$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer File: c2cb8327-ee3e-477c-990c-118e040b2de6.cer (raw, json) Hash identifier: jZlk8gcb599Y9K9Mp0sCnnKrtgyxLOOl0h5aQP3laxw= Subject key identifier: FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F304AEA3DEFC4A06521204A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Sep 2026 00:45:12 +0000 Certificate not after: Tue 19 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 398242 IP: 152.86.0.0/20 IP: 170.117.192.0/21 IP: 198.71.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:4a:ea:3d:ef:c4:a0:65:21:20:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 16 00:45:12 2026 GMT Not After : Dec 19 01:45:12 2028 GMT Subject: CN=c2cb8327-ee3e-477c-990c-118e040b2de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:d9:06:1f:eb:d9:10:30:27:0c:d6:a5:b6: bf:73:6e:d1:9e:ef:1a:fb:d2:ae:4c:e2:ec:e2:5a: 67:0b:9f:ae:5d:cf:bb:96:0f:84:d6:57:a2:94:56: 8e:5c:95:1b:c8:4b:db:e8:f3:2c:10:60:62:44:18: c6:3c:7d:68:5c:8f:df:23:20:b3:d5:17:5f:2a:44: 31:6c:0f:99:12:e1:a9:3b:13:30:0d:76:01:3a:b1: 01:d6:66:7e:9c:cf:8b:53:9f:2e:39:c6:5c:fb:a2: e2:11:1d:9d:91:dc:22:9f:92:51:7c:de:6f:d1:d6: b4:ad:e0:c0:1e:22:1b:c0:25:cf:57:33:05:cd:cc: d6:0a:7a:78:00:ec:b6:f0:63:30:ad:a4:c5:bf:34: 61:94:e7:39:35:73:72:c6:77:9d:30:42:61:f2:92: 59:3a:c9:f6:33:91:8a:24:92:7e:98:89:55:76:88: 54:5d:6c:bc:45:4b:e0:4f:a1:4d:68:1e:23:af:54: 60:fd:1d:48:db:bf:1b:68:2f:b0:8a:ff:23:d3:33: d3:c7:a9:e1:38:56:0c:24:ef:bb:b2:d6:f4:b4:5b: e9:c2:a9:03:f4:02:52:19:89:bc:f0:ae:65:c0:56: 5d:fb:52:6e:d9:99:d3:02:44:7e:7e:4f:74:da:13: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 152.86.0.0/20 170.117.192.0/21 198.71.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398242 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2f:d2:dc:d9:1f:ec:a6:4c:da:18:ba:b9:c7:de:4d:7d:c7: 4c:ad:88:92:a3:65:05:8c:ff:1d:a8:36:b2:88:bd:4a:c0:3b: 18:f7:88:c1:b2:0f:90:b4:20:7b:7a:15:8d:1b:7b:7a:52:a1: 45:32:c0:0f:4e:54:95:80:87:ce:69:c5:ee:4d:01:4a:13:a9: bf:a4:54:dd:64:87:a8:97:0f:46:76:61:49:66:7d:e8:ee:44: f7:1e:81:97:2a:17:00:e9:e3:6f:5d:9b:f7:9f:41:ed:1a:2a: 9d:0f:55:79:63:27:c9:77:d7:a9:4c:e4:0f:43:fb:74:f0:ce: 4c:61:ef:98:3d:b7:9d:2d:d4:f1:91:bd:c1:01:6b:61:11:5f: d8:6b:0e:2a:db:af:6b:5e:f0:2d:0a:4c:54:44:10:5e:f1:c7: b0:db:6e:f8:c0:84:40:ef:c1:95:11:94:2d:8b:51:0d:45:e3: 7a:04:b4:e5:dd:23:fc:67:3d:42:3e:3a:e4:c9:fa:77:48:ef: e9:6d:6b:38:6c:c1:f8:03:ff:ca:1f:f9:b4:1a:70:74:80:d2: ea:8e:9c:b8:7e:6f:78:e8:c1:b4:5b:f9:1c:91:ab:89:65:66: 06:d8:d1:b9:6d:59:db:21:93:9b:f7:fa:9a:57:67:cf:2f:68: 0f:a3:1d:30 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE8wSuo978SgZSEgSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxNjAwNDUxMloXDTI4MTIxOTAxNDUxMlowLzEtMCsGA1UEAxMk YzJjYjgzMjctZWUzZS00NzdjLTk5MGMtMTE4ZTA0MGIyZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKDZBh/r2RAwJwzWpba/c27Rnu8a+9KuTOLs 4lpnC5+uXc+7lg+E1leilFaOXJUbyEvb6PMsEGBiRBjGPH1oXI/fIyCz1RdfKkQx bA+ZEuGpOxMwDXYBOrEB1mZ+nM+LU58uOcZc+6LiER2dkdwin5JRfN5v0da0reDA HiIbwCXPVzMFzczWCnp4AOy28GMwraTFvzRhlOc5NXNyxnedMEJh8pJZOsn2M5GK JJJ+mIlVdohUXWy8RUvgT6FNaB4jr1Rg/R1I278baC+wiv8j0zPTx6nhOFYMJO+7 stb0tFvpwqkD9AJSGYm88K5lwFZd+1Ju2ZnTAkR+fk902hNeEwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFP69iQCgZyt3WZ04v08L3+XdC7alMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j MmNiODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThlMDQwYjJkZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2MyY2I4MzI3LWVlM2UtNDc3Yy05 OTBjLTExOGUwNDBiMmRlNi9jMmNiODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThlMDQw YjJkZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBASYVgADBAOqdcADBATGR1AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhOiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFAv0tzZH+ymTNoYurnH3k19x0ytiJKj ZQWM/x2oNrKIvUrAOxj3iMGyD5C0IHt6FY0be3pSoUUywA9OVJWAh85pxe5NAUoT qb+kVN1kh6iXD0Z2YUlmfejuRPcegZcqFwDp429dm/efQe0aKp0PVXljJ8l316lM 5A9D+3Twzkxh75g9t50t1PGRvcEBa2ERX9hrDirbr2te8C0KTFREEF7xx7DbbvjA hEDvwZURlC2LUQ1F43oEtOXdI/xnPUI+OuTJ+ndI7+ltazhswfgD/8of+bQacHSA 0uqOnLh+b3jowbRb+RyRq4llZgbY0bltWdshk5v3+ppXZ88vaA+jHTA= -----END CERTIFICATE-----Generated at Tue Sep 22 07:10:51 2026 by rpki-client