$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer File: 83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer (raw, json) Hash identifier: kEYXV0mge2N681hApU/e66Q+V74xVxA9MFwuakLzONQ= Subject key identifier: E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EF70FE402B810475BD8F92300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Aug 2026 12:45:11 +0000 Certificate not after: Tue 28 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 401734 IP: 23.139.44.0/24 IP: 209.92.240.0/20 IP: 2602:f640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:0f:e4:02:b8:10:47:5b:d8:f9:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 26 12:45:11 2026 GMT Not After : Nov 28 13:45:11 2028 GMT Subject: CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:ba:13:02:e7:b1:91:ac:f6:64:27:bf:e2: 63:30:0d:13:c8:1e:3d:36:b7:e7:a0:25:02:7e:2f: b8:43:a7:4b:c1:d5:6f:70:8f:c0:aa:31:a3:1e:36: 70:95:17:50:07:99:55:03:b4:ab:fc:07:d6:7e:09: 91:b3:33:f7:67:2b:a6:c2:7e:e0:9c:0e:b5:b3:77: e5:13:81:96:ef:1a:ba:01:82:20:bb:df:39:84:e9: e1:32:ab:23:99:ed:88:a4:9b:f4:5e:ec:97:ac:0e: ad:4d:21:eb:43:8c:11:d1:a2:e7:73:e9:a1:f4:5f: f8:0b:89:7e:c7:bd:d6:a8:df:86:da:20:85:8f:e5: 13:f3:85:4d:49:7a:cf:8c:90:c2:e9:b9:a9:d1:46: 13:04:a0:fc:e9:64:49:7e:65:82:6f:72:7e:c0:ad: f9:9d:09:cd:25:28:33:73:4a:38:d3:d5:1f:a5:4e: ff:ea:81:2e:6c:70:7d:07:9c:6b:a4:37:f4:22:70: 58:e1:11:0a:24:7b:ac:6e:8f:a3:45:51:cb:e7:d2: 47:78:7b:2a:82:d5:da:d7:a7:ee:a0:1d:50:fa:77: 5d:6f:33:44:cb:d4:f7:15:f3:45:bb:20:f5:9b:33: 44:d3:a5:4c:c4:eb:97:e9:e7:a7:e4:93:2e:3b:21: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.44.0/24 209.92.240.0/20 IPv6: 2602:f640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401734 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:dd:5e:47:b0:8e:cf:67:74:e7:92:1b:f7:84:99:85:c8:00: 29:2b:93:fc:83:d3:35:99:a2:3b:63:1f:97:f9:54:f9:a2:a2: ee:a6:f2:fd:69:11:b8:b3:3c:04:d6:69:79:a2:89:d4:5f:38: ec:35:35:22:55:fa:f6:df:2c:ca:49:63:4d:aa:73:4c:ca:8e: 1e:4f:ae:13:74:e4:b1:d5:1d:3c:b9:46:3d:58:8e:56:96:75: 15:91:7a:c3:60:1e:fc:6d:80:79:50:8b:fb:47:a5:9e:28:a8: a5:9f:9d:22:8d:2b:b2:17:f1:33:d7:a3:36:31:3b:a6:f7:c6: dd:fe:39:e3:b9:03:d6:48:a0:e4:24:1b:77:a9:56:f8:1e:f2: 19:2c:1c:9d:e3:9e:35:a3:80:50:b8:c8:36:38:f7:fa:7f:17: da:9a:1e:d5:26:4b:52:cb:d4:cd:c7:ae:e9:e6:a7:80:32:84: 99:23:38:fa:20:7a:9a:a8:6b:76:5b:a8:9b:6d:69:61:b5:cc: 16:68:d8:55:71:17:5d:e5:21:59:b8:e2:a1:8a:23:94:ae:d9: 0b:9b:0d:16:5b:96:fe:9c:22:83:42:68:ae:21:e6:4b:01:59: ad:26:18:0c:82:03:be:08:75:0e:1c:4e:a0:20:c9:58:26:1a: a4:07:db:d5 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE73D+QCuBBHW9j5IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyNjEyNDUxMVoXDTI4MTEyODEzNDUxMVowLzEtMCsGA1UEAxMk ODNmYTU4MGUtNzA3NS00ZDdmLWIyZmEtYzA3ZWFmYzIyZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtO6EwLnsZGs9mQnv+JjMA0TyB49NrfnoCUC fi+4Q6dLwdVvcI/AqjGjHjZwlRdQB5lVA7Sr/AfWfgmRszP3Zyumwn7gnA61s3fl E4GW7xq6AYIgu985hOnhMqsjme2IpJv0XuyXrA6tTSHrQ4wR0aLnc+mh9F/4C4l+ x73WqN+G2iCFj+UT84VNSXrPjJDC6bmp0UYTBKD86WRJfmWCb3J+wK35nQnNJSgz c0o409UfpU7/6oEubHB9B5xrpDf0InBY4REKJHusbo+jRVHL59JHeHsqgtXa16fu oB1Q+nddbzNEy9T3FfNFuyD1mzNE06VMxOuX6een5JMuOyFrOwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOUESAu64nWwbpUXzXksiKZBdf9fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 M2ZhNTgwZS03MDc1LTRkN2YtYjJmYS1jMDdlYWZjMjJkODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzgzZmE1ODBlLTcwNzUtNGQ3Zi1i MmZhLWMwN2VhZmMyMmQ4NS84M2ZhNTgwZS03MDc1LTRkN2YtYjJmYS1jMDdlYWZj MjJkODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXiywDBATRXPAwDQQCAAIwBwMFACYC9kAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBiFGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHHdXkewjs9ndOeSG/eE mYXIACkrk/yD0zWZojtjH5f5VPmiou6m8v1pEbizPATWaXmiidRfOOw1NSJV+vbf LMpJY02qc0zKjh5PrhN05LHVHTy5Rj1YjlaWdRWResNgHvxtgHlQi/tHpZ4oqKWf nSKNK7IX8TPXozYxO6b3xt3+OeO5A9ZIoOQkG3epVvge8hksHJ3jnjWjgFC4yDY4 9/p/F9qaHtUmS1LL1M3Hrunmp4AyhJkjOPogepqoa3ZbqJttaWG1zBZo2FVxF13l IVm44qGKI5Su2QubDRZblv6cIoNCaK4h5ksBWa0mGAyCA74IdQ4cTqAgyVgmGqQH 29U= -----END CERTIFICATE-----Generated at Sun Sep 20 18:19:23 2026 by rpki-client