$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821.cer File: 7009fc0a-8414-4526-824b-f3cf577f1821.cer (raw, json) Hash identifier: WpEf8XxKmKA8Npau2rnQ+R3WTvEP4wXQPgIaHfe+FHg= Subject key identifier: 9D:18:CB:76:33:06:5F:27:4C:D7:9B:75:47:97:E7:4D:61:EB:F3:BD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1EAFBE80CC41D026F9CA9980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7009fc0a-8414-4526-824b-f3cf577f1821.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 17:23:48 +0000 Certificate not after: Tue 12 Dec 2028 18:23:48 +0000 Subordinate resources: AS: 29832 IP: 208.85.168.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:af:be:80:cc:41:d0:26:f9:ca:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 17:23:48 2026 GMT Not After : Dec 12 18:23:48 2028 GMT Subject: CN=7009fc0a-8414-4526-824b-f3cf577f1821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:98:db:d8:c6:ff:cf:5d:e2:42:4e:fa:52: 20:4e:3d:4f:33:e6:5d:21:d7:a1:fb:15:0e:eb:ee: 5a:cf:8f:39:3f:9c:a1:8d:29:be:7b:fc:2b:7b:c8: 88:2f:82:b0:8f:fa:6c:b4:35:f5:08:c0:db:1a:07: b2:09:5a:9d:38:31:2a:6a:b9:45:f8:53:98:42:1a: 8e:4a:3b:a4:2b:6e:2f:97:c1:93:d9:5a:ab:a1:9f: e6:2b:07:fb:a9:dd:22:2c:2d:0b:fc:04:04:e9:fd: ba:20:1c:d4:8f:a9:0d:10:aa:21:be:f5:36:fc:49: 1d:bb:21:8f:eb:24:07:d0:34:35:4c:6d:ee:11:b0: d8:80:45:5d:1e:f4:2d:ab:7d:c1:6d:6e:ef:56:c9: 6b:cf:ac:aa:ca:65:0f:f5:1c:30:a7:85:0b:3f:6c: ab:c0:68:b5:d6:42:35:48:7c:be:63:fb:98:90:f4: 58:79:98:03:af:be:d4:c1:0b:95:47:1a:04:03:f7: 3e:c8:08:ea:bd:f7:7b:92:74:8b:dd:a5:d7:94:a1: 9e:cd:ab:7a:ed:0c:ec:ed:98:5f:ec:e7:c7:41:98: b2:fc:71:93:94:28:29:81:42:99:14:dc:45:6b:32: ea:66:39:90:46:75:9d:6c:28:2c:fa:dc:77:fa:f0: 71:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:18:CB:76:33:06:5F:27:4C:D7:9B:75:47:97:E7:4D:61:EB:F3:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7009fc0a-8414-4526-824b-f3cf577f1821.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 208.85.168.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29832 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:03:a2:51:2c:3b:9b:e6:41:ae:c2:ec:5d:24:bb:ae:92:14: be:1a:4f:79:0d:86:a1:a2:a2:26:ed:fa:22:76:f8:24:42:a7: 7b:70:f2:99:b5:50:a0:cb:18:9e:b4:3e:79:62:37:d6:0e:8d: 82:1f:9f:8a:cc:8f:a5:b2:20:5a:b0:67:4c:ed:e8:f4:1a:b5: af:ee:4b:3b:3d:4e:9c:92:02:73:83:78:c8:f6:b1:64:26:49: e1:dd:55:ce:b9:a7:c2:0b:55:c1:c3:83:8a:a8:59:90:ff:d8: e0:ed:3f:ab:6d:7e:40:76:67:83:7f:44:6a:91:93:4d:f8:ac: 85:bb:b6:0a:28:e0:dc:45:6b:0e:fd:bb:42:54:9d:55:2d:8c: ad:60:e6:94:f5:13:b7:7b:0c:48:d7:1c:c7:28:61:5b:20:40: e8:e1:34:49:25:bd:09:4f:34:26:13:04:8c:1f:2d:fb:a8:ef: 76:34:9a:73:c9:ca:61:8b:a2:e1:4a:b4:a8:28:95:57:fd:9a: 2a:a6:a6:9a:72:1e:36:c0:76:58:42:21:fb:51:3f:e2:5a:d7: 2c:f1:ea:d0:e8:24:21:cf:43:5a:be:56:90:1b:a1:d2:1f:be: b0:a8:05:c7:5c:27:79:1e:17:de:db:0e:fa:0f:ea:5a:ec:23: b1:94:d1:ba -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE8er76AzEHQJvnKmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTE3MjM0OFoXDTI4MTIxMjE4MjM0OFowLzEtMCsGA1UEAxMk NzAwOWZjMGEtODQxNC00NTI2LTgyNGItZjNjZjU3N2YxODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsOY29jG/89d4kJO+lIgTj1PM+ZdIdeh+xUO 6+5az485P5yhjSm+e/wre8iIL4Kwj/pstDX1CMDbGgeyCVqdODEqarlF+FOYQhqO SjukK24vl8GT2VqroZ/mKwf7qd0iLC0L/AQE6f26IBzUj6kNEKohvvU2/EkduyGP 6yQH0DQ1TG3uEbDYgEVdHvQtq33BbW7vVslrz6yqymUP9Rwwp4ULP2yrwGi11kI1 SHy+Y/uYkPRYeZgDr77UwQuVRxoEA/c+yAjqvfd7knSL3aXXlKGezat67Qzs7Zhf 7OfHQZiy/HGTlCgpgUKZFNxFazLqZjmQRnWdbCgs+tx3+vBxWwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJ0Yy3YzBl8nTNebdUeX501h6/O9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 MDA5ZmMwYS04NDE0LTQ1MjYtODI0Yi1mM2NmNTc3ZjE4MjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcwMDlmYzBhLTg0MTQtNDUyNi04 MjRiLWYzY2Y1NzdmMTgyMS83MDA5ZmMwYS04NDE0LTQ1MjYtODI0Yi1mM2NmNTc3 ZjE4MjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQVagwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dIgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAMgOiUSw7m+ZBrsLsXSS7rpIUvhpPeQ2GoaKiJu36Inb4JEKn e3DymbVQoMsYnrQ+eWI31g6Ngh+fisyPpbIgWrBnTO3o9Bq1r+5LOz1OnJICc4N4 yPaxZCZJ4d1VzrmnwgtVwcODiqhZkP/Y4O0/q21+QHZng39EapGTTfishbu2Cijg 3EVrDv27QlSdVS2MrWDmlPUTt3sMSNccxyhhWyBA6OE0SSW9CU80JhMEjB8t+6jv djSac8nKYYui4Uq0qCiVV/2aKqammnIeNsB2WEIh+1E/4lrXLPHq0OgkIc9DWr5W kBuh0h++sKgFx1wneR4X3tsO+g/qWuwjsZTRug== -----END CERTIFICATE-----Generated at Tue Sep 22 21:24:34 2026 by rpki-client