$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer File: af661c18-5dff-4d85-9a6f-659490c4ca99.cer (raw, json) Hash identifier: 4jVyLI5zVQBarNCcXFm25MmYbCkJIH0mjJxP+BmcQt8= Subject key identifier: 41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F67385AC417E1902D0EDB3AB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 16:57:15 +0000 Certificate not after: Thu 20 Apr 2028 19:36:18 +0000 Subordinate resources: AS: 395298 IP: 143.203.244.0/22 IP: 2602:f828::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:38:5a:c4:17:e1:90:2d:0e:db:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 5 16:57:15 2026 GMT Not After : Apr 20 19:36:18 2028 GMT Subject: CN=af661c18-5dff-4d85-9a6f-659490c4ca99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:54:fa:42:13:67:e3:37:94:67:b1:9c:b0:22: a2:73:be:12:55:f4:e0:fd:72:42:e1:ea:c9:0a:0f: 28:24:81:5f:c8:16:f8:9c:c7:ca:e4:3c:f4:be:9e: 7c:ba:ba:3b:fa:4f:9b:04:4c:60:99:77:48:e8:46: a1:c2:88:ee:82:2a:be:a1:e5:fd:75:5b:bd:d9:fb: db:75:e6:81:41:2f:4a:bc:49:09:0e:c6:f5:29:41: 31:60:6f:85:44:fc:a2:19:a2:48:2c:07:66:bf:80: df:80:66:c6:f0:de:7b:4d:90:59:75:02:d9:a0:48: 46:39:e2:14:41:14:2b:a0:da:b3:eb:58:3b:56:f7: b4:9a:49:3e:5d:c3:6c:51:00:8c:9e:91:b1:f7:bc: bc:53:4c:5a:7f:75:af:b6:78:12:38:b4:87:b8:a5: e1:e3:b9:f9:b4:38:4b:e6:a5:26:0f:c7:76:cb:df: 3e:21:60:3c:6e:13:87:a2:de:70:07:c1:24:21:9f: bd:69:a1:25:c3:10:f3:85:f0:ce:bc:c6:b7:aa:b8: 58:d5:b1:c0:10:60:94:8b:ab:23:92:cb:2f:95:35: 0d:10:25:41:f8:5c:5f:7e:0a:05:a8:3b:26:d3:e0: e6:c2:90:6a:b4:85:46:84:6a:f5:6b:68:5a:30:57: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 143.203.244.0/22 IPv6: 2602:f828::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395298 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ed:ae:a5:6e:5c:28:12:e3:0e:a7:43:df:25:54:39:02:fa: c6:3f:2f:e3:ae:1d:7d:d6:35:15:08:0d:d3:49:05:4a:80:21: 5e:06:9b:c5:1d:f1:1a:3c:a1:ea:2e:3e:be:bb:69:39:97:a5: 1a:f7:da:d9:d7:6c:18:70:3a:07:8b:ef:e3:b5:21:7c:d5:3c: ef:66:e7:66:d1:ef:c5:66:5c:40:5d:96:ff:56:a3:4b:ee:32: 0e:15:43:ee:ed:0a:9d:19:ef:9b:a0:ac:a4:c2:f7:44:73:0b: 98:20:c7:db:f6:bb:c2:71:ef:1b:fc:e5:18:a0:47:25:7b:aa: 37:ad:f0:00:29:10:98:ae:cd:0d:d0:dc:c7:1e:ad:8a:e8:d0: 84:64:61:71:8a:9a:a8:fe:13:65:54:d5:d1:e2:c3:79:23:3a: 8d:4f:78:c0:d6:19:e6:4c:3a:fe:51:f4:b7:b9:00:57:af:7c: 6d:29:8d:3e:4c:fe:ff:e5:93:09:e0:7c:5b:5c:6b:c1:ec:8c: 55:c0:7d:a2:9e:57:0a:fe:d2:d7:db:80:e9:86:ea:ec:93:e8: cd:9c:13:8e:a1:73:90:02:bd:fc:20:2a:19:d5:5c:b1:e5:32: 4a:b7:f5:a5:48:db:14:a9:f3:6e:41:33:9f:62:ad:d9:a5:4c: 3f:f3:03:02 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9nOFrEF+GQLQ7bOrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAwNTE2NTcxNVoXDTI4MDQyMDE5MzYxOFowLzEtMCsGA1UEAxMk YWY2NjFjMTgtNWRmZi00ZDg1LTlhNmYtNjU5NDkwYzRjYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilT6QhNn4zeUZ7GcsCKic74SVfTg/XJC4erJ Cg8oJIFfyBb4nMfK5Dz0vp58uro7+k+bBExgmXdI6Eahwojugiq+oeX9dVu92fvb deaBQS9KvEkJDsb1KUExYG+FRPyiGaJILAdmv4DfgGbG8N57TZBZdQLZoEhGOeIU QRQroNqz61g7Vve0mkk+XcNsUQCMnpGx97y8U0xaf3WvtngSOLSHuKXh47n5tDhL 5qUmD8d2y98+IWA8bhOHot5wB8EkIZ+9aaElwxDzhfDOvMa3qrhY1bHAEGCUi6sj kssvlTUNECVB+FxffgoFqDsm0+DmwpBqtIVGhGr1a2haMFcTtwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEEmJoAEov8G0o1+f4QKoEZqEtLmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h ZjY2MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0OTBjNGNhOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2FmNjYxYzE4LTVkZmYtNGQ4NS05 YTZmLTY1OTQ5MGM0Y2E5OS9hZjY2MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0OTBj NGNhOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKPy/QwDgQCAAIwCAMGACYC+CgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYIIjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCY7a6lblwoEuMOp0PfJVQ5AvrG Py/jrh191jUVCA3TSQVKgCFeBpvFHfEaPKHqLj6+u2k5l6Ua99rZ12wYcDoHi+/j tSF81TzvZudm0e/FZlxAXZb/VqNL7jIOFUPu7QqdGe+boKykwvdEcwuYIMfb9rvC ce8b/OUYoEcle6o3rfAAKRCYrs0N0NzHHq2K6NCEZGFxipqo/hNlVNXR4sN5IzqN T3jA1hnmTDr+UfS3uQBXr3xtKY0+TP7/5ZMJ4HxbXGvB7IxVwH2inlcK/tLX24Dp hursk+jNnBOOoXOQAr38ICoZ1Vyx5TJKt/WlSNsUqfNuQTOfYq3ZpUw/8wMC -----END CERTIFICATE-----Generated at Sun Oct 11 17:09:33 2026 by rpki-client