$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.cer File: ac1693ef-e9a9-469b-9bc9-4fd318a8e897.cer (raw, json) Hash identifier: C15ZgWiE9Kpk+cxzv4v30Z8ygJ5Y2T/BjzyT2giIPes= Subject key identifier: 02:1D:0E:99:A4:74:6D:EA:31:08:2C:B0:1A:4D:7F:A6:4D:33:27:06 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F5EDE41888CA6686276F90B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 17:09:15 +0000 Certificate not after: Thu 20 Apr 2028 04:37:19 +0000 Subordinate resources: AS: 53336 IP: 23.135.236.0/24 IP: 143.203.84.0/22 IP: 155.103.252.0/22 IP: 2602:f6c3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:de:41:88:8c:a6:68:62:76:f9:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 2 17:09:15 2026 GMT Not After : Apr 20 04:37:19 2028 GMT Subject: CN=ac1693ef-e9a9-469b-9bc9-4fd318a8e897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:0c:6f:44:b1:c6:25:82:1a:24:9b:ed:7e: f7:83:19:2d:26:1b:c1:a7:77:23:48:99:6a:b0:95: b7:75:da:cd:07:e2:9f:1d:a1:c0:fe:91:e9:38:8d: 83:e8:c1:1d:86:04:40:79:ec:11:04:a6:ee:69:50: bb:5d:97:d1:f7:05:f5:71:9d:2b:04:c1:43:cf:b0: 1a:1d:e2:d5:03:e2:84:4d:ab:0d:0d:12:24:7d:3e: 10:22:c3:30:a5:e1:3d:3e:9a:34:c9:30:9c:c1:8a: d8:7e:27:ae:7f:68:61:94:96:6c:6b:ea:fd:bf:10: da:85:ca:4d:c6:00:1c:a5:2a:8b:12:5e:a8:e5:44: d9:06:68:a7:97:75:27:2c:05:c3:54:1c:10:47:60: 27:14:4d:81:7b:38:fd:6c:96:3b:9b:83:57:52:53: 94:c9:3b:fb:db:19:5f:fe:5e:ca:0e:51:b4:7c:5f: d1:11:94:e5:d9:67:9e:3d:25:78:a8:b7:a0:80:45: 73:65:f7:16:d9:c6:14:93:a7:09:a6:45:99:79:95: 7a:ad:4a:1c:80:71:12:60:f0:28:39:4a:41:fd:f6: e7:a3:8e:07:13:19:06:ea:8a:22:08:f7:c4:c5:4d: 9a:91:b1:29:aa:e1:1f:60:0e:57:aa:32:30:03:2f: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1D:0E:99:A4:74:6D:EA:31:08:2C:B0:1A:4D:7F:A6:4D:33:27:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.135.236.0/24 143.203.84.0/22 155.103.252.0/22 IPv6: 2602:f6c3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53336 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b5:bd:35:9b:b6:77:ab:90:da:a0:a7:4e:9f:4f:6d:38:ca: 6d:3b:77:1f:78:e1:36:e1:71:35:71:12:8c:4d:15:1c:e9:26: 35:eb:aa:30:b2:44:8b:62:6d:e0:34:79:5a:7e:bd:85:b4:bd: 49:46:bc:c2:84:e1:e2:b2:0b:40:20:74:7a:d8:42:da:a5:2b: 21:36:11:fc:69:7d:01:36:30:ec:f0:76:7a:7a:e2:3d:9f:12: 80:41:49:49:90:56:07:aa:47:07:e0:41:57:6c:40:8d:21:5d: 99:98:d4:0b:23:bd:c3:df:b8:a5:9a:8b:13:53:ad:30:81:bb: 37:33:83:1d:83:4e:f2:8d:3e:18:a5:d5:25:ad:65:de:b1:d5: bd:84:7f:0d:61:a3:03:fa:c6:95:40:1c:a9:b3:92:e6:3e:96: bd:6c:85:ed:9e:0c:7f:8d:79:ca:37:60:3d:69:6e:8d:08:20: bf:71:c0:45:5d:20:6c:4a:bf:d7:17:17:87:fe:d8:4a:43:ed: 08:84:ba:c1:5e:91:3f:d2:fb:f1:b3:a9:e3:75:7a:0f:0b:40: 50:b2:34:9a:17:47:a7:a4:53:19:ac:c8:f5:da:d3:be:32:ad: fa:1e:d5:b9:06:cf:45:3f:9b:84:bd:9b:ad:c6:bb:bf:8e:52: fb:2b:c6:a3 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE9e3kGIjKZoYnb5C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAwMjE3MDkxNVoXDTI4MDQyMDA0MzcxOVowLzEtMCsGA1UEAxMk YWMxNjkzZWYtZTlhOS00NjliLTliYzktNGZkMzE4YThlODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGQMb0SxxiWCGiSb7X73gxktJhvBp3cjSJlq sJW3ddrNB+KfHaHA/pHpOI2D6MEdhgRAeewRBKbuaVC7XZfR9wX1cZ0rBMFDz7Aa HeLVA+KETasNDRIkfT4QIsMwpeE9Ppo0yTCcwYrYfieuf2hhlJZsa+r9vxDahcpN xgAcpSqLEl6o5UTZBminl3UnLAXDVBwQR2AnFE2Bezj9bJY7m4NXUlOUyTv72xlf /l7KDlG0fF/REZTl2WeePSV4qLeggEVzZfcW2cYUk6cJpkWZeZV6rUocgHESYPAo OUpB/fbno44HExkG6ooiCPfExU2akbEpquEfYA5XqjIwAy8tvwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFAIdDpmkdG3qMQgssBpNf6ZNMycGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h YzE2OTNlZi1lOWE5LTQ2OWItOWJjOS00ZmQzMThhOGU4OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2FjMTY5M2VmLWU5YTktNDY5Yi05 YmM5LTRmZDMxOGE4ZTg5Ny9hYzE2OTNlZi1lOWE5LTQ2OWItOWJjOS00ZmQzMThh OGU4OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXh+wDBAKPy1QDBAKbZ/wwDgQCAAIwCAMGBCYC 9sMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDQWDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEtb01m7Z3 q5DaoKdOn09tOMptO3cfeOE24XE1cRKMTRUc6SY166owskSLYm3gNHlafr2FtL1J RrzChOHisgtAIHR62ELapSshNhH8aX0BNjDs8HZ6euI9nxKAQUlJkFYHqkcH4EFX bECNIV2ZmNQLI73D37ilmosTU60wgbs3M4Mdg07yjT4YpdUlrWXesdW9hH8NYaMD +saVQByps5LmPpa9bIXtngx/jXnKN2A9aW6NCCC/ccBFXSBsSr/XFxeH/thKQ+0I hLrBXpE/0vvxs6njdXoPC0BQsjSaF0enpFMZrMj12tO+Mq36HtW5Bs9FP5uEvZut xru/jlL7K8aj -----END CERTIFICATE-----Generated at Thu Oct 15 14:14:09 2026 by rpki-client