$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/418b3feb-dfa7-4cf2-bcbf-fd50e5b07975.cer File: 418b3feb-dfa7-4cf2-bcbf-fd50e5b07975.cer (raw, json) Hash identifier: EQHQYf7xVx2dKnTj2qIXLDBheAxCTU5kVpK9hdX5+0Y= Subject key identifier: EF:FD:1A:28:79:CE:39:C3:C9:F3:62:B6:21:A2:55:94:4B:BD:62:45 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1460141B6AE937C443E3E0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/418b3feb-dfa7-4cf2-bcbf-fd50e5b07975/418b3feb-dfa7-4cf2-bcbf-fd50e5b07975.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/418b3feb-dfa7-4cf2-bcbf-fd50e5b07975/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Sep 2026 00:45:12 +0000 Certificate not after: Sat 09 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 397574 IP: 66.85.40.0/24 IP: 2602:f6b5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:60:14:1b:6a:e9:37:c4:43:e3:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 6 00:45:12 2026 GMT Not After : Dec 9 01:45:12 2028 GMT Subject: CN=418b3feb-dfa7-4cf2-bcbf-fd50e5b07975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:33:3a:e5:44:6d:49:1f:f2:e0:58:29:73: 0c:ad:a3:01:f3:ef:fc:a9:78:1e:c1:6e:f2:c3:a5: 4b:f4:fe:be:14:3c:ab:3a:28:9c:2b:73:dc:45:0f: e4:6d:46:29:14:99:6e:8e:7f:e8:c8:c1:ff:b5:6d: 10:87:82:b9:19:20:05:2c:38:0d:e4:1d:41:68:c0: 25:14:d4:1a:7f:28:a0:20:c0:9e:6a:64:a8:06:d1: 25:2d:05:38:d4:36:4d:cd:c9:27:c5:e4:60:dd:53: ba:10:b6:89:fd:4e:90:ca:ef:2d:80:f6:91:66:a5: 5b:df:ae:76:aa:e0:3e:07:8f:68:5e:6f:57:74:63: d2:de:0b:7c:f0:38:be:72:fa:d7:ce:e5:32:ab:8b: d0:6a:f0:c5:aa:9e:86:4f:3d:71:eb:87:4e:0d:ef: 5a:72:9a:10:74:ab:c9:df:70:88:f0:4d:16:34:9b: e9:2d:f8:3f:92:d2:2e:12:b8:7a:cf:8c:12:aa:f4: dd:8d:f4:b4:48:44:63:7f:86:e3:01:c1:1e:d6:70: 89:cf:b8:08:7b:5c:85:b7:fe:bc:07:05:a7:6c:49: 08:9f:5b:cc:de:8e:f1:50:0a:6e:2c:b9:b6:82:b9: 2c:58:55:e4:77:62:ab:01:d7:d7:bb:a1:f7:03:3b: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FD:1A:28:79:CE:39:C3:C9:F3:62:B6:21:A2:55:94:4B:BD:62:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/418b3feb-dfa7-4cf2-bcbf-fd50e5b07975/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/418b3feb-dfa7-4cf2-bcbf-fd50e5b07975/418b3feb-dfa7-4cf2-bcbf-fd50e5b07975.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.85.40.0/24 IPv6: 2602:f6b5::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397574 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:96:11:6c:ac:d1:38:67:5e:39:e5:66:bd:a5:0b:3b:54:97: 2e:c4:ba:29:33:66:1e:2e:33:4d:db:d3:91:2f:4d:f2:78:2d: 80:1e:d7:d7:e8:0e:1f:62:02:bd:bb:6e:7d:4e:c6:df:7c:cc: 9e:84:63:bd:c0:e8:d7:99:b9:41:13:33:8f:47:13:30:0c:65: 59:a5:2c:2c:34:60:28:4b:6a:14:1f:06:19:d8:28:f4:fe:8b: 06:f3:98:ef:b1:5f:a7:26:63:2d:e9:11:bf:72:51:48:f4:c9: 14:a5:a7:7e:3d:5b:03:de:1f:ad:98:5f:93:e2:6b:d2:b6:fa: a2:60:6f:c4:1b:a7:08:33:00:1f:fd:32:98:f7:b5:c5:13:6b: 65:45:5b:39:82:ed:ef:45:26:4e:4a:18:2c:74:9b:a0:7e:c6: f1:4b:a6:e5:9b:ae:46:95:5c:5c:10:6f:ed:fc:c8:58:da:c3: e3:ff:ed:da:6e:e5:3a:79:fe:51:6e:00:87:95:97:bb:72:8b: 9f:6b:80:43:5e:31:16:4e:4d:df:c6:af:73:fe:91:94:b2:d4: 6a:85:ec:1b:3c:8a:8a:11:04:f1:02:0e:8f:e6:b9:47:86:2a: 23:33:a0:99:cb:52:9b:70:8b:b1:df:06:e9:44:f7:d2:45:e1: 5d:6f:30:37 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8UYBQbauk3xEPj4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwNjAwNDUxMloXDTI4MTIwOTAxNDUxMlowLzEtMCsGA1UEAxMk NDE4YjNmZWItZGZhNy00Y2YyLWJjYmYtZmQ1MGU1YjA3OTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkYzOuVEbUkf8uBYKXMMraMB8+/8qXgewW7y w6VL9P6+FDyrOiicK3PcRQ/kbUYpFJlujn/oyMH/tW0Qh4K5GSAFLDgN5B1BaMAl FNQafyigIMCeamSoBtElLQU41DZNzcknxeRg3VO6ELaJ/U6Qyu8tgPaRZqVb3652 quA+B49oXm9XdGPS3gt88Di+cvrXzuUyq4vQavDFqp6GTz1x64dODe9acpoQdKvJ 33CI8E0WNJvpLfg/ktIuErh6z4wSqvTdjfS0SERjf4bjAcEe1nCJz7gIe1yFt/68 BwWnbEkIn1vM3o7xUApuLLm2grksWFXkd2KrAdfXu6H3AztuHwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFO/9Gih5zjnDyfNitiGiVZRLvWJFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MThiM2ZlYi1kZmE3LTRjZjItYmNiZi1mZDUwZTViMDc5NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQxOGIzZmViLWRmYTctNGNmMi1i Y2JmLWZkNTBlNWIwNzk3NS80MThiM2ZlYi1kZmE3LTRjZjItYmNiZi1mZDUwZTVi MDc5NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABCVSgwDgQCAAIwCAMGBCYC9rUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYRBjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAalhFsrNE4Z1455Wa9pQs7VJcu xLopM2YeLjNN29ORL03yeC2AHtfX6A4fYgK9u259TsbffMyehGO9wOjXmblBEzOP RxMwDGVZpSwsNGAoS2oUHwYZ2Cj0/osG85jvsV+nJmMt6RG/clFI9MkUpad+PVsD 3h+tmF+T4mvStvqiYG/EG6cIMwAf/TKY97XFE2tlRVs5gu3vRSZOShgsdJugfsbx S6blm65GlVxcEG/t/MhY2sPj/+3abuU6ef5RbgCHlZe7coufa4BDXjEWTk3fxq9z /pGUstRqhewbPIqKEQTxAg6P5rlHhiojM6CZy1KbcIux3wbpRPfSReFdbzA3 -----END CERTIFICATE-----Generated at Mon Sep 21 09:15:53 2026 by rpki-client