$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70.cer File: 92e267f9-c6b0-412c-a8aa-8bad32caaf70.cer (raw, json) Hash identifier: ehSHai3OTC/FsY0hKyQ5PWnhHEOqzBRvbXEwxR7BQDE= Subject key identifier: 4F:5A:E4:81:C4:0C:55:A2:17:33:DF:ED:AF:9B:35:67:FD:07:AC:9D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F331599461AC1269EB04B9E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/92e267f9-c6b0-412c-a8aa-8bad32caaf70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 00:45:11 +0000 Certificate not after: Wed 20 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 144.39.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:15:99:46:1a:c1:26:9e:b0:4b:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 17 00:45:11 2026 GMT Not After : Dec 20 01:45:11 2028 GMT Subject: CN=92e267f9-c6b0-412c-a8aa-8bad32caaf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:40:96:6e:5a:39:e6:b7:48:91:e7:23:c6: 56:8b:18:ef:67:29:3e:7a:64:75:90:fe:83:3a:ac: 69:0a:c3:d6:4e:b8:91:38:5e:1e:03:f3:d8:04:fd: 62:d2:23:9c:35:25:60:ac:e6:12:41:76:68:f4:68: 6d:97:da:ee:2b:69:c8:e5:9a:23:4d:9d:3c:17:48: 16:10:58:bd:67:4f:09:e4:78:ae:7f:46:9e:5c:a5: 29:43:68:d5:55:ce:ba:bd:c9:c5:d5:47:24:f5:e7: 8f:65:a6:80:a4:19:96:f9:6c:bd:74:bb:40:11:96: 99:95:e6:6b:60:3a:a1:0d:19:e2:e5:1f:0f:ea:a7: f6:00:76:39:2a:b2:c9:50:ce:34:99:e2:ad:28:62: 6e:7c:33:70:08:88:24:58:86:56:43:7b:5e:6f:f8: 37:5c:3e:c4:cc:7a:74:17:e6:36:32:17:57:49:ae: 48:6b:15:26:b9:eb:1a:3f:b1:95:17:61:3b:be:36: 98:58:21:4b:3c:b1:16:ce:67:5d:6f:24:22:55:b2: ba:9e:57:95:30:77:b4:63:ef:26:ad:cd:e3:ae:d7: 24:a7:60:11:8c:88:3d:97:3f:8f:86:f2:95:e5:82: 79:9a:a4:32:74:c3:7a:6b:49:39:46:90:11:be:55: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5A:E4:81:C4:0C:55:A2:17:33:DF:ED:AF:9B:35:67:FD:07:AC:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/92e267f9-c6b0-412c-a8aa-8bad32caaf70/92e267f9-c6b0-412c-a8aa-8bad32caaf70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 144.39.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:af:4a:62:39:3f:b5:2f:ef:e4:06:eb:9d:b3:a8:ea:e2:3c: c6:5a:53:93:cd:38:54:8d:fb:b5:9b:54:81:e0:9e:b6:87:ea: 79:5c:bb:0a:f6:32:75:be:1a:52:73:27:da:61:b1:4c:75:b1: b1:a3:5e:d7:e9:08:c2:fe:00:88:42:5f:77:a3:7c:48:65:31: 44:1b:17:fd:a5:07:cb:41:fb:c8:fb:25:19:75:be:41:d4:8d: 05:75:47:33:e3:9d:da:05:56:61:b0:e7:c2:2d:6a:09:96:1d: e0:d7:e4:58:d2:08:d0:1a:8e:8c:4f:be:b8:7e:97:e1:64:13: 5f:aa:59:74:d4:65:fd:a8:fd:95:1a:49:bd:02:28:bd:b3:9d: dd:d3:41:50:58:2d:69:94:d4:89:ca:e9:c0:eb:6e:14:d9:e5: fb:bc:30:c8:f5:7f:6a:18:1d:b4:fe:d7:3d:e7:20:4c:be:26: ff:1a:50:f7:af:5f:45:1c:33:8d:db:3a:f4:6a:aa:b5:9a:ec: 78:71:2b:43:5e:b4:4a:64:a2:33:3c:29:fd:e4:13:e2:7d:a0: 0f:2a:9a:77:64:6b:85:5f:09:68:d7:52:56:96:08:49:4e:e1: 89:9d:1f:e6:c5:20:93:6c:37:50:95:83:c5:52:91:1b:93:4c: 02:9f:a7:b7 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE8zFZlGGsEmnrBLnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxNzAwNDUxMVoXDTI4MTIyMDAxNDUxMVowLzEtMCsGA1UEAxMk OTJlMjY3ZjktYzZiMC00MTJjLWE4YWEtOGJhZDMyY2FhZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZhAlm5aOea3SJHnI8ZWixjvZyk+emR1kP6D OqxpCsPWTriROF4eA/PYBP1i0iOcNSVgrOYSQXZo9Ghtl9ruK2nI5ZojTZ08F0gW EFi9Z08J5Hiuf0aeXKUpQ2jVVc66vcnF1Uck9eePZaaApBmW+Wy9dLtAEZaZleZr YDqhDRni5R8P6qf2AHY5KrLJUM40meKtKGJufDNwCIgkWIZWQ3teb/g3XD7EzHp0 F+Y2MhdXSa5IaxUmuesaP7GVF2E7vjaYWCFLPLEWzmddbyQiVbK6nleVMHe0Y+8m rc3jrtckp2ARjIg9lz+PhvKV5YJ5mqQydMN6a0k5RpARvlUq4QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFE9a5IHEDFWiFzPf7a+bNWf9B6ydMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 MmUyNjdmOS1jNmIwLTQxMmMtYThhYS04YmFkMzJjYWFmNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzkyZTI2N2Y5LWM2YjAtNDEyYy1h OGFhLThiYWQzMmNhYWY3MC85MmUyNjdmOS1jNmIwLTQxMmMtYThhYS04YmFkMzJj YWFmNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCQJzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHr0piOT+1L+/kBuuds6jq 4jzGWlOTzThUjfu1m1SB4J62h+p5XLsK9jJ1vhpScyfaYbFMdbGxo17X6QjC/gCI Ql93o3xIZTFEGxf9pQfLQfvI+yUZdb5B1I0FdUcz453aBVZhsOfCLWoJlh3g1+RY 0gjQGo6MT764fpfhZBNfqll01GX9qP2VGkm9Aii9s53d00FQWC1plNSJyunA624U 2eX7vDDI9X9qGB20/tc95yBMvib/GlD3r19FHDON2zr0aqq1mux4cStDXrRKZKIz PCn95BPifaAPKpp3ZGuFXwlo11JWlghJTuGJnR/mxSCTbDdQlYPFUpEbk0wCn6e3 -----END CERTIFICATE-----Generated at Sat Sep 26 19:49:19 2026 by rpki-client