$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer File: 69fd5aaa-164e-43f9-a8ca-302782d25019.cer (raw, json) Hash identifier: aEmNJVVDV3Ph1VYra73VtPqSRPkzkrldQoDgY8Wyd6E= Subject key identifier: B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F0D655C8E4AFD4D16E1222340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Sep 2026 12:45:11 +0000 Certificate not after: Wed 06 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 21837 IP: 107.167.96.0/19 IP: 2620:117:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:65:5c:8e:4a:fd:4d:16:e1:22:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 3 12:45:11 2026 GMT Not After : Dec 6 13:45:11 2028 GMT Subject: CN=69fd5aaa-164e-43f9-a8ca-302782d25019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:93:89:7f:db:97:ac:a4:73:05:be:c2:79: 32:24:0a:38:f2:bd:09:06:54:0a:c2:b3:5e:55:f9: 78:05:d8:01:d7:8d:6d:bb:f7:3d:79:b3:e5:32:09: 49:f7:30:41:2e:48:8f:f6:98:a5:ca:13:14:dd:73: 6e:4b:37:39:2c:b6:ae:a7:0b:00:d0:30:4e:ec:bc: 49:50:15:4b:72:d5:c8:02:f3:46:a1:ab:79:3a:0e: b0:ce:ac:07:7f:26:f3:58:93:3d:2f:0c:30:74:9e: f6:a3:68:57:89:f0:13:87:26:b2:78:50:4c:a3:5d: 02:d4:a5:21:cf:71:29:fa:cb:10:10:32:f3:3f:87: ff:db:f9:a1:9d:1d:88:1f:f6:a8:19:0a:1e:6b:e7: 47:b6:91:98:48:e1:16:4f:c3:fb:b4:b9:99:99:6c: 3e:f0:11:4f:23:9f:90:4e:da:12:34:87:77:c8:fc: b2:23:36:e9:e0:9d:de:36:f5:4f:fe:4b:75:4f:99: 89:3b:ef:a0:11:ef:d4:a9:b6:de:37:bd:f0:31:cd: eb:40:6d:cc:dc:fb:0f:59:c2:d6:0a:22:6c:d9:95: b3:8d:2f:5f:ec:67:b3:d5:f9:14:08:95:4e:a7:a6: 32:70:72:0f:25:a2:90:60:0d:34:80:c6:86:3c:9e: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 107.167.96.0/19 IPv6: 2620:117:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21837 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:62:1c:12:fd:8e:99:17:8a:ce:0e:cc:84:4f:d1:6d:02:40: a3:f1:4f:f8:e4:fe:12:27:8a:76:ea:f9:eb:d9:6b:4a:cc:8e: 45:46:a0:34:fe:41:0f:e5:31:ec:b1:3f:2b:86:1b:3a:c8:bd: b4:6c:45:e1:6b:22:f8:af:03:b5:14:52:22:0f:26:80:90:da: 0f:a5:84:de:ce:2d:cf:d8:00:42:b9:c3:b7:fe:c3:60:02:50: 8b:d8:11:1d:5c:59:a1:a9:d2:1d:12:b2:99:22:58:3d:d1:61: ea:1a:2c:f5:0d:8f:d6:e4:1c:41:cc:a0:bc:04:8d:b6:66:50: 37:e8:ef:8f:da:f0:3d:d4:de:4e:ee:96:ec:28:1b:0b:50:89: 2a:d6:a8:f6:dc:45:bb:6b:81:30:6c:19:dc:53:b7:12:13:91: 8b:d4:bb:d5:82:33:a5:37:1c:5f:25:83:7a:01:0f:b9:cc:69: d2:d8:88:c6:a2:93:67:86:6c:bb:a8:af:f6:27:2f:67:d1:dd: 59:db:e5:5a:ee:be:e0:1b:27:ff:b9:ef:08:68:45:d8:7e:d3: b3:62:96:60:a3:46:a0:34:99:84:f6:3c:38:30:f1:e2:04:53: 13:77:3f:82:c5:d1:73:dc:6a:a0:cb:1c:84:67:76:c3:3c:24: f5:e1:1c:30 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE8NZVyOSv1NFuEiI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkwMzEyNDUxMVoXDTI4MTIwNjEzNDUxMVowLzEtMCsGA1UEAxMk NjlmZDVhYWEtMTY0ZS00M2Y5LWE4Y2EtMzAyNzgyZDI1MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX+TiX/bl6ykcwW+wnkyJAo48r0JBlQKwrNe Vfl4BdgB141tu/c9ebPlMglJ9zBBLkiP9pilyhMU3XNuSzc5LLaupwsA0DBO7LxJ UBVLctXIAvNGoat5Og6wzqwHfybzWJM9LwwwdJ72o2hXifAThyayeFBMo10C1KUh z3Ep+ssQEDLzP4f/2/mhnR2IH/aoGQoea+dHtpGYSOEWT8P7tLmZmWw+8BFPI5+Q TtoSNId3yPyyIzbp4J3eNvVP/kt1T5mJO++gEe/UqbbeN73wMc3rQG3M3PsPWcLW CiJs2ZWzjS9f7Gez1fkUCJVOp6YycHIPJaKQYA00gMaGPJ6r1wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLJQUC1d6l6cJpEsRaqC11aT+ZsuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 OWZkNWFhYS0xNjRlLTQzZjktYThjYS0zMDI3ODJkMjUwMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY5ZmQ1YWFhLTE2NGUtNDNmOS1h OGNhLTMwMjc4MmQyNTAxOS82OWZkNWFhYS0xNjRlLTQzZjktYThjYS0zMDI3ODJk MjUwMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAVrp2AwDgQCAAIwCAMGACYgARfAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlVNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB1iHBL9jpkXis4OzIRP0W0CQKPx T/jk/hIninbq+evZa0rMjkVGoDT+QQ/lMeyxPyuGGzrIvbRsReFrIvivA7UUUiIP JoCQ2g+lhN7OLc/YAEK5w7f+w2ACUIvYER1cWaGp0h0SspkiWD3RYeoaLPUNj9bk HEHMoLwEjbZmUDfo74/a8D3U3k7uluwoGwtQiSrWqPbcRbtrgTBsGdxTtxITkYvU u9WCM6U3HF8lg3oBD7nMadLYiMaik2eGbLuor/YnL2fR3Vnb5VruvuAbJ/+57who Rdh+07NilmCjRqA0mYT2PDgw8eIEUxN3P4LF0XPcaqDLHIRndsM8JPXhHDA= -----END CERTIFICATE-----Generated at Tue Sep 22 14:38:10 2026 by rpki-client