$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2c9d7660-56f9-430d-8fb6-dabc2e05ac9e.cer File: 2c9d7660-56f9-430d-8fb6-dabc2e05ac9e.cer (raw, json) Hash identifier: y+LExrVjZgzHMDlwDJWEbleNTH+2VPCnta+cDURkw54= Subject key identifier: 02:EA:95:F8:3D:63:26:2B:79:08:AC:F0:1B:D5:99:D6:D2:1B:42:78 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F35A52D47968D0CF64D41D2B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2c9d7660-56f9-430d-8fb6-dabc2e05ac9e/2c9d7660-56f9-430d-8fb6-dabc2e05ac9e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2c9d7660-56f9-430d-8fb6-dabc2e05ac9e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 22:46:06 +0000 Certificate not after: Wed 20 Dec 2028 23:46:06 +0000 Subordinate resources: AS: 13996 IP: 66.170.240.0/20 IP: 67.21.128.0/20 IP: 67.214.48.0/20 IP: 2620:158::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:a5:2d:47:96:8d:0c:f6:4d:41:d2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 17 22:46:06 2026 GMT Not After : Dec 20 23:46:06 2028 GMT Subject: CN=2c9d7660-56f9-430d-8fb6-dabc2e05ac9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:ba:51:89:99:77:04:10:28:4b:10:b8:1f: 88:1d:2a:63:3c:73:86:07:6c:ac:d9:5d:ca:8c:26: d3:ea:58:f4:7c:b5:42:b2:83:ab:3e:83:6d:eb:63: 81:ab:87:7a:ec:b5:15:af:7a:17:ba:43:45:ac:4e: 80:cc:ef:cc:a3:56:30:81:3c:39:dd:84:49:fa:f4: e1:62:cd:a6:0b:ea:07:77:03:1d:c2:20:0d:aa:33: 6a:24:5b:8e:55:8c:5e:ff:a9:51:8b:85:b9:c5:b6: 93:8c:be:0a:cc:2a:28:10:6c:53:93:51:f2:cf:66: 86:af:c6:72:01:46:b5:f0:fe:4a:c4:38:e3:a5:3d: 64:9a:1b:8c:6c:1b:4e:dc:e7:ff:2d:73:50:de:ee: b1:ec:86:4f:93:25:7a:97:0d:54:2e:57:1b:d0:69: b2:3e:6c:b7:56:be:01:90:df:96:1b:fc:7a:66:4a: ab:3d:36:51:d0:40:a5:e9:c5:c8:7c:fc:c5:b3:b2: f1:8b:c0:34:58:c5:84:7a:f0:60:9c:c0:be:25:5d: aa:17:68:8a:4a:cc:68:df:b2:4f:62:47:c0:66:9e: a5:14:66:df:e9:19:ff:ad:00:72:ee:ca:11:30:f0: ab:9b:e0:34:35:f5:1f:a3:e0:04:22:d9:50:d0:84: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:95:F8:3D:63:26:2B:79:08:AC:F0:1B:D5:99:D6:D2:1B:42:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2c9d7660-56f9-430d-8fb6-dabc2e05ac9e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2c9d7660-56f9-430d-8fb6-dabc2e05ac9e/2c9d7660-56f9-430d-8fb6-dabc2e05ac9e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 66.170.240.0/20 67.21.128.0/20 67.214.48.0/20 IPv6: 2620:158::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13996 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:0a:03:43:f7:b4:a0:88:9a:56:40:52:31:9e:89:f5:ac:2d: f8:b8:fb:b8:a1:71:fc:86:47:9d:48:89:40:a7:89:73:e6:d5: 24:32:88:a5:f0:f2:70:4d:7a:d1:5e:51:8e:d3:23:b3:39:2b: 6d:4a:ea:51:b5:7c:2b:7a:06:85:28:c0:20:2d:72:f3:46:37: ae:2b:30:ed:7d:f5:79:b0:e7:1b:39:38:45:4c:cf:0d:de:5d: b1:1c:30:6b:c2:12:bf:3f:f3:da:8b:1e:62:f2:29:6e:32:84: 21:76:76:95:e0:95:f6:ec:e0:79:e2:f4:d9:27:30:f3:b4:b0: b1:b3:29:a4:2b:9d:da:28:6a:14:c8:8a:be:e8:71:e4:3d:9f: d0:fb:58:3f:12:04:f1:c8:66:0a:9c:a6:1a:e0:a9:9b:63:83: d9:23:fb:5d:65:83:82:ae:63:d4:d2:26:99:e0:c6:16:fa:46: 38:82:26:5e:b8:0c:f2:ba:25:aa:ba:24:89:a6:2f:14:23:69: b0:10:0c:d6:05:4b:2f:1c:9a:34:61:4c:c3:f2:6e:63:6d:ac: ec:24:85:ad:b6:39:7e:52:9b:4d:ae:f4:ee:b1:dd:ad:46:f0: 50:30:23:f1:73:6f:d1:5a:87:ae:93:01:7d:69:89:0e:86:08: 23:6a:76:f1 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE81pS1Hlo0M9k1B0rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNzIyNDYwNloXDTI4MTIyMDIzNDYwNlowLzEtMCsGA1UEAxMk MmM5ZDc2NjAtNTZmOS00MzBkLThmYjYtZGFiYzJlMDVhYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/i6UYmZdwQQKEsQuB+IHSpjPHOGB2ys2V3K jCbT6lj0fLVCsoOrPoNt62OBq4d67LUVr3oXukNFrE6AzO/Mo1YwgTw53YRJ+vTh Ys2mC+oHdwMdwiANqjNqJFuOVYxe/6lRi4W5xbaTjL4KzCooEGxTk1Hyz2aGr8Zy AUa18P5KxDjjpT1kmhuMbBtO3Of/LXNQ3u6x7IZPkyV6lw1ULlcb0GmyPmy3Vr4B kN+WG/x6ZkqrPTZR0ECl6cXIfPzFs7Lxi8A0WMWEevBgnMC+JV2qF2iKSsxo37JP YkfAZp6lFGbf6Rn/rQBy7soRMPCrm+A0NfUfo+AEItlQ0IQMbQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFALqlfg9YyYreQis8BvVmdbSG0J4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y YzlkNzY2MC01NmY5LTQzMGQtOGZiNi1kYWJjMmUwNWFjOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzJjOWQ3NjYwLTU2ZjktNDMwZC04 ZmI2LWRhYmMyZTA1YWM5ZS8yYzlkNzY2MC01NmY5LTQzMGQtOGZiNi1kYWJjMmUw NWFjOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBARCqvADBARDFYADBARD1jAwDgQCAAIwCAMGBCYg AVgAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjasMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJgKA0P3tKCI mlZAUjGeifWsLfi4+7ihcfyGR51IiUCniXPm1SQyiKXw8nBNetFeUY7TI7M5K21K 6lG1fCt6BoUowCAtcvNGN64rMO199Xmw5xs5OEVMzw3eXbEcMGvCEr8/89qLHmLy KW4yhCF2dpXglfbs4Hni9NknMPO0sLGzKaQrndooahTIir7oceQ9n9D7WD8SBPHI ZgqcphrgqZtjg9kj+11lg4KuY9TSJpngxhb6RjiCJl64DPK6Jaq6JImmLxQjabAQ DNYFSy8cmjRhTMPybmNtrOwkha22OX5Sm02u9O6x3a1G8FAwI/Fzb9Fah66TAX1p iQ6GCCNqdvE= -----END CERTIFICATE-----Generated at Sun Sep 20 19:21:26 2026 by rpki-client