$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f8faebd-eefd-47d6-a7ee-7ca828458da9.cer File: 2f8faebd-eefd-47d6-a7ee-7ca828458da9.cer (raw, json) Hash identifier: B5Q/1TwfSY2/uiGMdbzfi5yRNMzYjTAQk4tQ0ReTBpw= Subject key identifier: DB:04:4C:76:AC:7C:3E:78:A4:C4:FE:52:B8:B9:98:22:BF:49:72:9C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1E4DE6E9B9642BB889F61980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f8faebd-eefd-47d6-a7ee-7ca828458da9/2f8faebd-eefd-47d6-a7ee-7ca828458da9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f8faebd-eefd-47d6-a7ee-7ca828458da9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 14:06:40 +0000 Certificate not after: Tue 12 Dec 2028 15:06:40 +0000 Subordinate resources: AS: 402957 IP: 23.163.4.0/24 IP: 2602:f30a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:4d:e6:e9:b9:64:2b:b8:89:f6:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 14:06:40 2026 GMT Not After : Dec 12 15:06:40 2028 GMT Subject: CN=2f8faebd-eefd-47d6-a7ee-7ca828458da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:9b:38:40:4b:7f:4d:3d:cb:9c:dc:c2:90: ae:c9:91:d3:1d:1f:83:0f:9c:e8:fd:4e:6c:89:46: 9e:04:c8:c3:cc:e2:99:2c:b7:a6:a3:8c:17:50:34: 97:d1:84:1d:06:23:5b:03:4d:37:77:8b:32:27:d5: 71:23:30:78:a5:79:7c:ed:ed:0e:63:c8:ec:df:33: 0f:b1:67:52:da:53:1c:4b:10:63:11:e7:95:dd:5c: af:c0:f1:ca:25:8a:79:51:02:bd:8e:ad:3a:a5:9a: 0f:88:4c:44:2b:39:e2:38:21:d1:1a:b1:65:9f:09: ee:e7:4f:ed:a8:f4:c0:9d:6a:7f:b9:6b:45:65:78: c7:46:69:70:d6:53:33:56:89:d1:1e:f2:33:37:5d: 44:6b:b0:21:74:ba:cf:39:9e:66:12:d3:4d:70:2e: 29:6f:05:d1:56:55:46:46:ed:b9:35:3b:db:e1:39: 00:17:97:6a:ca:20:36:8a:99:62:25:f4:0c:ba:57: 44:9e:41:e7:df:5d:73:52:26:21:a0:70:13:da:4f: c6:6e:b8:6b:9b:4e:4c:f9:cf:67:d8:8e:c3:e4:f2: 77:0e:de:19:ad:63:48:fd:f0:cb:da:03:d2:4b:23: 8c:09:42:28:79:04:c3:8a:dc:fb:9c:60:34:7f:20: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:04:4C:76:AC:7C:3E:78:A4:C4:FE:52:B8:B9:98:22:BF:49:72:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f8faebd-eefd-47d6-a7ee-7ca828458da9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f8faebd-eefd-47d6-a7ee-7ca828458da9/2f8faebd-eefd-47d6-a7ee-7ca828458da9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.163.4.0/24 IPv6: 2602:f30a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402957 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7d:5f:c1:95:71:35:8b:1a:f0:0c:ae:6a:ba:2f:d7:c0:82: 3a:27:58:be:6e:77:9c:ae:3d:2c:a8:34:11:47:fe:d8:df:b5: 49:f7:67:89:f1:e7:6e:a9:51:01:53:e5:8c:36:89:c9:73:5d: 7c:d8:b3:75:b1:b4:a2:54:d5:6f:03:4c:07:f0:fa:f9:e5:0c: 93:7b:87:17:dc:ca:13:24:b6:98:ab:da:35:45:55:c4:88:fc: d2:3c:53:cd:36:1e:21:fe:09:3a:e2:62:f7:27:b3:b2:e3:b6: cd:03:f5:60:4e:6f:82:9f:65:e0:08:ac:7a:38:ea:25:86:b6: 42:bf:fc:0d:c0:e2:b8:17:1f:9e:7b:e6:6a:04:6b:a1:1e:05: 90:e5:04:de:60:e7:30:e0:67:2a:be:4d:02:53:72:1d:74:1d: 89:fb:58:90:89:90:7c:56:6c:d0:c2:25:47:64:6d:41:87:1b: fb:8e:8d:ed:5c:48:3c:c4:86:ec:a8:e1:39:8d:f9:0f:81:00: 89:66:f1:0d:d8:f1:5b:cd:ce:ca:7b:5c:2f:a4:cc:86:a7:a3: e6:66:31:5a:d0:03:49:82:68:5b:2c:de:37:c0:1b:2a:bd:22: 8a:35:ef:c3:a6:56:20:96:df:cf:a9:db:cd:e1:f4:a5:f2:93: 68:cb:84:bf -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8eTebpuWQruIn2GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTE0MDY0MFoXDTI4MTIxMjE1MDY0MFowLzEtMCsGA1UEAxMk MmY4ZmFlYmQtZWVmZC00N2Q2LWE3ZWUtN2NhODI4NDU4ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFabOEBLf009y5zcwpCuyZHTHR+DD5zo/U5s iUaeBMjDzOKZLLemo4wXUDSX0YQdBiNbA003d4syJ9VxIzB4pXl87e0OY8js3zMP sWdS2lMcSxBjEeeV3VyvwPHKJYp5UQK9jq06pZoPiExEKzniOCHRGrFlnwnu50/t qPTAnWp/uWtFZXjHRmlw1lMzVonRHvIzN11Ea7AhdLrPOZ5mEtNNcC4pbwXRVlVG Ru25NTvb4TkAF5dqyiA2ipliJfQMuldEnkHn311zUiYhoHAT2k/Gbrhrm05M+c9n 2I7D5PJ3Dt4ZrWNI/fDL2gPSSyOMCUIoeQTDitz7nGA0fyAF/QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNsETHasfD54pMT+Uri5mCK/SXKcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y ZjhmYWViZC1lZWZkLTQ3ZDYtYTdlZS03Y2E4Mjg0NThkYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJmOGZhZWJkLWVlZmQtNDdkNi1h N2VlLTdjYTgyODQ1OGRhOS8yZjhmYWViZC1lZWZkLTQ3ZDYtYTdlZS03Y2E4Mjg0 NThkYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXowQwDgQCAAIwCAMGACYC8woAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyfV/BlXE1ixrwDK5qui/XwII6 J1i+bnecrj0sqDQRR/7Y37VJ92eJ8eduqVEBU+WMNonJc1182LN1sbSiVNVvA0wH 8Pr55QyTe4cX3MoTJLaYq9o1RVXEiPzSPFPNNh4h/gk64mL3J7Oy47bNA/VgTm+C n2XgCKx6OOolhrZCv/wNwOK4Fx+ee+ZqBGuhHgWQ5QTeYOcw4Gcqvk0CU3IddB2J +1iQiZB8VmzQwiVHZG1Bhxv7jo3tXEg8xIbsqOE5jfkPgQCJZvEN2PFbzc7Ke1wv pMyGp6PmZjFa0ANJgmhbLN43wBsqvSKKNe/DplYglt/PqdvN4fSl8pNoy4S/ -----END CERTIFICATE-----Generated at Sun Sep 20 21:43:24 2026 by rpki-client