$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.cer File: 58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.cer (raw, json) Hash identifier: MYOYEjK7GpcKRyR37x60H4VZfzS2sczKMkyBC9heRmc= Subject key identifier: 8E:67:88:1A:A7:8A:2D:78:D6:FB:1C:E6:CA:46:8C:F4:9D:4E:6F:81 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F6555E9A6F9906844B9AA2000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 00:45:12 +0000 Certificate not after: Sun 07 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 12110 IP: 199.47.172.0/22 IP: 2605:900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:55:e9:a6:f9:90:68:44:b9:aa:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 5 00:45:12 2026 GMT Not After : Jan 7 01:45:12 2029 GMT Subject: CN=58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:eb:c7:d4:90:b5:fb:55:f5:b7:e9:bf:65: 65:fb:ab:b7:da:be:67:45:e6:fb:e8:20:80:6d:92: 3a:48:b1:e6:62:7e:52:4c:c3:fc:46:ee:ef:6f:00: 7a:35:f4:86:e6:74:ff:53:48:f2:23:69:9a:65:5d: 6d:76:bb:f5:a0:f9:0d:45:d5:f1:5e:e2:a2:b1:a0: 02:f2:bf:85:69:6a:19:91:94:57:dc:77:8c:1a:11: 80:df:88:79:a1:2a:e1:dc:e8:3f:68:43:e7:31:9a: ef:57:2a:e5:18:75:bf:53:74:5e:56:03:52:82:dd: 94:09:5a:67:21:43:48:20:07:07:6e:0f:a9:59:57: ab:4d:e8:5b:e2:27:26:f0:5c:8d:86:55:1b:1b:54: b8:40:99:24:55:eb:55:38:3d:4c:a6:c9:95:d7:1c: a4:2f:23:0b:b9:bc:9d:5a:9d:4b:81:a5:3c:9e:90: 5e:0e:07:b5:e0:3f:00:44:79:7e:b5:c2:37:4c:34: 81:11:7e:68:18:65:aa:f1:1a:7d:22:f3:ce:13:45: 9d:c3:c6:7e:d1:9c:0f:d1:a6:36:12:8d:70:78:a1: 8c:8c:9d:e8:af:60:cd:ab:54:b5:67:ed:59:b2:1a: 9b:7b:c1:a4:55:dd:c3:e3:86:1c:5c:27:70:61:19: 19:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:67:88:1A:A7:8A:2D:78:D6:FB:1C:E6:CA:46:8C:F4:9D:4E:6F:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.47.172.0/22 IPv6: 2605:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12110 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:66:de:32:e1:15:85:c0:d6:f7:88:2f:1f:71:6c:04:35:c1: d1:49:89:c8:91:f7:98:cb:03:8f:3f:26:1a:b8:81:46:3c:8b: b6:5c:60:f1:ad:5d:79:3f:9f:16:42:7d:31:85:5f:24:23:25: f1:58:6c:d5:35:eb:70:09:27:1b:04:40:3f:01:c3:3c:98:5d: a4:67:db:40:24:89:02:b6:c5:35:37:6f:1d:de:97:f9:f8:22: 9f:06:04:2a:85:02:2e:80:c3:1b:18:31:ae:a2:fa:4d:6c:7b: e7:f9:ff:83:92:4b:75:53:01:1f:92:d9:ee:b5:3a:29:c8:b8: cd:9b:a8:12:95:b2:ed:fc:87:95:1e:d0:32:4f:18:9e:48:a3: f3:15:8f:c4:8b:f3:98:52:6f:5f:ee:7a:0e:ab:02:cc:f6:92: fe:ea:be:1b:8e:f8:04:08:17:00:fe:fb:dc:32:f8:7f:91:5f: a4:ad:e7:ba:dd:0b:fd:10:ce:14:12:85:95:30:52:28:8b:ce: 22:66:e9:be:d0:cc:12:c4:c9:df:f1:68:eb:f3:1c:8c:d1:5a: 19:97:3c:ea:13:e1:40:aa:8f:dd:40:20:0a:6d:36:ac:84:a5: d6:27:e4:8d:6e:0f:a6:44:76:70:82:6d:89:2f:df:9e:2e:ab: bf:f1:30:62 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE9lVemm+ZBoRLmqIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MTAwNTAwNDUxMloXDTI5MDEwNzAxNDUxMlowLzEtMCsGA1UEAxMk NThkOWU0MjUtZTc2YS00MGFlLThlMDAtM2VhMmJiMmU3ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifDrx9SQtftV9bfpv2Vl+6u32r5nReb76CCA bZI6SLHmYn5STMP8Ru7vbwB6NfSG5nT/U0jyI2maZV1tdrv1oPkNRdXxXuKisaAC 8r+FaWoZkZRX3HeMGhGA34h5oSrh3Og/aEPnMZrvVyrlGHW/U3ReVgNSgt2UCVpn IUNIIAcHbg+pWVerTehb4icm8FyNhlUbG1S4QJkkVetVOD1MpsmV1xykLyMLubyd Wp1LgaU8npBeDge14D8ARHl+tcI3TDSBEX5oGGWq8Rp9IvPOE0Wdw8Z+0ZwP0aY2 Eo1weKGMjJ3or2DNq1S1Z+1Zshqbe8GkVd3D44YcXCdwYRkZDQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFI5niBqnii141vsc5spGjPSdTm+BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 OGQ5ZTQyNS1lNzZhLTQwYWUtOGUwMC0zZWEyYmIyZTdlMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzU4ZDllNDI1LWU3NmEtNDBhZS04 ZTAwLTNlYTJiYjJlN2UyYS81OGQ5ZTQyNS1lNzZhLTQwYWUtOGUwMC0zZWEyYmIy ZTdlMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALHL6wwDQQCAAIwBwMFACYFCQAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICL04wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAImbeMuEVhcDW94gvH3FsBDXB0UmJ yJH3mMsDjz8mGriBRjyLtlxg8a1deT+fFkJ9MYVfJCMl8Vhs1TXrcAknGwRAPwHD PJhdpGfbQCSJArbFNTdvHd6X+fginwYEKoUCLoDDGxgxrqL6TWx75/n/g5JLdVMB H5LZ7rU6Kci4zZuoEpWy7fyHlR7QMk8Ynkij8xWPxIvzmFJvX+56DqsCzPaS/uq+ G474BAgXAP773DL4f5FfpK3nut0L/RDOFBKFlTBSKIvOImbpvtDMEsTJ3/Fo6/Mc jNFaGZc86hPhQKqP3UAgCm02rISl1ifkjW4PpkR2cIJtiS/fni6rv/EwYg== -----END CERTIFICATE-----Generated at Sat Oct 24 14:32:05 2026 by rpki-client