$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer File: 204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer (raw, json) Hash identifier: fzBCs3VoGIl+DCdnnyab5dei8afPV03eUfQmgp0jkgA= Subject key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F3739BC949FDB6E156BAE8980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 12:21:14 +0000 Certificate not after: Tue 16 Nov 2027 13:33:34 +0000 Subordinate resources: AS: 399779 IP: 199.88.252.0/24 IP: 2602:81e:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:39:bc:94:9f:db:6e:15:6b:ae:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 18 12:21:14 2026 GMT Not After : Nov 16 13:33:34 2027 GMT Subject: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:10:a1:04:2f:e7:82:a7:31:2c:5c:13:56: 24:00:62:fe:b8:fe:82:36:40:83:7c:64:66:1c:af: 07:a5:bc:0b:16:37:9f:a6:cc:6a:80:89:ff:ec:51: 51:65:da:7b:2e:39:84:ec:9d:fd:58:c2:96:ea:b6: 32:89:05:63:bd:ed:7d:c8:4c:4b:8e:1e:61:d2:24: 2e:35:bb:38:db:b4:eb:c3:0c:1f:25:61:a6:62:53: 1c:51:71:c3:57:79:71:4e:5b:c4:e3:03:97:45:9e: a1:4a:a9:1a:ba:74:2a:71:95:70:dc:31:65:68:fb: af:42:84:4d:6e:df:f4:4f:85:aa:dc:6a:bc:20:57: 64:0c:3b:b0:91:25:74:c2:fa:bc:96:30:10:95:71: 4e:d4:1d:f6:39:b0:64:c2:86:53:0c:cc:13:b5:a2: eb:57:a4:13:0d:04:87:6e:ac:d4:d4:d2:f8:13:40: 47:0f:7b:22:50:68:ad:b1:0b:75:a7:22:83:34:33: c6:a5:e2:fb:0a:c1:a0:82:87:01:87:85:8f:99:95: d4:58:28:c2:be:63:c2:d1:b9:9b:37:ef:53:8c:fb: 9d:65:f7:d9:25:05:f8:9f:b2:e3:a9:ac:8f:d5:c3: 3a:2d:9a:1c:d6:fc:99:b1:71:dd:a5:96:ff:8b:1d: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.88.252.0/24 IPv6: 2602:81e:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399779 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6e:19:48:ad:a4:b2:f4:59:a2:6a:f9:e1:d1:9a:33:06:c7: 38:de:39:41:47:76:cb:36:14:fa:5b:63:00:2e:3d:cd:52:30: b5:90:8e:97:97:45:5e:35:24:15:80:22:fe:f4:82:9e:f5:4f: 41:14:66:97:fd:1d:45:79:07:5f:42:da:78:88:6e:2d:da:5e: a8:dc:35:38:43:52:e5:3a:7b:14:74:b2:5a:7f:21:09:9a:98: 01:2f:66:47:4e:43:b7:5a:3a:0d:5c:e8:b6:e2:fe:a1:fe:d6: 7a:f3:46:5d:cc:3e:8d:23:5e:2f:5a:39:b6:e6:f8:5a:0a:9b: c8:91:bc:28:ea:56:49:9e:c4:6b:b6:14:fa:20:a1:53:ac:27: 8f:50:ee:53:80:84:e2:0a:74:fd:f9:e4:70:25:21:0f:94:af: 1e:0f:ab:d7:82:bb:a6:14:57:46:8b:f9:75:98:40:19:18:4f: 5d:92:4a:c2:b6:28:f6:fb:cc:0b:ef:76:40:5e:c5:53:11:69: 02:0d:e8:94:b9:0a:33:16:57:ec:08:6b:eb:ab:a8:cf:c8:ab: e9:92:54:ad:a1:81:60:00:13:7f:a9:a3:14:6a:cb:82:24:fe: af:f1:b0:a0:c1:fe:16:66:37:b3:95:15:4a:11:ba:5e:58:92: 85:40:75:5a -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE83ObyUn9tuFWuuiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkxODEyMjExNFoXDTI3MTExNjEzMzMzNFowLzEtMCsGA1UEAxMk MjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph4QoQQv54KnMSxcE1YkAGL+uP6CNkCDfGRm HK8HpbwLFjefpsxqgIn/7FFRZdp7LjmE7J39WMKW6rYyiQVjve19yExLjh5h0iQu Nbs427TrwwwfJWGmYlMcUXHDV3lxTlvE4wOXRZ6hSqkaunQqcZVw3DFlaPuvQoRN bt/0T4Wq3Gq8IFdkDDuwkSV0wvq8ljAQlXFO1B32ObBkwoZTDMwTtaLrV6QTDQSH bqzU1NL4E0BHD3siUGitsQt1pyKDNDPGpeL7CsGggocBh4WPmZXUWCjCvmPC0bmb N+9TjPudZffZJQX4n7LjqayP1cM6LZoc1vyZsXHdpZb/ix3sBwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBWyLPYx07fMMo2J9uHrFFywPSL9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIwNGI2ZTM1LWMyYjUtNDA4NC05 YzcwLWRkNWU3YzdkOGNmOC8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3 ZDhjZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADHWPwwDwQCAAIwCQMHBCYCCB7AADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGGaMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPm4ZSK2ksvRZomr54dGaMwbH ON45QUd2yzYU+ltjAC49zVIwtZCOl5dFXjUkFYAi/vSCnvVPQRRml/0dRXkHX0La eIhuLdpeqNw1OENS5Tp7FHSyWn8hCZqYAS9mR05Dt1o6DVzotuL+of7WevNGXcw+ jSNeL1o5tub4WgqbyJG8KOpWSZ7Ea7YU+iChU6wnj1DuU4CE4gp0/fnkcCUhD5Sv Hg+r14K7phRXRov5dZhAGRhPXZJKwrYo9vvMC+92QF7FUxFpAg3olLkKMxZX7Ahr 66uoz8ir6ZJUraGBYAATf6mjFGrLgiT+r/GwoMH+FmY3s5UVShG6XliShUB1Wg== -----END CERTIFICATE-----Generated at Sun Sep 20 21:55:27 2026 by rpki-client