$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4.cer File: addfa849-95a5-420b-9709-5cafc0b4ffa4.cer (raw, json) Hash identifier: jkARkRX3eb4AL/We/F+MZoMfRgFopeL+wLYV8SE8Qjs= Subject key identifier: 7E:DA:3C:1E:9A:B1:12:27:F5:35:59:8C:BF:94:92:6D:95:B9:84:0D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584F69D1E8F6C5B3AC541BDC0D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 15:18:16 +0000 Certificate not after: Sun 10 Sep 2028 20:45:12 +0000 Subordinate resources: AS: 40507 IP: 23.173.168.0/24 IP: 131.143.4.0/22 IP: 156.9.136.0/22 IP: 2602:f949::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:d1:e8:f6:c5:b3:ac:54:1b:dc:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 6 15:18:16 2026 GMT Not After : Sep 10 20:45:12 2028 GMT Subject: CN=addfa849-95a5-420b-9709-5cafc0b4ffa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:f9:88:d9:cf:87:49:bc:5a:c0:e9:79:eb: 87:83:66:63:1a:a6:e0:cd:00:aa:03:18:01:8c:00: bd:a5:d6:3d:b4:57:dc:07:2e:43:c8:62:86:d0:10: 55:24:2f:5d:53:1c:71:c6:c7:bc:76:21:4c:65:47: 5c:12:80:59:04:54:bb:ed:c2:3a:72:db:e8:b9:76: b6:7d:45:4b:51:f9:f0:96:b7:a5:44:e2:15:a6:56: 64:8d:e3:27:b4:b8:21:a9:c7:14:1a:f3:78:30:3e: 36:f4:68:ca:3f:c8:ee:28:18:76:ad:21:fc:fd:9e: f8:63:23:fc:06:c3:04:f9:9f:b7:de:8c:30:32:1f: 4d:c1:ee:f4:7f:45:ea:53:a3:65:ba:b0:69:df:90: fc:46:94:00:12:18:9a:2f:39:99:63:42:bf:94:67: 55:7c:67:8f:63:ec:ed:ca:0e:b9:c5:be:5c:17:f7: 01:35:36:a3:6d:a4:ec:08:71:93:cc:d1:f2:ac:f5: f9:c8:0a:4d:e7:b3:c8:23:1f:98:62:48:54:88:b2: 07:c8:33:9d:17:7f:a0:dd:8e:51:7d:62:c6:3d:fd: 9f:5b:3c:f4:f8:1b:17:2b:9d:1d:80:91:26:58:61: db:81:d3:08:ce:84:f5:44:54:25:58:24:4d:6e:b6: 68:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DA:3C:1E:9A:B1:12:27:F5:35:59:8C:BF:94:92:6D:95:B9:84:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.173.168.0/24 131.143.4.0/22 156.9.136.0/22 IPv6: 2602:f949::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:83:f3:97:09:b3:11:29:ad:24:3e:35:eb:9c:66:f0:41:07: e8:5f:cb:33:01:a8:2a:ec:2b:bb:5d:37:31:99:6c:79:d6:ca: 08:f1:27:23:60:9a:0f:e2:b5:f3:10:2a:07:ef:be:7d:00:76: 13:fe:45:62:1d:c6:98:1c:68:7e:80:4d:9d:6c:91:e5:23:40: 73:92:9e:ee:50:bc:d0:8f:9e:86:e9:87:1c:c7:22:9b:69:c9: c7:c7:3a:5e:af:7a:af:7a:ab:2e:1c:60:3a:30:2b:bd:37:1c: 36:50:90:6a:6d:8e:74:36:e6:eb:b4:8d:17:b4:b3:71:80:69: 3f:15:04:c3:d6:1f:4a:62:64:08:2f:60:33:e4:17:93:17:af: 2c:c3:19:59:3e:ae:20:13:20:14:d7:c8:8a:16:1b:95:60:b8: 20:f5:ae:b8:88:ff:52:70:5f:6e:ec:2a:fc:d9:96:5e:4e:77: 29:7b:52:67:57:c5:e2:3f:7f:6c:e3:8a:c4:9d:46:18:01:9d: 24:3c:70:53:08:ad:62:97:3e:49:e9:4d:62:d8:e0:ab:52:3f: 3a:c2:c6:43:14:ce:f0:42:a9:b0:e9:56:2e:19:da:4b:1c:a5: cc:de:e4:23:e3:7c:ba:17:68:d3:c7:92:48:8a:bd:1f:af:93: 27:eb:8e:79 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE9p0ej2xbOsVBvcDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MTAwNjE1MTgxNloXDTI4MDkxMDIwNDUxMlowLzEtMCsGA1UEAxMk YWRkZmE4NDktOTVhNS00MjBiLTk3MDktNWNhZmMwYjRmZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFX5iNnPh0m8WsDpeeuHg2ZjGqbgzQCqAxgB jAC9pdY9tFfcBy5DyGKG0BBVJC9dUxxxxse8diFMZUdcEoBZBFS77cI6ctvouXa2 fUVLUfnwlrelROIVplZkjeMntLghqccUGvN4MD429GjKP8juKBh2rSH8/Z74YyP8 BsME+Z+33owwMh9Nwe70f0XqU6NlurBp35D8RpQAEhiaLzmZY0K/lGdVfGePY+zt yg65xb5cF/cBNTajbaTsCHGTzNHyrPX5yApN57PIIx+YYkhUiLIHyDOdF3+g3Y5R fWLGPf2fWzz0+BsXK50dgJEmWGHbgdMIzoT1RFQlWCRNbrZoZQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFH7aPB6asRIn9TVZjL+Ukm2VuYQNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ZGRmYTg0OS05NWE1LTQyMGItOTcwOS01Y2FmYzBiNGZmYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FkZGZhODQ5LTk1YTUtNDIwYi05 NzA5LTVjYWZjMGI0ZmZhNC9hZGRmYTg0OS05NWE1LTQyMGItOTcwOS01Y2FmYzBi NGZmYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXragDBAKDjwQDBAKcCYgwDgQCAAIwCAMGACYC +UkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCeOzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOg/OXCbMR Ka0kPjXrnGbwQQfoX8szAagq7Cu7XTcxmWx51soI8ScjYJoP4rXzECoH7759AHYT /kViHcaYHGh+gE2dbJHlI0Bzkp7uULzQj56G6YccxyKbacnHxzper3qveqsuHGA6 MCu9Nxw2UJBqbY50NubrtI0XtLNxgGk/FQTD1h9KYmQIL2Az5BeTF68swxlZPq4g EyAU18iKFhuVYLgg9a64iP9ScF9u7Cr82ZZeTncpe1JnV8XiP39s44rEnUYYAZ0k PHBTCK1ilz5J6U1i2OCrUj86wsZDFM7wQqmw6VYuGdpLHKXM3uQj43y6F2jTx5JI ir0fr5Mn6455 -----END CERTIFICATE-----Generated at Sun Oct 11 08:24:38 2026 by rpki-client