$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer File: ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer (raw, json) Hash identifier: IXX0amqjpHf9/5NpXhrag64Nx4mG/RTOAMVOLz63PGI= Subject key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F3779C57DA9AE702A931B8400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 14:30:16 +0000 Certificate not after: Sun 19 Mar 2028 00:45:22 +0000 Subordinate resources: AS: 19814 IP: 23.189.120.0/24 IP: 208.72.224.0/24 IP: 2602:f805::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:79:c5:7d:a9:ae:70:2a:93:1b:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 18 14:30:16 2026 GMT Not After : Mar 19 00:45:22 2028 GMT Subject: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:6c:95:ac:e4:8f:f9:e0:81:70:78:6f:84: d4:72:3a:e1:fd:b8:7c:4e:65:b9:dc:07:a6:24:9c: 1b:69:0a:ec:d3:fe:73:9d:ab:03:c7:2c:15:e0:21: 48:9f:58:4d:af:9e:63:67:7f:4c:18:c8:e4:27:cd: 3a:16:af:d0:e6:1a:de:66:ca:ac:d3:2b:81:8a:e0: 88:10:d6:55:01:b0:5f:3d:38:aa:95:16:38:66:c9: 08:8d:ab:95:03:b1:23:92:06:e4:d2:a0:fa:fe:7a: 75:0a:ca:19:3b:3e:cc:dc:6c:f1:c9:99:9c:47:08: ec:3d:9b:f6:4c:cc:80:dc:50:91:c0:25:9b:f2:81: b7:e6:23:10:94:da:f6:50:b8:92:78:d9:bf:de:c9: af:21:42:15:16:d8:9b:c1:cd:bf:54:a2:9d:bd:58: 8e:70:94:4b:fb:60:0c:7e:68:78:b2:1b:32:92:a6: d6:9e:f2:7d:3f:ed:58:7c:82:42:c1:d4:23:74:39: c3:27:d6:7a:e6:fc:0c:45:c4:10:ca:ec:72:c7:1e: 9e:7f:5c:81:06:ad:cd:12:00:4a:28:c4:5b:f8:b3: 10:fd:3a:19:a1:6d:16:26:71:84:9a:94:d8:66:1d: d0:b6:bb:e5:2c:20:46:d8:a1:5e:07:6c:db:cb:cc: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 208.72.224.0/24 IPv6: 2602:f805::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19814 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c3:57:fe:db:97:cb:9c:ba:77:ee:5f:41:13:63:8a:e6:cf: 1c:17:cc:03:b3:65:e8:15:c6:1d:7e:33:6e:a1:7d:61:83:ea: 3a:91:7a:d1:77:79:44:d5:3a:a1:ee:d1:37:bb:da:ae:61:7f: 37:07:04:56:d4:38:98:8d:86:bb:c3:88:c1:07:6d:a8:1a:05: fb:e9:ac:aa:c1:b8:75:db:3b:a1:c1:52:05:cc:fc:ed:11:bd: 49:59:2d:81:34:25:6c:ea:e0:52:e9:27:12:cf:c3:c7:25:d1: 35:21:85:69:db:b0:c5:47:2d:a9:d3:c5:fc:80:b5:08:84:c6: 43:e7:f3:e4:e1:cf:f7:d2:16:9d:e0:67:09:14:0b:e9:4b:12: 7d:68:92:c7:ba:99:b7:8c:a1:5f:ce:37:ad:77:49:7b:13:4a: 34:15:88:f7:5d:0a:e6:8c:34:49:1c:6b:14:67:f1:45:28:85: 1c:12:60:f2:61:ca:19:be:89:0c:e2:e0:ac:d8:11:4e:0a:ef: e3:59:99:b4:82:bb:74:a1:8a:a7:bb:a1:dc:b7:4a:41:d8:75: e4:31:8c:1b:9e:a3:49:50:2c:e2:ab:e6:f2:23:81:d5:f4:2e: 35:b1:db:f7:5b:75:3f:85:8b:a7:a2:00:f7:c8:eb:d2:e0:f6: f3:17:6f:1c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE83ecV9qa5wKpMbhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkxODE0MzAxNloXDTI4MDMxOTAwNDUyMlowLzEtMCsGA1UEAxMk YmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRmODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn89slazkj/nggXB4b4TUcjrh/bh8TmW53Aem JJwbaQrs0/5znasDxywV4CFIn1hNr55jZ39MGMjkJ806Fq/Q5hreZsqs0yuBiuCI ENZVAbBfPTiqlRY4ZskIjauVA7Ejkgbk0qD6/np1CsoZOz7M3GzxyZmcRwjsPZv2 TMyA3FCRwCWb8oG35iMQlNr2ULiSeNm/3smvIUIVFtibwc2/VKKdvViOcJRL+2AM fmh4shsykqbWnvJ9P+1YfIJCwdQjdDnDJ9Z65vwMRcQQyuxyxx6ef1yBBq3NEgBK KMRb+LMQ/ToZoW0WJnGEmpTYZh3QtrvlLCBG2KFeB2zby8xsHQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFaDOfDfMrdgxWUmsZ1pH29sRKFzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i YTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JhNmE5NWIzLWRkM2MtNDBkZS05 YmQyLTg0MzU3Yjc0ZjgwMS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3 NGY4MDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXvXgDBADQSOAwDgQCAAIwCAMGBCYC+AUAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAk1mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHHDV/7bl8ucunfuX0ET Y4rmzxwXzAOzZegVxh1+M26hfWGD6jqRetF3eUTVOqHu0Te72q5hfzcHBFbUOJiN hrvDiMEHbagaBfvprKrBuHXbO6HBUgXM/O0RvUlZLYE0JWzq4FLpJxLPw8cl0TUh hWnbsMVHLanTxfyAtQiExkPn8+Thz/fSFp3gZwkUC+lLEn1okse6mbeMoV/ON613 SXsTSjQViPddCuaMNEkcaxRn8UUohRwSYPJhyhm+iQzi4KzYEU4K7+NZmbSCu3Sh iqe7ody3SkHYdeQxjBueo0lQLOKr5vIjgdX0LjWx2/dbdT+Fi6eiAPfI69Lg9vMX bxw= -----END CERTIFICATE-----Generated at Mon Sep 21 04:14:48 2026 by rpki-client