$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6bc199b6-725d-47fb-90f9-2e5d1d2b8574.cer File: 6bc199b6-725d-47fb-90f9-2e5d1d2b8574.cer (raw, json) Hash identifier: eb3Kzrny8+KXMsyYJdmvt451xTNJ6GgNmX47b5mTRzY= Subject key identifier: 0A:0E:2B:53:BF:8F:68:93:02:2D:17:54:47:B2:A1:02:17:EF:8B:60 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F34C10710ADC2A1F1B75A07C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6bc199b6-725d-47fb-90f9-2e5d1d2b8574/6bc199b6-725d-47fb-90f9-2e5d1d2b8574.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6bc199b6-725d-47fb-90f9-2e5d1d2b8574/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 15:06:25 +0000 Certificate not after: Wed 20 Dec 2028 16:06:25 +0000 Subordinate resources: AS: 33226 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:c1:07:10:ad:c2:a1:f1:b7:5a:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 17 15:06:25 2026 GMT Not After : Dec 20 16:06:25 2028 GMT Subject: CN=6bc199b6-725d-47fb-90f9-2e5d1d2b8574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:64:a0:6c:b4:3a:c5:6b:5a:20:78:85:b4: a4:7c:10:72:6d:14:a1:06:c2:5f:ec:be:a0:26:71: 71:c4:4c:0b:dd:aa:1d:eb:19:1d:36:b6:3a:0b:66: 09:ce:14:80:b7:88:d6:95:70:d1:8b:59:ad:e2:01: c3:07:2a:ee:4f:90:fc:d4:01:41:c0:62:ef:63:54: 27:2d:51:4c:ef:dc:fc:ce:b8:a1:cf:13:49:a9:92: 2c:50:1d:78:8a:44:15:9d:e0:08:ba:a3:89:5f:98: c6:fc:cc:6e:00:13:36:b2:10:1c:40:36:e0:ad:1a: 85:ab:35:30:21:33:43:ea:6e:02:31:b4:95:a9:e9: 78:92:8d:ff:bf:89:de:19:fe:03:3c:cd:31:0a:f8: a6:73:36:5e:21:60:22:56:b3:7b:24:75:fc:ff:70: 3c:58:92:3f:70:bb:b5:fe:94:c7:7b:51:46:fd:cc: ad:b7:a4:c7:59:7b:50:dc:15:d4:a2:f4:ec:e8:9c: 80:b3:0b:2c:9b:eb:8d:22:fa:eb:2f:fc:7e:bc:ad: e8:7f:8f:bd:4b:44:12:4b:78:5a:89:64:04:63:61: 76:09:fb:b7:d3:a3:01:8b:9c:d9:4b:04:df:d5:90: e0:d7:09:25:11:66:a2:b8:30:54:65:5c:69:11:96: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:2B:53:BF:8F:68:93:02:2D:17:54:47:B2:A1:02:17:EF:8B:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6bc199b6-725d-47fb-90f9-2e5d1d2b8574/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6bc199b6-725d-47fb-90f9-2e5d1d2b8574/6bc199b6-725d-47fb-90f9-2e5d1d2b8574.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 33226 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6b:d3:b8:38:f4:26:3b:8a:76:a1:a9:4c:8d:e9:48:28:37: 7f:dd:79:db:8f:80:c2:3d:0e:dd:e4:f6:80:01:4f:38:bc:6c: 5c:7d:f3:f5:55:36:67:f4:40:55:37:86:35:46:47:2f:32:66: 74:25:db:21:5d:9f:e7:21:97:41:93:a4:17:35:70:c5:42:8f: 6b:0e:8e:ca:43:3a:b5:ed:ca:e9:9a:1a:82:08:7e:59:ff:f0: b1:49:8b:0d:e4:2a:48:28:5e:33:0b:68:52:b3:5f:49:7e:c0: 87:07:bc:6a:76:72:63:ba:af:fb:48:99:a7:6c:ac:fc:51:90: da:9d:3f:a5:cd:04:af:4b:5c:ff:24:e7:39:c6:39:28:fb:70: 93:e7:3a:bb:f5:f0:e0:ad:b8:3b:af:36:04:c9:97:57:00:d0: 79:4e:69:d3:aa:24:a2:43:74:72:4f:c4:55:15:5d:b1:62:7b: 62:51:a4:d4:eb:2a:88:0b:26:ed:e0:ed:c8:e0:f0:b8:d9:a4: 2b:63:74:01:a0:f3:11:c1:dd:47:ef:8d:a6:b5:6d:9c:93:91: 78:eb:1a:91:c0:78:35:2f:30:a4:af:cc:15:47:3c:fc:b2:61: c4:26:14:a6:54:43:bd:04:0a:7d:a6:58:92:1a:72:5c:bb:ca: c1:27:12:5b -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE80wQcQrcKh8bdaB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNzE1MDYyNVoXDTI4MTIyMDE2MDYyNVowLzEtMCsGA1UEAxMk NmJjMTk5YjYtNzI1ZC00N2ZiLTkwZjktMmU1ZDFkMmI4NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuhkoGy0OsVrWiB4hbSkfBBybRShBsJf7L6g JnFxxEwL3aod6xkdNrY6C2YJzhSAt4jWlXDRi1mt4gHDByruT5D81AFBwGLvY1Qn LVFM79z8zrihzxNJqZIsUB14ikQVneAIuqOJX5jG/MxuABM2shAcQDbgrRqFqzUw ITND6m4CMbSVqel4ko3/v4neGf4DPM0xCvimczZeIWAiVrN7JHX8/3A8WJI/cLu1 /pTHe1FG/cytt6THWXtQ3BXUovTs6JyAswssm+uNIvrrL/x+vK3of4+9S0QSS3ha iWQEY2F2Cfu306MBi5zZSwTf1ZDg1wklEWaiuDBUZVxpEZZjTwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFAoOK1O/j2iTAi0XVEeyoQIX74tgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82 YmMxOTliNi03MjVkLTQ3ZmItOTBmOS0yZTVkMWQyYjg1NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzZiYzE5OWI2LTcyNWQtNDdmYi05 MGY5LTJlNWQxZDJiODU3NC82YmMxOTliNi03MjVkLTQ3ZmItOTBmOS0yZTVkMWQy Yjg1NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIHKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIhr07g49CY7inahqUyN6UgoN3/d eduPgMI9Dt3k9oABTzi8bFx98/VVNmf0QFU3hjVGRy8yZnQl2yFdn+chl0GTpBc1 cMVCj2sOjspDOrXtyumaGoIIfln/8LFJiw3kKkgoXjMLaFKzX0l+wIcHvGp2cmO6 r/tImadsrPxRkNqdP6XNBK9LXP8k5znGOSj7cJPnOrv18OCtuDuvNgTJl1cA0HlO adOqJKJDdHJPxFUVXbFie2JRpNTrKogLJu3g7cjg8LjZpCtjdAGg8xHB3Ufvjaa1 bZyTkXjrGpHAeDUvMKSvzBVHPPyyYcQmFKZUQ70ECn2mWJIacly7ysEnEls= -----END CERTIFICATE-----Generated at Sun Sep 20 19:21:24 2026 by rpki-client