$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer File: 3e3dd181-6bf9-437c-8807-1849db23c718.cer (raw, json) Hash identifier: LG1SGyzHPmLnH/bD92DcwSbGrBEv5iNznzMf4k94cD8= Subject key identifier: 13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F38AAF75104FF9A77C7C07C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Sep 2026 00:45:11 +0000 Certificate not after: Fri 22 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 395047 IP: 23.134.20.0/24 IP: 2602:f6f8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:aa:f7:51:04:ff:9a:77:c7:c0:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 19 00:45:11 2026 GMT Not After : Dec 22 01:45:11 2028 GMT Subject: CN=3e3dd181-6bf9-437c-8807-1849db23c718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:80:76:fd:22:af:ca:e7:43:35:2d:71:de: ed:29:40:29:0d:e8:20:c0:04:41:34:ff:6d:7b:d4: ce:f9:da:7e:41:05:c2:9a:6a:f0:0e:39:2b:73:49: 09:28:41:99:3e:ee:9b:97:6d:df:39:d0:a5:53:0a: 8f:82:c7:1f:09:c6:bc:e0:32:7e:42:02:91:b8:1e: 81:da:e3:65:0c:cc:a5:2f:c8:c1:2a:03:56:0b:6a: 7a:12:ec:5c:21:b6:6a:f4:d6:61:f3:53:a8:17:5e: 74:22:98:55:46:e9:33:e0:dc:f9:ce:47:b4:b7:af: 35:e7:59:3c:7b:80:b5:f6:79:14:e7:a4:52:5a:98: 78:a3:12:56:32:0d:7c:f7:43:33:85:80:16:fc:6c: 7d:60:59:cc:aa:9c:32:1e:0d:95:38:28:41:bb:44: 6c:de:dd:9b:96:9c:cf:13:9a:d3:e5:09:24:34:9b: b8:de:fb:f6:1e:a8:2d:b3:1a:df:01:bd:7e:39:e9: cd:c9:ec:58:1a:89:79:7c:af:63:69:f7:21:4d:65: 8d:8a:ea:6b:7a:a2:26:b1:0f:3f:f5:7b:0e:79:83: 17:d0:48:c4:e2:ca:6d:e8:a0:8d:f5:5e:97:40:76: 6f:c8:9d:82:ec:25:3d:21:69:8c:b2:c6:f4:a3:4a: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.134.20.0/24 IPv6: 2602:f6f8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395047 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:87:8b:58:e2:40:a2:dc:2b:a7:0f:02:1d:9b:89:30:c0:58: dc:95:9a:37:69:fe:f4:37:f0:8c:1f:c5:ad:6b:16:75:a8:5f: a0:6d:7a:7b:3d:d8:ef:dc:c6:40:bc:5c:4e:37:fa:e2:b5:dd: 2e:f6:0c:51:1e:44:8c:98:df:0b:07:04:31:e1:14:c5:16:c5: b0:0c:b1:55:59:cc:d8:33:e7:eb:af:35:3f:d6:df:5a:88:da: 25:9b:1a:7c:c6:54:67:14:14:82:fa:1a:99:22:da:97:b5:45: a7:a2:e2:7a:ed:ac:a1:c9:8b:71:9e:78:21:1f:84:cb:63:82: 77:2d:39:7c:f1:63:fb:26:02:da:0b:ce:96:f3:4a:05:b9:f0: 9d:81:0a:7c:3f:ee:d7:d5:f7:52:e4:65:ff:36:90:f6:4e:ac: ce:f8:59:a0:79:a5:d9:6d:ef:83:b2:82:dc:f4:ad:01:66:ce: 39:c5:9e:bc:a4:73:9f:4b:55:90:77:e9:8b:e8:04:65:d3:09: 26:e4:41:34:a8:af:03:cd:b8:c0:5f:77:8f:93:73:ed:e2:38: fe:ad:ca:e1:09:69:aa:06:cf:70:0f:c8:b0:08:31:0a:35:71: 48:45:30:24:ab:f1:55:8f:6c:c0:78:f8:04:65:01:86:98:0e: d0:b8:89:1f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE84qvdRBP+ad8fAfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxOTAwNDUxMVoXDTI4MTIyMjAxNDUxMVowLzEtMCsGA1UEAxMk M2UzZGQxODEtNmJmOS00MzdjLTg4MDctMTg0OWRiMjNjNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wyAdv0ir8rnQzUtcd7tKUApDeggwARBNP9t e9TO+dp+QQXCmmrwDjkrc0kJKEGZPu6bl23fOdClUwqPgscfCca84DJ+QgKRuB6B 2uNlDMylL8jBKgNWC2p6EuxcIbZq9NZh81OoF150IphVRukz4Nz5zke0t68151k8 e4C19nkU56RSWph4oxJWMg1890MzhYAW/Gx9YFnMqpwyHg2VOChBu0Rs3t2blpzP E5rT5QkkNJu43vv2HqgtsxrfAb1+OenNyexYGol5fK9jafchTWWNiupreqImsQ8/ 9XsOeYMX0EjE4spt6KCN9V6XQHZvyJ2C7CU9IWmMssb0o0oPWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBMUxz6Ip1xwI+oWR/az/ffxSjvNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ZTNkZDE4MS02YmY5LTQzN2MtODgwNy0xODQ5ZGIyM2M3MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNlM2RkMTgxLTZiZjktNDM3Yy04 ODA3LTE4NDlkYjIzYzcxOC8zZTNkZDE4MS02YmY5LTQzN2MtODgwNy0xODQ5ZGIy M2M3MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhhQwDgQCAAIwCAMGACYC9vgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYHJzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMh4tY4kCi3CunDwIdm4kwwFjc lZo3af70N/CMH8WtaxZ1qF+gbXp7Pdjv3MZAvFxON/ritd0u9gxRHkSMmN8LBwQx 4RTFFsWwDLFVWczYM+frrzU/1t9aiNolmxp8xlRnFBSC+hqZItqXtUWnouJ67ayh yYtxnnghH4TLY4J3LTl88WP7JgLaC86W80oFufCdgQp8P+7X1fdS5GX/NpD2TqzO +FmgeaXZbe+DsoLc9K0BZs45xZ68pHOfS1WQd+mL6ARl0wkm5EE0qK8DzbjAX3eP k3Pt4jj+rcrhCWmqBs9wD8iwCDEKNXFIRTAkq/FVj2zAePgEZQGGmA7QuIkf -----END CERTIFICATE-----Generated at Sun Sep 20 16:02:27 2026 by rpki-client