$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed.cer File: 059070b9-988b-4e46-aae7-946425c3b9ed.cer (raw, json) Hash identifier: UQ5mtcvc/7zRSEcBGnk31fH2NsT/MHm2kM56RsPze70= Subject key identifier: 26:CA:93:45:E9:38:1B:C0:02:94:C1:C0:A6:DE:BA:13:FD:F5:30:D0 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F3B75A5C303E087B2625F7440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/059070b9-988b-4e46-aae7-946425c3b9ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 00:45:11 +0000 Certificate not after: Sat 23 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 5071 IP: 204.244.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:75:a5:c3:03:e0:87:b2:62:5f:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 20 00:45:11 2026 GMT Not After : Dec 23 01:45:11 2028 GMT Subject: CN=059070b9-988b-4e46-aae7-946425c3b9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:5f:e2:2a:4e:07:b4:a6:8b:6b:d1:b2:64: 0e:82:0a:54:7c:62:7a:43:5f:39:b4:24:13:ca:97: 8e:35:f5:29:3f:f8:da:51:5d:32:a1:f3:66:78:28: 6a:b2:52:ba:3c:0a:16:ae:21:d2:a0:5f:af:da:d2: b3:18:d8:29:42:3e:73:64:cf:4d:77:0c:23:86:61: 0b:c3:9f:6c:33:e7:87:b0:9f:fa:34:7d:fa:2c:9c: c9:2f:47:b5:d3:e5:9d:0b:ea:fc:93:69:cb:48:e4: 1c:66:3d:76:d9:5d:a1:da:f5:7d:99:7d:e9:cb:58: c9:dd:fc:74:db:1d:d5:6d:e4:62:0e:50:04:d9:c4: 6d:3f:2a:74:11:c9:8e:b5:c6:f1:8a:61:97:94:96: b8:4d:38:3b:03:38:bd:1a:6d:86:14:a6:6b:82:14: 1e:d6:73:03:1e:e7:4d:0c:4a:c2:d0:0b:57:0a:d1: d0:44:91:2f:d9:7b:e9:f4:c0:42:21:34:c8:4f:ad: 01:21:4b:c7:b4:d8:65:f9:a9:19:46:4c:d3:09:9c: cd:1e:2c:7d:d4:27:a6:b6:ec:e9:2b:86:81:a8:a5: 02:a6:08:09:87:a5:1c:30:54:de:68:72:4f:38:b3: 0c:51:cd:2e:03:95:0a:2c:32:6a:a2:ea:f5:d2:95: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:93:45:E9:38:1B:C0:02:94:C1:C0:A6:DE:BA:13:FD:F5:30:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/059070b9-988b-4e46-aae7-946425c3b9ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.244.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e0:d5:a3:58:2b:c6:d1:24:c1:29:41:18:c1:88:60:96:52: d9:27:a0:1b:f2:0c:0b:3a:49:1f:e8:0f:ce:11:72:08:03:81: 60:ba:94:0f:1a:5a:12:8c:c3:0c:b8:3d:32:c1:09:b1:91:df: ca:23:44:96:60:c7:b8:89:a2:11:3b:5b:c0:ff:37:50:8e:ba: 11:b8:8c:11:21:c5:fa:5c:98:43:13:34:b2:f6:37:0e:8c:03: 27:75:1d:bc:9a:67:f3:34:28:5c:85:84:62:df:a4:08:cc:13: 52:e9:a5:a9:24:ed:8e:ba:be:2b:44:d2:c7:73:45:9e:99:23: 1b:bd:8b:b3:1d:dc:c1:28:d1:f5:0b:f2:24:7f:9e:d1:e1:a5: 39:29:be:81:e6:50:8d:ad:58:c3:96:d2:d3:e1:6e:91:5c:6f: 76:ac:fd:e8:c8:d4:3d:63:df:52:db:20:9d:0c:84:69:b1:33: 35:41:c3:69:25:6c:32:dc:41:72:eb:97:28:88:ba:67:3f:37: 76:47:e1:bd:8c:40:07:e9:58:aa:a3:03:08:4a:97:27:1d:bf: 5a:cc:75:44:6e:7a:49:87:e0:79:8e:f9:aa:f8:b5:4d:f8:00: 6f:ce:13:d0:cd:48:1f:9f:ea:06:23:a7:7b:a6:53:d5:8a:5b: 01:98:f9:20 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE87daXDA+CHsmJfdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyMDAwNDUxMVoXDTI4MTIyMzAxNDUxMVowLzEtMCsGA1UEAxMk MDU5MDcwYjktOTg4Yi00ZTQ2LWFhZTctOTQ2NDI1YzNiOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnBf4ipOB7Smi2vRsmQOggpUfGJ6Q185tCQT ypeONfUpP/jaUV0yofNmeChqslK6PAoWriHSoF+v2tKzGNgpQj5zZM9NdwwjhmEL w59sM+eHsJ/6NH36LJzJL0e10+WdC+r8k2nLSOQcZj122V2h2vV9mX3py1jJ3fx0 2x3VbeRiDlAE2cRtPyp0EcmOtcbximGXlJa4TTg7Azi9Gm2GFKZrghQe1nMDHudN DErC0AtXCtHQRJEv2Xvp9MBCITTIT60BIUvHtNhl+akZRkzTCZzNHix91Cemtuzp K4aBqKUCpggJh6UcMFTeaHJPOLMMUc0uA5UKLDJqour10pX8BwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFCbKk0XpOBvAApTBwKbeuhP99TDQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NTkwNzBiOS05ODhiLTRlNDYtYWFlNy05NDY0MjVjM2I5ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA1OTA3MGI5LTk4OGItNGU0Ni1h YWU3LTk0NjQyNWMzYjllZC8wNTkwNzBiOS05ODhiLTRlNDYtYWFlNy05NDY0MjVj M2I5ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwDM9DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIT zzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB54NWjWCvG0STBKUEYwYhgllLZJ6Ab8gwLOkkf6A/OEXIIA4Fg upQPGloSjMMMuD0ywQmxkd/KI0SWYMe4iaIRO1vA/zdQjroRuIwRIcX6XJhDEzSy 9jcOjAMndR28mmfzNChchYRi36QIzBNS6aWpJO2Our4rRNLHc0WemSMbvYuzHdzB KNH1C/Ikf57R4aU5Kb6B5lCNrVjDltLT4W6RXG92rP3oyNQ9Y99S2yCdDIRpsTM1 QcNpJWwy3EFy65coiLpnPzd2R+G9jEAH6ViqowMISpcnHb9azHVEbnpJh+B5jvmq +LVN+ABvzhPQzUgfn+oGI6d7plPVilsBmPkg -----END CERTIFICATE-----Generated at Tue Sep 22 18:51:16 2026 by rpki-client