$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer File: e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer (raw, json) Hash identifier: yZm+Bur16Xq2GnV89rNuEdfrmPVzQzfnPuNghyPaueE= Subject key identifier: E0:0D:DE:B2:A7:48:59:FF:35:95:E4:65:A6:D6:5C:6F:09:A5:FF:DE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EED4A7EFCECC632E642ECBAF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Aug 2026 00:45:11 +0000 Certificate not after: Sat 25 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 401654 AS: 402154 IP: 64.27.0.0/19 IP: 198.41.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:4a:7e:fc:ec:c6:32:e6:42:ec:ba:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 23 00:45:11 2026 GMT Not After : Nov 25 01:45:11 2028 GMT Subject: CN=e5dea660-bf59-4b4c-b9ad-4a6787e03fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:79:2f:2a:65:67:1c:1c:af:6a:6c:2c:c7: 08:46:00:93:43:dd:ba:91:a4:97:0a:d4:22:f9:39: 8a:f6:03:36:dc:b3:5a:47:7f:bf:66:57:ad:b8:49: 02:d9:3c:35:9e:43:53:30:5f:de:84:37:84:3a:ba: 92:6c:81:7e:ad:f2:e8:2f:8a:69:6b:d6:2e:e1:a8: ca:6d:ef:d6:24:8f:49:26:5d:ea:7b:ee:92:33:84: e0:17:86:a2:88:dc:44:75:1f:ac:31:81:a1:36:cd: 8b:76:89:f5:7a:c0:82:31:fa:41:5e:d5:7b:c2:d5: 49:e2:06:33:f8:01:1e:c3:90:6a:61:ac:01:61:fe: 66:20:1d:0c:2b:38:4d:d0:71:e9:02:7e:11:97:2e: 94:2a:05:07:6a:91:1c:0e:2d:6f:b0:4c:53:e3:16: b6:d2:8d:98:10:45:a8:e2:73:b5:49:f3:15:88:c9: 7f:70:2c:7e:be:cc:38:d7:70:5c:a8:d4:f4:09:2f: f9:3c:32:31:f2:06:ff:5a:17:e8:09:8a:21:7a:0b: 42:71:99:7b:57:c4:cd:69:f8:74:a1:dd:53:b5:8b: f6:37:b6:be:eb:67:ad:f1:77:3d:4b:f9:20:f8:6d: 00:04:a3:db:56:ab:0c:0e:ce:ef:78:85:6f:f4:b1: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0D:DE:B2:A7:48:59:FF:35:95:E4:65:A6:D6:5C:6F:09:A5:FF:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.27.0.0/19 198.41.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401654 402154 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ea:cf:0f:98:69:97:bd:e8:cd:0c:b9:9c:ca:7a:64:75:b8: 7e:c7:91:a9:f2:c6:34:ad:2d:cb:91:f4:b8:47:72:f2:c2:ec: 41:3a:f7:48:73:09:11:92:2c:e7:ed:a7:06:79:ff:30:f8:b5: 9d:62:52:fc:f7:2b:3d:59:76:c7:c9:00:52:17:0d:89:9f:1a: e9:28:b9:6e:7d:32:fa:a7:87:f7:48:e7:2d:d1:b4:9f:8c:85: cd:e7:d7:38:cf:4f:44:f5:ce:e1:92:7b:2b:28:f3:f5:eb:a3: ca:d0:a0:88:3d:f3:07:44:7d:7f:2d:51:bc:f5:0d:f2:33:3d: f1:03:bd:71:e3:12:8d:a1:ba:ce:69:7f:55:75:09:76:eb:71: f7:07:cf:46:91:44:f1:9b:67:43:21:17:1a:62:7b:91:d6:89: 7e:58:ee:30:80:99:8f:b0:0f:1c:dc:78:83:79:d1:09:bc:3e: 41:2d:b4:b7:da:04:6e:52:b7:62:75:1a:db:73:67:cb:f8:9c: d4:09:8d:b4:e6:7a:fa:d9:ad:98:54:51:fb:dc:85:9c:38:51: 9f:9c:a6:8b:f9:90:50:40:21:9f:0c:4c:c5:d0:66:bf:88:0c: 6f:01:27:54:bf:bf:19:54:ea:95:0e:db:01:4c:64:e6:f0:0d: eb:31:1a:18 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE7tSn787MYy5kLsuvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyMzAwNDUxMVoXDTI4MTEyNTAxNDUxMVowLzEtMCsGA1UEAxMk ZTVkZWE2NjAtYmY1OS00YjRjLWI5YWQtNGE2Nzg3ZTAzZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsd5LyplZxwcr2psLMcIRgCTQ926kaSXCtQi +TmK9gM23LNaR3+/ZletuEkC2Tw1nkNTMF/ehDeEOrqSbIF+rfLoL4ppa9Yu4ajK be/WJI9JJl3qe+6SM4TgF4aiiNxEdR+sMYGhNs2Ldon1esCCMfpBXtV7wtVJ4gYz +AEew5BqYawBYf5mIB0MKzhN0HHpAn4Rly6UKgUHapEcDi1vsExT4xa20o2YEEWo 4nO1SfMViMl/cCx+vsw413BcqNT0CS/5PDIx8gb/WhfoCYohegtCcZl7V8TNafh0 od1TtYv2N7a+62et8Xc9S/kg+G0ABKPbVqsMDs7veIVv9LGHZwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFOAN3rKnSFn/NZXkZabWXG8Jpf/eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l NWRlYTY2MC1iZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2U1ZGVhNjYwLWJmNTktNGI0Yy1i OWFkLTRhNjc4N2UwM2ZjZS9lNWRlYTY2MC1iZjU5LTRiNGMtYjlhZC00YTY3ODdl MDNmY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAVAGwADBAXGKWAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDBiD2AgMGIuowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANurPD5hpl73ozQy5nMp6ZHW4fseRqfLG NK0ty5H0uEdy8sLsQTr3SHMJEZIs5+2nBnn/MPi1nWJS/PcrPVl2x8kAUhcNiZ8a 6Si5bn0y+qeH90jnLdG0n4yFzefXOM9PRPXO4ZJ7Kyjz9eujytCgiD3zB0R9fy1R vPUN8jM98QO9ceMSjaG6zml/VXUJdutx9wfPRpFE8ZtnQyEXGmJ7kdaJfljuMICZ j7APHNx4g3nRCbw+QS20t9oEblK3YnUa23Nny/ic1AmNtOZ6+tmtmFRR+9yFnDhR n5ymi/mQUEAhnwxMxdBmv4gMbwEnVL+/GVTqlQ7bAUxk5vAN6zEaGA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:01:21 2026 by rpki-client