$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer File: 1c636f45-fa6a-4556-b6ee-5189124d0893.cer (raw, json) Hash identifier: QyCDFDjMPXOFws6H8siUW7bvb5AdExc8c5fweS9I7Cg= Subject key identifier: 72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1CC021299C103F0F4A440B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 00:45:12 +0000 Certificate not after: Tue 12 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 13327 IP: 157.89.0.0/16 IP: 2605:aa00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c0:21:29:9c:10:3f:0f:4a:44:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 00:45:12 2026 GMT Not After : Dec 12 01:45:12 2028 GMT Subject: CN=1c636f45-fa6a-4556-b6ee-5189124d0893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:75:0f:bf:c9:e0:29:7e:36:02:db:61:23: 5b:d6:22:18:ba:b8:85:65:69:1d:d4:db:9c:7b:c5: 62:cf:7e:74:1d:c4:3b:57:2e:3d:3c:ca:5b:01:00: 99:d7:28:1c:b6:2b:34:26:55:20:7a:82:28:dd:e3: e2:5a:93:3d:38:d8:5c:b6:77:43:08:5f:e9:01:9c: cf:7a:d1:d0:36:fb:7b:09:41:21:25:6a:97:02:30: 02:78:9a:9b:15:ea:e6:bc:1b:19:b6:f9:92:20:8c: f5:d2:23:50:d9:35:62:b3:6e:34:e6:1e:01:07:45: 72:13:81:13:a9:35:c3:e4:54:b6:e9:54:5a:41:ab: d7:3c:7e:ea:0d:e3:ae:f3:3c:d0:1f:a8:21:8b:6f: 07:e9:86:de:f0:9b:dd:ce:9c:39:e0:6e:fc:74:3c: c1:b6:f2:64:8f:ad:3a:78:98:a6:c8:5d:ea:39:75: b5:a3:3d:e4:58:6c:44:15:95:a2:6e:71:4b:e8:25: be:60:eb:76:57:41:d1:71:aa:72:55:dd:e3:88:75: 5e:8b:bf:f7:ff:c2:3b:ab:2e:fb:72:79:45:2d:cf: 61:05:c7:51:3c:fd:cd:44:da:02:90:4c:d1:b2:a9: bd:51:f6:af:0a:7e:e3:d4:9a:ff:c2:ad:d0:de:61: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 157.89.0.0/16 IPv6: 2605:aa00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13327 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c4:cb:65:95:63:46:97:b2:20:5a:ea:47:92:b0:33:e2:1b: 8e:09:6d:d8:2f:37:17:59:a1:0c:e6:08:e6:a9:3c:9d:b6:9d: 6f:36:ad:9a:9f:13:0a:a3:5f:20:18:1c:33:b3:0a:84:04:e2: 31:e6:07:59:30:ef:28:29:e6:b6:c8:71:4d:e3:4e:11:f2:2a: cb:a8:51:f7:ef:a0:8a:30:51:5c:8c:37:69:6d:0b:4f:1c:cc: 60:f7:df:0e:0b:a4:93:5e:f4:51:65:e4:e8:37:e0:ec:f7:ce: a2:66:8b:79:97:35:4a:7b:fc:22:4c:8b:1c:fb:38:4c:ec:20: c6:0d:d6:f8:48:dc:6b:da:9b:ba:44:5e:ca:e2:86:01:aa:cf: 5e:7a:c6:a9:90:36:f5:59:dd:1a:cc:9e:c0:de:ed:db:11:48: a7:6b:fb:50:5b:e8:2e:71:ab:15:5c:30:bc:2b:1a:c5:17:94: 5a:32:3e:58:9c:07:f6:9b:eb:ce:55:30:89:c0:9c:0d:bc:f3: 7b:53:58:61:bd:92:1a:f7:00:67:34:5c:88:8f:6e:8e:e0:0d: 00:8d:7e:20:68:58:42:46:07:79:01:2a:bd:4f:ad:32:85:67: be:59:af:60:ac:c3:38:ee:d3:77:38:d5:83:bc:44:01:81:1b: 91:52:e7:7d -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWE8cwCEpnBA/D0pECwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTAwNDUxMloXDTI4MTIxMjAxNDUxMlowLzEtMCsGA1UEAxMk MWM2MzZmNDUtZmE2YS00NTU2LWI2ZWUtNTE4OTEyNGQwODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhll1D7/J4Cl+NgLbYSNb1iIYuriFZWkd1Nuc e8Viz350HcQ7Vy49PMpbAQCZ1ygctis0JlUgeoIo3ePiWpM9ONhctndDCF/pAZzP etHQNvt7CUEhJWqXAjACeJqbFermvBsZtvmSIIz10iNQ2TVis2405h4BB0VyE4ET qTXD5FS26VRaQavXPH7qDeOu8zzQH6ghi28H6Ybe8Jvdzpw54G78dDzBtvJkj606 eJimyF3qOXW1oz3kWGxEFZWibnFL6CW+YOt2V0HRcapyVd3jiHVei7/3/8I7qy77 cnlFLc9hBcdRPP3NRNoCkEzRsqm9UfavCn7j1Jr/wq3Q3mHPlwIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFHJ6350vK9RQwalkwxEOkBSIcbj/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x YzYzNmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5MTI0ZDA4OTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFjNjM2ZjQ1LWZhNmEtNDU1Ni1i NmVlLTUxODkxMjRkMDg5My8xYzYzNmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5MTI0 ZDA4OTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwCdWTANBAIAAjAHAwUAJgWqADAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgI0DzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGxMtllWNGl7IgWupHkrAz4huOCW3Y LzcXWaEM5gjmqTydtp1vNq2anxMKo18gGBwzswqEBOIx5gdZMO8oKea2yHFN404R 8irLqFH376CKMFFcjDdpbQtPHMxg998OC6STXvRRZeToN+Ds986iZot5lzVKe/wi TIsc+zhM7CDGDdb4SNxr2pu6RF7K4oYBqs9eesapkDb1Wd0azJ7A3u3bEUina/tQ W+gucasVXDC8KxrFF5RaMj5YnAf2m+vOVTCJwJwNvPN7U1hhvZIa9wBnNFyIj26O 4A0AjX4gaFhCRgd5ASq9T60yhWe+Wa9grMM47tN3ONWDvEQBgRuRUud9 -----END CERTIFICATE-----Generated at Sun Sep 20 12:53:49 2026 by rpki-client