$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer File: ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer (raw, json) Hash identifier: dVL2OaBXhnPu8gSJAiERHS0SS9XBXIn4wYGJsVC+YlI= Subject key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F6A460A3BF26547A92F1C2D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 19:12:15 +0000 Certificate not after: Sun 19 Mar 2028 00:45:22 +0000 Subordinate resources: AS: 19814 IP: 23.189.120.0/24 IP: 208.72.224.0/24 IP: 2602:f805::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:46:0a:3b:f2:65:47:a9:2f:1c:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 6 19:12:15 2026 GMT Not After : Mar 19 00:45:22 2028 GMT Subject: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:6c:95:ac:e4:8f:f9:e0:81:70:78:6f:84: d4:72:3a:e1:fd:b8:7c:4e:65:b9:dc:07:a6:24:9c: 1b:69:0a:ec:d3:fe:73:9d:ab:03:c7:2c:15:e0:21: 48:9f:58:4d:af:9e:63:67:7f:4c:18:c8:e4:27:cd: 3a:16:af:d0:e6:1a:de:66:ca:ac:d3:2b:81:8a:e0: 88:10:d6:55:01:b0:5f:3d:38:aa:95:16:38:66:c9: 08:8d:ab:95:03:b1:23:92:06:e4:d2:a0:fa:fe:7a: 75:0a:ca:19:3b:3e:cc:dc:6c:f1:c9:99:9c:47:08: ec:3d:9b:f6:4c:cc:80:dc:50:91:c0:25:9b:f2:81: b7:e6:23:10:94:da:f6:50:b8:92:78:d9:bf:de:c9: af:21:42:15:16:d8:9b:c1:cd:bf:54:a2:9d:bd:58: 8e:70:94:4b:fb:60:0c:7e:68:78:b2:1b:32:92:a6: d6:9e:f2:7d:3f:ed:58:7c:82:42:c1:d4:23:74:39: c3:27:d6:7a:e6:fc:0c:45:c4:10:ca:ec:72:c7:1e: 9e:7f:5c:81:06:ad:cd:12:00:4a:28:c4:5b:f8:b3: 10:fd:3a:19:a1:6d:16:26:71:84:9a:94:d8:66:1d: d0:b6:bb:e5:2c:20:46:d8:a1:5e:07:6c:db:cb:cc: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 208.72.224.0/24 IPv6: 2602:f805::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19814 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c5:78:06:09:b5:85:7f:2d:40:8f:dc:03:55:0b:dc:d2:d2: de:b9:64:cc:a8:95:ee:00:93:cd:7e:4c:40:a6:96:87:70:9a: cd:8f:b4:42:91:7d:d1:86:a4:92:b1:21:18:65:2d:0f:08:67: cb:2c:47:66:ed:61:61:04:9f:4f:7f:11:ad:b4:3b:2d:50:1e: 43:17:74:02:e3:60:20:25:89:6f:7f:dc:b3:50:ce:b3:8a:5a: e5:fa:ab:0a:0d:32:e0:40:5f:93:64:d3:ab:03:eb:b5:16:ca: ec:6f:4a:a5:99:84:dd:e5:bf:77:dc:11:c1:fa:31:2b:99:21: 28:b6:22:49:3a:0c:f5:61:30:96:ee:7d:90:fa:ec:50:73:ce: 7d:67:14:e5:14:dc:b8:e0:03:fd:ae:e4:fc:8b:11:38:95:eb: 21:54:99:28:1e:b5:f4:ee:2b:a4:03:f4:b3:65:df:f0:2c:e7: 22:ce:77:ac:83:0a:7c:e8:3e:bd:f0:15:ac:c9:9d:8d:5c:b0: dd:f8:b5:bc:b2:20:f0:17:0f:6b:e9:1c:5c:5e:7f:ac:80:82: c5:8b:da:de:85:92:e8:49:f9:ab:76:df:99:e8:2f:86:a2:d7: b4:bb:48:46:cd:91:e4:66:98:fb:84:08:2f:93:e4:37:dc:f1: 18:fd:5a:b3 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE9qRgo78mVHqS8cLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MTAwNjE5MTIxNVoXDTI4MDMxOTAwNDUyMlowLzEtMCsGA1UEAxMk YmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRmODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn89slazkj/nggXB4b4TUcjrh/bh8TmW53Aem JJwbaQrs0/5znasDxywV4CFIn1hNr55jZ39MGMjkJ806Fq/Q5hreZsqs0yuBiuCI ENZVAbBfPTiqlRY4ZskIjauVA7Ejkgbk0qD6/np1CsoZOz7M3GzxyZmcRwjsPZv2 TMyA3FCRwCWb8oG35iMQlNr2ULiSeNm/3smvIUIVFtibwc2/VKKdvViOcJRL+2AM fmh4shsykqbWnvJ9P+1YfIJCwdQjdDnDJ9Z65vwMRcQQyuxyxx6ef1yBBq3NEgBK KMRb+LMQ/ToZoW0WJnGEmpTYZh3QtrvlLCBG2KFeB2zby8xsHQIDAQABo4IELzCC BCswHQYDVR0OBBYEFFaDOfDfMrdgxWUmsZ1pH29sRKFzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i YTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JhNmE5NWIzLWRkM2MtNDBkZS05 YmQyLTg0MzU3Yjc0ZjgwMS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3 NGY4MDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXvXgDBADQSOAwDQQCAAIwBwMFACYC+AUwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICTWYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUcV4Bgm1hX8tQI/cA1UL 3NLS3rlkzKiV7gCTzX5MQKaWh3CazY+0QpF90YakkrEhGGUtDwhnyyxHZu1hYQSf T38RrbQ7LVAeQxd0AuNgICWJb3/cs1DOs4pa5fqrCg0y4EBfk2TTqwPrtRbK7G9K pZmE3eW/d9wRwfoxK5khKLYiSToM9WEwlu59kPrsUHPOfWcU5RTcuOAD/a7k/IsR OJXrIVSZKB619O4rpAP0s2Xf8CznIs53rIMKfOg+vfAVrMmdjVyw3fi1vLIg8BcP a+kcXF5/rICCxYva3oWS6En5q3bfmegvhqLXtLtIRs2R5GaY+4QIL5PkN9zxGP1a sw== -----END CERTIFICATE-----Generated at Thu Nov 5 11:09:07 2026 by rpki-client