$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer File: 1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer (raw, json) Hash identifier: Yguqks+113sc7YQ3UKmrLUUVNqrkMq2c+g8gEYxAglw= Subject key identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F6555E99EDEBD1ACBD0F80F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 00:45:12 +0000 Certificate not after: Sun 07 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 53548 IP: 170.39.240.0/22 IP: 2602:fd29::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:55:e9:9e:de:bd:1a:cb:d0:f8:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 5 00:45:12 2026 GMT Not After : Jan 7 01:45:12 2029 GMT Subject: CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:63:42:7f:ce:f9:76:c9:c3:67:29:37:ae:ca: bc:d2:1b:25:38:c4:bf:31:dc:11:8a:d9:9d:21:27: bc:e5:83:73:f1:a2:04:e2:b6:37:e4:0c:53:77:d5: 82:34:d2:33:d3:31:64:1f:cd:c2:10:7c:1c:b7:ec: ee:1a:c5:2a:16:52:00:32:f2:80:24:c9:52:dd:d6: ea:b0:38:b7:49:79:99:e8:86:4d:cb:8b:12:71:7b: 9d:c7:90:5b:5d:4d:8c:88:44:3b:3d:fe:5b:0b:f6: cf:36:0b:ad:c4:28:d1:de:a0:9b:96:d0:ab:c6:88: 6d:0b:4a:2d:64:59:79:4b:78:30:bc:ea:1a:1e:13: 92:ca:08:de:c4:7a:40:8c:b6:33:2b:ed:b8:40:01: 0b:fe:44:f5:4c:1e:4f:a7:58:60:56:8f:05:81:53: e3:5a:be:dd:cc:e6:b1:23:ed:02:bb:98:d9:fe:e8: ba:5a:82:29:bc:ba:b6:2e:62:bd:88:42:32:a4:4b: f0:f9:17:d3:16:70:f8:2a:c8:4e:70:a2:d6:56:fb: c2:79:d9:39:14:fb:97:94:7d:59:a4:32:f4:16:d5: 13:4b:bf:55:8b:72:a3:53:ca:a7:1d:c8:bb:0d:aa: bf:78:fd:42:b6:f0:ca:a9:48:60:27:d8:fd:cd:49: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.240.0/22 IPv6: 2602:fd29::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53548 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f7:c7:b0:f2:57:39:48:26:a6:1a:21:55:6d:06:62:73:04: 61:92:79:fe:9c:d3:ca:2b:57:64:af:56:4f:33:79:aa:07:96: 17:64:a6:05:a5:8d:d6:96:79:6d:a4:66:3a:a1:97:ab:64:77: 85:b6:65:23:c6:a9:c4:74:19:ff:49:f4:ef:11:c4:70:b7:dd: 36:8b:34:16:e8:92:fd:41:88:12:52:11:e1:11:92:f6:4b:7e: fe:cb:05:30:f9:c5:a8:ac:09:aa:6a:6f:b4:dc:ab:76:5f:cd: 1d:06:96:77:3a:49:cc:71:18:cd:3d:de:36:d2:0c:13:f9:e4: 58:fe:e1:18:20:7e:55:12:02:7a:de:bd:c8:83:f3:21:02:55: 16:a3:26:24:80:5e:7a:15:3d:84:37:e8:b0:95:75:15:3e:72: 6d:b9:96:ec:66:45:0c:f3:ef:b2:1f:60:a4:12:c5:66:e6:5e: 8e:3b:0e:60:e4:e1:c9:09:44:e6:41:30:7b:ab:60:43:e7:c3: 13:ee:53:13:49:c5:8e:6b:fa:85:4d:50:4c:de:76:66:9e:d2: 48:80:6e:b6:16:2d:b9:57:b0:06:86:dd:85:53:8f:dd:87:07: 33:93:b9:b4:12:4f:5e:3a:54:67:34:4e:c3:4e:e0:29:ac:75: fd:52:06:f0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9lVeme3r0ay9D4D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MTAwNTAwNDUxMloXDTI5MDEwNzAxNDUxMlowLzEtMCsGA1UEAxMk MWQ3MWFhZDYtODdiYi00Yjk1LWI4MWUtNWY2ZDk1ZDA1ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GNCf875dsnDZyk3rsq80hslOMS/MdwRitmd ISe85YNz8aIE4rY35AxTd9WCNNIz0zFkH83CEHwct+zuGsUqFlIAMvKAJMlS3dbq sDi3SXmZ6IZNy4sScXudx5BbXU2MiEQ7Pf5bC/bPNgutxCjR3qCbltCrxohtC0ot ZFl5S3gwvOoaHhOSygjexHpAjLYzK+24QAEL/kT1TB5Pp1hgVo8FgVPjWr7dzOax I+0Cu5jZ/ui6WoIpvLq2LmK9iEIypEvw+RfTFnD4KshOcKLWVvvCedk5FPuXlH1Z pDL0FtUTS79Vi3KjU8qnHci7Daq/eP1CtvDKqUhgJ9j9zUkfJQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGTrmuBjpx8UWjvCCRIE54WB9ohvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x ZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVkMDVmMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFkNzFhYWQ2LTg3YmItNGI5NS1i ODFlLTVmNmQ5NWQwNWYwMy8xZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVk MDVmMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKqJ/AwDgQCAAIwCAMGBCYC/SkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDRLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQ98ew8lc5SCamGiFVbQZicwRh knn+nNPKK1dkr1ZPM3mqB5YXZKYFpY3WlnltpGY6oZerZHeFtmUjxqnEdBn/SfTv EcRwt902izQW6JL9QYgSUhHhEZL2S37+ywUw+cWorAmqam+03Kt2X80dBpZ3OknM cRjNPd420gwT+eRY/uEYIH5VEgJ63r3Ig/MhAlUWoyYkgF56FT2EN+iwlXUVPnJt uZbsZkUM8++yH2CkEsVm5l6OOw5g5OHJCUTmQTB7q2BD58MT7lMTScWOa/qFTVBM 3nZmntJIgG62Fi25V7AGht2FU4/dhwczk7m0Ek9eOlRnNE7DTuAprHX9Ugbw -----END CERTIFICATE-----Generated at Sat Oct 24 12:16:02 2026 by rpki-client