$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf.cer File: 90359a3c-93a9-4d25-b495-9bd9484d4bbf.cer (raw, json) Hash identifier: eyKzJ8zPbZInpu12jTgnn6++jtgQLjY9YiNOwZssrc0= Subject key identifier: EA:B7:94:DA:96:2F:3B:CD:F9:3A:C7:41:02:DE:4A:D8:F3:C2:C8:42 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EF44535244527B06E59F92C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/90359a3c-93a9-4d25-b495-9bd9484d4bbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Aug 2026 12:45:11 +0000 Certificate not after: Mon 27 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 23.139.28.0/24 IP: 2602:f641::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:45:35:24:45:27:b0:6e:59:f9:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 25 12:45:11 2026 GMT Not After : Nov 27 13:45:11 2028 GMT Subject: CN=90359a3c-93a9-4d25-b495-9bd9484d4bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:ea:c7:84:46:b6:4f:26:ec:bd:23:5f:2c: 2e:c8:1b:71:9d:aa:9c:30:00:f4:99:dc:3a:69:7d: eb:6e:73:bd:34:b5:89:8b:a5:1a:52:0e:99:00:a6: 83:ff:d9:fc:68:07:f0:94:22:3e:e7:cf:2c:45:0d: 46:db:5e:13:c2:4d:15:9c:45:16:b3:dd:90:fe:d9: 9f:4e:b0:3a:1e:86:ea:d6:a6:09:c9:14:74:e3:29: 07:cc:0b:13:ac:4b:e2:df:6c:7f:74:80:f7:b6:d3: 68:42:15:ec:30:cc:22:cf:a0:0b:8e:01:91:3e:52: ff:74:86:e9:04:1c:1a:5d:ad:5e:ca:93:69:1b:9c: 3a:d4:a2:1a:41:5f:29:f8:56:30:00:3d:b4:c0:7f: c6:d9:32:bc:1b:aa:28:e5:64:0c:0a:a9:50:84:c1: e0:f0:4b:4d:9f:aa:cd:81:3f:bd:a6:21:0d:c0:15: 1c:03:b4:51:6e:28:8c:81:b1:7d:3b:86:bb:63:b2: 48:95:e5:e8:4e:0a:df:fc:c7:24:30:30:40:07:a4: a1:3a:ca:6e:be:e9:91:88:6c:23:c6:96:bc:9c:eb: df:87:92:6a:1d:be:92:53:90:fc:b0:49:30:b1:f9: 15:aa:f1:d3:77:99:04:95:48:1b:0a:f8:f8:c6:f0: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:94:DA:96:2F:3B:CD:F9:3A:C7:41:02:DE:4A:D8:F3:C2:C8:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/90359a3c-93a9-4d25-b495-9bd9484d4bbf/90359a3c-93a9-4d25-b495-9bd9484d4bbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.28.0/24 IPv6: 2602:f641::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ed:87:59:6a:b4:10:88:74:3a:a8:64:ab:a3:41:0a:27:0e: f0:cb:fd:0e:7b:94:86:54:5b:2b:ba:72:fd:74:6c:21:a2:30: 58:95:29:a5:bd:1d:31:18:29:ba:c1:b2:36:ec:c5:57:7e:46: bb:51:be:3f:71:11:f3:50:d4:4a:1d:bb:67:51:c9:cb:f0:ba: 0e:00:99:1d:cc:bf:e4:b0:7a:2e:c1:b1:eb:36:f5:3e:5a:08: bc:a9:f4:39:75:aa:bf:ba:9b:72:6e:bf:3d:eb:27:01:ee:7e: 13:7b:f5:aa:fb:b0:14:e4:92:2f:a6:d3:53:51:2b:aa:40:b8: 87:ef:bc:ad:af:a3:31:93:86:56:3b:65:5a:aa:ed:08:80:c3: 9e:0f:f8:36:e4:73:23:77:2f:7b:bc:70:95:60:87:35:78:80: 45:13:2e:d7:32:0b:6c:37:4d:c6:29:ea:42:b3:d1:77:0b:75: 02:2a:fd:44:76:2d:47:59:3d:d1:3f:59:31:06:d6:73:b8:2f: 2b:d5:29:7e:b8:cc:9e:d9:04:34:f6:ce:f8:d8:dc:f2:ed:bd: 79:53:cf:6f:4a:b2:de:f5:d1:b1:a7:c5:bc:42:f1:0e:c3:84: 1d:0b:3a:f1:04:2e:67:b8:2e:dd:66:d6:e1:6b:18:4d:c0:d6: 08:fb:e3:1f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE70RTUkRSewbln5LEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyNTEyNDUxMVoXDTI4MTEyNzEzNDUxMVowLzEtMCsGA1UEAxMk OTAzNTlhM2MtOTNhOS00ZDI1LWI0OTUtOWJkOTQ4NGQ0YmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Pqx4RGtk8m7L0jXywuyBtxnaqcMAD0mdw6 aX3rbnO9NLWJi6UaUg6ZAKaD/9n8aAfwlCI+588sRQ1G214Twk0VnEUWs92Q/tmf TrA6Hobq1qYJyRR04ykHzAsTrEvi32x/dID3ttNoQhXsMMwiz6ALjgGRPlL/dIbp BBwaXa1eypNpG5w61KIaQV8p+FYwAD20wH/G2TK8G6oo5WQMCqlQhMHg8EtNn6rN gT+9piENwBUcA7RRbiiMgbF9O4a7Y7JIleXoTgrf/MckMDBAB6ShOspuvumRiGwj xpa8nOvfh5JqHb6SU5D8sEkwsfkVqvHTd5kElUgbCvj4xvCggQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOq3lNqWLzvN+TrHQQLeStjzwshCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 MDM1OWEzYy05M2E5LTRkMjUtYjQ5NS05YmQ5NDg0ZDRiYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzkwMzU5YTNjLTkzYTktNGQyNS1i NDk1LTliZDk0ODRkNGJiZi85MDM1OWEzYy05M2E5LTRkMjUtYjQ5NS05YmQ5NDg0 ZDRiYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXixwwDgQCAAIwCAMGACYC9kEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AC3th1lqtBCIdDqoZKujQQonDvDL/Q57lIZUWyu6cv10bCGiMFiVKaW9HTEYKbrB sjbsxVd+RrtRvj9xEfNQ1Eodu2dRycvwug4AmR3Mv+Swei7Bses29T5aCLyp9Dl1 qr+6m3Juvz3rJwHufhN79ar7sBTkki+m01NRK6pAuIfvvK2vozGThlY7ZVqq7QiA w54P+DbkcyN3L3u8cJVghzV4gEUTLtcyC2w3TcYp6kKz0XcLdQIq/UR2LUdZPdE/ WTEG1nO4LyvVKX64zJ7ZBDT2zvjY3PLtvXlTz29Kst710bGnxbxC8Q7DhB0LOvEE Lme4Lt1m1uFrGE3A1gj74x8= -----END CERTIFICATE-----Generated at Sun Sep 20 19:59:15 2026 by rpki-client