$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer File: 136870e3-c4bf-4b79-9466-6d145047fcd9.cer (raw, json) Hash identifier: XqHbaYADBcUdCmte8Xb+mItmD3/YzEHzg6zQtbIilZE= Subject key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584EE63C77976B4D6A88D66B1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Aug 2026 12:06:16 +0000 Certificate not after: Wed 15 Mar 2028 17:18:02 +0000 Subordinate resources: AS: 46635 IP: 48.44.0.0/14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:3c:77:97:6b:4d:6a:88:d6:6b:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Aug 20 12:06:16 2026 GMT Not After : Mar 15 17:18:02 2028 GMT Subject: CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:e8:6d:94:70:9d:63:1b:85:d3:fb:8b:be: aa:da:6d:c7:36:89:b3:8c:69:cb:4c:3a:cc:71:05: e7:c6:1a:7a:51:32:8e:10:9b:0e:56:16:46:1b:c0: 10:e2:60:a8:80:1e:7b:54:c2:8d:39:76:d7:4d:d4: 54:af:b4:48:e9:fd:c4:74:f0:e8:9a:b5:09:b0:4e: 1c:d7:42:ee:fe:90:ef:8a:55:b4:a2:43:c9:d6:d8: 06:65:d8:49:ec:24:8f:6d:3b:f0:38:c0:ef:ae:66: 36:b8:ae:56:b0:d2:e7:43:76:a9:69:26:0c:c8:59: 85:db:ab:3a:d3:40:fa:56:22:70:24:d1:b0:cf:8a: 44:3a:c1:39:7a:24:ec:33:e9:0e:ea:ab:f5:07:6d: d1:c7:61:c1:70:67:d6:0b:c3:5b:0e:1e:89:26:40: 47:17:a7:a7:25:5a:a2:cc:65:4f:72:13:96:76:77: 28:98:b6:00:10:22:a5:55:1c:92:ae:a6:69:58:a7: e0:07:6d:18:dc:5e:3b:87:0e:a4:21:a9:7c:96:9d: 97:59:07:ed:b3:91:fd:4b:9b:b2:07:bf:5b:3c:20: cc:b8:2d:11:22:77:49:78:af:cd:68:87:6b:19:ee: 59:a2:d8:50:d2:1f:c2:7e:f6:23:ca:81:4f:41:da: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 48.44.0.0/14 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46635 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:28:30:fd:99:37:60:12:96:ca:be:c0:1c:13:44:aa:fd:57: 93:95:af:7d:4f:05:2c:19:30:21:a4:50:fa:31:84:86:4c:e5: 04:9f:14:d6:d0:dd:5a:14:2c:75:67:13:36:ec:5f:fc:ba:1c: 29:8b:41:d5:61:21:30:09:af:f0:f4:2c:64:48:c1:3a:a8:e3: 99:a7:ea:68:5a:4a:0a:7e:c7:3d:a1:6b:75:16:76:b5:5b:1c: cf:5b:a5:87:16:7d:0f:c5:de:d4:ba:99:8e:51:69:e9:34:17: f6:9b:7e:7f:5e:49:db:db:4b:50:50:f1:dd:74:37:3e:6c:c2: c5:e1:c6:e5:f1:da:fc:64:65:f3:f6:2d:15:0c:99:65:ac:2f: 33:1b:ff:99:5e:a9:84:2e:ea:6b:96:a4:c5:f8:25:27:34:4a: 70:99:68:3b:f4:33:49:92:c8:4d:2f:9a:95:77:5d:14:ed:c0: 96:e2:42:9f:fe:70:cf:c4:85:0c:7d:a4:1f:4d:c1:dd:ba:e5: df:d0:96:74:bf:6b:e7:d1:06:c1:55:34:6a:de:08:1e:2c:1c: 2e:38:61:78:4d:6c:78:71:a3:63:71:f9:4a:fc:cd:27:d0:31: bd:f5:ad:62:d3:57:eb:af:c0:4a:a4:6e:79:5b:04:cc:58:18: 31:af:2f:5a -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE7mPHeXa01qiNZrE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDgyMDEyMDYxNloXDTI4MDMxNTE3MTgwMlowLzEtMCsGA1UEAxMk MTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdmY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtbobZRwnWMbhdP7i76q2m3HNomzjGnLTDrM cQXnxhp6UTKOEJsOVhZGG8AQ4mCogB57VMKNOXbXTdRUr7RI6f3EdPDomrUJsE4c 10Lu/pDvilW0okPJ1tgGZdhJ7CSPbTvwOMDvrmY2uK5WsNLnQ3apaSYMyFmF26s6 00D6ViJwJNGwz4pEOsE5eiTsM+kO6qv1B23Rx2HBcGfWC8NbDh6JJkBHF6enJVqi zGVPchOWdncomLYAECKlVRySrqZpWKfgB20Y3F47hw6kIal8lp2XWQfts5H9S5uy B79bPCDMuC0RIndJeK/NaIdrGe5ZothQ0h/CfvYjyoFPQdrhjwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIjVCsmVdWx/dezH++ebgqupfkTsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x MzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEzNjg3MGUzLWM0YmYtNGI3OS05 NDY2LTZkMTQ1MDQ3ZmNkOS8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0 N2ZjZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwIwLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA tiswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdigw/Zk3YBKWyr7AHBNEqv1Xk5WvfU8FLBkwIaRQ+jGEhkzl BJ8U1tDdWhQsdWcTNuxf/LocKYtB1WEhMAmv8PQsZEjBOqjjmafqaFpKCn7HPaFr dRZ2tVscz1ulhxZ9D8Xe1LqZjlFp6TQX9pt+f15J29tLUFDx3XQ3PmzCxeHG5fHa /GRl8/YtFQyZZawvMxv/mV6phC7qa5akxfglJzRKcJloO/QzSZLITS+alXddFO3A luJCn/5wz8SFDH2kH03B3brl39CWdL9r59EGwVU0at4IHiwcLjhheE1seHGjY3H5 SvzNJ9AxvfWtYtNX66/ASqRueVsEzFgYMa8vWg== -----END CERTIFICATE-----Generated at Tue Sep 1 03:21:15 2026 by rpki-client