$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.cer File: 78ee10d3-06d4-4947-8f57-ae2f32ccfa96.cer (raw, json) Hash identifier: Zrk+P0av3/jQvA8BTF+ScSbM2ffiumjE0zCK7bFioUo= Subject key identifier: A8:86:57:E6:DA:6F:41:B1:06:DC:DB:9B:33:EF:FC:D4:71:53:F5:20 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F5A2B2DCA10756B81B58096C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 00:45:12 +0000 Certificate not after: Wed 03 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 401786 IP: 23.140.220.0/24 IP: 2602:f601::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:2b:2d:ca:10:75:6b:81:b5:80:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 1 00:45:12 2026 GMT Not After : Jan 3 01:45:12 2029 GMT Subject: CN=78ee10d3-06d4-4947-8f57-ae2f32ccfa96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:9a:9e:cf:11:38:da:33:aa:6b:ee:6a:ef: 35:43:74:33:32:f1:9c:ee:23:b1:5e:9f:8c:f8:6f: 3a:80:aa:fe:a0:f2:16:50:c3:ce:ef:ef:0c:c2:54: 9c:e0:8f:b4:30:ab:44:05:43:b5:09:45:e7:80:2d: 14:52:2a:85:2b:68:78:aa:8b:bb:d0:2a:2c:f3:48: d7:7c:bc:22:69:38:1f:0a:67:99:23:56:f3:ba:55: 8f:97:2f:07:81:fe:b5:bf:e2:38:37:02:f2:df:4b: 44:59:c5:ff:4e:b5:ff:00:bf:0b:67:92:98:d0:25: 08:c8:01:17:36:2c:14:22:ac:d0:3f:87:34:fb:70: 35:44:d0:d7:ea:af:22:ee:6e:2e:9f:6e:f5:3f:9b: 6a:36:b8:5e:39:4b:dd:a5:29:73:9d:c6:d7:bf:45: 25:72:5c:fa:c3:ed:db:a7:3b:9b:c7:cc:c1:ea:ad: 0a:18:69:08:be:93:9e:e1:8b:f9:45:16:33:1b:1e: 6b:cd:c4:ba:f0:6a:a1:bc:a1:f7:44:ec:db:1f:98: f6:e8:2f:fe:d0:e6:87:e6:64:27:52:b5:ff:e3:10: 3f:cd:fd:7f:aa:f1:c9:b3:6c:df:78:92:76:56:f9: 4a:97:d8:0c:d3:e2:25:05:94:bc:bc:81:2b:95:1c: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:86:57:E6:DA:6F:41:B1:06:DC:DB:9B:33:EF:FC:D4:71:53:F5:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.140.220.0/24 IPv6: 2602:f601::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401786 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:02:1b:77:8a:81:18:b3:b9:d5:c2:45:6c:05:29:dd:d7:95: ab:41:81:a6:ed:79:e7:d7:a8:fb:64:0f:0a:7a:10:2c:54:16: 86:1a:96:a4:e0:a3:9b:f5:0d:0d:a8:80:76:93:1a:6c:43:72: 1b:51:5d:0d:8f:6e:80:45:59:a4:7d:cd:fd:cb:13:90:cf:27: 91:d0:ad:03:35:c8:c3:50:99:f9:93:e6:63:be:f9:af:e2:c6: 88:d0:5b:7a:17:a7:e7:5c:09:3e:80:0b:e3:c0:68:c0:93:64: c1:c9:34:de:62:4f:c4:69:fd:0b:a3:20:aa:d3:e0:16:9f:db: 62:ca:58:63:5c:54:ef:ac:f7:58:9a:20:c4:3a:8d:55:4a:75: e0:33:68:ee:5a:fa:2e:3b:bf:9b:56:2b:7e:0b:60:fb:16:e0: 5a:8f:a1:65:52:e7:6e:da:7b:e9:81:e0:21:7d:dd:ff:49:f7: 9f:61:8e:55:ff:a7:2d:d3:dc:1e:96:78:23:5e:85:95:15:64: 99:67:4c:fc:ba:2a:99:fd:fc:e8:5a:9e:0e:27:57:47:e6:bc: 39:37:4c:63:26:5a:3a:6e:d8:3d:ff:39:5b:0a:b1:5c:68:94: 7c:4a:c0:51:4e:96:15:50:c3:07:90:8f:73:c3:75:99:f3:2b: 53:0d:1d:34 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9aKy3KEHVrgbWAlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MTAwMTAwNDUxMloXDTI5MDEwMzAxNDUxMlowLzEtMCsGA1UEAxMk NzhlZTEwZDMtMDZkNC00OTQ3LThmNTctYWUyZjMyY2NmYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF+ans8RONozqmvuau81Q3QzMvGc7iOxXp+M +G86gKr+oPIWUMPO7+8MwlSc4I+0MKtEBUO1CUXngC0UUiqFK2h4qou70Cos80jX fLwiaTgfCmeZI1bzulWPly8Hgf61v+I4NwLy30tEWcX/TrX/AL8LZ5KY0CUIyAEX NiwUIqzQP4c0+3A1RNDX6q8i7m4un271P5tqNrheOUvdpSlzncbXv0Ulclz6w+3b pzubx8zB6q0KGGkIvpOe4Yv5RRYzGx5rzcS68GqhvKH3ROzbH5j26C/+0OaH5mQn UrX/4xA/zf1/qvHJs2zfeJJ2VvlKl9gM0+IlBZS8vIErlRzSbQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKiGV+bab0GxBtzbmzPv/NRxU/UgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 OGVlMTBkMy0wNmQ0LTQ5NDctOGY1Ny1hZTJmMzJjY2ZhOTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzc4ZWUxMGQzLTA2ZDQtNDk0Ny04 ZjU3LWFlMmYzMmNjZmE5Ni83OGVlMTBkMy0wNmQ0LTQ5NDctOGY1Ny1hZTJmMzJj Y2ZhOTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjNwwDgQCAAIwCAMGBCYC9gEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhejBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPAht3ioEYs7nVwkVsBSnd15Wr QYGm7Xnn16j7ZA8KehAsVBaGGpak4KOb9Q0NqIB2kxpsQ3IbUV0Nj26ARVmkfc39 yxOQzyeR0K0DNcjDUJn5k+Zjvvmv4saI0Ft6F6fnXAk+gAvjwGjAk2TByTTeYk/E af0LoyCq0+AWn9tiylhjXFTvrPdYmiDEOo1VSnXgM2juWvouO7+bVit+C2D7FuBa j6FlUudu2nvpgeAhfd3/SfefYY5V/6ct09welngjXoWVFWSZZ0z8uiqZ/fzoWp4O J1dH5rw5N0xjJlo6btg9/zlbCrFcaJR8SsBRTpYVUMMHkI9zw3WZ8ytTDR00 -----END CERTIFICATE-----Generated at Tue Nov 3 08:21:56 2026 by rpki-client