$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer File: 41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer (raw, json) Hash identifier: E4ltStkKehdOXotRS3vzeLDRrB7kzWRlJvg6NMrmzG4= Subject key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F57607EF2B4BA36158356FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 00:45:12 +0000 Certificate not after: Tue 02 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 15176 IP: 204.14.224.0/21 IP: 208.70.80.0/21 IP: 2606:6ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:60:7e:f2:b4:ba:36:15:83:56:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 30 00:45:12 2026 GMT Not After : Jan 2 01:45:12 2029 GMT Subject: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:6a:41:36:b9:4c:f8:ab:a5:87:29:ac:d7: 76:1f:03:d0:63:6d:67:a9:bf:10:ba:44:5f:d4:c4: 1c:5c:bc:d3:29:e0:24:ad:3d:f2:26:c3:28:2b:15: 19:a4:29:78:ee:7a:63:2e:da:8b:ee:bc:f7:3c:e0: ad:fd:e7:e8:a1:f0:3c:b8:ee:e4:d4:39:0b:e4:08: 6a:7a:3f:7f:39:cc:e4:ff:4e:d5:07:32:0e:81:f3: 33:00:fa:20:eb:f8:87:55:c3:e0:b3:c3:fa:99:1d: 54:0f:84:b2:cb:66:f4:7a:b1:3d:0d:55:1a:20:54: 72:54:6a:0e:97:33:16:11:11:7b:28:66:2c:2e:78: 17:e6:db:10:1c:93:b7:3e:7f:35:0b:11:d2:f9:58: ca:39:d1:b3:d0:d3:25:f7:49:a0:2b:13:36:cf:a9: 65:7c:b4:7c:d2:85:3c:18:27:8e:11:fd:b1:ba:ba: 49:a4:e9:78:5c:c2:51:75:92:37:4a:8c:12:2a:c7: 95:c4:df:fb:ad:ce:21:84:c7:1b:26:97:00:3a:fc: 3b:b5:89:a0:69:15:f5:97:9d:a5:d0:88:b4:c2:65: a6:72:4f:f7:0b:01:d5:eb:6e:fb:8f:89:69:04:ff: 1a:92:b6:b2:84:cd:82:b7:83:6b:33:14:c7:fc:a0: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.14.224.0/21 208.70.80.0/21 IPv6: 2606:6ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15176 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f0:65:56:a9:9e:31:9a:a3:52:f5:59:d8:bc:00:5d:2b:11: 58:8d:59:41:a9:a1:62:2f:78:2b:5c:78:89:81:2a:d7:e0:6e: a5:c1:47:76:29:56:12:04:3c:2b:d5:58:af:f4:55:3f:85:18: 13:51:2d:f0:ec:f4:7f:1d:61:89:d8:ce:c2:5f:f9:ec:e4:87: e6:e1:c3:a9:42:87:f3:ce:31:ff:fd:03:dc:00:cc:ac:ed:95: ea:d1:a0:60:74:36:00:bc:7d:70:be:53:c7:e9:9a:4e:73:05: c3:8e:2b:91:84:11:65:ba:a9:da:ba:0a:1d:00:ad:8a:af:01: 12:32:ce:03:7b:37:b2:d3:4a:df:3c:70:1e:11:5b:9e:11:ba: 84:01:bb:5c:97:c2:84:cb:75:f3:4f:ef:c7:ce:b4:e1:d0:9a: bf:11:fb:cb:8d:9b:0d:9b:f1:9d:68:34:37:66:92:e0:f0:97: e3:b2:e0:97:fc:66:08:fe:64:22:b5:2c:05:20:2d:23:82:fb: f1:34:6f:dc:17:61:9f:d7:57:eb:79:7d:98:5f:e5:ee:90:0b: 06:33:b9:e0:e5:25:12:24:6d:48:3f:88:0e:bd:c7:f2:ab:0f: 22:c0:1e:00:d6:31:82:a8:3b:62:31:45:0d:19:11:e7:df:75: ae:3d:5d:74 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE9XYH7ytLo2FYNW/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkzMDAwNDUxMloXDTI5MDEwMjAxNDUxMlowLzEtMCsGA1UEAxMk NDFjNjljZTAtOWJjYi00OWNlLTg1ODItZGM2Y2U3ZmRmMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXpqQTa5TPirpYcprNd2HwPQY21nqb8QukRf 1MQcXLzTKeAkrT3yJsMoKxUZpCl47npjLtqL7rz3POCt/efoofA8uO7k1DkL5Ahq ej9/Oczk/07VBzIOgfMzAPog6/iHVcPgs8P6mR1UD4Syy2b0erE9DVUaIFRyVGoO lzMWERF7KGYsLngX5tsQHJO3Pn81CxHS+VjKOdGz0NMl90mgKxM2z6llfLR80oU8 GCeOEf2xurpJpOl4XMJRdZI3SowSKseVxN/7rc4hhMcbJpcAOvw7tYmgaRX1l52l 0Ii0wmWmck/3CwHV6277j4lpBP8akrayhM2Ct4NrMxTH/KBThwIDAQABo4IELzCC BCswHQYDVR0OBBYEFKamDM7cPwJJvAKs82zF0wnmJovSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MWM2OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZjZTdmZGYxZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQxYzY5Y2UwLTliY2ItNDljZS04 NTgyLWRjNmNlN2ZkZjFkZS80MWM2OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZjZTdm ZGYxZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPMDuADBAPQRlAwDQQCAAIwBwMFACYGasAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICO0gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAivBlVqmeMZqjUvVZ2LwA XSsRWI1ZQamhYi94K1x4iYEq1+BupcFHdilWEgQ8K9VYr/RVP4UYE1Et8Oz0fx1h idjOwl/57OSH5uHDqUKH884x//0D3ADMrO2V6tGgYHQ2ALx9cL5Tx+maTnMFw44r kYQRZbqp2roKHQCtiq8BEjLOA3s3stNK3zxwHhFbnhG6hAG7XJfChMt180/vx860 4dCavxH7y42bDZvxnWg0N2aS4PCX47Lgl/xmCP5kIrUsBSAtI4L78TRv3Bdhn9dX 63l9mF/l7pALBjO54OUlEiRtSD+IDr3H8qsPIsAeANYxgqg7YjFFDRkR5991rj1d dA== -----END CERTIFICATE-----Generated at Tue Nov 3 12:04:22 2026 by rpki-client