$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer File: 883ca040-a898-4e47-b1e1-f2461996a058.cer (raw, json) Hash identifier: 7DzPMwu4zivR+MF0rG4OAcJDRR1XXBa15eFwHCJA4og= Subject key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EF0152F49D2C51326B4C01400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Aug 2026 00:45:12 +0000 Certificate not after: Sun 26 Nov 2028 01:45:12 +0000 Subordinate resources: AS: 54249 IP: 209.189.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:15:2f:49:d2:c5:13:26:b4:c0:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 24 00:45:12 2026 GMT Not After : Nov 26 01:45:12 2028 GMT Subject: CN=883ca040-a898-4e47-b1e1-f2461996a058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:36:cb:72:5c:ac:6c:90:82:45:d1:20:4d: ff:e3:4d:46:bf:1f:0b:0a:eb:25:98:57:71:47:1a: c7:a7:63:40:f8:e2:95:fe:0e:99:99:f8:da:77:4d: 58:5f:b9:76:b4:0d:41:f6:91:ba:97:32:07:52:46: f4:07:8c:ca:0a:af:65:6e:cf:3b:1c:40:5b:74:8f: c2:a6:fb:53:72:8e:72:7d:d3:40:5e:e8:f6:47:31: 74:b5:69:73:35:e0:b1:f6:59:23:98:71:77:82:26: 1e:0f:9e:2b:af:c8:28:46:0c:99:2b:95:35:06:a7: 30:7a:3c:66:4b:f8:86:9f:42:b7:48:51:70:37:b6: f1:93:f4:fa:d8:bb:64:f0:c7:6e:c8:70:86:82:9d: a2:ea:eb:0b:fb:41:a9:a4:93:6d:48:07:b9:21:32: 87:0a:67:50:69:2b:0f:8a:0d:67:fe:23:3c:df:2e: a6:18:de:d8:8d:6c:65:a7:6a:d5:16:d8:4a:c9:89: 3f:f9:43:1f:ce:b1:c3:8f:c2:9e:4c:8e:5c:9e:6c: 88:a8:95:9b:4f:a7:bf:cf:03:3a:50:2a:ee:f3:74: 39:e6:d1:06:80:a9:7c:b2:32:9e:02:0b:a2:c3:78: f7:c4:35:48:07:a3:de:98:ba:12:1e:a4:78:59:ec: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 209.189.128.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54249 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:20:a3:e7:76:e8:28:c9:18:45:29:e3:1e:99:f1:6b:b0:27: 37:a4:11:e8:bb:88:7b:69:f2:a1:52:cb:90:42:d3:39:c4:40: b4:51:aa:fe:34:e9:38:7e:d5:da:ea:7c:c8:12:3b:40:db:44: fc:55:63:3d:eb:ce:7a:f0:8a:eb:a4:03:3b:50:d3:e0:05:37: ce:b2:dd:02:4e:fb:00:09:7e:22:42:d4:2e:1b:a6:15:d6:d9: c5:35:ca:aa:11:2b:b2:65:84:22:6b:e6:18:b9:fe:b6:cf:e8: 2e:e6:b8:49:8a:11:a9:a5:4c:8f:3a:73:85:f8:2f:be:d0:c0: aa:84:a0:08:8e:01:06:72:19:22:7d:fa:94:76:3b:7a:55:be: 97:d2:32:44:d9:3a:e7:47:f5:c8:90:17:e5:f1:7a:8b:b4:07: 23:e4:a5:59:56:f9:f5:fb:5b:24:e0:e3:75:51:9a:1d:9e:04: 2a:9a:1d:ef:bb:a1:e7:97:56:85:e1:6a:20:ce:fa:4f:f2:0b: 7e:cf:92:9a:65:3e:93:51:14:2b:ae:d7:a7:44:29:dc:78:15: 54:83:d0:d3:3c:98:9e:fb:e2:00:e0:72:81:51:4d:51:9d:89: 46:01:56:2f:28:49:7d:0a:92:8e:e1:84:47:50:06:56:11:c4: 38:7f:36:06 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE7wFS9J0sUTJrTAFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyNDAwNDUxMloXDTI4MTEyNjAxNDUxMlowLzEtMCsGA1UEAxMk ODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZhMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+s2y3JcrGyQgkXRIE3/401Gvx8LCuslmFdx RxrHp2NA+OKV/g6Zmfjad01YX7l2tA1B9pG6lzIHUkb0B4zKCq9lbs87HEBbdI/C pvtTco5yfdNAXuj2RzF0tWlzNeCx9lkjmHF3giYeD54rr8goRgyZK5U1Bqcwejxm S/iGn0K3SFFwN7bxk/T62Ltk8MduyHCGgp2i6usL+0GppJNtSAe5ITKHCmdQaSsP ig1n/iM83y6mGN7YjWxlp2rVFthKyYk/+UMfzrHDj8KeTI5cnmyIqJWbT6e/zwM6 UCru83Q55tEGgKl8sjKeAguiw3j3xDVIB6PemLoSHqR4WeyqVQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFL0PU14uzC2HQPTeofwOHMlLuHCWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg4M2NhMDQwLWE4OTgtNGU0Ny1i MWUxLWYyNDYxOTk2YTA1OC84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5 NmEwNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbRvYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANPpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHggo+d26CjJGEUp4x6Z8WuwJzekEei7iHtp8qFSy5BC0znE QLRRqv406Th+1drqfMgSO0DbRPxVYz3rznrwiuukAztQ0+AFN86y3QJO+wAJfiJC 1C4bphXW2cU1yqoRK7JlhCJr5hi5/rbP6C7muEmKEamlTI86c4X4L77QwKqEoAiO AQZyGSJ9+pR2O3pVvpfSMkTZOudH9ciQF+Xxeou0ByPkpVlW+fX7WyTg43VRmh2e BCqaHe+7oeeXVoXhaiDO+k/yC37PkpplPpNRFCuu16dEKdx4FVSD0NM8mJ774gDg coFRTVGdiUYBVi8oSX0Kko7hhEdQBlYRxDh/NgY= -----END CERTIFICATE-----Generated at Tue Sep 22 13:15:54 2026 by rpki-client