$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0.cer File: 64db7e92-777d-4c08-864a-85f57c2290b0.cer (raw, json) Hash identifier: 40S5xN9oDbTZzoWzZscTMKgvlHvXaLsvRyrB9pHzAHA= Subject key identifier: 1A:EE:5E:0B:FF:DA:1C:6E:9F:AB:41:1E:B2:81:BF:C8:42:2C:29:2D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F3B75A5F8AF183E2D02035A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/64db7e92-777d-4c08-864a-85f57c2290b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 00:45:11 +0000 Certificate not after: Sat 23 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 401781 IP: 64.190.218.0/24 IP: 107.6.85.0/24 IP: 167.150.89.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:75:a5:f8:af:18:3e:2d:02:03:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 20 00:45:11 2026 GMT Not After : Dec 23 01:45:11 2028 GMT Subject: CN=64db7e92-777d-4c08-864a-85f57c2290b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:af:c5:9b:f4:9a:89:52:17:b3:71:8b:bf: f3:9c:d5:4c:a5:f1:12:67:e3:e3:3c:d9:b8:ba:65: 6d:ff:88:f0:3c:9a:ab:af:d8:f7:e8:03:cd:28:fd: 1c:70:3f:76:50:9a:be:f2:44:3a:3d:a3:15:15:b1: 4e:21:2e:ed:45:47:c0:ec:0b:88:bd:e4:b1:a8:4b: b5:43:0a:41:55:95:a0:9a:88:fb:56:26:f4:ed:c4: 78:6a:fc:c7:5c:20:fd:f0:51:cd:35:ff:e0:12:1c: 71:3f:14:ef:7e:24:6f:ed:9c:17:50:fe:9d:98:3f: 6d:d1:35:56:53:5d:29:51:e6:08:ab:eb:36:c7:3d: d4:55:8d:61:e5:ec:62:04:68:96:99:e4:96:59:e9: 58:70:fd:92:ab:95:53:5a:a4:29:03:9d:1c:8f:02: 7c:ec:43:a3:b0:df:09:10:88:2f:d8:95:06:85:41: 99:36:98:a1:44:a7:19:71:9f:ff:99:75:5c:d1:c1: b7:23:66:18:56:35:b4:71:fb:d8:77:ba:83:1b:12: 80:0c:58:09:62:96:8b:c6:a9:13:5f:6b:3c:2d:d0: 24:ea:b3:86:75:e9:79:e2:a7:9d:d2:e8:c2:77:ab: 38:62:96:94:1a:8f:d9:94:f7:9a:35:55:cb:a2:bb: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EE:5E:0B:FF:DA:1C:6E:9F:AB:41:1E:B2:81:BF:C8:42:2C:29:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/64db7e92-777d-4c08-864a-85f57c2290b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.190.218.0/24 107.6.85.0/24 167.150.89.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401781 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ea:2b:ec:9d:f1:e7:50:41:22:0f:3d:40:06:cc:c1:7c:37: 4c:6f:1f:bd:22:c5:90:c8:63:28:cf:0d:ea:b6:b9:ea:b3:18: 4b:84:f0:d7:df:f2:9b:59:73:ec:c3:5e:34:d9:00:27:4d:80: 0f:a1:a0:48:e5:49:b4:92:6e:de:29:df:c0:7f:b8:d4:74:eb: 0c:b4:13:a7:95:d3:95:c8:c7:e2:b7:0c:1c:bd:ce:85:f8:fc: 7f:19:24:5c:6c:b8:6b:19:00:7f:78:43:a8:eb:6f:6a:01:47: 4e:a8:cd:5d:9b:9b:cb:ab:2b:0a:af:27:1b:af:70:31:45:ad: 13:74:82:b7:f8:f8:ef:28:f4:e6:45:82:d2:d9:9b:5e:b9:29: 66:f7:39:c3:ab:1c:96:ad:4e:c6:f0:0f:47:27:05:7b:a7:5c: bd:79:3a:d2:75:9b:4a:2a:e9:28:7c:66:56:1d:60:89:cd:d1: bd:9f:f4:a3:70:f6:69:be:88:3a:3a:ae:5d:6a:30:38:39:9a: 0a:1c:09:ef:85:e3:59:36:df:25:a5:02:1a:ec:9b:15:c4:b8: 9c:b0:f6:a8:d8:f6:f2:f8:cf:5e:9e:fe:0f:42:3b:8a:eb:6e: 3f:b0:db:71:69:1a:86:12:ca:e1:53:27:b0:b7:1f:dc:61:5f: 57:eb:bc:07 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE87daX4rxg+LQIDWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyMDAwNDUxMVoXDTI4MTIyMzAxNDUxMVowLzEtMCsGA1UEAxMk NjRkYjdlOTItNzc3ZC00YzA4LTg2NGEtODVmNTdjMjI5MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAKvxZv0molSF7Nxi7/znNVMpfESZ+PjPNm4 umVt/4jwPJqrr9j36APNKP0ccD92UJq+8kQ6PaMVFbFOIS7tRUfA7AuIveSxqEu1 QwpBVZWgmoj7Vib07cR4avzHXCD98FHNNf/gEhxxPxTvfiRv7ZwXUP6dmD9t0TVW U10pUeYIq+s2xz3UVY1h5exiBGiWmeSWWelYcP2Sq5VTWqQpA50cjwJ87EOjsN8J EIgv2JUGhUGZNpihRKcZcZ//mXVc0cG3I2YYVjW0cfvYd7qDGxKADFgJYpaLxqkT X2s8LdAk6rOGdel54qed0ujCd6s4YpaUGo/ZlPeaNVXLoruhoQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFBruXgv/2hxun6tBHrKBv8hCLCktMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 NGRiN2U5Mi03NzdkLTRjMDgtODY0YS04NWY1N2MyMjkwYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY0ZGI3ZTkyLTc3N2QtNGMwOC04 NjRhLTg1ZjU3YzIyOTBiMC82NGRiN2U5Mi03NzdkLTRjMDgtODY0YS04NWY1N2My MjkwYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABAvtoDBABrBlUDBACnllkwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBiF1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAvqK+yd8edQQSIPPUAGzMF8N0xvH70i xZDIYyjPDeq2ueqzGEuE8Nff8ptZc+zDXjTZACdNgA+hoEjlSbSSbt4p38B/uNR0 6wy0E6eV05XIx+K3DBy9zoX4/H8ZJFxsuGsZAH94Q6jrb2oBR06ozV2bm8urKwqv JxuvcDFFrRN0grf4+O8o9OZFgtLZm165KWb3OcOrHJatTsbwD0cnBXunXL15OtJ1 m0oq6Sh8ZlYdYInN0b2f9KNw9mm+iDo6rl1qMDg5mgocCe+F41k23yWlAhrsmxXE uJyw9qjY9vL4z16e/g9CO4rrbj+w23FpGoYSyuFTJ7C3H9xhX1frvAc= -----END CERTIFICATE-----Generated at Sun Sep 20 12:58:03 2026 by rpki-client