$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a.cer File: 2ac27e5e-1654-448f-b4a0-409a732a286a.cer (raw, json) Hash identifier: zKsR5Th0ix7Z2Jf+LCLb4XnLteJ7xQQydsPwxNiIgM8= Subject key identifier: 98:F6:CC:57:75:0B:E7:6E:6B:2B:23:D9:82:3F:AF:17:64:A3:9E:CD Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584EFD5AF1C60B213BBD46A1EE60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/2ac27e5e-1654-448f-b4a0-409a732a286a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Aug 2026 18:51:16 +0000 Certificate not after: Sun 12 Nov 2028 23:28:04 +0000 Subordinate resources: AS: 20119 AS: 40940 IP: 23.136.80.0/24 IP: 23.151.96.0/24 IP: 23.170.96.0/24 IP: 142.202.12.0/22 IP: 144.208.88.0/24 IP: 158.51.0.0/23 IP: 158.51.50.0/23 IP: 172.83.127.0/24 IP: 204.10.116.0/22 IP: 2602:fd7f::/36 IP: 2602:fdd1::/36 IP: 2602:fe0f::/36 IP: 2602:fe3a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fd:5a:f1:c6:0b:21:3b:bd:46:a1:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 28 18:51:16 2026 GMT Not After : Nov 12 23:28:04 2028 GMT Subject: CN=2ac27e5e-1654-448f-b4a0-409a732a286a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:d3:71:e0:ac:ae:28:c3:e0:b0:03:99:2a: d6:c5:e1:45:ac:e0:4d:fe:f8:01:f8:d9:b9:ad:02: f4:c2:7b:b0:22:cb:b6:cd:f7:1e:bd:fb:fb:0c:96: 87:0e:ca:fa:a8:15:00:44:25:a6:a5:76:59:a5:34: 20:28:69:52:3b:e7:1a:29:59:79:a2:04:47:1e:50: 17:5e:22:9b:6c:83:99:04:a6:7b:e8:ca:ff:42:72: 25:14:bb:d5:42:16:31:1d:98:69:63:46:37:7e:69: 82:1b:a6:30:db:9d:cc:ac:8e:c9:9d:6e:0e:be:a0: 2c:d4:b5:54:46:44:97:01:ee:95:c3:58:d3:96:29: 19:77:e0:d9:42:02:3b:f3:cd:41:71:36:3d:ef:de: 49:f7:7b:f3:8a:d2:5e:61:29:c8:03:15:a2:25:10: 12:63:3c:3a:4e:00:92:b4:84:e3:d0:70:25:ba:e6: ff:1b:46:da:87:cf:43:e3:f1:1b:fe:cd:5f:cb:c6: 15:25:2f:3c:d3:ad:ab:e4:dc:19:37:6c:18:82:be: 77:9f:1c:27:ce:35:6a:ec:3e:43:ed:5e:31:98:9a: 9e:03:af:fa:82:9a:e9:35:a8:e4:7f:0b:34:66:28: 24:7e:8a:50:3c:60:0c:ba:05:2b:7f:fe:2f:58:e4: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:CC:57:75:0B:E7:6E:6B:2B:23:D9:82:3F:AF:17:64:A3:9E:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/2ac27e5e-1654-448f-b4a0-409a732a286a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.136.80.0/24 23.151.96.0/24 23.170.96.0/24 142.202.12.0/22 144.208.88.0/24 158.51.0.0/23 158.51.50.0/23 172.83.127.0/24 204.10.116.0/22 IPv6: 2602:fd7f::/36 2602:fdd1::/36 2602:fe0f::/36 2602:fe3a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20119 40940 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ec:87:06:46:08:b7:95:42:9f:aa:1a:a1:22:86:87:9c:be: 2a:d5:53:74:79:22:6a:02:bb:24:0a:0f:20:47:64:04:da:61: e6:1b:35:fa:f9:91:41:ee:e4:80:7b:72:fd:af:25:42:35:9b: bf:fb:2e:d7:c8:ef:0f:03:d6:f3:63:7e:87:65:c0:18:1f:67: a0:14:69:1f:fd:85:4c:1f:48:8a:04:78:9c:25:2b:6e:c2:f0: 47:83:6d:1f:70:67:2f:d3:64:7c:ab:8b:23:aa:a5:45:41:d0: 08:92:c5:ea:96:74:c6:0a:2a:3f:93:fc:db:5f:06:3b:87:06: 8a:ca:ed:1d:5a:b6:65:e9:98:1f:f5:e7:e8:58:ac:10:9a:f1: 70:4c:f1:39:bf:1a:e2:2a:5b:20:16:8e:5c:7b:8e:9f:60:22: 7f:56:a2:fd:9c:9e:cc:c0:e3:0f:7a:e5:a0:a5:14:3f:a6:af: b7:98:dd:fc:72:f3:a1:8c:3e:08:79:e5:f8:b5:56:bd:0c:83: 39:81:49:cf:25:98:83:65:67:b7:34:d9:d6:17:77:af:83:3d: b7:b8:16:2a:86:de:d2:b8:a8:c8:05:49:c0:98:6e:7f:06:9e: fc:68:46:19:7b:6c:d8:bc:e0:25:9a:58:f9:8c:4a:3b:ea:95: 64:f5:af:06 -----BEGIN CERTIFICATE----- MIIHZTCCBk2gAwIBAgIUAQ0Mn0MoWE79WvHGCyE7vUah7mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDgyODE4NTExNloXDTI4MTExMjIzMjgwNFowLzEtMCsGA1UEAxMk MmFjMjdlNWUtMTY1NC00NDhmLWI0YTAtNDA5YTczMmEyODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y7TceCsrijD4LADmSrWxeFFrOBN/vgB+Nm5 rQL0wnuwIsu2zfcevfv7DJaHDsr6qBUARCWmpXZZpTQgKGlSO+caKVl5ogRHHlAX XiKbbIOZBKZ76Mr/QnIlFLvVQhYxHZhpY0Y3fmmCG6Yw253MrI7JnW4OvqAs1LVU RkSXAe6Vw1jTlikZd+DZQgI7881BcTY9795J93vzitJeYSnIAxWiJRASYzw6TgCS tITj0HAluub/G0bah89D4/Eb/s1fy8YVJS88062r5NwZN2wYgr53nxwnzjVq7D5D 7V4xmJqeA6/6gprpNajkfws0ZigkfopQPGAMugUrf/4vWOQQ1QIDAQABo4IEdzCC BHMwHQYDVR0OBBYEFJj2zFd1C+duaysj2YI/rxdko57NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y YWMyN2U1ZS0xNjU0LTQ0OGYtYjRhMC00MDlhNzMyYTI4NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJhYzI3ZTVlLTE2NTQtNDQ4Zi1i NGEwLTQwOWE3MzJhMjg2YS8yYWMyN2U1ZS0xNjU0LTQ0OGYtYjRhMC00MDlhNzMy YTI4NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwdwYIKwYBBQUH AQcBAf8EaDBmMDwEAgABMDYDBAAXiFADBAAXl2ADBAAXqmADBAKOygwDBACQ0FgD BAGeMwADBAGeMzIDBACsU38DBALMCnQwJgQCAAIwIAMGBCYC/X8AAwYEJgL90QAD BgQmAv4PAAMGBCYC/joAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAk6XAgMAn+ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAg+yHBkYIt5VCn6oaoSKGh5y+KtVTdHkiagK7JAoPIEdkBNph5hs1 +vmRQe7kgHty/a8lQjWbv/su18jvDwPW82N+h2XAGB9noBRpH/2FTB9IigR4nCUr bsLwR4NtH3BnL9NkfKuLI6qlRUHQCJLF6pZ0xgoqP5P8218GO4cGisrtHVq2ZemY H/Xn6FisEJrxcEzxOb8a4ipbIBaOXHuOn2Aif1ai/ZyezMDjD3rloKUUP6avt5jd /HLzoYw+CHnl+LVWvQyDOYFJzyWYg2VntzTZ1hd3r4M9t7gWKobe0rioyAVJwJhu fwae/GhGGXts2LzgJZpY+YxKO+qVZPWvBg== -----END CERTIFICATE-----Generated at Sun Sep 20 21:53:10 2026 by rpki-client