$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer File: 9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer (raw, json) Hash identifier: bVpSpBe6MoNxaOZ6rv3T7igTSVdv+Ui52wHbX7vWBjY= Subject key identifier: B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F5EF49793DDCE7534111E0DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 17:54:15 +0000 Certificate not after: Fri 26 May 2028 00:06:12 +0000 Subordinate resources: AS: 402212 AS: 402560 IP: 23.158.212.0/24 IP: 143.203.128.0/22 IP: 2602:f44d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:f4:97:93:dd:ce:75:34:11:1e:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 2 17:54:15 2026 GMT Not After : May 26 00:06:12 2028 GMT Subject: CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:62:3a:47:ec:1b:01:43:fa:5f:05:d1:2e: 86:c0:1f:19:20:07:6e:b9:8a:bb:be:a2:50:3a:63: 45:c4:52:85:cf:f2:68:73:68:96:a3:93:d8:bd:2b: db:04:23:88:55:ac:13:8d:04:dc:a0:1a:92:ff:fc: 8c:15:95:59:34:ea:f3:55:31:ee:ee:b3:cf:ea:9a: 1e:f5:f3:48:0b:86:8d:c1:21:56:26:67:78:97:0c: 8d:ae:f8:b7:26:bd:78:30:50:ff:b9:52:73:57:c8: 98:ee:ad:47:c5:1a:a5:fd:dc:aa:8c:d3:c2:92:c4: a9:29:04:04:98:11:8a:7c:0b:d8:35:74:f8:fd:6b: fe:a4:93:11:87:5a:b9:d7:c7:f2:1d:46:02:5b:b3: db:a8:e9:c1:58:0e:ff:39:8c:7a:47:e4:64:fd:a0: 43:b9:b7:4c:d2:bc:10:9c:1e:cf:c9:5a:05:bd:4f: 18:d3:74:39:9d:61:6f:39:a1:4a:5e:fc:4a:e2:2d: df:15:31:6e:46:ad:7d:d7:94:b4:14:42:aa:0d:ca: 24:56:80:2c:cd:a2:a8:d0:f1:74:26:3d:94:42:14: c3:0b:d7:54:1e:01:2c:f3:9a:35:67:9a:43:89:a4: 1c:ed:e9:86:22:7d:45:ce:20:a9:d8:4e:7b:95:df: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.158.212.0/24 143.203.128.0/22 IPv6: 2602:f44d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402212 402560 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d5:e8:2d:92:cd:32:24:6a:6f:1e:9e:ae:85:04:ee:d2:f2: 06:db:74:fa:99:50:d5:ec:ad:40:ac:2a:b2:e5:e7:ca:8e:bb: 9e:8d:0a:73:3f:46:4a:5e:fc:0e:1f:3d:3b:9f:40:56:e5:5e: b8:7c:56:20:77:42:b4:95:86:b4:ea:97:1e:6e:47:96:4f:d5: 37:c7:35:c3:c2:19:bc:95:d4:d3:00:6e:38:a3:28:b1:6b:f3: 30:91:69:6e:4d:c9:21:ed:92:b4:be:40:b3:c9:7c:a2:b3:05: 02:33:04:81:02:9f:d6:99:5e:f6:d4:9b:4c:72:6e:41:90:18: 6c:46:9a:78:ae:38:56:f9:02:27:78:72:1d:5b:6a:c3:c3:42: e3:e4:52:cb:cc:89:3f:c3:b1:c1:19:14:eb:5d:00:08:4b:b0: 67:b0:9c:d8:43:1f:05:c2:09:e0:1e:7c:a9:34:ec:04:78:52: 2c:88:89:9d:41:01:24:9e:34:81:15:cb:62:76:ab:4d:6d:74: 1d:92:8b:a8:2e:df:ea:01:b6:a8:be:77:59:27:e8:70:db:70: 9a:59:f9:e1:0b:42:bb:fa:86:eb:3e:c4:41:43:f8:a6:86:f9: 54:c7:6e:aa:48:11:96:e7:b8:e0:6d:ee:2f:15:10:ac:9c:41: 22:f8:6f:db -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9e9JeT3c51NBEeDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAwMjE3NTQxNVoXDTI4MDUyNjAwMDYxMlowLzEtMCsGA1UEAxMk OWUwMmQ3MzctZjg1Ny00Zjg2LWIwY2QtYTc5NjZjNmUyYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzdiOkfsGwFD+l8F0S6GwB8ZIAduuYq7vqJQ OmNFxFKFz/Joc2iWo5PYvSvbBCOIVawTjQTcoBqS//yMFZVZNOrzVTHu7rPP6poe 9fNIC4aNwSFWJmd4lwyNrvi3Jr14MFD/uVJzV8iY7q1HxRql/dyqjNPCksSpKQQE mBGKfAvYNXT4/Wv+pJMRh1q518fyHUYCW7PbqOnBWA7/OYx6R+Rk/aBDubdM0rwQ nB7PyVoFvU8Y03Q5nWFvOaFKXvxK4i3fFTFuRq1915S0FEKqDcokVoAszaKo0PF0 Jj2UQhTDC9dUHgEs85o1Z5pDiaQc7emGIn1FziCp2E57ld9h9wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFLmpmEqZF5FC7GhRPrL0Na3jwUDcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 ZTAyZDczNy1mODU3LTRmODYtYjBjZC1hNzk2NmM2ZTJhYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzllMDJkNzM3LWY4NTctNGY4Ni1i MGNkLWE3OTY2YzZlMmFjMy85ZTAyZDczNy1mODU3LTRmODYtYjBjZC1hNzk2NmM2 ZTJhYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXntQDBAKPy4AwDgQCAAIwCAMGACYC9E0AMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYjJAIDBiSAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADDV6C2SzTIk am8enq6FBO7S8gbbdPqZUNXsrUCsKrLl58qOu56NCnM/Rkpe/A4fPTufQFblXrh8 ViB3QrSVhrTqlx5uR5ZP1TfHNcPCGbyV1NMAbjijKLFr8zCRaW5NySHtkrS+QLPJ fKKzBQIzBIECn9aZXvbUm0xybkGQGGxGmniuOFb5Aid4ch1basPDQuPkUsvMiT/D scEZFOtdAAhLsGewnNhDHwXCCeAefKk07AR4UiyIiZ1BASSeNIEVy2J2q01tdB2S i6gu3+oBtqi+d1kn6HDbcJpZ+eELQrv6hus+xEFD+KaG+VTHbqpIEZbnuOBt7i8V EKycQSL4b9s= -----END CERTIFICATE-----Generated at Fri Oct 16 07:00:53 2026 by rpki-client