$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer File: 9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer (raw, json) Hash identifier: xCYZICFo3pilDqFbbivV7suyyNnwk0zrkwVk4ONWJTM= Subject key identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F3A104F32E19D87EE697DAFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Sep 2026 12:45:11 +0000 Certificate not after: Fri 22 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 394485 IP: 185.212.72.0 -- 185.212.74.255 IP: 206.130.228.0/24 IP: 2620:122:a000::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:10:4f:32:e1:9d:87:ee:69:7d:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 19 12:45:11 2026 GMT Not After : Dec 22 13:45:11 2028 GMT Subject: CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:47:b2:7b:b1:f1:b0:b8:6e:df:6d:2b:ef: 70:05:d4:54:d7:f1:13:a6:41:79:19:d6:d4:c3:31: ca:95:34:c2:ab:d4:74:69:58:f3:4b:37:2e:96:eb: c8:9e:0a:83:65:dc:04:ba:21:59:58:fb:69:c4:7c: b9:73:ac:51:00:1a:80:93:c5:8a:ea:f2:fe:19:1d: 56:72:1c:c5:67:88:b6:77:17:bb:f8:2d:8f:29:4c: 38:a9:7c:82:db:41:df:82:54:26:99:aa:c5:db:1f: f0:01:93:55:31:78:b5:af:25:01:97:9b:aa:2f:61: cf:84:32:fb:79:7e:52:ca:d6:c0:17:da:9e:c5:84: 4d:af:25:85:10:b2:f1:45:37:96:a4:7b:73:77:88: 00:ab:e6:a9:8f:cf:f2:63:37:cd:dd:ea:8b:a3:df: fa:2f:f6:c1:15:0f:9d:02:c5:e8:60:67:e8:53:15: 5a:7b:9c:ac:07:72:39:69:48:7b:f2:8b:9b:2a:a0: 51:2b:47:10:60:bc:43:fa:c1:0b:bd:3a:c2:d6:f2: 3c:5e:9e:0d:d6:24:7a:47:60:3b:b2:54:a2:c1:dc: b7:b5:03:90:2f:d0:8b:db:bd:1d:22:e1:7e:94:25: a7:e8:3c:94:9c:01:57:0d:a9:ab:3e:86:f7:9d:e0: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 185.212.72.0-185.212.74.255 206.130.228.0/24 IPv6: 2620:122:a000::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394485 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cb:c7:2b:8c:db:32:97:af:32:86:00:52:a6:44:83:30:e0: d5:b6:eb:f8:80:80:37:e6:a5:a7:fd:b5:ec:b4:4b:85:67:54: 10:24:a5:fb:14:77:5a:11:e5:9a:03:ac:19:30:c6:50:48:f1: 88:d1:1b:c9:c5:5f:9f:20:8a:a9:c0:cc:7e:d8:38:96:ed:cc: 9c:04:2e:53:f1:77:af:95:3f:33:99:0c:af:d1:9b:05:1e:e9: 59:a7:8c:24:6a:2d:a2:41:ba:b7:c6:b0:6a:2b:82:a3:df:18: b3:15:6a:28:ba:e9:ba:90:dd:75:63:c8:85:d0:ba:73:0d:15: 6b:57:17:17:5c:9a:70:72:81:50:f1:f6:45:e1:ad:00:4f:ca: 6a:e5:99:86:3c:3a:5a:45:6b:8f:8d:f6:7c:e8:a3:17:b0:3e: 09:69:15:29:c0:ce:91:ac:45:c7:ea:a7:7f:97:09:9e:ec:36: 1e:0b:2a:1c:56:24:d1:87:bd:07:d2:22:81:fe:6c:18:2a:3d: de:9b:f3:a4:4e:75:b1:a7:8b:55:61:8a:aa:be:86:ff:72:c3: 00:10:f4:1a:7a:b4:2a:04:c5:47:da:3a:f8:ef:3e:45:72:db: b6:e6:66:e3:84:8d:42:a3:d2:89:b9:45:13:4f:08:5b:4c:ab: 8e:22:42:4d -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE86EE8y4Z2H7ml9r8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkxOTEyNDUxMVoXDTI4MTIyMjEzNDUxMVowLzEtMCsGA1UEAxMk OWI4ZTkxOTgtNDRkZi00MjRkLWJmZDQtOWE5MWM5ZmJjN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiZHsnux8bC4bt9tK+9wBdRU1/ETpkF5GdbU wzHKlTTCq9R0aVjzSzculuvIngqDZdwEuiFZWPtpxHy5c6xRABqAk8WK6vL+GR1W chzFZ4i2dxe7+C2PKUw4qXyC20HfglQmmarF2x/wAZNVMXi1ryUBl5uqL2HPhDL7 eX5SytbAF9qexYRNryWFELLxRTeWpHtzd4gAq+apj8/yYzfN3eqLo9/6L/bBFQ+d AsXoYGfoUxVae5ysB3I5aUh78oubKqBRK0cQYLxD+sELvTrC1vI8Xp4N1iR6R2A7 slSiwdy3tQOQL9CL270dIuF+lCWn6DyUnAFXDamrPob3neA2ewIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFDMxPqdTt/I4HuHHGpZTRSVJeM+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 YjhlOTE5OC00NGRmLTQyNGQtYmZkNC05YTkxYzlmYmM3ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzliOGU5MTk4LTQ0ZGYtNDI0ZC1i ZmQ0LTlhOTFjOWZiYzdkZS85YjhlOTE5OC00NGRmLTQyNGQtYmZkNC05YTkxYzlm YmM3ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMBoEAgABMBQwDAMEA7nUSAMEALnUSgMEAM6C5DAOBAIAAjAIAwYE JiABIqAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgT1MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHTLxyuM 2zKXrzKGAFKmRIMw4NW26/iAgDfmpaf9tey0S4VnVBAkpfsUd1oR5ZoDrBkwxlBI 8YjRG8nFX58giqnAzH7YOJbtzJwELlPxd6+VPzOZDK/RmwUe6VmnjCRqLaJBurfG sGorgqPfGLMVaii66bqQ3XVjyIXQunMNFWtXFxdcmnBygVDx9kXhrQBPymrlmYY8 OlpFa4+N9nzooxewPglpFSnAzpGsRcfqp3+XCZ7sNh4LKhxWJNGHvQfSIoH+bBgq Pd6b86ROdbGni1Vhiqq+hv9ywwAQ9Bp6tCoExUfaOvjvPkVy27bmZuOEjUKj0om5 RRNPCFtMq44iQk0= -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:45 2026 by rpki-client