$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20.cer File: c4097851-b4f5-4ab6-aa88-86c3b7454a20.cer (raw, json) Hash identifier: Xx9qcwzVuARAm02ymDAjTq8VXEX3z3hw3YlyyABYh18= Subject key identifier: F7:03:8E:96:A6:4A:C7:1C:6E:10:6F:0F:5B:48:8D:46:2C:39:3B:E5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F3E4053E669656E3C595ADC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/c4097851-b4f5-4ab6-aa88-86c3b7454a20.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 00:45:11 +0000 Certificate not after: Sun 24 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 393827 AS: 394955 AS: 395996 IP: 66.132.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:40:53:e6:69:65:6e:3c:59:5a:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 21 00:45:11 2026 GMT Not After : Dec 24 01:45:11 2028 GMT Subject: CN=c4097851-b4f5-4ab6-aa88-86c3b7454a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:42:4c:32:ea:9a:df:24:86:b9:08:26:7f: 9c:1e:47:ed:6d:e4:56:4d:4b:91:3a:a4:a3:9d:ef: 8a:bc:ea:15:bc:36:fa:2c:93:e5:3b:11:50:15:f3: ff:57:cc:50:62:cf:08:da:da:b4:21:1b:d2:6b:23: f6:73:35:c6:26:6e:a5:43:32:2e:be:9e:2e:0e:f2: e7:8d:8d:c4:ef:ea:74:59:a7:ef:e0:61:b3:94:b4: 84:58:d8:4d:1f:49:b5:f4:9d:e1:08:c7:e9:7c:08: de:d4:2f:ca:9d:f7:27:a0:0d:11:99:55:5e:11:e3: 42:db:d6:7d:6b:e3:ed:40:6c:5a:6f:42:d7:38:ec: d3:cf:cb:f6:07:95:90:7c:b6:37:63:e8:b8:b3:ad: d4:f7:84:be:27:19:ca:94:96:75:ff:72:c1:6f:c0: 8e:70:96:00:d8:28:ed:63:e8:a4:98:89:8d:5e:74: 74:f5:8d:76:0d:58:1e:60:73:22:15:01:b6:56:e5: fd:d2:16:3c:62:d1:66:e7:38:29:07:8e:f0:b8:40: eb:33:8a:1b:45:f7:3e:dc:23:b5:30:9c:46:ef:18: 17:df:ce:79:70:6a:2d:51:3c:bd:7e:a6:8d:a9:56: 8c:55:f3:b7:93:b2:25:fc:56:a1:24:93:ab:72:61: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:03:8E:96:A6:4A:C7:1C:6E:10:6F:0F:5B:48:8D:46:2C:39:3B:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/c4097851-b4f5-4ab6-aa88-86c3b7454a20.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.132.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393827 394955 395996 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:01:54:cd:8a:1f:9c:84:d6:d1:16:45:41:f9:da:e1:18:5b: 64:5d:cc:b3:42:6d:e2:7e:2a:e8:0a:cc:f5:d5:86:c1:1f:c9: d2:8c:6e:d8:e3:94:e1:95:8e:3f:a1:5e:fe:e5:9e:bf:22:67: a3:0c:92:77:e9:03:b6:21:f0:01:96:ba:a7:53:3e:df:04:53: 79:3a:9a:80:41:e7:24:c9:2a:cd:5b:73:de:d6:d8:eb:7a:0b: 4f:30:70:ff:2c:19:6e:5a:71:44:d3:63:e1:a6:89:e0:e3:e7: f4:55:3b:c4:62:f9:06:6e:e6:56:52:53:53:09:98:90:2d:bc: 08:1c:dc:cc:9a:76:02:b8:a5:a5:c8:76:b4:25:90:27:06:36: 2b:30:e2:18:79:7d:3f:b4:7a:9c:04:06:ab:04:56:5c:a9:2f: fd:f6:66:77:28:b4:ad:98:2d:71:55:f8:3f:5b:33:1c:0f:31: 4f:cf:5d:3f:ce:dc:47:a0:c4:d5:35:f2:31:84:a7:bb:a0:e4: 5e:29:5f:bc:55:6f:68:00:8b:b3:50:bb:87:2b:ac:6b:57:06: a3:7a:5a:0b:cc:f6:f0:2b:3c:ad:2a:86:95:c0:c7:2c:e8:08: 78:d4:08:c6:7d:b4:a0:7c:b4:57:2d:84:38:04:fd:41:ef:fc: 55:a9:04:14 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE8+QFPmaWVuPFla3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyMTAwNDUxMVoXDTI4MTIyNDAxNDUxMVowLzEtMCsGA1UEAxMk YzQwOTc4NTEtYjRmNS00YWI2LWFhODgtODZjM2I3NDU0YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5VCTDLqmt8khrkIJn+cHkftbeRWTUuROqSj ne+KvOoVvDb6LJPlOxFQFfP/V8xQYs8I2tq0IRvSayP2czXGJm6lQzIuvp4uDvLn jY3E7+p0Wafv4GGzlLSEWNhNH0m19J3hCMfpfAje1C/KnfcnoA0RmVVeEeNC29Z9 a+PtQGxab0LXOOzTz8v2B5WQfLY3Y+i4s63U94S+JxnKlJZ1/3LBb8COcJYA2Cjt Y+ikmImNXnR09Y12DVgeYHMiFQG2VuX90hY8YtFm5zgpB47wuEDrM4obRfc+3CO1 MJxG7xgX3855cGotUTy9fqaNqVaMVfO3k7Il/FahJJOrcmGHNwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFPcDjpamSsccbhBvD1tIjUYsOTvlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j NDA5Nzg1MS1iNGY1LTRhYjYtYWE4OC04NmMzYjc0NTRhMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2M0MDk3ODUxLWI0ZjUtNGFiNi1h YTg4LTg2YzNiNzQ1NGEyMC9jNDA5Nzg1MS1iNGY1LTRhYjYtYWE4OC04NmMzYjc0 NTRhMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJChLwwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID BgJjAgMGBssCAwYK3DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTAVTNih+chNbRFkVB+drhGFtkXcyzQm3i firoCsz11YbBH8nSjG7Y45ThlY4/oV7+5Z6/ImejDJJ36QO2IfABlrqnUz7fBFN5 OpqAQeckySrNW3Pe1tjregtPMHD/LBluWnFE02Phpong4+f0VTvEYvkGbuZWUlNT CZiQLbwIHNzMmnYCuKWlyHa0JZAnBjYrMOIYeX0/tHqcBAarBFZcqS/99mZ3KLSt mC1xVfg/WzMcDzFPz10/ztxHoMTVNfIxhKe7oOReKV+8VW9oAIuzULuHK6xrVwaj eloLzPbwKzytKoaVwMcs6Ah41AjGfbSgfLRXLYQ4BP1B7/xVqQQU -----END CERTIFICATE-----Generated at Wed Sep 23 07:57:07 2026 by rpki-client