$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer File: a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer (raw, json) Hash identifier: FpzeYqU/EUMc7lbwvOcrh2UvC3znYIOR4xfIDuX7qg0= Subject key identifier: BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F3E4053DE43516742B7666020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 00:45:11 +0000 Certificate not after: Sun 24 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 14576 IP: 104.193.252.0/22 IP: 162.244.32.0/22 IP: 162.248.224.0/21 IP: 204.155.28.0/22 IP: 2606:5e00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:40:53:de:43:51:67:42:b7:66:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 21 00:45:11 2026 GMT Not After : Dec 24 01:45:11 2028 GMT Subject: CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:43:f2:12:9e:50:36:e0:46:2f:a3:4a:cf: d2:63:fd:4a:23:91:a2:9d:2b:0e:47:a3:a5:18:9b: d4:35:81:52:bb:79:27:b9:a0:f1:52:45:f6:98:63: b9:13:c8:c5:bb:fb:20:ed:34:26:ea:fd:98:12:20: 94:a5:19:87:2e:66:6c:0c:d8:23:f4:77:a5:f6:e6: 13:a7:8e:a6:c8:18:fa:78:1a:57:a6:91:f5:98:7d: a6:8d:c0:4a:d1:ab:9f:3a:2c:b8:f9:f5:90:ee:1d: 04:34:40:01:22:cc:07:b4:34:46:4e:5e:00:c3:30: b0:6b:57:6e:0d:ab:61:dd:3b:66:e4:94:12:24:ee: 97:9d:71:70:52:24:49:bf:89:05:51:0f:7c:1e:95: b2:57:7b:e0:4d:1d:21:c4:0f:09:ac:8b:8b:f5:b0: 89:fb:d1:bd:43:f0:12:26:0d:23:b5:99:cb:5b:2c: c2:21:bb:b2:b0:81:c9:8d:3a:10:f1:67:2b:e8:6c: 60:b7:63:f8:34:bb:2b:f2:e3:b3:f8:42:18:57:43: aa:52:2f:78:64:3d:ad:92:59:d6:16:24:1d:65:80: 08:cb:42:09:a2:e0:6b:40:d5:20:93:b6:ff:0d:fa: 35:dc:47:59:25:8f:e2:a5:91:43:53:1e:4a:d9:2e: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.193.252.0/22 162.244.32.0/22 162.248.224.0/21 204.155.28.0/22 IPv6: 2606:5e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14576 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f2:3d:9a:ea:f3:8d:f3:2c:94:27:e9:99:fb:34:0f:b5:9f: ec:27:31:91:ec:47:0b:d5:8a:3f:cd:7e:77:32:f7:c9:03:dd: 39:55:6c:66:19:ed:0b:63:d5:83:fd:a7:37:17:3c:28:fd:8c: 7a:1a:d2:ea:47:d3:6f:8e:55:3a:60:42:16:e2:3c:26:84:2b: 5d:5c:04:0c:e3:08:5c:b4:9f:c0:76:64:bd:91:86:52:fd:b9: 48:b8:a4:29:3b:16:52:de:98:b7:20:2b:58:97:1b:ad:bd:14: 7a:87:92:fc:69:4a:5d:dd:77:88:be:9b:04:35:fe:28:0f:d0: b5:66:45:5e:d9:b4:ef:c5:07:69:56:74:16:23:a1:60:78:eb: b4:0b:60:c8:54:f7:e4:8a:8c:c7:ac:4b:d7:e9:e1:4d:0f:b3: 7e:42:70:5d:ab:c8:6e:23:85:00:1b:88:a4:80:7b:58:ab:8f: 13:5d:e4:49:be:42:e1:0f:af:91:dd:97:5e:e9:6b:9e:95:52: d5:44:6b:f9:f2:42:60:f9:74:9b:f5:44:6a:2d:4e:d6:9d:cd: c4:c9:1b:27:88:1f:13:fc:f9:c5:ef:1e:2c:f7:24:34:4d:25: f5:20:db:de:14:99:af:ba:28:86:c4:8c:f0:de:e6:e5:37:2d: 83:8c:b2:b5 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE8+QFPeQ1FnQrdmYCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyMTAwNDUxMVoXDTI4MTIyNDAxNDUxMVowLzEtMCsGA1UEAxMk YTNlZTAyNTktY2RiMy00MWNlLWJiZjctN2EwMjhmNGI5YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuBD8hKeUDbgRi+jSs/SY/1KI5GinSsOR6Ol GJvUNYFSu3knuaDxUkX2mGO5E8jFu/sg7TQm6v2YEiCUpRmHLmZsDNgj9Hel9uYT p46myBj6eBpXppH1mH2mjcBK0aufOiy4+fWQ7h0ENEABIswHtDRGTl4AwzCwa1du Dath3Ttm5JQSJO6XnXFwUiRJv4kFUQ98HpWyV3vgTR0hxA8JrIuL9bCJ+9G9Q/AS Jg0jtZnLWyzCIbuysIHJjToQ8Wcr6Gxgt2P4NLsr8uOz+EIYV0OqUi94ZD2tklnW FiQdZYAIy0IJouBrQNUgk7b/Dfo13EdZJY/ipZFDUx5K2S4wyQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFLrKscyVioDfyxSUjQVEnqewRii1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h M2VlMDI1OS1jZGIzLTQxY2UtYmJmNy03YTAyOGY0YjliMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EzZWUwMjU5LWNkYjMtNDFjZS1i YmY3LTdhMDI4ZjRiOWIxMy9hM2VlMDI1OS1jZGIzLTQxY2UtYmJmNy03YTAyOGY0 YjliMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAJowfwDBAKi9CADBAOi+OADBALMmxwwDQQCAAIw BwMFACYGXgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICOPAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIPI9 murzjfMslCfpmfs0D7Wf7CcxkexHC9WKP81+dzL3yQPdOVVsZhntC2PVg/2nNxc8 KP2MehrS6kfTb45VOmBCFuI8JoQrXVwEDOMIXLSfwHZkvZGGUv25SLikKTsWUt6Y tyArWJcbrb0UeoeS/GlKXd13iL6bBDX+KA/QtWZFXtm078UHaVZ0FiOhYHjrtAtg yFT35IqMx6xL1+nhTQ+zfkJwXavIbiOFABuIpIB7WKuPE13kSb5C4Q+vkd2XXulr npVS1URr+fJCYPl0m/VEai1O1p3NxMkbJ4gfE/z5xe8eLPckNE0l9SDb3hSZr7oo hsSM8N7m5Tctg4yytQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:22:51 2026 by rpki-client