$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac.cer File: 9f6ef725-e177-49e9-9e77-ddfdf37581ac.cer (raw, json) Hash identifier: WBWqQVyMwMuiOJ5wt2zqUdrTl5k3fnapde1pvXkoyrU= Subject key identifier: EE:FB:C2:80:8E:01:3B:24:BD:5A:F8:71:10:3A:B2:72:70:B4:6E:17 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F33159918083DAEC2D45C4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/9f6ef725-e177-49e9-9e77-ddfdf37581ac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 00:45:11 +0000 Certificate not after: Wed 20 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 395088 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:15:99:18:08:3d:ae:c2:d4:5c:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 17 00:45:11 2026 GMT Not After : Dec 20 01:45:11 2028 GMT Subject: CN=9f6ef725-e177-49e9-9e77-ddfdf37581ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:b6:d5:2f:88:6b:69:3b:33:68:93:e2:f6: f9:ee:d5:74:38:e0:9a:eb:0c:31:7a:76:d1:5f:cb: 88:ac:37:0e:54:82:ad:7c:c0:d3:94:a2:03:2b:f2: 6e:a9:f6:a4:5e:e9:dd:bb:80:eb:a0:d4:8e:8f:10: 92:a1:93:08:7f:be:b7:83:bd:a9:d0:51:df:6b:05: 24:a6:75:10:19:7e:b6:53:9a:11:15:62:76:37:37: 26:b9:99:26:97:46:a4:52:30:87:4e:53:c4:53:a3: 9b:c8:70:1d:1b:80:50:9e:df:90:85:00:f9:cd:46: e8:c4:1a:73:09:a7:ac:cb:1b:ef:47:4d:f1:13:6a: 5a:14:3d:59:ff:60:06:a4:c1:a3:02:9f:73:62:e4: d0:57:89:4a:c2:9f:51:5b:00:93:3c:8f:2f:a3:75: 87:fb:20:e8:3b:c8:1d:dd:5a:20:79:63:f8:23:54: 69:42:73:c5:f8:fd:c4:2f:6b:58:c1:1e:09:50:0d: 32:b6:6e:a4:db:e4:e0:57:2d:c8:fd:53:83:49:ca: ca:56:01:b7:a5:55:c8:98:90:21:07:ec:2c:c5:ab: 3f:c6:dd:e8:fb:5b:58:e1:cb:59:f7:ec:a0:40:1a: b0:af:02:c1:0d:20:aa:46:14:c2:9c:2c:de:00:34: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:C2:80:8E:01:3B:24:BD:5A:F8:71:10:3A:B2:72:70:B4:6E:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f6ef725-e177-49e9-9e77-ddfdf37581ac/9f6ef725-e177-49e9-9e77-ddfdf37581ac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f1:29:52:5a:59:3e:14:c6:c6:02:7b:46:2b:08:b8:67:a2: 98:5c:20:f9:b3:94:3a:1f:0f:0e:8d:8b:af:90:8b:33:0d:c4: 34:09:e2:8b:5e:93:35:94:4b:bc:ad:27:40:3c:18:e1:e0:f6: 3c:ea:21:e1:4e:3c:0c:67:a8:1f:75:7a:c6:92:10:76:78:a7: 2a:a8:0a:8d:4d:ff:2b:f9:fe:d1:b2:d3:a0:fa:bc:ec:ec:3c: 1d:ec:06:9c:85:1f:6e:b6:7f:38:de:22:14:55:e3:76:f7:ee: 4b:93:9d:51:bf:4f:62:d4:2f:0b:e4:81:9e:30:e3:7c:0d:0a: 01:b7:a2:b1:be:72:47:7c:75:e2:84:19:d5:cf:43:43:75:92: 1c:25:a5:a3:94:60:e3:fb:7e:00:6c:4f:12:bf:e7:95:18:74: 03:5d:e5:08:e8:2e:ba:f5:73:44:c5:84:ad:e3:77:f0:79:55: 3d:21:bb:11:ec:b3:e5:8c:d1:01:4e:4f:fd:d2:ed:29:bb:b9: 9c:76:e9:9e:7a:69:19:86:e5:39:0d:0f:ef:11:83:a4:7f:21: 8a:75:d3:73:f1:1c:6a:5f:a7:94:4a:f9:a0:49:b8:29:23:4f: 08:a0:96:8d:11:a3:6f:1c:7d:25:0a:75:b5:56:3c:43:e1:82: 6e:c0:63:b6 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE8zFZkYCD2uwtRcSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxNzAwNDUxMVoXDTI4MTIyMDAxNDUxMVowLzEtMCsGA1UEAxMk OWY2ZWY3MjUtZTE3Ny00OWU5LTllNzctZGRmZGYzNzU4MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/m21S+Ia2k7M2iT4vb57tV0OOCa6wwxenbR X8uIrDcOVIKtfMDTlKIDK/JuqfakXundu4DroNSOjxCSoZMIf763g72p0FHfawUk pnUQGX62U5oRFWJ2NzcmuZkml0akUjCHTlPEU6ObyHAdG4BQnt+QhQD5zUboxBpz CaesyxvvR03xE2paFD1Z/2AGpMGjAp9zYuTQV4lKwp9RWwCTPI8vo3WH+yDoO8gd 3VogeWP4I1RpQnPF+P3EL2tYwR4JUA0ytm6k2+TgVy3I/VODScrKVgG3pVXImJAh B+wsxas/xt3o+1tY4ctZ9+ygQBqwrwLBDSCqRhTCnCzeADQdAQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFO77woCOATskvVr4cRA6snJwtG4XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 ZjZlZjcyNS1lMTc3LTQ5ZTktOWU3Ny1kZGZkZjM3NTgxYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzlmNmVmNzI1LWUxNzctNDllOS05 ZTc3LWRkZmRmMzc1ODFhYy85ZjZlZjcyNS1lMTc3LTQ5ZTktOWU3Ny1kZGZkZjM3 NTgxYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgdQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACbxKVJaWT4UxsYCe0YrCLhnophc IPmzlDofDw6Ni6+QizMNxDQJ4otekzWUS7ytJ0A8GOHg9jzqIeFOPAxnqB91esaS EHZ4pyqoCo1N/yv5/tGy06D6vOzsPB3sBpyFH262fzjeIhRV43b37kuTnVG/T2LU LwvkgZ4w43wNCgG3orG+ckd8deKEGdXPQ0N1khwlpaOUYOP7fgBsTxK/55UYdANd 5QjoLrr1c0TFhK3jd/B5VT0huxHss+WM0QFOT/3S7Sm7uZx26Z56aRmG5TkND+8R g6R/IYp103PxHGpfp5RK+aBJuCkjTwiglo0Ro28cfSUKdbVWPEPhgm7AY7Y= -----END CERTIFICATE-----Generated at Sun Sep 20 12:42:01 2026 by rpki-client