$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer File: 88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer (raw, json) Hash identifier: PuWTdYlQAcj2mduAr9fMfB61/2/9d9yaZEOmQuUM2vw= Subject key identifier: 0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584FA6F0FEA4493FC70AF4F64F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 12:45:13 +0000 Certificate not after: Tue 30 Jan 2029 13:45:13 +0000 Subordinate resources: AS: 53427 IP: 23.128.100.0/24 IP: 2602:fa91::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a6:f0:fe:a4:49:3f:c7:0a:f4:f6:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 28 12:45:13 2026 GMT Not After : Jan 30 13:45:13 2029 GMT Subject: CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:2a:85:1d:28:90:a4:20:bb:2f:76:a5:54: 3e:c9:72:f0:71:41:8c:93:74:12:96:ae:19:2a:7a: 98:ae:e3:32:43:7f:2d:a5:3a:66:ca:ed:a4:bb:a4: 04:5e:61:16:6d:e9:7f:5d:9f:f1:8f:05:3b:26:e4: b5:e3:87:19:89:20:6a:e4:9f:36:6c:41:01:3c:e7: bc:50:0b:d9:84:ae:a8:9d:c2:f8:d1:c0:3f:c4:9f: 01:43:94:13:81:fc:2e:17:15:b2:b4:be:87:a4:2a: 81:b8:7d:6e:90:19:c6:35:03:52:c5:91:48:da:1b: fb:b2:74:1c:37:8e:3f:d9:57:61:70:60:54:cf:68: ff:f5:f4:22:cf:df:20:d9:60:62:1b:b7:c0:2e:37: 74:70:eb:91:0e:53:7f:2e:64:bb:f1:dc:20:fb:e3: 2f:15:fe:4b:57:23:1f:db:20:e1:88:01:c2:b0:f0: ce:15:11:cf:5d:a5:e5:fa:30:a4:33:78:81:c8:78: 77:a6:f5:61:a5:68:08:04:9e:a0:cc:47:95:46:4b: 7f:d4:7f:76:b7:28:fe:96:a7:da:10:99:88:89:55: 12:80:26:cd:72:eb:83:1a:6c:fa:78:d5:7e:eb:69: 44:7c:5b:45:30:b1:1d:a2:25:45:f1:7b:76:ba:e0: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.128.100.0/24 IPv6: 2602:fa91::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:58:eb:ce:60:8c:38:9f:1c:45:b7:4a:f3:5e:11:d8:81:32: e2:d3:35:de:b6:0c:18:31:7e:25:84:e4:eb:7f:a2:67:66:01: 3d:b5:31:28:89:17:b8:bc:d8:0e:38:45:2e:94:72:62:87:d6: 11:16:82:b6:7d:03:e0:46:b2:1c:68:5e:92:4a:26:cb:63:97: 06:07:af:b3:21:82:33:fa:d2:64:87:74:cd:bd:e2:11:a4:86: 28:3e:4b:37:c8:45:09:45:a6:5a:53:8d:61:3d:f1:6a:04:f4: d2:fb:46:1c:0e:7d:72:38:1b:23:7e:02:ea:c1:0f:db:d4:4e: a5:e3:7c:54:88:11:a7:84:eb:d2:27:5a:97:0c:cb:9b:be:30: 5c:2c:65:28:f5:2b:20:95:bf:b3:9f:10:ff:c4:28:c5:77:96: 65:9c:76:b0:33:c5:b5:bf:2c:1b:9f:4d:dc:11:33:07:12:41: 92:29:c2:c1:a4:56:6c:57:b9:90:3d:d2:80:69:fc:cf:51:12: dd:9d:e5:49:36:c0:3a:1e:40:c9:4b:81:82:72:16:43:aa:80: f8:92:f8:66:fd:1a:ba:14:5d:d1:70:70:9b:49:58:b7:41:47: 89:f5:29:d3:52:71:43:91:03:8d:23:fd:b9:f2:e5:29:75:6a: d2:44:4d:51 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+m8P6kST/HCvT2T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MTAyODEyNDUxM1oXDTI5MDEzMDEzNDUxM1owLzEtMCsGA1UEAxMk ODhjNjk0ODYtM2UxNC00ZjI2LTlmOTktMDJjZjdhYWFiN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFUqhR0okKQguy92pVQ+yXLwcUGMk3QSlq4Z KnqYruMyQ38tpTpmyu2ku6QEXmEWbel/XZ/xjwU7JuS144cZiSBq5J82bEEBPOe8 UAvZhK6oncL40cA/xJ8BQ5QTgfwuFxWytL6HpCqBuH1ukBnGNQNSxZFI2hv7snQc N44/2VdhcGBUz2j/9fQiz98g2WBiG7fALjd0cOuRDlN/LmS78dwg++MvFf5LVyMf 2yDhiAHCsPDOFRHPXaXl+jCkM3iByHh3pvVhpWgIBJ6gzEeVRkt/1H92tyj+lqfa EJmIiVUSgCbNcuuDGmz6eNV+62lEfFtFMLEdoiVF8Xt2uuDFiQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAws2+iX7JMnJyAYSBttP8fGOb5zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 OGM2OTQ4Ni0zZTE0LTRmMjYtOWY5OS0wMmNmN2FhYWI3YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg4YzY5NDg2LTNlMTQtNGYyNi05 Zjk5LTAyY2Y3YWFhYjdiZi84OGM2OTQ4Ni0zZTE0LTRmMjYtOWY5OS0wMmNmN2Fh YWI3YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgGQwDgQCAAIwCAMGACYC+pEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDQszBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQWOvOYIw4nxxFt0rzXhHYgTLi 0zXetgwYMX4lhOTrf6JnZgE9tTEoiRe4vNgOOEUulHJih9YRFoK2fQPgRrIcaF6S SibLY5cGB6+zIYIz+tJkh3TNveIRpIYoPks3yEUJRaZaU41hPfFqBPTS+0YcDn1y OBsjfgLqwQ/b1E6l43xUiBGnhOvSJ1qXDMubvjBcLGUo9Ssglb+znxD/xCjFd5Zl nHawM8W1vywbn03cETMHEkGSKcLBpFZsV7mQPdKAafzPURLdneVJNsA6HkDJS4GC chZDqoD4kvhm/Rq6FF3RcHCbSVi3QUeJ9SnTUnFDkQONI/258uUpdWrSRE1R -----END CERTIFICATE-----Generated at Thu Nov 5 04:41:02 2026 by rpki-client