$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer File: cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer (raw, json) Hash identifier: i3cxlw7hjwg4L6I/5Oe4hiQY9VBfWfb5txHqZbN9a/o= Subject key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1CC02111C701D4D83C2E0200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 00:45:12 +0000 Certificate not after: Tue 12 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 22004 AS: 22780 AS: 22795 AS: 26201 IP: 207.241.144.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c0:21:11:c7:01:d4:d8:3c:2e:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 00:45:12 2026 GMT Not After : Dec 12 01:45:12 2028 GMT Subject: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:a3:a6:d3:f0:9f:d5:eb:fa:ab:29:0f:78: 47:8a:54:36:34:f9:1a:7b:61:1f:84:4b:9d:9c:75: 53:af:d9:55:ee:46:b1:88:70:e3:b3:b1:ba:5c:12: 2a:a0:05:45:ae:6c:cb:50:57:8d:f5:62:70:1a:6b: c3:13:52:3c:49:75:a2:bd:b5:a4:21:60:ef:f2:31: 22:3d:35:e0:cd:70:f9:5c:57:4a:d3:d7:b0:5c:6a: 1e:13:49:bc:77:90:83:0a:75:8c:66:27:51:67:c1: 58:ec:86:c3:2f:e5:cc:eb:02:8c:f5:cc:99:f6:17: 2e:6d:9f:e2:fd:e2:c1:ab:79:33:96:07:98:13:6e: e0:6e:c8:7a:c2:d7:58:58:70:13:95:9f:d4:8e:e4: 54:bd:20:24:26:45:b0:c9:ab:6c:35:a8:d0:c0:c6: fb:39:a5:21:45:90:f8:37:cc:3d:26:71:16:92:71: 09:2e:fa:2a:f3:3e:5a:b4:23:e8:2e:d3:26:39:1c: fb:5f:88:39:ec:e6:c6:80:f9:30:f1:b8:8a:6c:73: 76:2e:b5:29:42:53:fb:7d:d7:0e:80:d5:78:d0:c3: f6:65:a8:56:1d:be:fb:31:13:5c:56:92:61:4c:36: 5c:78:dc:91:53:50:b9:b2:b5:ea:9c:3e:d5:b9:f6: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.144.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22004 22780 22795 26201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8a:ab:01:08:95:b6:9d:f4:c0:34:16:14:b4:49:d7:e5:34: 0c:c0:a0:34:aa:71:d6:83:ef:3b:b7:06:38:8b:3b:3a:2f:cc: 81:dc:7b:e1:c1:04:19:68:76:40:6f:5b:48:ba:dc:c6:15:72: ea:af:16:b6:0e:25:d3:c1:70:8d:59:f1:be:c5:df:33:b8:06: bb:86:e2:7c:df:fc:95:98:3d:7d:cf:5e:a8:63:ef:62:37:aa: b1:15:eb:32:39:eb:38:ea:18:b8:66:3a:12:68:80:6c:87:02: 04:71:74:83:05:cf:ac:61:e3:51:a8:13:28:8f:dc:cb:4b:06: c7:5e:86:25:0c:02:46:69:f3:6b:61:95:6c:d3:58:7e:cf:3d: 41:49:35:e5:4c:61:06:05:84:48:da:fb:3b:04:42:45:41:4e: e5:5b:04:3f:e4:39:71:10:fd:4e:d7:d8:d1:9c:b8:7c:20:28: 8b:87:37:c4:39:e4:2e:c2:44:64:2c:bd:ff:f7:4c:93:2a:4b: 47:5d:ff:e7:4e:07:cd:4a:bf:48:9c:70:8b:22:8b:f5:d6:b7: 34:7d:63:b4:ea:8d:fa:00:8d:55:6f:a8:56:3e:d3:34:2b:47: 70:a2:5e:04:3f:6d:9b:ad:09:48:6b:22:c7:7c:80:d0:70:da: 85:63:c6:c9 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE8cwCERxwHU2DwuAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTAwNDUxMloXDTI4MTIxMjAxNDUxMlowLzEtMCsGA1UEAxMk Y2RkNWM1NzgtMjYxMi00YjFhLThjNGEtYzEyYmM3YzNhMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP+jptPwn9Xr+qspD3hHilQ2NPkae2EfhEud nHVTr9lV7kaxiHDjs7G6XBIqoAVFrmzLUFeN9WJwGmvDE1I8SXWivbWkIWDv8jEi PTXgzXD5XFdK09ewXGoeE0m8d5CDCnWMZidRZ8FY7IbDL+XM6wKM9cyZ9hcubZ/i /eLBq3kzlgeYE27gbsh6wtdYWHATlZ/UjuRUvSAkJkWwyatsNajQwMb7OaUhRZD4 N8w9JnEWknEJLvoq8z5atCPoLtMmORz7X4g57ObGgPkw8biKbHN2LrUpQlP7fdcO gNV40MP2ZahWHb77MRNcVpJhTDZceNyRU1C5srXqnD7VufYYLQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFIXsbcXrj/0iw6I15BqmGfILbz0VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j ZGQ1YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJiYzdjM2ExZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NkZDVjNTc4LTI2MTItNGIxYS04 YzRhLWMxMmJjN2MzYTFlMy9jZGQ1YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJiYzdj M2ExZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATP8ZAwJQYIKwYBBQUHAQgBAf8EFjAUoBIwEAIC VfQCAlj8AgJZCwICZlkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa4qrAQiVtp30wDQWFLRJ1+U0DMCgNKpx 1oPvO7cGOIs7Oi/Mgdx74cEEGWh2QG9bSLrcxhVy6q8Wtg4l08FwjVnxvsXfM7gG u4bifN/8lZg9fc9eqGPvYjeqsRXrMjnrOOoYuGY6EmiAbIcCBHF0gwXPrGHjUagT KI/cy0sGx16GJQwCRmnza2GVbNNYfs89QUk15UxhBgWESNr7OwRCRUFO5VsEP+Q5 cRD9TtfY0Zy4fCAoi4c3xDnkLsJEZCy9//dMkypLR13/504HzUq/SJxwiyKL9da3 NH1jtOqN+gCNVW+oVj7TNCtHcKJeBD9tm60JSGsix3yA0HDahWPGyQ== -----END CERTIFICATE-----Generated at Sat Sep 26 17:25:11 2026 by rpki-client