a: bb:ba:e5:53:c0:22:5c:01:37:59:a1:90:9a:62:e4:59:79:e3: 8c:94:61:e4:71:8c:0d:65:c6:17:b7:e7:ce:33:4b:29:16:1c: e4:fa:7c:fd:a3:70:e4:ac:77:ab:79:2d:50:7b:77:ed:61:6f: 71:47:be:83:2a:45:60:a7:2c:8e:f2:a4:10:0d:6c:87:db:ac: fa:b8:1b:d5:86:69:81:a3:17:09:4c:01:a4:b7:f5:d6:e2:6e: ad:e8:0a:b1:7d:1a:61:07:bd:a9:fc:75:3a:3a:3f:0c:8d:a1: 20:e4:27:d7:61:3b:97:f5:ba:e9:a8:cd:22:89:88:de:77:7a: 34:4e:32:1d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9Ryx6QMlXASSjpuXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyODAwNDUxMVoXDTI4MTIzMTAxNDUxMVowLzEtMCsGA1UEAxMk MGRiZTlkMmItODBiNi00MmUxLWFiYzctZWQ2YjZkZjZiY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uAUkVYV532PEguvALiLyQ4Krk2tuirXa9Lo MYderBYdIps9j9Zo3KNnkJhGfH2c3B5hb+2o0CPTJvyeIKCP+oM2qb4tH5YdmNZU 672qXfDk4EQQpHya/QvPvteBY7LtlVOtGUWJK8acv/BrOuJbCfrTmEG1BOAKQ02p 3PwHA41Uj7oluopOpLxrsLvdzUoE5eGJFcMNh/v/+fj2ucxu1vLj2stWYv0P2E0j 6xu/Ab3Iov4AmxvTpd5bIt+J9ejHuVOKEA2r7X5Fsi2M7/9NACEVBRK7PwRUk+p1 TSYBb/mbAAznON51n06Fx+R8k/f66UeS6P/JrNz2mjHiea9yxQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFM0SOUZKFc2oizfoFq8UcgnVICsyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w ZGJlOWQyYi04MGI2LTQyZTEtYWJjNy1lZDZiNmRmNmJjZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzBkYmU5ZDJiLTgwYjYtNDJlMS1h YmM3LWVkNmI2ZGY2YmNlZi8wZGJlOWQyYi04MGI2LTQyZTEtYWJjNy1lZDZiNmRm NmJjZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGyhswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWlV5E6FcRFKMIhru15R4 mwwTQ14fScJKOdjdV74onjSn7KwUDkPUwMO18F81w6+uLtfKVS3o37ohLJCnl6Kz zXseUnfVQ3RaPJZ5MhVtRU59a6E0PCtHHWvdT+St/4U79i5cKfctIb8tcHgaEJfU NgO+KHLtpf3L6MZTh9uKu7rlU8AiXAE3WaGQmmLkWXnjjJRh5HGMDWXGF7fnzjNL KRYc5Pp8/aNw5Kx3q3ktUHt37WFvcUe+gypFYKcsjvKkEA1sh9us+rgb1YZpgaMX CUwBpLf11uJuregKsX0aYQe9qfx1Ojo/DI2hIOQn12E7l/W66ajNIomI3nd6NE4y HQ== -----END CERTIFICATE-----Generated at Wed Oct 21 22:50:44 2026 by rpki-client