$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0476c81c-daaa-4493-950e-ecd37b68568e.cer File: 0476c81c-daaa-4493-950e-ecd37b68568e.cer (raw, json) Hash identifier: y+Xm3nfpj4vLOyueK8ukwVXaOs5H94f1dvzts397yd8= Subject key identifier: 3F:1B:FB:7F:FD:75:CD:E2:8E:6D:53:44:FD:68:BA:D5:4E:03:D0:09 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1E3490D7BF56F7D7C1048200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0476c81c-daaa-4493-950e-ecd37b68568e/0476c81c-daaa-4493-950e-ecd37b68568e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0476c81c-daaa-4493-950e-ecd37b68568e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 13:15:37 +0000 Certificate not after: Tue 12 Dec 2028 14:15:37 +0000 Subordinate resources: IP: 167.68.0.0/16 IP: 192.152.160.0/24 IP: 192.189.224.0/24 IP: 192.189.226.0/24 IP: 192.251.4.0 -- 192.251.6.255 IP: 198.176.133.0/24 IP: 198.179.136.0 -- 198.179.138.255 IP: 199.248.238.0/24 IP: 204.17.228.0/24 IP: 204.154.88.0 -- 204.154.93.255 IP: 2620:23:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:34:90:d7:bf:56:f7:d7:c1:04:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 13:15:37 2026 GMT Not After : Dec 12 14:15:37 2028 GMT Subject: CN=0476c81c-daaa-4493-950e-ecd37b68568e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:fa:34:27:eb:4e:6e:26:71:d1:0c:29:95: e0:1b:42:8f:06:12:62:93:40:c0:d2:54:62:42:fa: 4f:7e:4a:c1:78:a7:77:b4:96:a1:cd:a4:ab:f9:44: fb:5f:0e:24:75:d6:ed:9f:0f:ab:e0:53:c1:bf:db: 40:63:81:c7:89:7e:d7:07:7f:ef:bc:9d:c7:e4:10: a2:52:d6:46:78:09:43:80:d2:6f:3c:f0:d0:37:a0: 51:e0:e2:f4:f6:7f:39:1f:a7:28:00:4d:7d:12:e8: ea:fd:f3:74:8d:82:9e:e2:46:c7:20:cd:dc:23:63: 19:a7:51:1d:2c:a6:96:89:52:48:7e:ea:d9:f7:be: 0b:12:60:87:9e:46:70:8c:94:2c:48:6c:5d:70:96: c6:49:f2:8b:f3:95:45:15:90:79:62:32:85:a5:1c: f3:a4:ee:1f:76:be:18:ed:74:6c:04:a5:d1:88:7b: f4:fb:c1:e2:03:4b:97:4d:57:bd:df:26:bd:07:0f: f7:f5:3f:15:c1:a8:4d:36:d6:ed:a8:33:b1:00:db: 33:7c:e4:17:a9:98:0d:a2:ae:e9:58:27:64:4a:b3: c5:89:1a:34:e7:33:ad:bb:bb:e7:59:d7:ec:f6:ba: 69:f5:b3:0a:f2:26:19:63:b6:8e:5e:68:51:c9:48: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:FB:7F:FD:75:CD:E2:8E:6D:53:44:FD:68:BA:D5:4E:03:D0:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0476c81c-daaa-4493-950e-ecd37b68568e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0476c81c-daaa-4493-950e-ecd37b68568e/0476c81c-daaa-4493-950e-ecd37b68568e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 167.68.0.0/16 192.152.160.0/24 192.189.224.0/24 192.189.226.0/24 192.251.4.0-192.251.6.255 198.176.133.0/24 198.179.136.0-198.179.138.255 199.248.238.0/24 204.17.228.0/24 204.154.88.0-204.154.93.255 IPv6: 2620:23:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:52:ba:27:58:84:78:a7:ca:14:c2:29:77:5a:9f:8f:05:cd: fa:a0:37:39:28:64:b7:96:37:48:7f:10:51:81:d5:65:c5:cc: 6b:dc:ea:1a:f4:ce:a3:ca:24:dd:b4:52:d1:73:93:6c:c7:37: 24:f1:a2:18:05:c6:00:66:59:93:62:1c:84:cf:55:74:bd:15: f7:41:3c:3c:6b:e6:41:76:10:05:21:23:48:30:f8:96:67:74: 43:b3:20:25:5d:13:b3:7b:e5:e2:eb:97:1c:2d:64:fd:ec:a2: f0:cf:4b:d8:09:6b:9a:e5:5a:b6:f5:57:81:0f:b6:b7:fe:bb: 5f:57:f0:34:f3:b3:51:f1:61:1b:62:5c:06:e6:cd:4c:89:cc: 39:8c:52:3d:31:d6:d6:24:5d:16:72:17:1c:e5:ab:67:7e:8c: 4a:9b:06:b3:f8:ca:4a:b0:da:c9:d8:37:40:d6:70:e3:2d:34: 84:a0:62:29:de:f4:66:d9:62:98:34:9a:16:55:1c:e7:0b:ae: da:ee:aa:57:ba:ed:db:d3:d2:0b:e3:28:46:e6:2e:6b:7f:62: 60:86:b5:73:66:12:d7:71:dc:19:05:95:ee:8c:26:8e:aa:af: 95:da:ed:72:2d:12:6c:3e:45:87:f1:c2:36:30:f3:76:d6:ca: 9b:17:3e:23 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUAQ0Mn0MoWE8eNJDXv1b318EEggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTEzMTUzN1oXDTI4MTIxMjE0MTUzN1owLzEtMCsGA1UEAxMk MDQ3NmM4MWMtZGFhYS00NDkzLTk1MGUtZWNkMzdiNjg1NjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFj6NCfrTm4mcdEMKZXgG0KPBhJik0DA0lRi QvpPfkrBeKd3tJahzaSr+UT7Xw4kddbtnw+r4FPBv9tAY4HHiX7XB3/vvJ3H5BCi UtZGeAlDgNJvPPDQN6BR4OL09n85H6coAE19Eujq/fN0jYKe4kbHIM3cI2MZp1Ed LKaWiVJIfurZ974LEmCHnkZwjJQsSGxdcJbGSfKL85VFFZB5YjKFpRzzpO4fdr4Y 7XRsBKXRiHv0+8HiA0uXTVe93ya9Bw/39T8VwahNNtbtqDOxANszfOQXqZgNoq7p WCdkSrPFiRo05zOtu7vnWdfs9rpp9bMK8iYZY7aOXmhRyUjW+QIDAQABo4IEXTCC BFkwHQYDVR0OBBYEFD8b+3/9dc3ijm1TRP1outVOA9AJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NDc2YzgxYy1kYWFhLTQ0OTMtOTUwZS1lY2QzN2I2ODU2OGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA0NzZjODFjLWRhYWEtNDQ5My05 NTBlLWVjZDM3YjY4NTY4ZS8wNDc2YzgxYy1kYWFhLTQ0OTMtOTUwZS1lY2QzN2I2 ODU2OGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwfQYIKwYBBQUH AQcBAf8EbjBsMFkEAgABMFMDAwCnRAMEAMCYoAMEAMC94AMEAMC94jAMAwQCwPsE AwQAwPsGAwQAxrCFMAwDBAPGs4gDBADGs4oDBADH+O4DBADMEeQwDAMEA8yaWAME AcyaXDAPBAIAAjAJAwcAJiAAI4AAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAhSuidYhHinyhTCKXdan48F zfqgNzkoZLeWN0h/EFGB1WXFzGvc6hr0zqPKJN20UtFzk2zHNyTxohgFxgBmWZNi HITPVXS9FfdBPDxr5kF2EAUhI0gw+JZndEOzICVdE7N75eLrlxwtZP3sovDPS9gJ a5rlWrb1V4EPtrf+u19X8DTzs1HxYRtiXAbmzUyJzDmMUj0x1tYkXRZyFxzlq2d+ jEqbBrP4ykqw2snYN0DWcOMtNISgYine9GbZYpg0mhZVHOcLrtruqle67dvT0gvj KEbmLmt/YmCGtXNmEtdx3BkFle6MJo6qr5Xa7XItEmw+RYfxwjYw83bWypsXPiM= -----END CERTIFICATE-----Generated at Tue Sep 22 03:28:03 2026 by rpki-client