$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer File: 8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer (raw, json) Hash identifier: cbnYH2lmuMkKUpuu4WcNZ+6PuHBQm3r+bYRDAOjNy5A= Subject key identifier: 17:B5:EE:65:E7:60:36:0D:F2:B1:7B:CF:42:A0:2F:C1:B5:17:01:2D Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584EDDEFBBC90CFFA9D12C8F5580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Aug 2026 12:45:11 +0000 Certificate not after: Sun 19 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 18606 IP: 74.121.248.0/21 IP: 2604:da0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:ef:bb:c9:0c:ff:a9:d1:2c:8f:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 17 12:45:11 2026 GMT Not After : Nov 19 13:45:11 2028 GMT Subject: CN=8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9f:f8:a8:35:8b:4a:5f:5b:74:13:31:64:12: 4f:76:fd:ee:f7:e2:9d:6b:db:e1:c5:5c:e9:d1:f5: 75:d2:6c:1f:4b:6f:ae:d4:f4:1d:88:0e:be:31:a6: 07:88:61:f7:2c:f7:f4:b4:c8:c9:8d:ea:b5:ef:71: c0:d2:e7:57:06:d0:4e:f9:de:b4:67:36:01:73:6f: 44:24:4c:37:d4:ba:17:26:59:51:d6:78:ef:64:d9: 58:0c:a9:e9:3f:22:f4:8a:1e:ac:96:53:da:4b:ce: 62:53:8d:1b:ee:d0:e9:af:db:73:59:86:35:a4:29: 32:0f:77:74:8f:f4:5a:a8:48:c7:42:ce:50:11:8e: 56:a3:11:26:da:32:fa:28:c4:54:32:00:52:61:90: 52:58:bc:82:b9:95:34:04:40:bc:c0:5e:d5:d1:42: 2e:78:e9:5e:fd:96:c0:12:67:3d:e9:b8:e8:a2:12: 8f:0c:f1:54:0f:81:ab:bb:79:a0:6b:08:7f:75:bf: 08:e0:ab:6e:bd:79:15:25:5a:ad:19:2c:93:50:8b: 45:bd:ac:ea:76:c6:2d:89:96:32:70:b0:8d:9a:f6: d5:77:d1:c7:f3:06:cd:b3:4b:b1:8b:58:7d:40:b5: 33:73:d4:45:c5:da:64:cf:12:4e:19:f0:6e:84:f0: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:EE:65:E7:60:36:0D:F2:B1:7B:CF:42:A0:2F:C1:B5:17:01:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 74.121.248.0/21 IPv6: 2604:da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18606 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1d:3d:71:c4:83:f3:a5:18:de:b2:cf:ac:6d:2d:b3:82:ca: 71:a9:44:29:3b:a4:a3:ee:88:0a:be:29:1a:51:7a:f4:36:80: 2b:31:15:54:38:6d:f4:4c:b6:3f:5d:b2:fb:ef:72:e6:47:bd: 87:8e:8f:71:e4:b3:ff:67:8e:02:6d:2d:aa:c8:31:3e:f5:22: 68:c1:92:76:36:21:44:29:55:e3:a2:7f:b4:51:2b:e9:cf:0b: 48:19:23:6a:cf:d5:96:f2:f0:70:b4:f1:a2:20:07:ba:3b:29: 77:b6:25:19:4e:70:1f:fd:75:4d:e0:ef:e5:6f:14:46:5b:02: bc:85:7f:1f:6f:af:bb:16:d1:9d:dd:c4:29:92:6c:59:f0:e2: 16:a2:66:8b:89:40:ab:dc:ce:4e:40:b3:21:a1:ec:c1:9f:c0: 1e:22:2d:8d:93:1a:b7:8b:11:68:ea:2c:b7:f6:66:44:56:16: 6e:55:c2:c3:9f:eb:2e:e5:b1:cd:0a:20:47:02:b7:9a:2d:06: 9f:b5:de:ef:e8:7d:cf:ac:ea:f8:20:51:32:b2:66:27:0b:2c: a6:02:9c:63:1c:e4:21:59:97:58:c6:38:df:3c:aa:30:c0:7e: 63:73:30:29:75:df:25:74:ca:06:d4:7c:f0:33:2a:17:bc:4c: 06:bc:1b:86 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE7d77vJDP+p0SyPVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDgxNzEyNDUxMVoXDTI4MTExOTEzNDUxMVowLzEtMCsGA1UEAxMk OGEwZWUzYjctZTA5Yy00Nzc4LTliOWQtMjlkZTVmNjFlY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45/4qDWLSl9bdBMxZBJPdv3u9+Kda9vhxVzp 0fV10mwfS2+u1PQdiA6+MaYHiGH3LPf0tMjJjeq173HA0udXBtBO+d60ZzYBc29E JEw31LoXJllR1njvZNlYDKnpPyL0ih6sllPaS85iU40b7tDpr9tzWYY1pCkyD3d0 j/RaqEjHQs5QEY5WoxEm2jL6KMRUMgBSYZBSWLyCuZU0BEC8wF7V0UIueOle/ZbA Emc96bjoohKPDPFUD4Gru3mgawh/db8I4KtuvXkVJVqtGSyTUItFvazqdsYtiZYy cLCNmvbVd9HH8wbNs0uxi1h9QLUzc9RFxdpkzxJOGfBuhPBJ/wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBe17mXnYDYN8rF7z0KgL8G1FwEtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84 YTBlZTNiNy1lMDljLTQ3NzgtOWI5ZC0yOWRlNWY2MWVjYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzhhMGVlM2I3LWUwOWMtNDc3OC05 YjlkLTI5ZGU1ZjYxZWNiYy84YTBlZTNiNy1lMDljLTQ3NzgtOWI5ZC0yOWRlNWY2 MWVjYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBANKefgwDQQCAAIwBwMFACYEDaAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSK4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhh09ccSD86UY3rLPrG0ts4LKcalE KTuko+6ICr4pGlF69DaAKzEVVDht9Ey2P12y++9y5ke9h46PceSz/2eOAm0tqsgx PvUiaMGSdjYhRClV46J/tFEr6c8LSBkjas/VlvLwcLTxoiAHujspd7YlGU5wH/11 TeDv5W8URlsCvIV/H2+vuxbRnd3EKZJsWfDiFqJmi4lAq9zOTkCzIaHswZ/AHiIt jZMat4sRaOost/ZmRFYWblXCw5/rLuWxzQogRwK3mi0Gn7Xe7+h9z6zq+CBRMrJm JwsspgKcYxzkIVmXWMY43zyqMMB+Y3MwKXXfJXTKBtR88DMqF7xMBrwbhg== -----END CERTIFICATE-----Generated at Sun Sep 20 18:12:55 2026 by rpki-client