$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer File: 259ec515-1c64-4ed2-96d4-729fb5a0107e.cer (raw, json) Hash identifier: YufoISXu8ihbrlGrhgZHgarfSJte7NpDd4MMuncJ3dU= Subject key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584F6ED25DEA792CD535F586F4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 10:18:14 +0000 Certificate not after: Mon 19 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 18956 IP: 209.196.72.0/23 IP: 216.162.196.0/23 IP: 2602:f775::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:d2:5d:ea:79:2c:d5:35:f5:86:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 8 10:18:14 2026 GMT Not After : Jun 19 00:45:21 2028 GMT Subject: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:17:5e:fe:9a:38:3c:94:02:27:43:c2:5f: ba:85:fe:82:55:4f:ec:ea:e7:d2:dc:48:4c:64:c3: ea:7c:1d:42:da:6e:5c:3f:ba:a2:89:c1:2f:c4:9c: c6:a6:cd:90:08:7c:8b:a2:f4:db:fa:76:c5:d9:92: 96:bc:2f:3a:c8:67:54:b9:d0:08:7c:23:b8:bd:87: b0:9e:c2:3a:51:66:ee:21:2e:0d:1f:99:83:42:b1: 20:4d:34:3a:0a:02:5d:7c:37:39:0c:2c:a9:76:e3: 28:5b:8f:0c:e3:b7:ea:46:55:4b:1e:01:48:a9:f6: 5b:e9:f2:68:5e:b9:ce:dd:34:e0:d0:62:45:98:8b: 74:fb:82:ed:a1:56:69:66:1b:7a:86:ed:33:3e:2a: 97:80:37:ad:18:d0:7e:35:bb:d8:d4:10:ec:dd:30: 84:17:ec:41:38:8b:18:91:24:1f:d6:90:19:38:d6: da:17:65:67:af:33:ca:fa:01:45:68:8f:07:64:2c: 33:61:ef:2b:0d:29:4f:0f:51:1d:0f:9b:1d:54:9b: c6:3a:dc:68:24:b2:d2:6f:53:e2:81:f1:fb:1c:f9: e3:86:d2:f4:ff:f4:d3:72:0f:0f:aa:bf:ce:37:72: 6d:3c:30:1a:72:d6:9a:34:34:82:fe:c0:ff:f2:22: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 209.196.72.0/23 216.162.196.0/23 IPv6: 2602:f775::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d6:3c:f7:3c:00:dc:53:88:f4:d4:81:64:b6:8a:f5:29:cb: 98:e7:c5:9f:9d:6e:f6:7b:ce:39:43:b4:6b:f8:03:d9:ea:57: 2b:58:d5:63:73:de:5a:58:77:98:4e:91:35:e7:92:96:b2:35: 6b:f9:cd:df:cf:c7:12:ff:fe:3f:82:a9:d8:2c:22:ee:59:d2: 52:93:ad:f1:6e:a6:f0:46:aa:c0:86:1f:0e:32:42:a2:3b:49: fa:d4:0b:6c:0d:9a:ba:1f:ee:82:b4:84:fb:60:b3:7f:78:99: e0:69:80:af:07:20:1a:15:c2:f8:87:36:a0:86:59:a9:cf:8b: b6:e8:00:ea:97:39:d5:dc:f0:00:f6:6c:0d:3e:81:25:96:df: 3a:e0:b9:da:f5:75:ab:5f:79:34:31:61:bd:9c:7e:5f:04:aa: 97:62:ef:ce:05:15:8a:20:c7:1e:f7:5b:63:39:fa:88:8c:e6: 77:33:04:5b:c3:d1:a1:3c:59:78:ee:74:a9:2c:ca:aa:5b:87: 76:c0:cb:fe:86:3a:3c:6c:83:0b:62:c7:f5:48:31:4f:e6:e6: 4d:6e:88:4a:98:d9:f9:49:ce:d3:df:cb:c8:ac:e6:62:dc:2a: a5:71:70:87:76:50:59:dd:f3:37:9a:c8:96:b8:9e:cb:df:7e: 97:d2:04:f8 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9u0l3qeSzVNfWG9KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MTAwODEwMTgxNFoXDTI4MDYxOTAwNDUyMVowLzEtMCsGA1UEAxMk MjU5ZWM1MTUtMWM2NC00ZWQyLTk2ZDQtNzI5ZmI1YTAxMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSkXXv6aODyUAidDwl+6hf6CVU/s6ufS3EhM ZMPqfB1C2m5cP7qiicEvxJzGps2QCHyLovTb+nbF2ZKWvC86yGdUudAIfCO4vYew nsI6UWbuIS4NH5mDQrEgTTQ6CgJdfDc5DCypduMoW48M47fqRlVLHgFIqfZb6fJo XrnO3TTg0GJFmIt0+4LtoVZpZht6hu0zPiqXgDetGNB+NbvY1BDs3TCEF+xBOIsY kSQf1pAZONbaF2VnrzPK+gFFaI8HZCwzYe8rDSlPD1EdD5sdVJvGOtxoJLLSb1Pi gfH7HPnjhtL0//TTcg8Pqr/ON3JtPDAactaaNDSC/sD/8iJ3sQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFB+TLsgdUS8YLxlo3NckUtnUSgA6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y NTllYzUxNS0xYzY0LTRlZDItOTZkNC03MjlmYjVhMDEwN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI1OWVjNTE1LTFjNjQtNGVkMi05 NmQ0LTcyOWZiNWEwMTA3ZS8yNTllYzUxNS0xYzY0LTRlZDItOTZkNC03MjlmYjVh MDEwN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAHRxEgDBAHYosQwDgQCAAIwCAMGACYC93UAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAkoMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHrWPPc8ANxTiPTUgWS2 ivUpy5jnxZ+dbvZ7zjlDtGv4A9nqVytY1WNz3lpYd5hOkTXnkpayNWv5zd/PxxL/ /j+CqdgsIu5Z0lKTrfFupvBGqsCGHw4yQqI7SfrUC2wNmrof7oK0hPtgs394meBp gK8HIBoVwviHNqCGWanPi7boAOqXOdXc8AD2bA0+gSWW3zrgudr1datfeTQxYb2c fl8Eqpdi784FFYogxx73W2M5+oiM5nczBFvD0aE8WXjudKksyqpbh3bAy/6GOjxs gwtix/VIMU/m5k1uiEqY2flJztPfy8is5mLcKqVxcId2UFnd8zeayJa4nsvffpfS BPg= -----END CERTIFICATE-----Generated at Sat Oct 10 10:36:16 2026 by rpki-client