$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer File: 22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer (raw, json) Hash identifier: wAw6Ih6+29z+hxjSBJIKGC93x7ACcdDXLeJC+pM/M/4= Subject key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F6555E9962E9940DEE9126100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 00:45:12 +0000 Certificate not after: Sun 07 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 63201 IP: 52.129.36.0/23 IP: 104.193.116.0/22 IP: 141.193.235.0/24 IP: 147.160.168.0/23 IP: 147.185.190.0/24 IP: 148.59.214.0/23 IP: 161.38.186.0/23 IP: 161.199.19.0/24 IP: 161.199.246.0/24 IP: 204.68.232.0/23 IP: 204.225.124.0/24 IP: 205.174.158.0/24 IP: 206.223.98.0/24 IP: 213.159.132.0/22 IP: 2606:b380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:55:e9:96:2e:99:40:de:e9:12:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 5 00:45:12 2026 GMT Not After : Jan 7 01:45:12 2029 GMT Subject: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:91:f7:ce:d0:68:c6:a9:d3:da:67:7f:55: a6:50:3c:ab:10:38:a0:69:cc:2b:fc:4b:8a:65:89: a3:59:71:df:66:34:52:c3:5c:58:9d:ec:25:e9:66: dc:60:c6:55:0e:eb:c8:d1:d5:6b:4e:9b:12:37:69: 5a:20:a3:f0:5c:a3:cd:de:50:21:19:7c:e7:e6:31: 87:21:a6:72:16:1c:3e:f7:a2:ad:21:41:6e:0b:f2: a9:19:24:36:98:c9:31:4e:0a:cd:36:80:d0:76:43: 4e:69:63:c9:c2:66:79:5e:03:60:27:51:9e:3a:4e: 5c:71:bf:e3:fd:cf:61:a2:9f:85:f5:75:69:c7:d9: c6:c1:c1:66:9b:24:f1:ac:e1:1d:db:e4:d0:91:c0: 9f:ab:c1:f2:3c:97:68:57:4f:90:bc:e3:6f:08:f2: bd:1d:e8:d1:00:fb:67:3a:ac:13:e2:04:dd:cf:5f: b7:64:98:40:70:ed:56:2e:ae:fe:80:c6:85:6c:58: 4a:d8:f3:7e:88:d9:7e:d5:c9:85:72:80:ca:58:72: ed:08:8c:03:8b:5f:f7:db:b7:99:81:30:78:7a:2c: 42:a9:a4:52:39:f0:c9:c1:67:ce:c3:45:30:8a:9b: 0b:60:de:a5:f8:53:7a:5d:0e:10:d3:45:7c:82:3f: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 52.129.36.0/23 104.193.116.0/22 141.193.235.0/24 147.160.168.0/23 147.185.190.0/24 148.59.214.0/23 161.38.186.0/23 161.199.19.0/24 161.199.246.0/24 204.68.232.0/23 204.225.124.0/24 205.174.158.0/24 206.223.98.0/24 213.159.132.0/22 IPv6: 2606:b380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a7:55:70:02:55:44:12:4c:ee:a9:3f:24:06:0a:78:aa:f8: 4c:65:3c:3c:e4:ae:e6:fd:cd:b8:da:00:24:6b:c6:cb:13:5f: b7:c8:b0:8e:4e:e4:bb:d3:3c:04:bf:76:38:9a:1a:01:b7:53: a1:47:c4:74:db:08:65:be:30:a1:15:c1:76:a5:1d:f1:a2:70: ab:32:88:85:36:02:8c:24:56:47:39:92:f5:71:12:3c:ca:cc: 78:49:d1:47:c8:2e:57:fc:10:5e:aa:dd:7a:72:b1:68:6a:89: a9:26:a0:49:fe:f8:fb:15:71:1a:ba:99:97:19:c8:d6:cb:22: 23:30:1d:8d:36:b8:1f:54:fc:f0:74:87:36:6f:6b:86:13:41: 94:d9:19:8b:96:c4:c6:c0:4a:f5:b6:af:aa:2f:21:f1:e2:d1: b2:b1:1f:d4:4a:1d:b4:02:6c:d0:d4:23:f2:cd:3c:ae:11:41: 64:ba:c4:42:7b:48:ed:b6:03:fd:7a:74:fd:93:04:22:2e:ef: 8c:9f:58:43:4e:c0:46:6d:10:6b:3c:3d:ee:7f:3b:6d:0b:c5: 19:6d:ba:86:ef:58:0c:4d:f7:28:78:16:6d:e7:df:27:1f:0b: 32:1e:6d:1b:d3:3a:b0:36:b4:99:a4:7f:41:ce:82:73:a4:c5: 3f:fd:b5:1f -----BEGIN CERTIFICATE----- MIIHZjCCBk6gAwIBAgIUAQ0Mn0MoWE9lVemWLplA3ukSYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MTAwNTAwNDUxMloXDTI5MDEwNzAxNDUxMlowLzEtMCsGA1UEAxMk MjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2EzODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o2R987QaMap09pnf1WmUDyrEDigacwr/EuK ZYmjWXHfZjRSw1xYnewl6WbcYMZVDuvI0dVrTpsSN2laIKPwXKPN3lAhGXzn5jGH IaZyFhw+96KtIUFuC/KpGSQ2mMkxTgrNNoDQdkNOaWPJwmZ5XgNgJ1GeOk5ccb/j /c9hop+F9XVpx9nGwcFmmyTxrOEd2+TQkcCfq8HyPJdoV0+QvONvCPK9HejRAPtn OqwT4gTdz1+3ZJhAcO1WLq7+gMaFbFhK2PN+iNl+1cmFcoDKWHLtCIwDi1/327eZ gTB4eixCqaRSOfDJwWfOw0UwipsLYN6l+FN6XQ4Q00V8gj84eQIDAQABo4IEeDCC BHQwHQYDVR0OBBYEFHutwPsL30NqyMilnls9RBKUo1w/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIyZDBlMDJhLWU0ZjAtNDk2MC1h ZDc5LTY4ZjNiNTNhMzg2MS8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUz YTM4NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwfAYIKwYBBQUH AQcBAf8EbTBrMFoEAgABMFQDBAE0gSQDBAJowXQDBACNwesDBAGToKgDBACTub4D BAGUO9YDBAGhJroDBAChxxMDBAChx/YDBAHMROgDBADM4XwDBADNrp4DBADO32ID BALVn4QwDQQCAAIwBwMFACYGs4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPbh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKnVXACVUQSTO6pPyQGCniq+ExlPDzkrub9zbjaACRrxssTX7fI sI5O5LvTPAS/djiaGgG3U6FHxHTbCGW+MKEVwXalHfGicKsyiIU2AowkVkc5kvVx EjzKzHhJ0UfILlf8EF6q3XpysWhqiakmoEn++PsVcRq6mZcZyNbLIiMwHY02uB9U /PB0hzZva4YTQZTZGYuWxMbASvW2r6ovIfHi0bKxH9RKHbQCbNDUI/LNPK4RQWS6 xEJ7SO22A/16dP2TBCIu74yfWENOwEZtEGs8Pe5/O20LxRltuobvWAxN9yh4Fm3n 3ycfCzIebRvTOrA2tJmkf0HOgnOkxT/9tR8= -----END CERTIFICATE-----Generated at Sat Oct 24 18:46:21 2026 by rpki-client