$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer File: a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer (raw, json) Hash identifier: Lw1C76a+mOHDZ6IqarBKq8q5Z8TUZaL8s+xZjZZeiCE= Subject key identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F066AA71C8F7EE7F78386E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Sep 2026 00:45:11 +0000 Certificate not after: Mon 04 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 36228 IP: 192.43.153.0/24 IP: 2602:f98a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:6a:a7:1c:8f:7e:e7:f7:83:86:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 1 00:45:11 2026 GMT Not After : Dec 4 01:45:11 2028 GMT Subject: CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:86:cb:dc:2d:76:5c:4d:07:25:08:eb:ba: 53:43:5b:1f:88:a7:fd:09:cf:46:6a:59:40:3a:fa: de:80:c5:1d:bb:88:db:7d:f7:75:6b:07:28:43:c1: c8:54:06:12:c2:5c:14:d1:e0:57:16:3d:f1:e4:b3: e7:fb:7a:26:c9:34:3b:73:3e:93:a7:d2:33:44:b1: 6a:85:12:1a:a5:39:ae:49:2a:b6:46:f2:88:db:91: ef:ed:f2:af:d2:0c:48:d7:bb:9b:d6:2e:ba:49:2b: 82:56:e1:5d:1a:89:d3:5b:f8:ed:55:a6:36:98:a8: 01:93:95:e5:a8:da:a2:b4:ff:33:b6:22:41:f5:43: b7:a8:4e:dd:6e:82:de:8f:8f:6b:6a:f3:65:9f:c2: 21:6f:6d:76:ef:79:b4:d3:8a:b9:6a:a0:5b:ff:af: 24:9e:2d:c9:1e:43:38:42:57:db:17:8a:f1:83:c1: 4f:97:21:81:4b:fd:d9:30:57:3b:4d:f0:f4:b2:d8: 29:61:5d:0f:f3:4c:03:d2:cb:d9:44:32:02:92:5a: 20:3b:df:cf:79:34:91:70:51:b6:f2:56:7a:16:29: 9f:ff:d7:d3:09:57:43:ce:74:67:89:93:96:be:ba: 3a:7b:4e:ac:3b:aa:e8:34:9f:12:95:c7:8b:a2:bd: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.43.153.0/24 IPv6: 2602:f98a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a4:7e:de:bf:5b:95:ea:65:07:e4:2b:dc:33:e2:96:95:b8: 55:cd:d5:71:23:7d:0b:de:84:3b:d4:15:2c:c8:cb:c7:c5:69: 08:f7:bd:64:ee:4c:12:25:2e:56:bf:92:77:11:49:d6:52:78: 3c:d9:65:69:4c:10:45:8e:cb:84:32:9b:f3:fa:ff:98:99:06: 88:0b:c4:ff:5a:90:84:a0:70:17:78:a2:5e:f7:f8:0e:9d:b8: 3e:c9:0f:64:3f:57:4d:b4:95:96:d0:e2:07:cb:10:73:54:3b: 6d:a6:57:7e:61:3a:b7:fd:22:40:05:80:92:d9:a9:2a:e5:1b: 81:14:e6:13:54:39:94:02:d4:e9:3d:52:06:c6:fb:5b:42:b0: c4:ff:d0:c7:b1:7e:98:df:62:1d:8e:eb:4e:fd:5b:7c:aa:a3: 2c:71:a7:af:3c:d0:15:1c:f4:04:ba:91:36:7b:15:e9:d4:af: 25:7e:f4:cf:39:ec:13:85:0b:98:81:5f:f3:61:d3:fe:ca:84: 72:f0:84:6b:0c:bb:84:ec:a8:2f:03:82:ad:1a:40:8e:94:7e: 43:7a:c6:23:d7:b5:6f:c9:1a:f4:a2:c6:32:8e:00:c0:aa:55: 71:89:cc:26:ce:b9:af:41:87:d2:c2:d8:fe:fa:97:e0:38:10: 13:b1:d9:f6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8Gaqccj37n94OG6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwMTAwNDUxMVoXDTI4MTIwNDAxNDUxMVowLzEtMCsGA1UEAxMk YTlhMzJkZWItMzE0Zi00YTFmLTk4ZWMtMWI2M2I4ZDMxYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WqGy9wtdlxNByUI67pTQ1sfiKf9Cc9GallA OvregMUdu4jbffd1awcoQ8HIVAYSwlwU0eBXFj3x5LPn+3omyTQ7cz6Tp9IzRLFq hRIapTmuSSq2RvKI25Hv7fKv0gxI17ub1i66SSuCVuFdGonTW/jtVaY2mKgBk5Xl qNqitP8ztiJB9UO3qE7dboLej49ravNln8Ihb21273m004q5aqBb/68kni3JHkM4 QlfbF4rxg8FPlyGBS/3ZMFc7TfD0stgpYV0P80wD0svZRDICklogO9/PeTSRcFG2 8lZ6Fimf/9fTCVdDznRniZOWvro6e06sO6roNJ8SlceLor2TiQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC5eHewVtfKokgaWBKgOg849f1oWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h OWEzMmRlYi0zMTRmLTRhMWYtOThlYy0xYjYzYjhkMzFhZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E5YTMyZGViLTMxNGYtNGExZi05 OGVjLTFiNjNiOGQzMWFkNC9hOWEzMmRlYi0zMTRmLTRhMWYtOThlYy0xYjYzYjhk MzFhZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAK5kwDgQCAAIwCAMGACYC+YoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCNhDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNpH7ev1uV6mUH5CvcM+KWlbhV zdVxI30L3oQ71BUsyMvHxWkI971k7kwSJS5Wv5J3EUnWUng82WVpTBBFjsuEMpvz +v+YmQaIC8T/WpCEoHAXeKJe9/gOnbg+yQ9kP1dNtJWW0OIHyxBzVDttpld+YTq3 /SJABYCS2akq5RuBFOYTVDmUAtTpPVIGxvtbQrDE/9DHsX6Y32IdjutO/Vt8qqMs caevPNAVHPQEupE2exXp1K8lfvTPOewThQuYgV/zYdP+yoRy8IRrDLuE7KgvA4Kt GkCOlH5DesYj17VvyRr0osYyjgDAqlVxicwmzrmvQYfSwtj++pfgOBATsdn2 -----END CERTIFICATE-----Generated at Mon Sep 21 19:57:34 2026 by rpki-client