$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06378056-2aef-4e2b-9ad0-c783f4f4a52a.cer File: 06378056-2aef-4e2b-9ad0-c783f4f4a52a.cer (raw, json) Hash identifier: b6pRpnj98f5Vel8tjIdgFfcxjbvaVCiYRYYYXUK7Nhs= Subject key identifier: 9F:10:F4:55:8A:AD:A4:F2:EA:A7:56:85:1B:2B:D4:53:18:58:3A:50 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1F8ACF0FC7E154389707BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06378056-2aef-4e2b-9ad0-c783f4f4a52a/06378056-2aef-4e2b-9ad0-c783f4f4a52a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06378056-2aef-4e2b-9ad0-c783f4f4a52a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Sep 2026 00:45:11 +0000 Certificate not after: Wed 13 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 396517 IP: 198.21.82.0/23 IP: 198.140.216.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:8a:cf:0f:c7:e1:54:38:97:07:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 10 00:45:11 2026 GMT Not After : Dec 13 01:45:11 2028 GMT Subject: CN=06378056-2aef-4e2b-9ad0-c783f4f4a52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:02:63:85:69:b5:fe:86:ff:b9:a5:bd:8a: f0:02:b6:41:1d:84:a9:df:8a:35:d5:6f:fd:a1:5b: 94:ab:19:b9:9d:09:b3:26:27:72:44:e7:f8:ec:fa: 48:57:c1:36:d7:c7:4b:c7:13:ae:4b:b2:c1:5a:5e: f2:f1:a3:08:c2:8a:ef:b9:d0:c7:24:4e:d5:12:ae: a1:32:d5:37:f2:63:02:e4:45:8c:6f:b3:10:d2:98: 62:fe:43:8f:b4:dc:e3:75:be:ce:c6:4c:66:0a:8f: 48:1d:dc:9e:bf:71:bf:8b:1b:a9:0b:c0:5a:8c:b0: ce:c2:b2:49:4d:8b:98:a2:2a:3a:b8:8c:b0:88:de: 67:55:69:30:ae:a0:89:f1:20:35:08:28:74:ad:35: 3c:a7:55:27:01:41:b6:79:a3:12:40:5b:cd:90:8d: 2c:96:5f:bc:52:bf:e7:79:9d:3b:e4:ab:c4:c2:1d: 87:62:1e:14:ef:48:47:d6:0b:22:79:a6:c9:3e:07: b2:1b:b3:08:56:9e:6a:d9:bc:77:70:4b:81:44:1b: 09:92:95:54:41:09:f0:eb:c0:12:de:41:5d:99:47: 55:b1:50:2d:8d:38:7f:f5:f7:9d:07:07:d3:27:7b: 9f:7f:e4:61:7f:3e:93:37:d2:fc:37:f5:f4:75:8b: 90:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:10:F4:55:8A:AD:A4:F2:EA:A7:56:85:1B:2B:D4:53:18:58:3A:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06378056-2aef-4e2b-9ad0-c783f4f4a52a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06378056-2aef-4e2b-9ad0-c783f4f4a52a/06378056-2aef-4e2b-9ad0-c783f4f4a52a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.21.82.0/23 198.140.216.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396517 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:42:b4:89:b2:a9:d6:1d:cb:c3:49:f0:f7:a5:76:cf:44:aa: e3:53:be:1a:19:f2:c1:53:a3:ab:08:0f:ec:68:e8:dd:e7:9b: 6c:aa:04:8e:ab:3c:fa:9c:70:0c:1f:02:0c:2e:32:05:2a:8d: f5:2f:62:24:c5:1a:72:89:a3:fb:6a:d6:ef:53:a7:3a:0d:87: 00:53:06:0f:ab:d7:be:3f:f4:3d:60:ec:ea:e8:70:62:32:79: 34:ed:e9:a9:53:98:61:2b:a8:5a:bc:ac:bc:5e:f9:32:c0:76: 68:2f:56:5c:07:a1:9a:8a:a1:51:18:b1:1c:9a:91:e5:04:62: fd:ad:95:b1:4a:ca:94:c0:f6:f5:55:ed:c6:dc:16:4c:c0:a1: bb:0b:d8:e2:6f:ed:9b:91:59:6b:fb:ef:d9:9f:59:e4:ab:b4: eb:b7:0c:60:85:39:f7:62:e4:09:16:cd:ce:7f:ef:db:8b:fb: 60:fb:f5:4a:4d:14:a6:cb:c0:6d:5d:14:fd:c5:7c:8a:a4:e7: 25:54:1c:91:44:db:11:f6:c6:35:7b:06:82:5b:46:7c:cd:b3: 07:6e:2b:6d:f4:ff:e4:83:5e:f6:31:fe:e9:9d:13:5c:50:96: 6f:4b:6e:38:a7:69:3f:e7:12:8e:b4:3f:4a:c9:00:01:04:cf: e5:f6:4d:47 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE8fis8Px+FUOJcHvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxMDAwNDUxMVoXDTI4MTIxMzAxNDUxMVowLzEtMCsGA1UEAxMk MDYzNzgwNTYtMmFlZi00ZTJiLTlhZDAtYzc4M2Y0ZjRhNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSACY4Vptf6G/7mlvYrwArZBHYSp34o11W/9 oVuUqxm5nQmzJidyROf47PpIV8E218dLxxOuS7LBWl7y8aMIworvudDHJE7VEq6h MtU38mMC5EWMb7MQ0phi/kOPtNzjdb7OxkxmCo9IHdyev3G/ixupC8BajLDOwrJJ TYuYoio6uIywiN5nVWkwrqCJ8SA1CCh0rTU8p1UnAUG2eaMSQFvNkI0sll+8Ur/n eZ075KvEwh2HYh4U70hH1gsieabJPgeyG7MIVp5q2bx3cEuBRBsJkpVUQQnw68AS 3kFdmUdVsVAtjTh/9fedBwfTJ3uff+Rhfz6TN9L8N/X0dYuQqQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFJ8Q9FWKraTy6qdWhRsr1FMYWDpQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NjM3ODA1Ni0yYWVmLTRlMmItOWFkMC1jNzgzZjRmNGE1MmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA2Mzc4MDU2LTJhZWYtNGUyYi05 YWQwLWM3ODNmNGY0YTUyYS8wNjM3ODA1Ni0yYWVmLTRlMmItOWFkMC1jNzgzZjRm NGE1MmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHGFVIDBADGjNgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgzlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGdCtImyqdYdy8NJ8Pelds9EquNTvhoZ8sFTo6sI D+xo6N3nm2yqBI6rPPqccAwfAgwuMgUqjfUvYiTFGnKJo/tq1u9TpzoNhwBTBg+r 174/9D1g7OrocGIyeTTt6alTmGErqFq8rLxe+TLAdmgvVlwHoZqKoVEYsRyakeUE Yv2tlbFKypTA9vVV7cbcFkzAobsL2OJv7ZuRWWv779mfWeSrtOu3DGCFOfdi5AkW zc5/79uL+2D79UpNFKbLwG1dFP3FfIqk5yVUHJFE2xH2xjV7BoJbRnzNswduK230 /+SDXvYx/umdE1xQlm9LbjinaT/nEo60P0rJAAEEz+X2TUc= -----END CERTIFICATE-----Generated at Mon Sep 21 13:32:18 2026 by rpki-client