$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer File: f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer (raw, json) Hash identifier: Dq+gHyauOqi00FCjxDZ8tn1kgFxYwRMsTFWxOE5dPZY= Subject key identifier: 93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F7D10BA78359CEFA9E6DA8D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 12:45:12 +0000 Certificate not after: Mon 15 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 4138 IP: 23.129.192.0/24 IP: 2604:55c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:10:ba:78:35:9c:ef:a9:e6:da:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 13 12:45:12 2026 GMT Not After : Jan 15 13:45:12 2029 GMT Subject: CN=f397700c-ac8d-4e3f-a06d-cb330dbb1e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:bb:09:b7:db:37:f9:f9:5c:f9:02:74:81: 6d:50:62:27:fd:20:84:f2:64:35:3f:08:c6:6a:32: 38:76:2f:81:1f:73:0f:60:09:f6:85:c6:e3:f5:3d: 41:4a:0a:0e:60:50:4a:db:8a:35:e2:47:80:d3:2b: 99:b8:77:95:2f:1e:82:f8:b8:75:24:44:f8:02:df: 61:06:02:53:26:5b:9f:16:ed:5f:c7:5c:28:93:75: 38:99:be:82:8c:55:3b:34:ba:29:3a:49:4d:50:56: 3e:9b:03:a5:9e:0c:cf:92:64:21:c1:72:bd:e7:f9: 8d:62:aa:e1:4a:59:49:07:1f:0d:81:d2:d7:b7:bd: 06:46:87:77:49:62:47:f0:8e:9b:ae:a5:9d:c3:c5: 9a:67:06:b1:e1:9f:e3:67:f3:38:61:2e:dc:a3:95: 8a:26:d9:bd:59:cf:ed:15:ac:95:be:4d:07:e5:b1: a0:a9:6c:42:b6:12:9f:fe:b8:eb:a6:87:09:db:af: d9:2b:22:fd:1a:22:a8:d2:58:2a:ed:89:64:81:0d: db:3f:41:f0:b5:bc:cb:13:ee:7c:49:29:86:71:78: 28:da:5b:7d:b0:ea:f4:03:c7:d5:b4:4a:1b:f5:52: b3:c7:f4:41:45:93:ab:4a:72:29:20:c8:45:50:99: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.129.192.0/24 IPv6: 2604:55c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4138 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c8:d9:9d:19:61:ea:f7:a6:f9:e1:ce:35:01:83:83:6a:55: de:14:20:32:94:42:28:5c:86:8c:8d:16:65:a9:72:70:8d:6a: 94:8b:08:03:f6:7f:0e:08:20:95:05:58:77:a0:4f:86:e9:af: b9:8e:77:2f:1c:5d:e8:c1:8d:e5:2d:97:fc:d7:7d:f2:e6:df: 2b:53:fb:b5:5d:0b:ad:8e:57:6a:fe:bd:d5:68:c6:60:c5:a7: 8e:bb:76:ff:c8:a2:22:10:79:bf:f1:c7:4c:f5:ba:00:55:4b: 48:d7:ec:10:98:15:2c:ce:00:11:06:85:1c:b3:17:a2:f1:5a: f9:e6:fa:9c:52:a4:15:28:3b:51:e1:6e:d3:e7:55:85:ef:1e: b3:07:39:46:6b:f5:32:79:54:07:f8:c9:bc:c4:c7:52:61:e0: 29:df:96:90:11:47:00:15:d9:bb:3c:b5:fb:15:2c:03:ef:ad: 46:b3:40:6a:59:79:c5:50:96:2c:f3:9e:2a:10:ce:c2:df:78: aa:af:ee:9d:f7:87:13:83:2c:25:0a:be:8b:fe:5b:7b:52:06: a4:a4:cb:3c:77:cb:fd:e8:8d:45:7f:98:31:aa:73:85:61:bf: 1d:70:35:99:32:b7:b8:1d:b4:a2:5a:0a:7b:2f:2f:ff:3f:ea: aa:f7:9b:0e -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE99ELp4NZzvqebajYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAxMzEyNDUxMloXDTI5MDExNTEzNDUxMlowLzEtMCsGA1UEAxMk ZjM5NzcwMGMtYWM4ZC00ZTNmLWEwNmQtY2IzMzBkYmIxZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHi7CbfbN/n5XPkCdIFtUGIn/SCE8mQ1PwjG ajI4di+BH3MPYAn2hcbj9T1BSgoOYFBK24o14keA0yuZuHeVLx6C+Lh1JET4At9h BgJTJlufFu1fx1wok3U4mb6CjFU7NLopOklNUFY+mwOlngzPkmQhwXK95/mNYqrh SllJBx8NgdLXt70GRod3SWJH8I6brqWdw8WaZwax4Z/jZ/M4YS7co5WKJtm9Wc/t FayVvk0H5bGgqWxCthKf/rjrpocJ26/ZKyL9GiKo0lgq7YlkgQ3bP0HwtbzLE+58 SSmGcXgo2lt9sOr0A8fVtEob9VKzx/RBRZOrSnIpIMhFUJmERQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFJMquAknczlH4JWAewVztBoI8IwKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m Mzk3NzAwYy1hYzhkLTRlM2YtYTA2ZC1jYjMzMGRiYjFlNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YzOTc3MDBjLWFjOGQtNGUzZi1h MDZkLWNiMzMwZGJiMWU0Ny9mMzk3NzAwYy1hYzhkLTRlM2YtYTA2ZC1jYjMzMGRi YjFlNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXgcAwDQQCAAIwBwMFACYEVcAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICECowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACsjZnRlh6vem+eHONQGDg2pV3hQg MpRCKFyGjI0WZalycI1qlIsIA/Z/DggglQVYd6BPhumvuY53Lxxd6MGN5S2X/Nd9 8ubfK1P7tV0LrY5Xav691WjGYMWnjrt2/8iiIhB5v/HHTPW6AFVLSNfsEJgVLM4A EQaFHLMXovFa+eb6nFKkFSg7UeFu0+dVhe8eswc5Rmv1MnlUB/jJvMTHUmHgKd+W kBFHABXZuzy1+xUsA++tRrNAall5xVCWLPOeKhDOwt94qq/unfeHE4MsJQq+i/5b e1IGpKTLPHfL/eiNRX+YMapzhWG/HXA1mTK3uB20oloKey8v/z/qqvebDg== -----END CERTIFICATE-----Generated at Thu Nov 5 09:13:01 2026 by rpki-client