$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer File: 898522c4-7c40-4c25-80fb-b226c0ea4497.cer (raw, json) Hash identifier: ZAdeK3FQIjaRX5fOj9gf4yXoZFWgy5IFEUWY1IS6GTY= Subject key identifier: 57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EDF551343E5F52C6BE09C49C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 00:45:11 +0000 Certificate not after: Mon 20 Nov 2028 01:45:11 +0000 Subordinate resources: IP: 141.233.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:55:13:43:e5:f5:2c:6b:e0:9c:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 18 00:45:11 2026 GMT Not After : Nov 20 01:45:11 2028 GMT Subject: CN=898522c4-7c40-4c25-80fb-b226c0ea4497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:41:f3:c2:9c:ac:66:d6:fa:34:88:27:d1: db:36:70:a8:35:72:ee:98:dc:2c:0b:12:06:dc:a1: 52:87:7d:ff:72:d1:4b:71:12:97:c2:a8:13:ab:fc: af:56:9d:66:40:0b:ae:38:17:9d:5a:59:16:e0:c5: 2e:52:61:08:cb:62:02:bc:b1:d0:ee:5b:43:04:39: 59:60:43:ae:77:09:d1:14:08:83:62:a6:70:e9:43: fe:f4:f6:70:98:64:98:27:60:54:6e:d2:f3:9d:c8: 20:d1:d0:33:ab:77:4c:b2:96:81:45:62:ac:30:fd: 35:37:b4:43:63:5f:c4:91:ed:92:93:72:51:aa:af: 6b:60:e6:b3:c5:62:bd:12:ad:6a:72:ca:de:68:51: 8e:2a:85:e9:dc:24:64:77:4a:de:1b:52:56:2b:5f: 40:b0:df:1a:d2:8d:0a:19:dc:67:9d:9c:0c:48:97: e8:e5:bc:32:0a:3d:b8:6e:1a:b7:90:d1:b9:c1:c7: 30:91:8a:6f:3b:92:66:a8:01:8b:c3:9c:d1:9a:ca: 81:ea:97:3f:92:fe:a9:58:eb:c7:5e:cb:6b:0e:6c: f7:c5:ca:fe:41:37:1b:eb:95:92:63:19:03:a8:28: 19:4a:87:5f:5b:bc:41:bd:7a:5b:13:ac:01:f9:4a: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 141.233.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:85:b9:bd:5b:be:70:60:ab:b5:bb:52:88:42:a8:47:22:32: 11:35:e1:39:7f:62:f1:87:de:4d:8f:ec:ea:c3:1f:49:77:dd: ed:24:59:59:c0:5e:43:1d:d5:9d:97:94:eb:0c:dd:4c:bd:52: 61:83:2e:f5:48:87:42:fd:b4:e9:46:e7:a7:ef:43:69:27:65: 6d:f0:87:8e:e4:f8:75:36:a4:0b:3c:46:0a:bd:11:01:d8:36: 7e:08:d8:6c:1f:83:67:bb:9a:c7:84:21:bf:df:7c:29:95:1f: 2e:da:1c:84:56:ad:14:a0:9a:4a:c2:ae:27:9d:c6:fb:e1:74: 0d:06:b3:92:de:8c:97:3e:05:56:91:97:88:5c:58:0a:8a:d9: 2e:ed:f3:17:c4:bc:be:83:a6:95:3b:9e:3b:d3:ed:ed:c8:3a: 42:9b:d5:50:32:78:ab:d6:01:d6:e6:73:ce:bd:5f:a7:c1:46: 24:b1:e8:9d:3a:23:8d:b8:2d:75:0d:41:cb:17:6e:3e:f8:e0: 77:15:c1:b7:6c:32:a4:90:2b:39:3d:ba:10:52:33:0d:5a:7f: e9:ca:2e:5b:66:fd:da:18:ce:89:19:78:b7:32:16:43:ca:a3: ec:89:3c:11:80:1a:35:11:69:23:66:16:a1:be:21:42:32:c7: d5:41:0c:e0 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE7fVRND5fUsa+CcScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgxODAwNDUxMVoXDTI4MTEyMDAxNDUxMVowLzEtMCsGA1UEAxMk ODk4NTIyYzQtN2M0MC00YzI1LTgwZmItYjIyNmMwZWE0NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMtB88KcrGbW+jSIJ9HbNnCoNXLumNwsCxIG 3KFSh33/ctFLcRKXwqgTq/yvVp1mQAuuOBedWlkW4MUuUmEIy2ICvLHQ7ltDBDlZ YEOudwnRFAiDYqZw6UP+9PZwmGSYJ2BUbtLzncgg0dAzq3dMspaBRWKsMP01N7RD Y1/Eke2Sk3JRqq9rYOazxWK9Eq1qcsreaFGOKoXp3CRkd0reG1JWK19AsN8a0o0K GdxnnZwMSJfo5bwyCj24bhq3kNG5wccwkYpvO5JmqAGLw5zRmsqB6pc/kv6pWOvH XstrDmz3xcr+QTcb65WSYxkDqCgZSodfW7xBvXpbE6wB+UrVjwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFFcohyHaDrsHMFWaWH9i7wXmlqSEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 OTg1MjJjNC03YzQwLTRjMjUtODBmYi1iMjI2YzBlYTQ0OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg5ODUyMmM0LTdjNDAtNGMyNS04 MGZiLWIyMjZjMGVhNDQ5Ny84OTg1MjJjNC03YzQwLTRjMjUtODBmYi1iMjI2YzBl YTQ0OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCN6TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9hbm9W75wYKu1u1KIQqhH IjIRNeE5f2Lxh95Nj+zqwx9Jd93tJFlZwF5DHdWdl5TrDN1MvVJhgy71SIdC/bTp Ruen70NpJ2Vt8IeO5Ph1NqQLPEYKvREB2DZ+CNhsH4Nnu5rHhCG/33wplR8u2hyE Vq0UoJpKwq4nncb74XQNBrOS3oyXPgVWkZeIXFgKitku7fMXxLy+g6aVO5470+3t yDpCm9VQMnir1gHW5nPOvV+nwUYkseidOiONuC11DUHLF24++OB3FcG3bDKkkCs5 PboQUjMNWn/pyi5bZv3aGM6JGXi3MhZDyqPsiTwRgBo1EWkjZhahviFCMsfVQQzg -----END CERTIFICATE-----Generated at Fri Sep 25 14:58:40 2026 by rpki-client