$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.cer File: 170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.cer (raw, json) Hash identifier: qpsXcFWafckJ81d9+V9OllR48czvonUEf3m9bPLImVo= Subject key identifier: 1F:B2:DF:F8:09:2C:B0:75:06:BA:6A:2B:CF:43:01:E6:B0:3B:17:E8 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F0935567586C60DF36C7FE700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Sep 2026 00:45:11 +0000 Certificate not after: Tue 05 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 40505 AS: 55245 IP: 69.58.95.0/24 IP: 192.64.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:35:56:75:86:c6:0d:f3:6c:7f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 2 00:45:11 2026 GMT Not After : Dec 5 01:45:11 2028 GMT Subject: CN=170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:f2:5e:62:23:5d:f9:e8:d7:c6:55:9a:cd: 4f:9c:f8:4a:57:56:21:7a:62:52:f8:24:49:0d:e8: 55:d7:e1:3b:93:72:b5:07:69:43:91:48:9f:b8:55: ac:4e:6f:db:d6:30:94:45:96:95:01:7b:7b:06:15: e3:11:0b:c7:9f:c8:37:28:72:ee:19:dc:90:d6:32: dc:50:ae:2a:78:55:38:6f:cf:d4:83:19:af:94:e4: 04:c0:34:91:5b:99:fd:8d:98:dc:9a:a7:2b:38:31: 8c:a3:17:82:36:ee:43:ee:a9:22:65:20:69:c0:64: f7:5a:6c:c4:fd:a0:12:7a:12:3a:29:32:05:ce:43: 20:4b:15:a8:4f:ee:52:61:14:ec:d8:a6:44:2b:b3: b5:92:f8:59:37:15:85:2d:67:b6:db:07:e6:fc:b5: ad:f9:68:5a:32:a0:c9:e4:aa:b2:d3:00:49:55:3d: 61:df:1a:8f:8c:fc:b8:fd:1b:a0:9a:01:9b:4d:e7: 36:ca:35:c6:f7:1b:d0:76:b4:4e:0a:41:7f:d1:d5: df:74:84:55:df:9a:c1:da:a1:91:19:3b:b2:d4:57: aa:f0:a9:84:e6:37:c9:13:f4:ac:b8:c9:f2:40:ef: 00:eb:67:bb:aa:71:55:c7:1c:14:0c:1b:bb:d6:e3: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B2:DF:F8:09:2C:B0:75:06:BA:6A:2B:CF:43:01:E6:B0:3B:17:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 69.58.95.0/24 192.64.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40505 55245 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:97:f5:8c:21:49:b0:99:05:ad:c0:91:4c:05:43:cf:f5:2c: 18:d5:f7:5f:af:cc:33:73:21:64:bb:5c:59:52:37:60:ce:ed: 77:24:73:77:07:e3:14:98:aa:79:68:22:55:13:d3:3b:7c:4c: d9:08:f6:80:54:d5:d3:eb:96:15:f8:c8:97:93:86:a3:2b:cc: 9c:27:ed:91:5b:96:c4:23:63:6f:f8:84:6b:c4:95:61:91:11: d4:bc:be:bd:44:e4:ba:93:4b:59:97:14:bf:ac:88:84:6d:fb: 50:4f:72:1e:09:80:67:78:94:af:e9:20:c4:b5:a7:0c:68:a6: bd:8e:f7:be:87:3b:2c:94:f0:67:a5:0f:2a:45:ab:36:a3:2c: b1:59:e1:71:e1:95:6f:2d:a1:96:d0:e1:af:8d:17:45:cf:96: 92:55:6b:b4:f9:11:56:0f:aa:3d:26:33:f2:c0:f5:05:bb:91: 03:a3:d9:10:d6:81:0f:e0:d5:eb:8e:32:ed:60:a2:8d:2f:53: c9:bb:70:5f:d9:18:53:3c:1e:88:21:d2:54:38:22:87:3a:1a: 78:08:e6:e8:7c:24:90:18:a1:48:12:68:fb:80:11:86:8a:ba: 05:9e:4d:19:88:95:d9:c2:e7:86:19:d3:a8:21:26:74:89:1a: d0:3e:e0:a1 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE8JNVZ1hsYN82x/5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwMjAwNDUxMVoXDTI4MTIwNTAxNDUxMVowLzEtMCsGA1UEAxMk MTcwZjA2Y2MtN2FkMC00MzM0LTg4YjItNGFhN2Y5Y2ZjNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5jyXmIjXfno18ZVms1PnPhKV1YhemJS+CRJ DehV1+E7k3K1B2lDkUifuFWsTm/b1jCURZaVAXt7BhXjEQvHn8g3KHLuGdyQ1jLc UK4qeFU4b8/UgxmvlOQEwDSRW5n9jZjcmqcrODGMoxeCNu5D7qkiZSBpwGT3WmzE /aASehI6KTIFzkMgSxWoT+5SYRTs2KZEK7O1kvhZNxWFLWe22wfm/LWt+WhaMqDJ 5Kqy0wBJVT1h3xqPjPy4/RugmgGbTec2yjXG9xvQdrROCkF/0dXfdIRV35rB2qGR GTuy1Feq8KmE5jfJE/SsuMnyQO8A62e7qnFVxxwUDBu71uPWhwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFB+y3/gJLLB1BrpqK89DAeawOxfoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x NzBmMDZjYy03YWQwLTQzMzQtODhiMi00YWE3ZjljZmM2Y2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzE3MGYwNmNjLTdhZDAtNDMzNC04 OGIyLTRhYTdmOWNmYzZjYS8xNzBmMDZjYy03YWQwLTQzMzQtODhiMi00YWE3Zjlj ZmM2Y2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABFOl8DBALAQBQwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJ45AgMA180wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa5f1jCFJsJkFrcCRTAVDz/UsGNX3X6/M M3MhZLtcWVI3YM7tdyRzdwfjFJiqeWgiVRPTO3xM2Qj2gFTV0+uWFfjIl5OGoyvM nCftkVuWxCNjb/iEa8SVYZER1Ly+vUTkupNLWZcUv6yIhG37UE9yHgmAZ3iUr+kg xLWnDGimvY73voc7LJTwZ6UPKkWrNqMssVnhceGVby2hltDhr40XRc+WklVrtPkR Vg+qPSYz8sD1BbuRA6PZENaBD+DV644y7WCijS9TybtwX9kYUzweiCHSVDgihzoa eAjm6HwkkBihSBJo+4ARhoq6BZ5NGYiV2cLnhhnTqCEmdIka0D7goQ== -----END CERTIFICATE-----Generated at Sat Sep 5 12:30:34 2026 by rpki-client