$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer File: 4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer (raw, json) Hash identifier: GP+ZmzBVg3edrKD+GOV8NSzTqQousSTJMLFVlNoJOe4= Subject key identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1CC02154FBB19A31EE5D3CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 00:45:12 +0000 Certificate not after: Tue 12 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 401753 IP: 23.140.68.0/24 IP: 148.59.160.0/24 IP: 2602:f61e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c0:21:54:fb:b1:9a:31:ee:5d:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 00:45:12 2026 GMT Not After : Dec 12 01:45:12 2028 GMT Subject: CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:4c:0d:e1:75:98:53:e9:9f:ca:4b:9a:34: 6b:9c:7f:65:ff:76:cf:19:94:a6:fc:7e:f2:e8:b1: b9:35:39:29:f9:e2:fd:73:e9:50:a9:96:3c:2d:94: 60:7d:73:73:24:3d:2e:b5:91:36:42:c2:b1:dd:79: c8:cf:f3:bf:d2:91:07:26:60:1a:f0:4c:80:be:5e: d3:0b:7e:d0:1b:3c:ae:33:15:26:9d:e2:de:de:53: 9d:e6:f7:1c:21:55:1f:e6:18:1f:61:13:14:88:50: 71:1d:38:8b:e0:2d:3f:e1:eb:a3:12:f9:1b:c7:26: 93:b6:3e:36:eb:36:3f:bc:35:6e:78:4c:98:15:e4: 3d:09:a3:b7:72:e7:80:56:92:a6:93:c8:a2:de:cc: d9:af:1a:29:d8:60:b4:70:a8:cf:1c:4b:77:91:c9: e6:82:a6:61:b8:f5:62:63:a5:ff:fb:b5:b9:b4:9b: 9e:32:6c:d6:50:c5:bd:e3:29:f9:1a:5c:65:12:56: 84:26:70:47:2a:5b:29:9b:9b:82:25:b1:b2:cd:57: 17:91:43:98:49:e1:13:ff:14:f2:eb:a3:6f:91:6d: ee:9e:a7:af:95:31:58:12:11:cf:e3:b7:cb:48:08: 4a:8a:c9:15:e0:0c:2e:13:5e:82:3f:72:b9:26:d8: 34:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.140.68.0/24 148.59.160.0/24 IPv6: 2602:f61e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401753 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c1:a1:62:48:b4:1c:6f:3b:d9:5c:e8:82:23:a4:0e:96:a1: f2:91:41:80:cd:7b:b0:21:1d:62:69:cc:06:0a:18:7f:a8:7c: d4:de:50:4b:f0:e4:21:b6:13:14:6d:d6:23:7d:44:bd:41:81: ec:5d:f2:3c:f6:3b:50:61:4c:b6:56:88:63:e2:aa:ab:95:91: 29:35:f1:4e:54:a1:0a:b2:e9:91:fc:36:b2:be:50:93:b0:a3: 74:ae:aa:81:f6:9f:81:e1:e4:24:53:2f:d1:18:34:45:42:a9: 64:c6:f8:1f:ba:b3:cb:6c:dd:bc:ce:11:6c:91:a8:9a:f9:74: e0:01:06:ab:da:cb:6b:b6:4c:9e:dc:c4:6f:e9:be:5a:bc:5d: f9:d5:89:03:af:bb:f5:6f:42:be:e4:42:ff:07:f2:fa:d6:cd: 09:a8:2b:25:f8:3e:cb:09:25:34:1b:7f:e0:cc:47:69:73:30: 55:79:97:42:82:29:ee:65:b4:3f:41:f4:7b:06:fd:46:c0:63: b7:04:b2:c2:0a:49:36:2e:e5:9f:b4:15:c6:07:3f:0a:67:40: d5:22:01:20:3a:fa:f7:bf:ea:97:2e:38:d8:24:a0:ba:5e:73: ad:de:7c:c2:a9:6f:1d:2e:88:4d:ba:20:e8:00:de:ed:df:62: e3:60:cb:07 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE8cwCFU+7GaMe5dPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTAwNDUxMloXDTI4MTIxMjAxNDUxMlowLzEtMCsGA1UEAxMk NGQyODNjNTYtN2NkMi00Mjk4LWI0YzUtYzdkMjYxZTdiZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJpMDeF1mFPpn8pLmjRrnH9l/3bPGZSm/H7y 6LG5NTkp+eL9c+lQqZY8LZRgfXNzJD0utZE2QsKx3XnIz/O/0pEHJmAa8EyAvl7T C37QGzyuMxUmneLe3lOd5vccIVUf5hgfYRMUiFBxHTiL4C0/4eujEvkbxyaTtj42 6zY/vDVueEyYFeQ9CaO3cueAVpKmk8ii3szZrxop2GC0cKjPHEt3kcnmgqZhuPVi Y6X/+7W5tJueMmzWUMW94yn5GlxlElaEJnBHKlspm5uCJbGyzVcXkUOYSeET/xTy 66NvkW3unqevlTFYEhHP47fLSAhKiskV4AwuE16CP3K5Jtg0QQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBDQqjVn2aOaIlNh2+e/1a0RUDAhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 ZDI4M2M1Ni03Y2QyLTQyOTgtYjRjNS1jN2QyNjFlN2JmZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzRkMjgzYzU2LTdjZDItNDI5OC1i NGM1LWM3ZDI2MWU3YmZmNC80ZDI4M2M1Ni03Y2QyLTQyOTgtYjRjNS1jN2QyNjFl N2JmZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjEQDBACUO6AwDgQCAAIwCAMGACYC9h4AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYhWTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiwaFiSLQcbzvZXOiC I6QOlqHykUGAzXuwIR1iacwGChh/qHzU3lBL8OQhthMUbdYjfUS9QYHsXfI89jtQ YUy2Vohj4qqrlZEpNfFOVKEKsumR/DayvlCTsKN0rqqB9p+B4eQkUy/RGDRFQqlk xvgfurPLbN28zhFskaia+XTgAQar2strtkye3MRv6b5avF351YkDr7v1b0K+5EL/ B/L61s0JqCsl+D7LCSU0G3/gzEdpczBVeZdCginuZbQ/QfR7Bv1GwGO3BLLCCkk2 LuWftBXGBz8KZ0DVIgEgOvr3v+qXLjjYJKC6XnOt3nzCqW8dLohNuiDoAN7t32Lj YMsH -----END CERTIFICATE-----Generated at Sun Sep 20 17:19:43 2026 by rpki-client