$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer File: ced1e153-6559-46ef-8f8b-ee841a2a0188.cer (raw, json) Hash identifier: vOoEcwgk5yOUBPhTTOGE5PVW2yg4eEAspOiNE8LokV0= Subject key identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F82A618D0119214047DE5DD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 12:45:12 +0000 Certificate not after: Wed 17 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 394889 IP: 199.48.172.0/22 IP: 2620:135:a000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:a6:18:d0:11:92:14:04:7d:e5:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 15 12:45:12 2026 GMT Not After : Jan 17 13:45:12 2029 GMT Subject: CN=ced1e153-6559-46ef-8f8b-ee841a2a0188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:e7:77:e3:7f:bb:46:90:b3:13:87:f7:77: b0:e6:8d:e2:e2:16:a5:1b:74:48:90:d3:01:50:8b: c6:8c:41:bf:f7:02:8c:fc:26:2f:e0:48:66:0c:f3: e0:ba:c6:2a:66:8f:7e:ab:13:57:3c:b8:c0:dc:e2: 7c:88:00:4c:76:00:df:fa:b2:0f:bf:a1:03:f8:1a: 62:86:df:7c:a4:d0:cc:67:65:aa:94:18:19:70:dd: 83:24:b8:90:aa:d5:91:cc:c5:07:1b:e1:52:95:72: 06:2a:93:a5:30:b5:32:5b:52:75:88:a9:21:5f:a1: e8:07:b0:af:4e:51:70:72:3e:62:03:5c:9d:21:90: 61:bc:31:c0:18:67:03:90:34:30:7b:e9:0c:2d:01: a3:fd:63:5c:6e:fc:69:36:4d:81:a1:39:93:57:42: 45:09:cf:6b:d2:45:de:cc:27:0f:54:eb:e7:d9:a4: d8:36:c1:2c:4f:34:83:7d:9b:80:c9:9b:62:b2:91: 35:d8:5b:46:79:82:c5:02:5a:56:22:1b:97:41:47: b1:af:7d:b8:3f:2a:00:9a:55:49:fc:65:1c:09:e0: 46:0a:73:5e:36:33:db:a1:1e:a5:a8:75:19:6b:8a: 43:ac:ad:ef:ef:4f:b8:eb:7f:69:dd:4a:f5:ba:9c: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.48.172.0/22 IPv6: 2620:135:a000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394889 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:33:44:15:20:df:59:d6:00:b1:2c:50:bc:51:67:86:3d:66: cc:49:70:01:af:53:b6:ed:30:cc:26:2d:4f:5e:ad:61:f2:39: 76:24:12:61:23:37:5d:c9:63:59:4b:fc:a5:2b:48:cb:21:68: 7f:e9:cb:12:ff:35:c2:47:dc:e1:91:7b:d6:8d:6e:18:71:33: 96:f4:02:a1:87:5a:11:91:c8:3d:bb:82:41:e9:db:d1:aa:2a: 9a:f0:a4:a1:c9:3e:9c:db:26:67:c7:50:1e:a5:97:2a:dd:30: c5:fc:af:48:30:ee:a0:bc:d7:0b:c1:d6:bd:49:8c:71:4f:13: f0:d5:fa:b4:79:24:20:3b:b1:f0:4c:b3:11:c5:2b:d1:74:57: f3:37:e9:bd:65:27:2f:89:ef:bd:a6:35:20:42:33:6f:41:6f: d7:70:9f:44:87:c2:00:86:15:f2:63:0d:ef:4a:cb:23:0e:0a: f0:af:6f:7f:a0:f3:2e:97:d9:6f:9e:5f:0d:04:65:6d:b0:c3: 3b:74:5f:21:21:98:3a:f8:0a:15:b8:33:c4:a5:0b:1c:b5:1c: 12:90:73:ce:3d:c8:55:88:ca:08:9c:ee:d2:ff:1b:d8:2f:1e: ed:45:6c:64:9c:40:ee:79:06:34:98:a8:99:74:9b:58:fd:74: 1d:c2:0c:e6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+CphjQEZIUBH3l3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MTAxNTEyNDUxMloXDTI5MDExNzEzNDUxMlowLzEtMCsGA1UEAxMk Y2VkMWUxNTMtNjU1OS00NmVmLThmOGItZWU4NDFhMmEwMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnjnd+N/u0aQsxOH93ew5o3i4halG3RIkNMB UIvGjEG/9wKM/CYv4EhmDPPgusYqZo9+qxNXPLjA3OJ8iABMdgDf+rIPv6ED+Bpi ht98pNDMZ2WqlBgZcN2DJLiQqtWRzMUHG+FSlXIGKpOlMLUyW1J1iKkhX6HoB7Cv TlFwcj5iA1ydIZBhvDHAGGcDkDQwe+kMLQGj/WNcbvxpNk2BoTmTV0JFCc9r0kXe zCcPVOvn2aTYNsEsTzSDfZuAyZtispE12FtGeYLFAlpWIhuXQUexr324PyoAmlVJ /GUcCeBGCnNeNjPboR6lqHUZa4pDrK3v70+4639p3Ur1upwdhwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFF8rsg5qxWPr82ZoGsZk8O07pFpLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j ZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEyYTAxODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NlZDFlMTUzLTY1NTktNDZlZi04 ZjhiLWVlODQxYTJhMDE4OC9jZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEy YTAxODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHMKwwDgQCAAIwCAMGACYgATWgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9M0QVIN9Z1gCxLFC8UWeGPWbM SXABr1O27TDMJi1PXq1h8jl2JBJhIzddyWNZS/ylK0jLIWh/6csS/zXCR9zhkXvW jW4YcTOW9AKhh1oRkcg9u4JB6dvRqiqa8KShyT6c2yZnx1AepZcq3TDF/K9IMO6g vNcLwda9SYxxTxPw1fq0eSQgO7HwTLMRxSvRdFfzN+m9ZScvie+9pjUgQjNvQW/X cJ9Eh8IAhhXyYw3vSssjDgrwr29/oPMul9lvnl8NBGVtsMM7dF8hIZg6+AoVuDPE pQsctRwSkHPOPchViMoInO7S/xvYLx7tRWxknEDueQY0mKiZdJtY/XQdwgzm -----END CERTIFICATE-----Generated at Thu Nov 5 07:15:24 2026 by rpki-client