$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer File: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer (raw, json) Hash identifier: kGZaAsnIgI8F+WxHBm2sJbOhb9kMvsWocadi2AJ3Xsk= Subject key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1F8ACEBD6223BD4072727100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Sep 2026 00:45:11 +0000 Certificate not after: Wed 13 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 23.139.252.0/24 IP: 2602:f61d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:8a:ce:bd:62:23:bd:40:72:72:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 10 00:45:11 2026 GMT Not After : Dec 13 01:45:11 2028 GMT Subject: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:be:65:0f:f5:52:0f:a1:1a:a2:3d:75:f2: 2d:85:79:93:e8:ae:47:32:89:41:66:32:5f:30:d5: 19:9a:d1:08:99:a1:9d:c9:e2:7d:9b:1f:7d:43:d7: 76:24:be:5e:ec:ea:7e:84:b2:ae:29:41:c8:e6:82: dd:10:2d:22:c5:b6:a9:96:fe:f6:aa:7a:b8:04:a2: 0e:a1:f3:c5:cf:eb:05:99:eb:a5:77:09:37:82:fe: c6:4f:ed:b7:ed:5f:b5:0d:28:4b:5a:11:54:c1:51: 68:70:d2:d9:46:75:04:8b:ec:ec:6c:7d:f1:93:74: b4:b2:59:cd:72:bb:f3:36:dd:e7:1f:9c:8f:df:c7: cb:85:a2:69:81:5f:9b:04:c2:28:f9:e0:58:8a:bd: 31:1b:73:dc:4e:26:e0:fc:a7:bb:2a:d8:e7:07:70: b9:fe:71:ac:95:5a:0f:b7:5f:ab:c9:cf:c3:8b:20: c3:25:b6:1f:be:9c:20:98:a2:55:21:08:71:b0:5f: 7b:7e:d5:37:bc:31:79:61:82:d5:01:f5:eb:f1:00: d2:cc:b2:5f:3b:84:b3:a2:38:c3:c9:33:08:ee:fd: d0:b6:b8:66:f4:3f:91:18:46:bf:dd:72:2d:1c:31: 65:c7:e7:35:6e:e3:00:8e:27:42:dc:8d:96:61:01: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.252.0/24 IPv6: 2602:f61d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3f:b4:13:aa:5e:12:7d:29:a5:42:5e:d5:08:f4:85:6a:a5: 8f:43:c7:89:8f:da:d9:38:02:b9:61:0f:2d:04:f1:1c:9d:34: 69:b7:5d:03:48:ad:0f:79:2f:9d:fb:15:ab:a4:db:10:27:5a: 61:d1:0a:64:67:65:cd:01:e8:da:de:b8:f4:bf:c4:e2:a0:0d: 3a:0a:86:00:c2:91:7e:24:26:30:ed:c1:6e:94:f6:12:27:76: 08:f2:55:df:fe:a3:e9:e5:af:7e:d7:62:d6:b1:d9:de:69:62: 88:f7:e5:44:cf:43:9f:e2:f9:d8:ea:4f:f7:f7:7b:9c:e3:9f: 89:d1:58:d2:37:5d:2e:5c:30:3b:1d:ca:24:28:d0:12:1b:37: b5:cc:ba:61:87:0b:33:a2:22:35:59:c0:79:ad:0c:e6:86:83: c4:a3:d0:42:76:92:2f:54:b7:4a:ce:d2:6a:a2:aa:a2:ad:5b: da:2b:20:b3:eb:4e:7a:cc:60:a7:54:95:4a:44:37:7a:43:41: b0:53:9d:f5:b8:89:1b:1e:ec:a6:c6:9e:94:16:5c:aa:3a:1f: bd:9f:c4:c1:b7:6d:ec:8e:82:be:bc:d7:e8:e7:b9:7b:ef:17: d4:57:a1:87:a8:2c:82:a2:52:99:69:4e:26:94:56:c6:3e:9f: 30:66:7b:c7 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE8fis69YiO9QHJycQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxMDAwNDUxMVoXDTI4MTIxMzAxNDUxMVowLzEtMCsGA1UEAxMk YTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1ZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF6+ZQ/1Ug+hGqI9dfIthXmT6K5HMolBZjJf MNUZmtEImaGdyeJ9mx99Q9d2JL5e7Op+hLKuKUHI5oLdEC0ixbaplv72qnq4BKIO ofPFz+sFmeuldwk3gv7GT+237V+1DShLWhFUwVFocNLZRnUEi+zsbH3xk3S0slnN crvzNt3nH5yP38fLhaJpgV+bBMIo+eBYir0xG3PcTibg/Ke7KtjnB3C5/nGslVoP t1+ryc/DiyDDJbYfvpwgmKJVIQhxsF97ftU3vDF5YYLVAfXr8QDSzLJfO4SzojjD yTMI7v3Qtrhm9D+RGEa/3XItHDFlx+c1buMAjidC3I2WYQH6yQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNalguE5+i11B9ttzJGplpIMcTuuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h NGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E0ZjJmMWE3LTA3ZTUtNDJmOC1i MWFhLTFlMmU5NWE2NWZmOC9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVh NjVmZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi/wwDgQCAAIwCAMGACYC9h0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFU/tBOqXhJ9KaVCXtUI9IVqpY9Dx4mP2tk4ArlhDy0E8RydNGm3XQNIrQ95L537 Fauk2xAnWmHRCmRnZc0B6NreuPS/xOKgDToKhgDCkX4kJjDtwW6U9hIndgjyVd/+ o+nlr37XYtax2d5pYoj35UTPQ5/i+djqT/f3e5zjn4nRWNI3XS5cMDsdyiQo0BIb N7XMumGHCzOiIjVZwHmtDOaGg8Sj0EJ2ki9Ut0rO0mqiqqKtW9orILPrTnrMYKdU lUpEN3pDQbBTnfW4iRse7KbGnpQWXKo6H72fxMG3beyOgr681+jnuXvvF9RXoYeo LIKiUplpTiaUVsY+nzBme8c= -----END CERTIFICATE-----Generated at Sun Sep 20 21:29:37 2026 by rpki-client