$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423.cer File: f318b26c-3136-432f-821e-3ca0e6532423.cer (raw, json) Hash identifier: XfEYkZSzpRtgA7ESHybwoTcmx35g8SKWHVUuJKAsl4w= Subject key identifier: C6:9D:D9:6D:2C:F5:46:F1:30:AC:81:80:5D:9A:BE:06:B8:58:E5:2D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F3B75A5F11A01200DE1CA4080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/f318b26c-3136-432f-821e-3ca0e6532423.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 00:45:11 +0000 Certificate not after: Sat 23 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 4557 IP: 198.32.224.0/20 IP: 2604:5e80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:75:a5:f1:1a:01:20:0d:e1:ca:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 20 00:45:11 2026 GMT Not After : Dec 23 01:45:11 2028 GMT Subject: CN=f318b26c-3136-432f-821e-3ca0e6532423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:1b:9e:30:ee:25:04:c2:0c:52:43:cc:45: 68:39:e3:00:09:2b:b6:d1:fd:d8:43:b2:50:90:8b: c0:bf:0a:c5:2c:5b:be:e2:da:a3:6d:5a:e5:00:6d: 16:68:e5:0c:b4:26:b1:4b:c2:ec:2d:16:8a:12:59: 37:af:7e:fd:56:b1:8a:bc:2f:1e:48:8e:58:87:48: 69:85:57:60:64:64:09:4f:5c:d8:d1:6d:9a:3f:7d: 13:07:46:ad:f6:f1:64:06:84:f4:e3:d8:92:ee:76: 63:ac:3a:80:e8:a9:52:80:a8:4f:6d:ae:fb:9b:59: 84:76:5f:c7:65:f9:91:fd:40:24:a9:d1:b6:2f:72: ed:eb:dd:8a:76:8f:e1:d5:11:76:cf:ae:8f:af:f4: e2:9b:1a:e5:36:29:72:e4:6b:24:c2:7c:c1:95:1f: b3:2b:6c:7f:c9:27:d8:cd:53:f3:f0:01:3d:01:29: 6e:10:f4:04:14:00:e5:03:e2:00:89:f0:83:65:1f: 03:db:56:fe:d6:fe:0d:b9:2b:c2:ff:a7:2a:b8:8b: ac:5f:3f:21:5f:f9:0e:dc:83:84:31:95:b6:12:27: 79:51:0a:a0:dd:8d:8a:ee:c1:b1:ed:ca:d3:6e:79: 76:3d:e0:8b:7f:fb:85:04:91:c4:16:4a:1e:d0:96: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9D:D9:6D:2C:F5:46:F1:30:AC:81:80:5D:9A:BE:06:B8:58:E5:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/f318b26c-3136-432f-821e-3ca0e6532423.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.32.224.0/20 IPv6: 2604:5e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bf:95:58:ca:6e:8c:d0:4b:d7:50:d8:16:3c:93:e6:28:d1: 62:c8:a3:af:9a:d3:09:47:a3:e3:28:4b:a3:43:e4:17:aa:17: 1c:69:f8:a7:9c:48:1e:42:0c:3e:68:15:01:86:ca:54:a3:60: cc:d3:b9:5c:85:15:92:e4:20:db:88:af:18:29:05:a5:98:a8: de:09:68:a1:57:25:9e:3b:26:ad:0a:71:6f:ea:93:61:fd:ee: b0:fe:42:ed:7b:85:c1:8b:53:fd:aa:c6:5a:4a:04:e3:44:d5: e6:94:9a:7a:2f:b7:71:65:0f:d2:c7:b9:c1:e5:01:7d:c9:34: 9d:83:03:9e:3a:ec:cb:bc:58:6d:4e:2f:cb:40:42:07:e9:a8: 1d:9f:47:d5:b1:e9:2f:d3:1e:40:5b:a6:8b:ac:af:99:c1:78: 0d:95:fb:de:84:36:90:af:16:55:24:ff:6c:34:a3:a9:3c:09: 33:9c:b6:c4:ee:aa:4e:7b:dc:ab:ab:03:c6:66:75:74:4b:f4: a0:c2:20:ce:e0:7f:75:8c:37:7e:4b:7d:76:39:2b:93:b3:4b: 50:64:67:77:4e:78:97:69:09:c5:5f:83:3f:49:26:7f:b3:2e: a6:39:02:c5:3d:43:3d:7f:cf:83:c9:0b:60:a8:18:93:66:22: 33:2e:de:3e -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE87daXxGgEgDeHKQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyMDAwNDUxMVoXDTI4MTIyMzAxNDUxMVowLzEtMCsGA1UEAxMk ZjMxOGIyNmMtMzEzNi00MzJmLTgyMWUtM2NhMGU2NTMyNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZMbnjDuJQTCDFJDzEVoOeMACSu20f3YQ7JQ kIvAvwrFLFu+4tqjbVrlAG0WaOUMtCaxS8LsLRaKElk3r379VrGKvC8eSI5Yh0hp hVdgZGQJT1zY0W2aP30TB0at9vFkBoT049iS7nZjrDqA6KlSgKhPba77m1mEdl/H ZfmR/UAkqdG2L3Lt692Kdo/h1RF2z66Pr/TimxrlNily5GskwnzBlR+zK2x/ySfY zVPz8AE9ASluEPQEFADlA+IAifCDZR8D21b+1v4NuSvC/6cquIusXz8hX/kO3IOE MZW2Eid5UQqg3Y2K7sGx7crTbnl2PeCLf/uFBJHEFkoe0JbC2QIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMad2W0s9UbxMKyBgF2avga4WOUtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m MzE4YjI2Yy0zMTM2LTQzMmYtODIxZS0zY2EwZTY1MzI0MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2YzMThiMjZjLTMxMzYtNDMyZi04 MjFlLTNjYTBlNjUzMjQyMy9mMzE4YjI2Yy0zMTM2LTQzMmYtODIxZS0zY2EwZTY1 MzI0MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATGIOAwDQQCAAIwBwMFACYEXoAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICEc0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUr+VWMpujNBL11DYFjyT5ijRYsij r5rTCUej4yhLo0PkF6oXHGn4p5xIHkIMPmgVAYbKVKNgzNO5XIUVkuQg24ivGCkF pZio3glooVclnjsmrQpxb+qTYf3usP5C7XuFwYtT/arGWkoE40TV5pSaei+3cWUP 0se5weUBfck0nYMDnjrsy7xYbU4vy0BCB+moHZ9H1bHpL9MeQFumi6yvmcF4DZX7 3oQ2kK8WVST/bDSjqTwJM5y2xO6qTnvcq6sDxmZ1dEv0oMIgzuB/dYw3fkt9djkr k7NLUGRnd054l2kJxV+DP0kmf7MupjkCxT1DPX/Pg8kLYKgYk2YiMy7ePg== -----END CERTIFICATE-----Generated at Sun Sep 20 12:57:04 2026 by rpki-client