$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer File: ae6aa33d-df94-457a-9298-bc765c153d31.cer (raw, json) Hash identifier: NR+bz0R7XcwaZFvhfXH9W2k4PZTRvxsrwE/F/aqPdzQ= Subject key identifier: 43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EF44535325B6DE44C94138A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Aug 2026 12:45:11 +0000 Certificate not after: Mon 27 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 23.139.36.0/24 IP: 2602:f642::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:45:35:32:5b:6d:e4:4c:94:13:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 25 12:45:11 2026 GMT Not After : Nov 27 13:45:11 2028 GMT Subject: CN=ae6aa33d-df94-457a-9298-bc765c153d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:0d:70:b7:52:f3:50:a9:86:da:83:6f:3b: b0:dd:05:0d:60:d3:d3:32:74:c3:06:b3:de:af:e3: 1f:02:be:0b:04:60:79:c7:98:d5:c6:a8:79:85:56: 40:9d:dd:75:00:75:c2:02:4b:6b:10:cf:93:05:96: 7d:27:b4:50:b1:72:56:0f:c9:1f:33:03:aa:2a:55: 11:14:aa:a0:0a:52:06:4c:2e:55:e3:6b:dd:b1:0a: 94:ce:41:94:c9:a5:71:37:a6:23:8e:84:ef:df:dc: 35:16:23:67:5c:26:ce:43:c8:b5:a3:c6:2d:41:6e: a2:96:d1:1c:a4:f5:86:ea:97:89:09:28:98:1f:f9: 87:e6:0c:c8:8f:e3:22:77:4b:5a:6d:16:05:9e:d0: d1:bd:e2:53:ac:12:e6:89:56:3e:5d:50:ca:11:1b: 23:b7:1e:c2:28:69:a0:b2:5c:f1:2d:f1:0c:f4:02: ef:cc:4f:a2:34:72:e0:b2:10:7e:3a:fc:54:76:b2: 37:ac:eb:4d:9e:06:14:1e:56:f8:e8:87:20:d4:6c: ab:91:20:6f:af:95:1f:2c:8e:d6:61:10:96:1c:2f: 5f:c9:de:c0:d0:da:75:e7:d9:1a:d5:ce:8e:cb:15: 06:a1:38:2e:a4:ba:8d:6f:31:eb:b9:b7:89:c5:62: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.36.0/24 IPv6: 2602:f642::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:02:a1:c4:d5:cd:5d:66:c9:19:22:06:79:7a:3d:e0:13:82: e0:3f:bf:98:d6:4b:f6:20:01:ff:bf:e1:a3:a3:c5:1f:4e:b5: 75:27:52:06:08:67:98:0b:e6:63:a0:32:e1:1b:70:0c:ad:5e: 80:70:92:7a:57:37:1d:d8:08:34:b0:73:a4:4b:69:18:5c:19: 9c:39:84:b6:8a:44:f4:e8:46:07:04:a9:00:bb:25:12:bf:f4: 6f:df:25:e7:fe:eb:d8:43:1f:b3:71:dc:9b:c0:bc:14:37:ae: ae:7b:2d:bf:73:db:f4:17:91:1c:0a:3b:37:dc:b1:1d:1d:bf: 19:85:b0:1e:c4:30:8b:c4:ed:5f:42:93:a6:8e:82:88:a5:20: 86:86:f3:a4:f6:cf:fe:6b:4e:cc:51:bf:70:aa:ad:4e:b5:d4: af:ab:f6:b4:cc:3f:5b:d7:b5:48:46:c8:ef:ba:df:fd:2d:6e: 3d:05:74:74:8c:8f:2c:67:6b:19:a3:d7:55:cb:6f:93:f8:61: ba:8f:9d:50:62:41:5a:c1:ae:60:90:de:f9:d1:e1:53:2a:24: d9:d1:b1:9c:24:f8:76:29:65:a7:4d:80:e9:06:84:4f:f1:70: 52:98:65:17:c2:35:02:35:c9:9b:41:39:22:de:73:2f:e9:01: bc:3d:4a:1b -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE70RTUyW23kTJQTioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyNTEyNDUxMVoXDTI4MTEyNzEzNDUxMVowLzEtMCsGA1UEAxMk YWU2YWEzM2QtZGY5NC00NTdhLTkyOTgtYmM3NjVjMTUzZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv78NcLdS81CphtqDbzuw3QUNYNPTMnTDBrPe r+MfAr4LBGB5x5jVxqh5hVZAnd11AHXCAktrEM+TBZZ9J7RQsXJWD8kfMwOqKlUR FKqgClIGTC5V42vdsQqUzkGUyaVxN6YjjoTv39w1FiNnXCbOQ8i1o8YtQW6iltEc pPWG6peJCSiYH/mH5gzIj+Mid0tabRYFntDRveJTrBLmiVY+XVDKERsjtx7CKGmg slzxLfEM9ALvzE+iNHLgshB+OvxUdrI3rOtNngYUHlb46Icg1GyrkSBvr5UfLI7W YRCWHC9fyd7A0Np159ka1c6OyxUGoTgupLqNbzHrubeJxWIXvQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEOzdl/Z3DnHatT5vlBQIXTc4+WiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h ZTZhYTMzZC1kZjk0LTQ1N2EtOTI5OC1iYzc2NWMxNTNkMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FlNmFhMzNkLWRmOTQtNDU3YS05 Mjk4LWJjNzY1YzE1M2QzMS9hZTZhYTMzZC1kZjk0LTQ1N2EtOTI5OC1iYzc2NWMx NTNkMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiyQwDgQCAAIwCAMGACYC9kIAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHYCocTVzV1myRkiBnl6PeATguA/v5jWS/YgAf+/4aOjxR9OtXUnUgYIZ5gL5mOg MuEbcAytXoBwknpXNx3YCDSwc6RLaRhcGZw5hLaKRPToRgcEqQC7JRK/9G/fJef+ 69hDH7Nx3JvAvBQ3rq57Lb9z2/QXkRwKOzfcsR0dvxmFsB7EMIvE7V9Ck6aOgoil IIaG86T2z/5rTsxRv3CqrU611K+r9rTMP1vXtUhGyO+63/0tbj0FdHSMjyxnaxmj 11XLb5P4YbqPnVBiQVrBrmCQ3vnR4VMqJNnRsZwk+HYpZadNgOkGhE/xcFKYZRfC NQI1yZtBOSLecy/pAbw9Shs= -----END CERTIFICATE-----Generated at Tue Sep 22 20:34:25 2026 by rpki-client