$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa.cer File: f2ba3dc8-0d72-412a-9a57-8abb791392fa.cer (raw, json) Hash identifier: dmje/jQdnhdjeK5Wbdr+igfy78JvzqlWzAepV7iwqC4= Subject key identifier: 1D:F2:E7:23:70:E5:6B:2C:1B:7B:22:5B:E0:4B:19:EE:26:B1:E5:BF Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F23BAD6108C3D8F13EDF623C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/f2ba3dc8-0d72-412a-9a57-8abb791392fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Sep 2026 12:45:11 +0000 Certificate not after: Thu 14 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 399890 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:ba:d6:10:8c:3d:8f:13:ed:f6:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 11 12:45:11 2026 GMT Not After : Dec 14 13:45:11 2028 GMT Subject: CN=f2ba3dc8-0d72-412a-9a57-8abb791392fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:ab:be:25:cf:b4:db:54:15:9a:33:fa:35: 24:a5:d2:a5:8c:a1:c0:1e:cc:67:e9:ee:3b:30:74: 68:e4:8a:53:f4:44:3d:cd:51:ed:ee:9f:ee:8c:47: 6f:a6:78:ec:2e:9e:e7:64:67:a2:05:56:40:b7:58: 96:3b:f4:43:6e:20:73:83:8c:23:53:23:8f:b8:87: b0:87:f6:49:e5:3d:fa:c0:47:9b:8d:ad:a1:f6:93: de:b4:58:a9:d5:3e:10:6a:a2:ed:b5:be:89:82:cc: a4:88:3a:af:42:cb:32:a8:2e:92:62:de:7a:15:35: 42:31:2c:8c:f1:a0:5b:3b:1e:8e:96:74:e4:4b:7f: 2f:17:2c:17:d1:70:3b:c2:fd:fa:5f:25:0b:79:03: 2a:7c:d1:f1:a8:95:35:6d:c0:89:3c:b7:1f:81:69: 23:b3:b2:f2:aa:5f:9e:7a:6a:6e:29:78:ec:a7:2b: 8b:29:9e:1c:50:74:af:74:36:b1:4a:14:54:0f:5f: f6:11:fc:1f:f6:11:ed:93:0f:2c:c3:95:30:2e:6d: 58:71:51:81:88:94:0f:99:be:e9:9a:8d:6c:da:2a: c0:79:e6:7d:03:07:5a:f3:a0:8f:99:06:41:3d:5d: b3:13:38:8a:9f:5a:38:58:40:f3:4b:9d:80:4e:ef: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F2:E7:23:70:E5:6B:2C:1B:7B:22:5B:E0:4B:19:EE:26:B1:E5:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f2ba3dc8-0d72-412a-9a57-8abb791392fa/f2ba3dc8-0d72-412a-9a57-8abb791392fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399890 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2a:94:8e:6e:a4:2a:cd:f3:3a:b6:18:8c:b3:cb:8a:a6:7b: f1:54:bd:60:ef:11:6e:25:0a:ea:cb:75:98:83:63:7c:c6:3a: 21:c8:c9:37:d9:f3:22:a0:7d:b5:14:e3:80:b9:b0:ae:73:7e: 65:27:91:e4:b8:52:2c:e8:bf:a1:55:ad:bf:c8:7d:d7:7f:ff: 8e:de:bd:ec:e3:2f:d6:46:9c:92:1f:9e:31:3b:1f:c8:78:73: a8:fc:65:9c:f0:61:84:ba:12:07:10:d5:21:37:fe:85:e4:c8: d5:da:b8:ff:d1:99:8c:2e:3f:17:64:06:59:1d:53:a0:dd:47: 1b:a3:e9:6b:cf:96:1c:c9:5f:25:c4:27:b2:3a:99:1f:b1:68: e7:fe:5d:6e:8d:fe:d6:44:96:4e:15:e9:ab:a1:75:77:ab:76: da:8b:19:a9:d7:66:8e:c2:9f:db:0e:a0:25:b2:ed:b4:1e:2e: 8d:3b:32:c6:af:72:58:f1:7f:ef:5b:6b:28:29:b6:f3:4a:3c: 5e:65:c7:58:71:87:50:67:05:87:8e:b4:ef:c8:3f:b8:50:65: 58:8b:cb:e0:df:02:ba:81:e7:c8:42:1f:05:01:af:88:0e:a5: 57:4d:ad:2f:82:d9:f1:22:cd:d7:46:01:a9:7c:a6:89:72:af: 07:74:41:f5 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE8jutYQjD2PE+32I8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxMTEyNDUxMVoXDTI4MTIxNDEzNDUxMVowLzEtMCsGA1UEAxMk ZjJiYTNkYzgtMGQ3Mi00MTJhLTlhNTctOGFiYjc5MTM5MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+2rviXPtNtUFZoz+jUkpdKljKHAHsxn6e47 MHRo5IpT9EQ9zVHt7p/ujEdvpnjsLp7nZGeiBVZAt1iWO/RDbiBzg4wjUyOPuIew h/ZJ5T36wEebja2h9pPetFip1T4QaqLttb6JgsykiDqvQssyqC6SYt56FTVCMSyM 8aBbOx6OlnTkS38vFywX0XA7wv36XyULeQMqfNHxqJU1bcCJPLcfgWkjs7Lyql+e empuKXjspyuLKZ4cUHSvdDaxShRUD1/2Efwf9hHtkw8sw5UwLm1YcVGBiJQPmb7p mo1s2irAeeZ9Awda86CPmQZBPV2zEziKn1o4WEDzS52ATu8rJwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFB3y5yNw5WssG3siW+BLGe4mseW/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m MmJhM2RjOC0wZDcyLTQxMmEtOWE1Ny04YWJiNzkxMzkyZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2YyYmEzZGM4LTBkNzItNDEyYS05 YTU3LThhYmI3OTEzOTJmYS9mMmJhM2RjOC0wZDcyLTQxMmEtOWE1Ny04YWJiNzkx MzkyZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhoSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIQqlI5upCrN8zq2GIyzy4qme/FU vWDvEW4lCurLdZiDY3zGOiHIyTfZ8yKgfbUU44C5sK5zfmUnkeS4Uizov6FVrb/I fdd//47evezjL9ZGnJIfnjE7H8h4c6j8ZZzwYYS6EgcQ1SE3/oXkyNXauP/RmYwu PxdkBlkdU6DdRxuj6WvPlhzJXyXEJ7I6mR+xaOf+XW6N/tZElk4V6auhdXerdtqL GanXZo7Cn9sOoCWy7bQeLo07Msavcljxf+9baygptvNKPF5lx1hxh1BnBYeOtO/I P7hQZViLy+DfArqB58hCHwUBr4gOpVdNrS+C2fEizddGAal8polyrwd0QfU= -----END CERTIFICATE-----Generated at Sun Sep 20 19:46:52 2026 by rpki-client