$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d.cer File: 28dffcde-d6e7-4a0b-afff-14d8307e816d.cer (raw, json) Hash identifier: wZYJi5XjZeW5YKfr2W3USBQcOF9FYuC3j6HSqCxD1p4= Subject key identifier: 8F:13:6A:1F:43:D5:3C:8E:44:E6:C0:3D:1C:E6:3C:6D:EB:41:15:64 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1EB5577CECF8124D235BE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 17:35:05 +0000 Certificate not after: Tue 12 Dec 2028 18:35:05 +0000 Subordinate resources: AS: 11687 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:b5:57:7c:ec:f8:12:4d:23:5b:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 17:35:05 2026 GMT Not After : Dec 12 18:35:05 2028 GMT Subject: CN=28dffcde-d6e7-4a0b-afff-14d8307e816d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:68:87:9e:f3:a8:99:c0:fd:37:e0:1b:c7: 76:7b:7e:1c:ae:fc:6f:6d:65:56:78:ea:4b:8f:b0: cd:a9:6b:b4:88:ab:3e:9f:ee:23:10:13:bb:0e:05: e9:6e:ce:27:6c:e4:30:0a:a4:32:96:1b:60:d0:49: 22:5d:28:ba:7f:cc:be:07:e5:7d:3f:0d:42:41:a5: 4d:ee:6e:93:d2:0b:27:d0:2f:a6:f6:e1:09:b1:4d: 28:dc:b8:f7:98:c0:28:df:9f:fa:71:61:70:10:1f: 1e:29:f0:7d:cd:ac:0a:86:bf:9d:7f:b0:94:5c:cc: f3:49:8e:11:5d:a1:50:2f:4f:64:df:6d:6e:f0:64: bd:9d:e5:fb:d0:f4:46:37:fe:6a:e7:aa:98:51:db: f1:5c:9d:bd:5d:f0:d0:d4:02:44:6f:a0:81:6b:4c: 1c:a2:27:d8:51:4e:e4:38:df:a1:54:56:97:04:80: 8b:4e:34:ac:78:df:0e:b8:bf:28:b7:49:6f:58:33: 1e:b9:a7:5f:19:5a:1c:80:58:21:8d:6b:2c:93:85: cb:6d:8a:b4:b6:eb:16:00:ca:a2:5b:15:ed:f9:80: 64:5c:9c:2b:c5:96:fa:3b:8b:7d:d9:4b:4f:1a:57: bd:9f:30:d6:e8:88:f4:a7:5c:1f:fa:c2:96:a1:92: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:6A:1F:43:D5:3C:8E:44:E6:C0:3D:1C:E6:3C:6D:EB:41:15:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11687 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bb:ca:30:2b:a3:64:6f:ba:9a:4c:5d:a2:72:d3:94:a9:26: 78:52:cf:b4:3a:ea:5c:41:52:e3:27:5d:54:49:16:d3:06:d2: f8:37:d2:04:a4:05:c4:83:38:d5:8d:bd:7c:ac:65:4b:b0:5b: 5c:3a:56:4b:9c:0e:45:af:75:67:4e:1b:07:2f:ce:32:c8:ba: da:44:82:ea:89:50:9c:40:62:0c:7b:60:53:37:a3:43:59:f3: 6f:fe:75:d4:36:4c:76:1e:21:6e:d1:3a:5d:18:1c:92:2b:66: ed:ac:57:b7:29:85:80:04:8d:f1:9d:36:f7:ed:5f:9a:c5:eb: 94:68:3c:15:33:2a:7f:5c:fb:fe:86:68:58:27:7c:88:b2:81: d0:36:9f:21:38:9a:80:31:87:68:21:77:10:3e:da:28:57:23: 3c:c1:fd:4c:58:2f:5c:2d:10:c5:76:e6:b5:a8:2f:a1:71:4d: 76:44:ef:18:3c:55:61:32:5b:67:b7:f9:6d:e3:81:c4:24:ea: 10:14:68:24:ce:72:4e:91:52:d9:bf:3e:ac:5d:3f:51:91:d6: 2b:84:0c:3c:b0:68:22:01:fc:4f:74:2e:47:26:75:3b:17:81: 4a:94:69:a4:16:3f:15:18:e7:68:ba:0e:e1:91:3f:3d:0d:2e: ce:b7:e3:c2 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE8etVd87PgSTSNb4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTE3MzUwNVoXDTI4MTIxMjE4MzUwNVowLzEtMCsGA1UEAxMk MjhkZmZjZGUtZDZlNy00YTBiLWFmZmYtMTRkODMwN2U4MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1oh57zqJnA/TfgG8d2e34crvxvbWVWeOpL j7DNqWu0iKs+n+4jEBO7DgXpbs4nbOQwCqQylhtg0EkiXSi6f8y+B+V9Pw1CQaVN 7m6T0gsn0C+m9uEJsU0o3Lj3mMAo35/6cWFwEB8eKfB9zawKhr+df7CUXMzzSY4R XaFQL09k321u8GS9neX70PRGN/5q56qYUdvxXJ29XfDQ1AJEb6CBa0wcoifYUU7k ON+hVFaXBICLTjSseN8OuL8ot0lvWDMeuadfGVocgFghjWssk4XLbYq0tusWAMqi WxXt+YBkXJwrxZb6O4t92UtPGle9nzDW6Ij0p1wf+sKWoZLnWwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFI8Tah9D1TyORObAPRzmPG3rQRVkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y OGRmZmNkZS1kNmU3LTRhMGItYWZmZi0xNGQ4MzA3ZTgxNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzI4ZGZmY2RlLWQ2ZTctNGEwYi1h ZmZmLTE0ZDgzMDdlODE2ZC8yOGRmZmNkZS1kNmU3LTRhMGItYWZmZi0xNGQ4MzA3 ZTgxNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLacwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgLvKMCujZG+6mkxdonLTlKkmeFLP tDrqXEFS4yddVEkW0wbS+DfSBKQFxIM41Y29fKxlS7BbXDpWS5wORa91Z04bBy/O Msi62kSC6olQnEBiDHtgUzejQ1nzb/511DZMdh4hbtE6XRgckitm7axXtymFgASN 8Z029+1fmsXrlGg8FTMqf1z7/oZoWCd8iLKB0DafITiagDGHaCF3ED7aKFcjPMH9 TFgvXC0QxXbmtagvoXFNdkTvGDxVYTJbZ7f5beOBxCTqEBRoJM5yTpFS2b8+rF0/ UZHWK4QMPLBoIgH8T3QuRyZ1OxeBSpRppBY/FRjnaLoO4ZE/PQ0uzrfjwg== -----END CERTIFICATE-----Generated at Mon Sep 21 11:45:10 2026 by rpki-client