$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.cer File: e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.cer (raw, json) Hash identifier: ytHbuTWlVlS3sioee4x1Kt7mIdbvL/T19xUHFehBNGA= Subject key identifier: 4C:01:EB:D3:F0:64:2C:C1:CE:5F:15:77:9F:83:5B:11:43:9C:FE:56 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F37FFC3035EB3F1EF6337ED60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 19:00:14 +0000 Certificate not after: Wed 20 Dec 2028 16:04:47 +0000 Subordinate resources: AS: 46291 IP: 199.120.223.0/24 IP: 2620:34:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:ff:c3:03:5e:b3:f1:ef:63:37:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 18 19:00:14 2026 GMT Not After : Dec 20 16:04:47 2028 GMT Subject: CN=e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:ec:a2:00:96:20:08:1e:64:e0:c0:7f:56: b7:60:b3:e1:b7:8c:d7:ab:39:30:d5:76:19:bc:5f: a5:09:f6:cc:5b:f9:21:0e:ab:e8:b1:1d:95:90:15: 8b:ee:f0:37:d8:50:c9:66:f6:2f:12:19:88:83:6e: 9e:fb:a7:da:77:fc:8d:f5:14:fa:b8:f0:3d:ee:02: ee:a9:95:06:5b:69:51:b3:82:3d:e3:2b:ea:c2:cf: 48:ed:c7:bf:88:79:db:a8:4f:11:77:d2:2c:db:1b: 9d:34:f3:ab:cd:cc:a1:fe:d2:5b:e4:87:b3:06:ef: 4b:b0:d4:b2:24:71:91:6e:8a:ad:d9:ea:28:66:57: ac:5d:c1:19:06:db:a4:e0:ed:53:69:b3:cb:05:d3: 68:e3:a0:c5:18:94:d9:a6:5e:6a:6d:8b:8d:52:06: 76:c8:3b:bf:7e:d6:5c:67:15:72:2d:79:b4:e9:9e: 22:8e:a3:78:c6:1b:2c:96:6f:b2:df:e0:6b:6c:0e: 5e:2d:fa:38:dd:b4:61:03:bb:ca:1f:58:07:2b:53: 90:e7:75:b4:a2:f5:c5:49:d8:b8:c0:30:6e:1d:b0: 2e:11:fd:77:1e:c5:0a:69:aa:1a:80:68:5c:62:a8: 18:32:8d:fa:00:1f:4a:e2:4f:2b:c2:43:b0:5e:a3: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:EB:D3:F0:64:2C:C1:CE:5F:15:77:9F:83:5B:11:43:9C:FE:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.120.223.0/24 IPv6: 2620:34:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46291 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b4:d7:36:70:11:bf:be:fb:73:35:6c:1c:8e:16:75:a7:57: 77:8b:1d:fc:bb:c7:11:14:0b:f8:b0:ee:fd:73:23:85:83:a3: 25:b5:de:27:c9:9e:90:5c:7a:ae:1f:7b:b4:f6:e2:74:7e:9e: c7:96:14:3c:0a:0d:99:c4:b1:55:e9:0b:cc:61:03:72:59:df: bc:ff:a1:ad:35:4b:b6:5d:06:1c:95:3f:4b:83:a4:71:d9:08: b1:74:66:70:b5:22:77:a5:c6:f0:c4:03:a1:78:b6:28:79:25: 05:4d:da:1e:54:00:fc:01:ae:26:ab:01:d2:89:8a:62:5a:89: 9b:4a:63:88:a0:d0:8b:18:00:26:c6:cb:10:d2:ab:c5:0b:99: 2f:a8:de:d0:d8:88:7c:2f:37:19:6c:65:86:46:63:b6:1a:eb: 21:d1:7d:8f:e0:06:3c:69:6d:6a:f0:42:56:18:aa:3b:3b:a2: a1:86:8e:cd:25:43:bd:fe:78:b3:d8:89:d7:ed:b6:00:eb:e5: 20:d3:54:53:15:7e:f5:f2:be:a2:fb:3b:b0:a3:82:68:d7:40: 70:6b:7a:16:a7:e7:1d:38:07:96:2f:7c:e6:5c:7d:90:3a:60: 87:9d:a3:20:b8:04:f5:19:e2:a9:5f:18:63:4c:da:07:24:b3: 84:77:b0:a9 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE83/8MDXrPx72M37WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxODE5MDAxNFoXDTI4MTIyMDE2MDQ0N1owLzEtMCsGA1UEAxMk ZTljNDI1MTctZTliMi00Yjc0LWEyYWUtZjVmZGI5NjlkNmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdHsogCWIAgeZODAf1a3YLPht4zXqzkw1XYZ vF+lCfbMW/khDqvosR2VkBWL7vA32FDJZvYvEhmIg26e+6fad/yN9RT6uPA97gLu qZUGW2lRs4I94yvqws9I7ce/iHnbqE8Rd9Is2xudNPOrzcyh/tJb5IezBu9LsNSy JHGRboqt2eooZlesXcEZBtuk4O1TabPLBdNo46DFGJTZpl5qbYuNUgZ2yDu/ftZc ZxVyLXm06Z4ijqN4xhsslm+y3+BrbA5eLfo43bRhA7vKH1gHK1OQ53W0ovXFSdi4 wDBuHbAuEf13HsUKaaoagGhcYqgYMo36AB9K4k8rwkOwXqOlQQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFEwB69PwZCzBzl8Vd5+DWxFDnP5WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l OWM0MjUxNy1lOWIyLTRiNzQtYTJhZS1mNWZkYjk2OWQ2YTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2U5YzQyNTE3LWU5YjItNGI3NC1h MmFlLWY1ZmRiOTY5ZDZhOS9lOWM0MjUxNy1lOWIyLTRiNzQtYTJhZS1mNWZkYjk2 OWQ2YTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADHeN8wDwQCAAIwCQMHACYgADTgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAtNMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH7TXNnARv777czVsHI4WdadX d4sd/LvHERQL+LDu/XMjhYOjJbXeJ8mekFx6rh97tPbidH6ex5YUPAoNmcSxVekL zGEDclnfvP+hrTVLtl0GHJU/S4OkcdkIsXRmcLUid6XG8MQDoXi2KHklBU3aHlQA /AGuJqsB0omKYlqJm0pjiKDQixgAJsbLENKrxQuZL6je0NiIfC83GWxlhkZjthrr IdF9j+AGPGltavBCVhiqOzuioYaOzSVDvf54s9iJ1+22AOvlINNUUxV+9fK+ovs7 sKOCaNdAcGt6FqfnHTgHli985lx9kDpgh52jILgE9RniqV8YY0zaBySzhHewqQ== -----END CERTIFICATE-----Generated at Mon Sep 21 01:01:43 2026 by rpki-client