$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer File: aa6b84f9-271a-420e-904b-b25ba5f52b05.cer (raw, json) Hash identifier: fx/W9ZcLJSG/yaU1LgE13OrtJcazM+wSwvzQ9BU1KOM= Subject key identifier: 7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F172AC318C2BB26C3F44D3600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Sep 2026 00:45:12 +0000 Certificate not after: Sun 10 Dec 2028 01:45:12 +0000 Subordinate resources: IP: 198.179.169.0 -- 198.179.173.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:2a:c3:18:c2:bb:26:c3:f4:4d:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 7 00:45:12 2026 GMT Not After : Dec 10 01:45:12 2028 GMT Subject: CN=aa6b84f9-271a-420e-904b-b25ba5f52b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:b6:30:c7:91:1c:c2:fd:42:0b:f2:e9:9e: c9:fa:1a:ae:e1:0a:94:dc:f8:13:12:a1:4c:7c:ba: e3:96:1d:cf:c4:44:df:ff:0f:b3:cc:26:7e:b8:28: af:a5:82:b7:4b:43:db:01:58:05:cc:c5:1c:9a:bc: b4:74:05:49:8a:b2:af:5e:2a:16:e3:5e:a7:61:50: 82:13:29:2b:99:5a:05:99:cc:de:f1:af:b3:ae:57: 45:18:f5:97:18:6b:32:37:2c:4e:f2:f4:92:59:83: 9a:c6:a7:7e:55:8d:80:87:7f:3b:4c:82:06:fa:bb: 99:9a:05:75:86:e4:c9:9b:8d:ce:2e:8f:79:dd:20: b1:d0:13:e6:6b:7e:92:64:2f:79:07:fe:6a:76:63: 14:25:54:6c:fe:db:31:65:08:bc:80:f3:d6:c4:28: 1d:e5:85:ce:28:71:1c:bd:8c:9e:50:59:26:2a:30: 52:ed:97:82:97:12:38:a9:6d:af:5c:df:aa:38:e9: e4:5d:e4:ce:91:23:a0:8e:b7:24:c0:fa:15:96:97: b3:94:25:35:04:d1:f7:91:35:23:82:cf:11:d7:9e: bd:a5:38:74:6a:85:9d:2a:db:a8:89:2e:85:6f:ee: 20:e6:aa:47:05:80:94:a7:09:00:74:50:9e:d5:47: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.179.169.0-198.179.173.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:57:60:df:f1:97:64:68:5f:49:c9:0e:a3:2a:c3:8a:3b:10: 78:b5:31:33:6d:77:60:78:d2:22:ef:05:02:d9:18:40:27:cd: 44:33:29:a6:6b:b8:81:a6:6b:94:3f:ec:55:8e:2e:78:ea:f0: 94:74:13:d6:ec:41:1d:e3:4c:02:4c:60:93:c9:77:c8:af:4c: 77:56:50:23:4f:25:4b:fb:4a:cc:9c:97:3c:b6:81:8c:46:32: a8:d6:51:e4:50:eb:4a:92:09:27:be:c3:0b:14:dd:42:38:f1: 84:a1:9b:d4:66:ec:6d:60:6d:c3:58:a4:7a:95:08:54:ed:46: 7a:48:e9:04:d9:b7:83:33:05:a4:69:f3:ab:12:3a:04:44:ed: dd:a0:fa:70:ae:93:3a:c2:75:2e:94:44:f1:9d:e9:fe:9c:d3: d1:c9:a7:74:b9:a4:24:68:b4:ec:0a:cf:c5:36:e6:5c:a6:7a: 0b:75:39:ca:69:2b:f2:b9:bd:dc:1a:b2:8f:2b:0c:61:d1:99: ba:1b:c6:a7:ca:6c:d1:0d:24:82:c6:9d:76:97:2d:79:a4:26: 6d:a8:24:20:31:29:b0:a1:fe:f8:90:4a:44:aa:80:e5:25:b4: 36:16:c4:d7:c3:2f:e2:18:1d:e6:38:94:1d:c4:32:8d:f2:ee: 33:05:ae:4e -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE8XKsMYwrsmw/RNNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwNzAwNDUxMloXDTI4MTIxMDAxNDUxMlowLzEtMCsGA1UEAxMk YWE2Yjg0ZjktMjcxYS00MjBlLTkwNGItYjI1YmE1ZjUyYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTa2MMeRHML9Qgvy6Z7J+hqu4QqU3PgTEqFM fLrjlh3PxETf/w+zzCZ+uCivpYK3S0PbAVgFzMUcmry0dAVJirKvXioW416nYVCC EykrmVoFmcze8a+zrldFGPWXGGsyNyxO8vSSWYOaxqd+VY2Ah387TIIG+ruZmgV1 huTJm43OLo953SCx0BPma36SZC95B/5qdmMUJVRs/tsxZQi8gPPWxCgd5YXOKHEc vYyeUFkmKjBS7ZeClxI4qW2vXN+qOOnkXeTOkSOgjrckwPoVlpezlCU1BNH3kTUj gs8R1569pTh0aoWdKtuoiS6Fb+4g5qpHBYCUpwkAdFCe1Ue22wIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFH1OMz4Q+2mBk3XB1sA8F3v5S10DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h YTZiODRmOS0yNzFhLTQyMGUtOTA0Yi1iMjViYTVmNTJiMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FhNmI4NGY5LTI3MWEtNDIwZS05 MDRiLWIyNWJhNWY1MmIwNS9hYTZiODRmOS0yNzFhLTQyMGUtOTA0Yi1iMjViYTVm NTJiMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMazqQMEAcazrDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6V2Df8Zdk aF9JyQ6jKsOKOxB4tTEzbXdgeNIi7wUC2RhAJ81EMymma7iBpmuUP+xVji546vCU dBPW7EEd40wCTGCTyXfIr0x3VlAjTyVL+0rMnJc8toGMRjKo1lHkUOtKkgknvsML FN1COPGEoZvUZuxtYG3DWKR6lQhU7UZ6SOkE2beDMwWkafOrEjoERO3doPpwrpM6 wnUulETxnen+nNPRyad0uaQkaLTsCs/FNuZcpnoLdTnKaSvyub3cGrKPKwxh0Zm6 G8anymzRDSSCxp12ly15pCZtqCQgMSmwof74kEpEqoDlJbQ2FsTXwy/iGB3mOJQd xDKN8u4zBa5O -----END CERTIFICATE-----Generated at Tue Sep 22 01:35:55 2026 by rpki-client