$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer File: ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer (raw, json) Hash identifier: cXqYxbpj4B4wP99PgeonaW7e5NxiRWhB3T6e9QmWMvg= Subject key identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F5BEFD7AD330446CB98859580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 15:57:16 +0000 Certificate not after: Tue 05 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 54429 IP: 23.146.168.0/24 IP: 207.229.86.0/23 IP: 2602:fd94::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:ef:d7:ad:33:04:46:cb:98:85:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 1 15:57:16 2026 GMT Not After : Sep 5 08:45:11 2028 GMT Subject: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:72:34:97:de:80:f0:58:35:2c:81:ea:ef: a6:d9:4c:21:7a:23:d3:a4:e2:63:c4:f5:f1:1f:17: 6f:b1:3f:7b:1b:aa:58:87:ce:1f:db:c1:56:d8:2a: 9b:a2:f8:16:4f:46:23:5e:14:8f:5a:29:9e:58:24: eb:15:ca:65:98:fb:0a:33:bd:88:1d:45:7a:53:5e: 4c:fc:9a:d6:3c:1c:28:3e:6c:a8:5f:0b:19:d0:34: 1d:2c:10:c8:15:a3:10:73:cb:1c:5c:71:59:be:71: 0e:75:a2:fe:b6:3e:b3:3b:3a:7c:3a:25:31:3c:68: c7:66:3d:f4:e1:1b:ab:2f:54:ac:0b:63:ae:03:41: aa:c2:03:cb:a8:e3:0a:58:b4:74:fb:13:04:0c:f6: 6f:39:ac:17:fc:37:cf:02:0e:e1:d8:60:09:51:be: 2c:ca:f4:f1:01:ac:97:59:93:10:0b:2d:de:d2:2f: ca:66:5e:79:9c:08:7d:a2:3f:79:dc:0a:54:a8:ca: ce:0c:df:51:88:c3:1e:02:b3:a2:b4:c3:7f:50:83: f0:cd:da:31:2b:ff:60:ab:ff:e9:03:2b:24:5a:23: ad:e9:d2:1a:3f:75:83:e2:46:23:2e:bd:10:7e:69: d0:43:95:bb:c5:74:a0:3c:8e:6b:c4:0e:48:f2:ec: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.168.0/24 207.229.86.0/23 IPv6: 2602:fd94::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54429 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:47:38:d9:0c:f3:89:ac:30:ce:a1:69:cb:6b:06:0c:25:3d: 32:9b:d7:5a:00:05:c4:c3:06:8a:b6:66:2a:79:f2:da:51:5a: 9a:b6:45:a2:ac:f5:4e:70:2d:bf:60:c2:7b:78:60:7e:4e:c0: 1b:64:f4:91:b9:b5:0e:d2:0d:56:5f:16:a9:51:f8:59:6d:27: 82:50:5f:69:16:d8:51:d3:90:0b:a8:6b:f3:0e:6b:e6:ab:26: ea:77:88:a1:a1:28:78:7c:43:b2:1a:8b:d5:12:00:22:ef:5f: 5a:92:d9:84:26:a7:51:64:aa:61:2a:1f:14:71:7b:a9:72:9c: f4:aa:27:7d:6b:65:23:b5:71:c9:e4:cd:26:46:cf:26:f9:1a: 7d:45:21:3e:28:42:08:ff:e9:07:77:2a:17:5b:a4:ec:f6:6d: ff:9a:61:4a:7a:f7:1b:95:6e:d7:8b:b9:e1:8a:8e:a5:29:33: bd:f0:4c:a0:d6:fc:57:fe:13:60:5e:20:1d:ed:7a:03:48:fd: f9:69:78:cf:ab:7a:85:4a:d1:0d:84:34:2a:85:e2:13:b6:09: 1d:b6:fa:56:8e:56:1f:dc:83:e4:61:96:c2:e4:fc:c2:d2:7f: d2:4a:36:83:65:96:53:8d:b9:5b:82:57:31:f7:12:d7:4e:71: 60:28:6e:8a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9b79etMwRGy5iFlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MTAwMTE1NTcxNloXDTI4MDkwNTA4NDUxMVowLzEtMCsGA1UEAxMk ZWEwMjI1MTQtZWE5ZS00Y2ViLTlkMWItOTc2OGJlZTM2YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AFyNJfegPBYNSyB6u+m2UwheiPTpOJjxPXx HxdvsT97G6pYh84f28FW2CqbovgWT0YjXhSPWimeWCTrFcplmPsKM72IHUV6U15M /JrWPBwoPmyoXwsZ0DQdLBDIFaMQc8scXHFZvnEOdaL+tj6zOzp8OiUxPGjHZj30 4RurL1SsC2OuA0GqwgPLqOMKWLR0+xMEDPZvOawX/DfPAg7h2GAJUb4syvTxAayX WZMQCy3e0i/KZl55nAh9oj953ApUqMrODN9RiMMeArOitMN/UIPwzdoxK/9gq//p AyskWiOt6dIaP3WD4kYjLr0QfmnQQ5W7xXSgPI5rxA5I8uzOSQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFChAwgHQduXh+fc0KzI3WOPce9h9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l YTAyMjUxNC1lYTllLTRjZWItOWQxYi05NzY4YmVlMzZhNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2VhMDIyNTE0LWVhOWUtNGNlYi05 ZDFiLTk3NjhiZWUzNmE0Zi9lYTAyMjUxNC1lYTllLTRjZWItOWQxYi05NzY4YmVl MzZhNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkqgDBAHP5VYwDgQCAAIwCAMGBCYC/ZQAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDUnTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhRzjZDPOJrDDOoWnL awYMJT0ym9daAAXEwwaKtmYqefLaUVqatkWirPVOcC2/YMJ7eGB+TsAbZPSRubUO 0g1WXxapUfhZbSeCUF9pFthR05ALqGvzDmvmqybqd4ihoSh4fEOyGovVEgAi719a ktmEJqdRZKphKh8UcXupcpz0qid9a2UjtXHJ5M0mRs8m+Rp9RSE+KEII/+kHdyoX W6Ts9m3/mmFKevcblW7Xi7nhio6lKTO98Eyg1vxX/hNgXiAd7XoDSP35aXjPq3qF StENhDQqheITtgkdtvpWjlYf3IPkYZbC5PzC0n/SSjaDZZZTjblbglcx9xLXTnFg KG6K -----END CERTIFICATE-----Generated at Thu Nov 5 19:49:28 2026 by rpki-client