$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f.cer File: 4570ac5d-95b2-439d-a982-7c4acd15929f.cer (raw, json) Hash identifier: taZB5zIdo6gTd7lMsjjS4AmXWmb3LbayOISBlmjApm0= Subject key identifier: 39:92:FA:F1:A4:E9:DA:C3:9E:1E:93:C9:5F:1D:DF:05:10:26:A1:F7 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F69C9E12975551F5E431316C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/4570ac5d-95b2-439d-a982-7c4acd15929f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 15:02:05 +0000 Certificate not after: Mon 08 Jan 2029 16:02:05 +0000 Subordinate resources: AS: 32756 IP: 192.139.224.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:c9:e1:29:75:55:1f:5e:43:13:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 6 15:02:05 2026 GMT Not After : Jan 8 16:02:05 2029 GMT Subject: CN=4570ac5d-95b2-439d-a982-7c4acd15929f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:1b:36:1f:4e:27:b3:35:e3:06:d1:12:13: 41:89:24:7f:33:c7:cc:60:81:a5:9e:5b:b2:c1:68: 56:a2:27:a9:a9:0c:41:97:34:3d:d7:a9:5c:dc:77: 46:ac:a2:36:e9:74:09:21:53:f8:41:f6:1d:9b:5c: 72:72:e5:17:26:8e:c1:06:bb:42:84:e3:7a:51:54: 99:0d:65:e8:15:4c:92:3f:b4:6f:34:e4:9d:df:99: 27:39:aa:6a:ba:c2:60:a8:ac:e4:7d:ee:dd:9d:c7: 4f:93:62:cd:2d:d4:63:ae:0d:61:4e:8b:1f:fd:5b: a7:7c:a4:41:4c:06:40:b1:02:bc:05:98:93:ae:b8: b9:99:5d:95:b6:5f:36:95:10:d4:76:34:ea:1d:fd: a8:fa:15:45:1e:f9:13:80:52:34:cc:c6:0c:99:8b: f7:57:fa:85:63:4a:b6:2c:68:c6:84:e2:7e:3d:a8: 2e:a6:d0:4f:a1:41:da:63:40:64:a8:51:14:65:61: fb:de:cd:f9:cc:69:66:5e:68:c6:2b:a6:46:8b:4b: 31:6f:da:c8:28:f6:e0:30:5b:86:af:5e:da:86:bf: c1:d0:d3:90:f3:b9:34:ba:22:c6:ee:1e:23:ba:e5: ef:9d:04:0f:3b:35:22:b0:43:dd:3e:fd:2b:f5:a8: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:92:FA:F1:A4:E9:DA:C3:9E:1E:93:C9:5F:1D:DF:05:10:26:A1:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/4570ac5d-95b2-439d-a982-7c4acd15929f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.139.224.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32756 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f0:c4:bf:92:5f:76:e2:b9:13:d9:89:4c:03:1d:a8:4d:9e: b5:11:02:e6:dc:0d:51:b4:34:e2:9b:b8:ae:1a:68:a7:09:e2: 8e:c7:86:75:be:db:1e:64:e0:25:f0:30:80:ae:cf:93:4b:6c: 85:ee:68:ef:b3:e3:6b:be:8f:e4:d9:0e:07:d9:fb:e6:cb:9b: 09:c0:33:39:60:a5:71:bf:dd:00:37:db:40:3f:53:83:3f:fb: 61:23:a1:70:23:a4:8f:dd:d2:23:d3:ae:ac:f9:7e:aa:1e:80: 17:ed:e8:9c:83:20:05:81:0d:12:5e:3a:36:52:7a:6a:d4:19: ae:7e:c2:8d:33:4c:4b:54:8c:bd:ee:d3:7e:ed:ae:99:a3:07: 6e:2e:b6:63:eb:d1:da:c6:27:2a:d5:47:35:22:db:e0:d8:5b: 01:d0:70:82:2e:b2:e5:de:f7:38:bc:68:e9:6a:9d:38:c9:a1: 19:32:68:0e:12:19:8a:93:bd:3e:a9:d5:f9:5b:9d:24:5e:72: 76:2a:b6:ee:64:1e:50:bc:78:3e:d1:75:72:ff:3c:8e:ec:89: 0d:b0:b8:04:e1:79:d5:3f:f0:e6:91:83:2b:5c:cf:69:31:2f: 6a:7c:9c:b5:d9:96:30:5d:1b:7b:0d:a6:d5:6a:f1:27:57:b1: 5e:b1:d1:55 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9pyeEpdVUfXkMTFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MTAwNjE1MDIwNVoXDTI5MDEwODE2MDIwNVowLzEtMCsGA1UEAxMk NDU3MGFjNWQtOTViMi00MzlkLWE5ODItN2M0YWNkMTU5MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi4bNh9OJ7M14wbREhNBiSR/M8fMYIGlnluy wWhWoiepqQxBlzQ916lc3HdGrKI26XQJIVP4QfYdm1xycuUXJo7BBrtChON6UVSZ DWXoFUySP7RvNOSd35knOapqusJgqKzkfe7dncdPk2LNLdRjrg1hTosf/VunfKRB TAZAsQK8BZiTrri5mV2Vtl82lRDUdjTqHf2o+hVFHvkTgFI0zMYMmYv3V/qFY0q2 LGjGhOJ+PaguptBPoUHaY0BkqFEUZWH73s35zGlmXmjGK6ZGi0sxb9rIKPbgMFuG r17ahr/B0NOQ87k0uiLG7h4juuXvnQQPOzUisEPdPv0r9ajxtQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDmS+vGk6drDnh6TyV8d3wUQJqH3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 NTcwYWM1ZC05NWIyLTQzOWQtYTk4Mi03YzRhY2QxNTkyOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ1NzBhYzVkLTk1YjItNDM5ZC1h OTgyLTdjNGFjZDE1OTI5Zi80NTcwYWM1ZC05NWIyLTQzOWQtYTk4Mi03YzRhY2Qx NTkyOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAi+AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC f/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjPDEv5JfduK5E9mJTAMdqE2etREC5twNUbQ04pu4rhpopwni jseGdb7bHmTgJfAwgK7Pk0tshe5o77Pja76P5NkOB9n75subCcAzOWClcb/dADfb QD9Tgz/7YSOhcCOkj93SI9OurPl+qh6AF+3onIMgBYENEl46NlJ6atQZrn7CjTNM S1SMve7Tfu2umaMHbi62Y+vR2sYnKtVHNSLb4NhbAdBwgi6y5d73OLxo6WqdOMmh GTJoDhIZipO9PqnV+VudJF5ydiq27mQeULx4PtF1cv88juyJDbC4BOF51T/w5pGD K1zPaTEvanyctdmWMF0bew2m1WrxJ1exXrHRVQ== -----END CERTIFICATE-----Generated at Mon Oct 26 08:56:30 2026 by rpki-client