$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d095a7c7-384e-49e0-ba9d-50e3600a17b2.cer File: d095a7c7-384e-49e0-ba9d-50e3600a17b2.cer (raw, json) Hash identifier: a9LIZmorwQNbMOxiq6JGIKDO0i/PbMb5nJPSXNZdZ/s= Subject key identifier: 9A:E3:43:3F:D0:9F:8E:45:B6:6D:EE:41:AD:CE:A7:84:F2:8E:8D:59 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584F2CD50609E88EEDE4C7BABA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d095a7c7-384e-49e0-ba9d-50e3600a17b2/d095a7c7-384e-49e0-ba9d-50e3600a17b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d095a7c7-384e-49e0-ba9d-50e3600a17b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 19:00:14 +0000 Certificate not after: Mon 11 Dec 2028 21:50:09 +0000 Subordinate resources: AS: 27421 AS: 397794 IP: 161.199.188.0/23 IP: 2620:11f:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:d5:06:09:e8:8e:ed:e4:c7:ba:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 14 19:00:14 2026 GMT Not After : Dec 11 21:50:09 2028 GMT Subject: CN=d095a7c7-384e-49e0-ba9d-50e3600a17b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:90:4b:8b:6b:65:73:ed:d0:70:d5:04:73:29: 41:a0:60:77:b8:02:4c:ac:ac:c1:27:54:0f:b7:49: 43:fa:e8:05:bf:8c:d9:33:2a:20:4a:a8:4e:c9:6c: 2b:39:0f:ec:81:23:12:ba:b6:f1:84:3c:c6:35:09: 43:62:de:84:90:9b:cc:74:d9:e4:19:1c:34:f1:fb: a3:02:4c:e1:02:f2:ad:45:bb:fe:de:0e:f7:0a:82: 4f:a3:78:eb:d1:6f:e8:d9:88:8c:51:97:90:d6:e3: e3:cc:23:85:6f:66:a7:d5:0b:93:51:16:4d:9d:ad: 03:3d:cc:a1:99:0d:20:f4:6b:4c:3e:dd:fe:a6:a0: 59:f0:a4:4c:e1:e6:e6:6a:e4:3c:54:66:2a:49:eb: 09:82:99:0c:f7:b5:11:0b:3b:ab:dd:5e:c3:82:5c: 34:e8:e3:bd:07:4b:f1:38:84:d9:cc:44:9a:4d:8c: 4e:8a:0e:16:88:3f:7c:b6:2e:a4:15:69:b8:72:ef: 93:a6:49:10:60:8b:39:2b:c6:f4:14:ea:6c:95:e5: e5:3d:5d:ff:0d:c4:50:48:01:7d:06:6c:38:52:49: 11:2d:ea:fd:ac:91:8b:b8:55:26:cf:ba:5d:63:44: a3:7b:b1:56:12:06:45:71:33:e4:5b:be:d2:ce:ec: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E3:43:3F:D0:9F:8E:45:B6:6D:EE:41:AD:CE:A7:84:F2:8E:8D:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d095a7c7-384e-49e0-ba9d-50e3600a17b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d095a7c7-384e-49e0-ba9d-50e3600a17b2/d095a7c7-384e-49e0-ba9d-50e3600a17b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 161.199.188.0/23 IPv6: 2620:11f:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27421 397794 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:73:75:c9:24:b7:43:44:20:1d:b5:19:f2:3b:f0:2b:53:f0: d0:ae:17:62:24:d0:37:a9:88:fa:6f:db:94:df:47:5e:de:be: 0a:43:f2:f3:30:c4:f7:5e:ce:64:05:d9:c9:94:16:95:6c:e6: 94:20:d5:19:09:2b:35:f3:45:56:1c:3c:00:de:43:47:cb:74: 93:99:ba:55:64:8d:a5:8d:f5:80:af:36:c4:bb:7b:3d:05:6d: af:5c:ee:52:d1:d0:08:21:98:34:18:e8:24:51:e2:13:5e:5a: a1:8b:63:3f:2e:68:e3:e1:bb:44:db:69:46:b6:fe:7a:63:db: c6:b0:a6:62:f6:cf:5d:ce:5d:89:31:70:98:92:db:35:2b:42: 74:91:46:3b:a8:e6:5a:e6:08:b9:ab:90:7e:b9:11:b5:7e:bc: e6:e4:07:47:dd:bb:79:db:d4:a9:6e:a8:47:1c:a3:da:ff:58: f7:6d:56:81:ec:03:e2:47:16:08:25:fd:66:b3:a4:ec:16:64: 3e:74:fe:0b:8d:7b:61:1d:6d:26:fa:b4:bf:38:0a:af:6e:a9: c0:dd:28:d7:17:ab:14:b3:46:df:5a:fc:ab:fa:e5:44:52:0c: 1e:f6:53:e9:7d:0a:75:51:e4:a8:76:29:7f:75:d1:6c:b5:6f: e6:9d:f9:6f -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE8s1QYJ6I7t5Me6uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDkxNDE5MDAxNFoXDTI4MTIxMTIxNTAwOVowLzEtMCsGA1UEAxMk ZDA5NWE3YzctMzg0ZS00OWUwLWJhOWQtNTBlMzYwMGExN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JBLi2tlc+3QcNUEcylBoGB3uAJMrKzBJ1QP t0lD+ugFv4zZMyogSqhOyWwrOQ/sgSMSurbxhDzGNQlDYt6EkJvMdNnkGRw08fuj AkzhAvKtRbv+3g73CoJPo3jr0W/o2YiMUZeQ1uPjzCOFb2an1QuTURZNna0DPcyh mQ0g9GtMPt3+pqBZ8KRM4ebmauQ8VGYqSesJgpkM97URCzur3V7Dglw06OO9B0vx OITZzESaTYxOig4WiD98ti6kFWm4cu+TpkkQYIs5K8b0FOpsleXlPV3/DcRQSAF9 Bmw4UkkRLer9rJGLuFUmz7pdY0Sje7FWEgZFcTPkW77SzuzSjQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJrjQz/Qn45Ftm3uQa3Op4Tyjo1ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k MDk1YTdjNy0zODRlLTQ5ZTAtYmE5ZC01MGUzNjAwYTE3YjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QwOTVhN2M3LTM4NGUtNDllMC1i YTlkLTUwZTM2MDBhMTdiMi9kMDk1YTdjNy0zODRlLTQ5ZTAtYmE5ZC01MGUzNjAw YTE3YjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAGhx7wwDwQCAAIwCQMHBCYgAR8QADAeBggrBgEF BQcBCAEB/wQPMA2gCzAJAgJrHQIDBhHiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGJzdckkt0NEIB21GfI7 8CtT8NCuF2Ik0DepiPpv25TfR17evgpD8vMwxPdezmQF2cmUFpVs5pQg1RkJKzXz RVYcPADeQ0fLdJOZulVkjaWN9YCvNsS7ez0Fba9c7lLR0AghmDQY6CRR4hNeWqGL Yz8uaOPhu0TbaUa2/npj28awpmL2z13OXYkxcJiS2zUrQnSRRjuo5lrmCLmrkH65 EbV+vObkB0fdu3nb1KluqEcco9r/WPdtVoHsA+JHFggl/WazpOwWZD50/guNe2Ed bSb6tL84Cq9uqcDdKNcXqxSzRt9a/Kv65URSDB72U+l9CnVR5Kh2KX910Wy1b+ad +W8= -----END CERTIFICATE-----Generated at Mon Sep 21 01:01:50 2026 by rpki-client