$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer File: dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer (raw, json) Hash identifier: cbqXNqgcJVOvUz86wgKT6i9tx8fbD3kUgmfXvwWjNrc= Subject key identifier: 3F:06:CC:18:87:D3:9D:DE:A6:CD:D3:7C:8C:F7:21:5D:C3:21:A5:E2 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F5C610011E47556616A56FB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 19:45:16 +0000 Certificate not after: Mon 01 May 2028 13:07:53 +0000 Subordinate resources: AS: 402153 IP: 23.148.184.0/24 IP: 135.84.40.0/23 IP: 2602:ff29::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:61:00:11:e4:75:56:61:6a:56:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 1 19:45:16 2026 GMT Not After : May 1 13:07:53 2028 GMT Subject: CN=dd639a75-4ad6-4357-bfb1-0a1cbd65f344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b4:e0:f5:65:f3:8d:98:2b:71:83:03:3f:41: bc:bc:f6:72:bc:73:e5:af:38:46:8d:72:55:9c:90: b3:25:44:ed:87:29:5f:80:ec:93:6b:1f:a4:64:f9: 5a:99:a7:cc:f8:30:ee:b8:e6:a5:95:86:6e:8b:2a: 9a:fe:9c:84:b5:71:d0:f4:20:4e:e3:f5:8f:41:0c: 21:13:a7:d2:3a:ea:a5:a8:32:57:a4:01:29:1a:bd: 7a:b7:9c:40:db:3d:4c:73:00:5a:77:9a:43:7e:04: 2f:bb:60:ec:f1:e7:60:42:f1:42:ee:ff:24:7a:64: 43:65:8c:46:bf:33:75:87:60:d2:6b:39:94:ad:7a: 02:ab:0d:d9:c8:e8:46:dd:51:9a:ca:e0:ed:da:59: 96:b2:4a:90:c1:f1:89:d6:a9:16:16:06:ca:3b:86: ee:cd:da:91:50:e1:c0:b7:3b:d7:88:d3:5f:29:1d: 9a:92:c0:69:0e:5e:5c:ed:25:ea:45:d4:26:7d:f4: 28:47:e6:44:35:99:4b:90:e7:22:1d:d5:aa:75:0a: 85:86:4d:9c:58:65:09:a2:e5:8c:87:e0:60:1b:76: c0:1b:df:64:b1:73:25:2b:e3:ed:17:8c:f1:99:28: 27:4e:a1:95:8b:c3:86:e2:a9:a0:1e:e5:04:8a:24: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:06:CC:18:87:D3:9D:DE:A6:CD:D3:7C:8C:F7:21:5D:C3:21:A5:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.148.184.0/24 135.84.40.0/23 IPv6: 2602:ff29::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402153 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d8:24:16:0e:f4:cd:8a:c8:79:4e:03:5f:16:c5:49:c8:68: b7:e2:da:a6:0b:7e:69:c6:6c:2b:2d:f0:8a:97:c0:f5:d2:ef: a4:15:65:17:8c:de:ea:7d:7c:f0:71:66:a4:88:c7:96:09:95: 99:93:3e:14:d3:40:46:84:14:f4:66:2f:58:34:c9:06:9b:2e: d2:ae:43:cb:1f:45:c7:d6:29:c3:a4:48:7a:9c:99:37:ec:02: c8:ba:ef:3b:7a:41:2e:13:79:56:ed:73:59:e6:a4:59:fc:57: 87:fa:23:24:e4:0b:fe:b5:98:90:3b:36:65:89:62:38:67:ad: 84:59:02:7c:62:ad:15:94:c1:ad:ea:e9:00:15:4b:6e:9e:4a: 51:db:03:cf:05:fb:ce:6b:94:12:a1:4c:82:86:af:aa:67:b4: b6:2f:b2:9b:c2:ec:dc:91:09:a1:90:f7:46:4d:fd:19:7a:31: 1f:26:d3:bd:9d:cb:a6:08:9a:20:9a:49:b9:4f:3e:20:e0:75: a5:3b:3a:eb:e4:07:15:27:bd:b0:8a:a8:b6:22:fa:6e:db:11: 82:61:2a:aa:26:14:50:1e:57:94:c3:9d:90:d8:b2:d7:15:43: 7a:fe:88:02:3b:fd:65:66:f5:a8:c7:11:21:7a:08:39:88:22: aa:91:23:02 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9cYQAR5HVWYWpW+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAwMTE5NDUxNloXDTI4MDUwMTEzMDc1M1owLzEtMCsGA1UEAxMk ZGQ2MzlhNzUtNGFkNi00MzU3LWJmYjEtMGExY2JkNjVmMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbTg9WXzjZgrcYMDP0G8vPZyvHPlrzhGjXJV nJCzJUTthylfgOyTax+kZPlamafM+DDuuOallYZuiyqa/pyEtXHQ9CBO4/WPQQwh E6fSOuqlqDJXpAEpGr16t5xA2z1McwBad5pDfgQvu2Ds8edgQvFC7v8kemRDZYxG vzN1h2DSazmUrXoCqw3ZyOhG3VGayuDt2lmWskqQwfGJ1qkWFgbKO4buzdqRUOHA tzvXiNNfKR2aksBpDl5c7SXqRdQmffQoR+ZENZlLkOciHdWqdQqFhk2cWGUJouWM h+BgG3bAG99ksXMlK+PtF4zxmSgnTqGVi8OG4qmgHuUEiiRG5wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFD8GzBiH053eps3TfIz3IV3DIaXiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k ZDYzOWE3NS00YWQ2LTQzNTctYmZiMS0wYTFjYmQ2NWYzNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2RkNjM5YTc1LTRhZDYtNDM1Ny1i ZmIxLTBhMWNiZDY1ZjM0NC9kZDYzOWE3NS00YWQ2LTQzNTctYmZiMS0wYTFjYmQ2 NWYzNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlLgDBAGHVCgwDgQCAAIwCAMGACYC/ykAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYi6TBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCY2CQWDvTNish5TgNf FsVJyGi34tqmC35pxmwrLfCKl8D10u+kFWUXjN7qfXzwcWakiMeWCZWZkz4U00BG hBT0Zi9YNMkGmy7SrkPLH0XH1inDpEh6nJk37ALIuu87ekEuE3lW7XNZ5qRZ/FeH +iMk5Av+tZiQOzZliWI4Z62EWQJ8Yq0VlMGt6ukAFUtunkpR2wPPBfvOa5QSoUyC hq+qZ7S2L7KbwuzckQmhkPdGTf0ZejEfJtO9ncumCJogmkm5Tz4g4HWlOzrr5AcV J72wiqi2Ivpu2xGCYSqqJhRQHleUw52Q2LLXFUN6/ogCO/1lZvWoxxEhegg5iCKq kSMC -----END CERTIFICATE-----Generated at Sun Oct 18 03:16:50 2026 by rpki-client