$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer File: d96f592a-8fa9-4ec8-a272-b56c2537919c.cer (raw, json) Hash identifier: A3SgDt7aQ8MAKbKAD4T916QrxcrTmj6fFXORp02FJNs= Subject key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F19F57089C4FEF9D9D81F6CF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 00:45:11 +0000 Certificate not after: Mon 11 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 399587 IP: 23.139.228.0/24 IP: 169.128.56.0/22 IP: 2602:f623::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:f5:70:89:c4:fe:f9:d9:d8:1f:6c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 8 00:45:11 2026 GMT Not After : Dec 11 01:45:11 2028 GMT Subject: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:fd:d5:5a:f0:6b:04:40:3d:06:d2:6d:8b: a3:37:39:95:3d:ea:f5:3a:aa:4d:36:7a:b5:b4:3c: 75:81:67:ad:3f:d8:f9:2b:dc:a9:ec:1d:ca:70:ba: d1:0b:20:b4:8b:16:a3:f6:a2:0d:d4:df:2c:40:ec: d0:0c:c4:49:1c:94:a6:ce:fa:aa:b2:03:b3:c3:a8: 98:f1:d7:83:92:96:bf:9f:90:c8:da:22:c8:18:be: b6:f1:83:58:31:95:dc:ba:39:a9:10:e5:90:4e:3b: 81:cd:3d:e6:a6:97:9e:78:ba:bd:df:2b:5e:23:c1: fe:8a:8c:49:92:a4:84:27:c1:48:15:9d:37:b3:26: 0a:c0:d5:6f:22:27:c7:2d:1c:f7:15:4d:6a:80:a4: f5:25:78:2f:a9:64:ff:57:e3:57:0f:80:78:dc:00: fa:b4:07:d9:bd:0f:77:24:b7:71:8a:50:c8:76:27: a5:b8:c5:e0:5f:47:26:8c:b4:f5:29:ea:73:26:b4: c9:9b:ea:72:82:04:ce:20:3b:5a:b1:7a:f0:d6:89: 4a:39:3f:2a:62:86:9a:dd:64:28:0a:b3:15:25:90: 8e:25:e0:42:57:fd:20:f6:a6:58:21:da:20:e9:87: 39:9a:b6:25:aa:c0:e6:3f:d5:ae:59:bc:da:00:bb: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.228.0/24 169.128.56.0/22 IPv6: 2602:f623::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399587 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7d:75:cc:7a:e5:44:5f:64:f7:59:da:ef:a4:99:fd:23:93: cb:db:04:0b:2f:b1:7f:79:c8:5a:fc:16:7f:18:fb:bb:00:78: ee:5f:71:3f:e7:68:e0:6c:cc:93:48:52:46:78:d0:f9:5a:b0: 9f:a4:2b:14:b6:29:0a:7b:9b:95:ee:6e:ce:9d:70:58:f5:5d: 1d:98:25:20:09:fe:e7:2a:d7:18:b8:2d:87:cd:0c:af:61:94: 72:50:c4:72:5c:2d:4c:f8:2d:04:a6:0a:fc:2e:1b:63:3f:53: 5f:a3:af:d5:5d:0c:ef:61:f1:41:81:f9:af:c4:6a:e6:76:d4: f8:64:c4:8b:54:9d:c4:2f:4b:3e:11:a5:a8:a4:d3:89:81:2c: 15:cd:fb:0f:29:60:ed:1d:f9:36:6f:07:09:2f:0a:9f:e2:9f: ab:1a:67:bf:33:8a:59:20:2d:8d:4b:cd:30:66:87:0c:c2:89: 3f:c3:b4:e7:84:64:3c:be:a7:ae:7d:4d:71:05:80:d2:2f:96: f7:ea:e5:a9:b3:c0:1a:76:a3:48:fe:1e:35:e1:4a:b5:e9:18: c9:eb:bd:ba:1c:59:c8:03:df:dd:b4:5a:ac:ce:aa:19:dc:5e: f5:9f:ef:30:a0:53:ea:b4:b7:fa:4e:1f:71:29:6c:c7:ba:53: c5:a9:5e:e2 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE8Z9XCJxP752dgfbPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwODAwNDUxMVoXDTI4MTIxMTAxNDUxMVowLzEtMCsGA1UEAxMk ZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00H91VrwawRAPQbSbYujNzmVPer1OqpNNnq1 tDx1gWetP9j5K9yp7B3KcLrRCyC0ixaj9qIN1N8sQOzQDMRJHJSmzvqqsgOzw6iY 8deDkpa/n5DI2iLIGL628YNYMZXcujmpEOWQTjuBzT3mppeeeLq93yteI8H+ioxJ kqSEJ8FIFZ03syYKwNVvIifHLRz3FU1qgKT1JXgvqWT/V+NXD4B43AD6tAfZvQ93 JLdxilDIdieluMXgX0cmjLT1KepzJrTJm+pyggTOIDtasXrw1olKOT8qYoaa3WQo CrMVJZCOJeBCV/0g9qZYIdog6Yc5mrYlqsDmP9WuWbzaALtkIQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBSe/r9q2QEoOhZ+THDTY0FHgELyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k OTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Q5NmY1OTJhLThmYTktNGVjOC1h MjcyLWI1NmMyNTM3OTE5Yy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUz NzkxOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXi+QDBAKpgDgwDgQCAAIwCAMGBCYC9iMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYY4zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAofXXMeuVEX2T3Wdrv pJn9I5PL2wQLL7F/echa/BZ/GPu7AHjuX3E/52jgbMyTSFJGeND5WrCfpCsUtikK e5uV7m7OnXBY9V0dmCUgCf7nKtcYuC2HzQyvYZRyUMRyXC1M+C0Epgr8LhtjP1Nf o6/VXQzvYfFBgfmvxGrmdtT4ZMSLVJ3EL0s+EaWopNOJgSwVzfsPKWDtHfk2bwcJ Lwqf4p+rGme/M4pZIC2NS80wZocMwok/w7TnhGQ8vqeufU1xBYDSL5b36uWps8Aa dqNI/h414Uq16RjJ6726HFnIA9/dtFqszqoZ3F71n+8woFPqtLf6Th9xKWzHulPF qV7i -----END CERTIFICATE-----Generated at Fri Sep 25 22:52:10 2026 by rpki-client