$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer File: a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer (raw, json) Hash identifier: wmvZxQkj+CGTIo+H4/KKRElzEP+VCYmIaR9A7Qtx5/c= Subject key identifier: 41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EF0152F5285B0BBF7A3EDB200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Aug 2026 00:45:12 +0000 Certificate not after: Sun 26 Nov 2028 01:45:12 +0000 Subordinate resources: AS: 23228 IP: 2620:13b:9000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:15:2f:52:85:b0:bb:f7:a3:ed:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 24 00:45:12 2026 GMT Not After : Nov 26 01:45:12 2028 GMT Subject: CN=a23e4fc3-9953-40b8-8d08-ac7981cb8d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:11:95:52:1b:79:bd:7b:bd:e7:5e:a4:00: d1:bd:3e:3f:22:ed:74:2a:b2:c9:e8:8d:5a:e5:d3: 98:0a:41:85:00:3a:80:60:20:36:b8:c2:8d:fd:81: 22:b3:a9:6a:5d:64:74:cb:59:92:7c:4e:26:c9:47: 96:b9:ac:ff:d5:d3:4f:89:a3:22:d8:40:3f:1d:5c: d0:a7:8f:be:7b:65:d4:6c:70:7d:a6:ed:cd:c9:4e: 4d:73:af:43:d5:69:9b:5c:89:a8:3f:f5:d3:e2:53: 21:75:44:88:d5:28:c9:5b:bf:40:88:f2:ff:53:0d: 05:c4:84:a2:d4:a7:58:a0:74:db:d5:c2:e1:73:82: fb:73:7d:f6:36:85:54:39:f7:e1:49:7a:73:44:59: 85:80:89:c7:15:56:77:21:20:a4:81:b1:61:24:2f: 75:47:7a:26:c5:88:32:81:70:e4:4d:72:d3:d5:88: e7:c2:b9:fd:c5:e7:49:ae:c8:c7:2d:4a:13:bb:36: a2:e6:0c:48:e6:29:95:d7:7b:96:86:30:4c:c1:65: 5f:74:f6:4b:d1:4d:ac:ba:a6:05:fd:b9:d6:67:c4: ba:d7:6e:65:94:d5:30:08:52:a4:fa:2c:28:a6:94: 35:5c:89:46:86:c8:14:b6:22:89:bb:99:23:39:31: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:13b:9000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d1:0b:97:9e:2c:23:0a:79:19:ca:f7:14:ac:0c:21:88:a5: 4c:9d:38:12:82:a1:04:29:a3:56:10:54:98:28:ad:cf:1d:f3: 2d:e0:36:17:86:ce:5e:7d:cf:44:f2:32:4f:23:67:ad:fb:de: 7e:45:e3:d8:0a:80:0c:3a:87:76:e1:74:50:98:4b:04:9e:18: e8:07:36:4c:13:18:fd:22:d6:29:bd:91:ed:20:b1:d1:b7:84: bd:88:7c:03:61:02:21:d9:ec:a9:bb:1e:90:be:28:4a:37:cd: 48:c8:f4:cd:e4:29:bf:1f:f2:47:22:d4:8c:b2:a6:7f:57:b1: 11:bc:8b:79:7e:ca:38:71:42:d0:39:0b:ae:59:32:0f:e7:52: f3:40:fe:f4:26:c2:7e:0c:95:73:b6:80:24:b1:00:31:6d:e0: 4a:dd:02:aa:4f:05:7d:f2:3f:64:bd:1e:ff:4f:13:cf:6f:a2: 48:13:7d:99:e4:eb:11:12:cb:de:8e:46:51:3a:cb:17:e2:65: 31:f4:29:3c:cd:fa:62:e7:3d:d7:14:ed:ab:bf:5a:43:54:73: d6:37:26:a3:9a:9e:70:6f:dc:ed:c6:75:57:1b:f9:56:92:be: cd:ec:11:6f:55:6b:10:2f:06:35:8a:c4:6a:c6:11:8f:57:64: 33:79:04:87 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE7wFS9ShbC796PtsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyNDAwNDUxMloXDTI4MTEyNjAxNDUxMlowLzEtMCsGA1UEAxMk YTIzZTRmYzMtOTk1My00MGI4LThkMDgtYWM3OTgxY2I4ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzERlVIbeb17vedepADRvT4/Iu10KrLJ6I1a 5dOYCkGFADqAYCA2uMKN/YEis6lqXWR0y1mSfE4myUeWuaz/1dNPiaMi2EA/HVzQ p4++e2XUbHB9pu3NyU5Nc69D1WmbXImoP/XT4lMhdUSI1SjJW79AiPL/Uw0FxISi 1KdYoHTb1cLhc4L7c332NoVUOffhSXpzRFmFgInHFVZ3ISCkgbFhJC91R3omxYgy gXDkTXLT1Yjnwrn9xedJrsjHLUoTuzai5gxI5imV13uWhjBMwWVfdPZL0U2suqYF /bnWZ8S6125llNUwCFKk+iwoppQ1XIlGhsgUtiKJu5kjOTG/sQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFEHPjSCT7ikQYS/9plHuPACJtK3dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h MjNlNGZjMy05OTUzLTQwYjgtOGQwOC1hYzc5ODFjYjhkNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyM2U0ZmMzLTk5NTMtNDBiOC04 ZDA4LWFjNzk4MWNiOGQ0NC9hMjNlNGZjMy05OTUzLTQwYjgtOGQwOC1hYzc5ODFj YjhkNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAE7kDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJavDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAx0QuXniwjCnkZyvcUrAwhiKVMnTgSgqEEKaNWEFSYKK3P HfMt4DYXhs5efc9E8jJPI2et+95+RePYCoAMOod24XRQmEsEnhjoBzZMExj9ItYp vZHtILHRt4S9iHwDYQIh2eypux6QvihKN81IyPTN5Cm/H/JHItSMsqZ/V7ERvIt5 fso4cULQOQuuWTIP51LzQP70JsJ+DJVztoAksQAxbeBK3QKqTwV98j9kvR7/TxPP b6JIE32Z5OsREsvejkZROssX4mUx9Ck8zfpi5z3XFO2rv1pDVHPWNyajmp5wb9zt xnVXG/lWkr7N7BFvVWsQLwY1isRqxhGPV2QzeQSH -----END CERTIFICATE-----Generated at Wed Sep 23 00:14:04 2026 by rpki-client