$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer File: 2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer (raw, json) Hash identifier: dzcBJUEg63yTRJAKGtLB68INxUhCo9osUb50dNqZiVM= Subject key identifier: 3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584F07CFFE329B0A3632577F9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Sep 2026 12:45:11 +0000 Certificate not after: Mon 04 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 53546 IP: 144.86.176.0/23 IP: 2602:f3ad::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:cf:fe:32:9b:0a:36:32:57:7f:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 1 12:45:11 2026 GMT Not After : Dec 4 13:45:11 2028 GMT Subject: CN=2d0d7549-19b6-40f9-862f-dc6857e17fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:bc:83:b0:1f:5c:61:d1:f9:9d:58:c9:cf: 5a:50:fe:14:ab:6f:70:c6:16:27:60:5f:e9:bd:2e: 46:d1:02:31:67:9d:5b:97:72:78:e5:82:8b:cd:98: 72:f7:c7:55:f9:09:97:fb:14:9b:be:a8:85:d8:98: fe:28:4b:83:ab:e2:f0:b2:a0:c4:3a:f5:3d:9c:bc: 75:72:37:9d:51:3a:28:61:10:43:55:ee:f1:cf:65: e8:f3:b9:ce:cf:e3:07:75:09:ec:4d:41:82:fc:a0: 6d:f1:8c:e5:c7:4d:b5:db:da:27:0a:7e:57:98:52: 28:fa:a9:fe:68:03:3d:d6:a7:14:49:7a:02:ce:0a: da:51:3a:25:88:6c:75:9c:b3:5b:82:e4:75:a8:6f: 71:d2:fa:59:ca:2a:45:af:9a:7d:41:85:82:93:94: c6:b4:87:a8:d3:93:aa:2c:35:fe:8f:3b:20:64:35: 7c:e8:9d:77:b8:9d:46:0e:ff:ea:2e:72:2f:4c:e8: a7:0d:23:29:6f:c7:a6:38:81:9b:57:49:f1:0c:5d: 74:9e:d7:92:e0:86:8b:b1:04:28:b6:0f:ce:0c:66: 0c:83:82:17:b0:41:55:51:a4:0c:39:6f:ec:48:1b: 76:f1:c0:f1:6d:15:91:06:45:81:f9:38:b6:ba:49: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 144.86.176.0/23 IPv6: 2602:f3ad::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53546 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1c:09:d1:41:b1:51:9b:0f:ad:34:52:19:de:a4:85:11:2b: b3:5c:31:c4:1b:78:74:2a:9a:c4:c0:e1:ff:8d:2a:3c:9f:e0: 52:65:fc:d0:45:ae:9a:b5:3d:f9:36:70:67:5d:c4:45:04:f7: 54:a6:db:74:eb:fc:f8:07:f9:5d:04:47:f3:d9:35:9e:da:0e: e6:a7:2e:c1:4b:30:b3:25:9d:11:c9:cd:d8:8a:87:fa:61:98: 31:0c:83:0a:96:27:a2:4a:74:bf:b7:b5:c9:05:05:97:bb:e1: 9a:15:7e:50:29:0a:e9:e8:9b:5c:cb:82:07:8c:c0:21:01:c0: 90:83:fc:82:85:a0:d8:9c:4c:ce:1c:05:20:8a:eb:22:72:16: de:7b:62:47:dd:54:c1:77:76:0c:61:c2:f5:d9:b8:9d:d1:94: 47:58:23:77:40:e8:57:58:a4:a2:0f:8e:f0:ac:05:cd:b0:bb: ab:59:eb:3c:21:f3:f7:49:a9:14:ad:d5:74:5a:ed:1c:bd:9c: 89:0d:ec:77:62:58:b6:60:16:a8:c9:e8:64:89:6b:13:c5:17: 1d:0c:f6:82:a9:23:ba:50:5d:35:dd:31:70:97:69:0f:df:8c: a5:81:f1:b6:63:02:fd:58:4a:fd:d1:1d:4e:1d:00:29:53:39: da:e4:3b:c5 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8Hz/4ymwo2Mld/kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDkwMTEyNDUxMVoXDTI4MTIwNDEzNDUxMVowLzEtMCsGA1UEAxMk MmQwZDc1NDktMTliNi00MGY5LTg2MmYtZGM2ODU3ZTE3ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3q8g7AfXGHR+Z1Yyc9aUP4Uq29wxhYnYF/p vS5G0QIxZ51bl3J45YKLzZhy98dV+QmX+xSbvqiF2Jj+KEuDq+LwsqDEOvU9nLx1 cjedUTooYRBDVe7xz2Xo87nOz+MHdQnsTUGC/KBt8Yzlx02129onCn5XmFIo+qn+ aAM91qcUSXoCzgraUToliGx1nLNbguR1qG9x0vpZyipFr5p9QYWCk5TGtIeo05Oq LDX+jzsgZDV86J13uJ1GDv/qLnIvTOinDSMpb8emOIGbV0nxDF10nteS4IaLsQQo tg/ODGYMg4IXsEFVUaQMOW/sSBt28cDxbRWRBkWB+Ti2ukkehQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDyl4FdQDu28tNwCRSxy6IEI5JBMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y ZDBkNzU0OS0xOWI2LTQwZjktODYyZi1kYzY4NTdlMTdmYzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzJkMGQ3NTQ5LTE5YjYtNDBmOS04 NjJmLWRjNjg1N2UxN2ZjMC8yZDBkNzU0OS0xOWI2LTQwZjktODYyZi1kYzY4NTdl MTdmYzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGQVrAwDgQCAAIwCAMGBCYC860AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDRKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1HAnRQbFRmw+tNFIZ3qSFESuz XDHEG3h0KprEwOH/jSo8n+BSZfzQRa6atT35NnBnXcRFBPdUptt06/z4B/ldBEfz 2TWe2g7mpy7BSzCzJZ0Ryc3Yiof6YZgxDIMKlieiSnS/t7XJBQWXu+GaFX5QKQrp 6Jtcy4IHjMAhAcCQg/yChaDYnEzOHAUgiusichbee2JH3VTBd3YMYcL12bid0ZRH WCN3QOhXWKSiD47wrAXNsLurWes8IfP3SakUrdV0Wu0cvZyJDex3Yli2YBaoyehk iWsTxRcdDPaCqSO6UF013TFwl2kP34ylgfG2YwL9WEr90R1OHQApUzna5DvF -----END CERTIFICATE-----Generated at Sun Sep 20 19:42:48 2026 by rpki-client