$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer File: 1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer (raw, json) Hash identifier: 77z0tnrkBv+rQQp6xny3fwjpx+htVjaDiUVQ3agYV0M= Subject key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Authority key identifier: 11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 Certificate issuer: /CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Certificate serial: 010D0C9F4328584EE0BA6B03A04FD5860E5C82C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 18 Aug 2026 12:45:11 +0000 Certificate not after: Mon 20 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 23125 IP: 23.138.220.0/24 IP: 2602:f99e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:ba:6b:03:a0:4f:d5:86:0e:5c:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Validity Not Before: Aug 18 12:45:11 2026 GMT Not After : Nov 20 13:45:11 2028 GMT Subject: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:c8:ed:f2:ba:c0:bf:be:f0:90:f3:18:9a: c7:1c:9f:28:09:22:72:99:2c:47:62:8f:b8:1e:0b: 53:27:1f:f3:35:c2:1a:fd:3d:01:7d:9a:f6:be:57: c2:b2:09:be:d2:de:fd:c9:98:51:dc:b0:58:f0:f6: fd:c6:22:c0:98:10:a2:00:fc:70:e6:e4:a7:16:1a: 85:bb:47:c1:d1:35:9d:3a:2d:eb:02:5c:d0:95:91: 83:02:a5:26:e3:16:3a:d0:4c:0e:f6:24:cb:ae:01: 4e:23:76:51:c4:0b:f2:19:15:14:0c:44:2c:34:93: aa:19:15:c4:e0:d9:d2:0f:54:3a:81:4a:4f:a9:69: 4f:8b:56:db:c2:bf:b8:e8:03:ad:03:61:59:41:16: fb:73:a0:0a:f3:93:dd:4b:bb:5e:02:af:66:fd:28: 25:bb:f5:64:ef:a3:8a:19:33:12:8f:ee:4a:73:d6: db:9e:19:9a:f0:2b:ca:b3:c9:6f:1a:da:e6:bf:dd: c9:0a:cf:50:d7:31:7f:6e:0f:8e:6a:2a:48:9e:0b: ee:2b:ca:f0:27:87:c9:5f:1a:6c:76:eb:dc:aa:90: 37:d9:6d:55:db:6a:b7:88:82:59:ed:d5:3c:eb:13: 68:be:b3:fa:38:2c:55:a6:fe:36:af:d6:9a:3e:11: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl X509v3 Authority Key Identifier: keyid:11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer sbgp-ipAddrBlock: critical IPv4: 23.138.220.0/24 IPv6: 2602:f99e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8d:13:fc:a1:da:b1:2b:1f:3d:ff:6f:e0:f2:eb:b7:43:db: 62:e1:4a:36:7d:ae:e9:df:27:23:cb:93:7c:ba:ef:76:a6:fd: 5e:a3:bd:ba:2e:5a:7c:a9:26:ff:44:f2:2f:cb:e7:24:56:f4: 8c:a5:79:15:27:8b:7e:33:9f:b0:4a:bd:bb:61:5e:65:dc:8d: 0e:c6:9e:47:21:bc:dc:c1:1b:e0:12:82:db:65:88:b2:95:c6: b5:c6:a2:b8:87:1b:18:44:7f:a6:e5:13:22:0e:09:56:db:8e: 3b:01:b0:f9:6b:85:5a:a5:cd:5b:77:99:79:3c:bf:89:2a:8a: 95:5b:c9:e3:26:a9:4e:34:35:a3:5c:5f:f6:ce:94:1b:ef:eb: 88:2f:9f:9d:b5:07:6c:f9:34:38:af:60:74:42:05:34:31:5e: 82:79:67:ce:04:20:94:fd:20:2c:95:20:f2:cb:f9:98:4d:54: 58:f6:35:03:7c:55:85:16:e2:f7:67:42:8b:25:e6:4d:6a:6c: 8e:2a:35:f8:ee:64:ff:4b:10:62:2c:ce:01:cf:5d:56:ac:2e: 3d:f8:3d:55:89:9c:d3:3d:77:ea:b7:ad:85:3f:c6:03:b1:aa: bd:1c:c9:77:9d:41:45:d4:ea:09:ef:c3:78:20:80:4f:88:f9: da:dd:cf:ac -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE7gumsDoE/Vhg5cgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MmNiYzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4 OTVkMB4XDTI2MDgxODEyNDUxMVoXDTI4MTEyMDEzNDUxMVowPTE7MDkGA1UEAxMy MWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgzNjMyYjliYmNhMzNl MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mcjt8rrAv77wkPMY msccnygJInKZLEdij7geC1MnH/M1whr9PQF9mva+V8KyCb7S3v3JmFHcsFjw9v3G IsCYEKIA/HDm5KcWGoW7R8HRNZ06LesCXNCVkYMCpSbjFjrQTA72JMuuAU4jdlHE C/IZFRQMRCw0k6oZFcTg2dIPVDqBSk+paU+LVtvCv7joA60DYVlBFvtzoArzk91L u14Cr2b9KCW79WTvo4oZMxKP7kpz1tueGZrwK8qzyW8a2ua/3ckKz1DXMX9uD45q KkieC+4ryvAnh8lfGmx269yqkDfZbVXbareIglnt1TzrE2i+s/o4LFWm/jav1po+ EatHAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUEPqte9gIeB4zDBf9bQqrHfHGntQw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYz NC1hYjE4LTNlZjlkMDk4MjM1Mi8zLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00 NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JEODA4NzgxRTMzMEMxN0ZE NkQwQUFCMURGMUM2OUVENC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4 MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1kMDA1NTYwOTg5NWQvNGI5MmNi YzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4OTVkLmNybDAfBgNVHSMEGDAWgBQR mY7rgNwydGbgeYIFuWJIknXNxTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRi OTJjYmM1LTQ4ZTYtNGU1OS1iOWU0LWQwMDU1NjA5ODk1ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXitwwDgQCAAIwCAMGBCYC+Z4AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlpVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACaNE/yh2rErHz3/b+Dy67dD22Lh SjZ9runfJyPLk3y673am/V6jvbouWnypJv9E8i/L5yRW9IyleRUni34zn7BKvbth XmXcjQ7GnkchvNzBG+ASgttliLKVxrXGoriHGxhEf6blEyIOCVbbjjsBsPlrhVql zVt3mXk8v4kqipVbyeMmqU40NaNcX/bOlBvv64gvn521B2z5NDivYHRCBTQxXoJ5 Z84EIJT9ICyVIPLL+ZhNVFj2NQN8VYUW4vdnQosl5k1qbI4qNfjuZP9LEGIszgHP XVasLj34PVWJnNM9d+q3rYU/xgOxqr0cyXedQUXU6gnvw3gggE+I+drdz6w= -----END CERTIFICATE-----Generated at Tue Sep 22 10:11:53 2026 by rpki-client