$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer File: 4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer (raw, json) Hash identifier: wpwB2Emy+RKQUlZv3Hjexr0hTWIv5IpUBBecOurfgiU= Subject key identifier: A0:9F:B8:1B:BC:81:9B:CE:0E:6A:82:B4:79:AE:46:0B:62:CB:55:5D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584F37D93F4DDBD11684F78D7000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 17:42:38 +0000 Certificate not after: Thu 21 Dec 2028 18:42:38 +0000 Subordinate resources: AS: 395685 IP: 199.167.192.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:d9:3f:4d:db:d1:16:84:f7:8d:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Sep 18 17:42:38 2026 GMT Not After : Dec 21 18:42:38 2028 GMT Subject: CN=4a01ab60-b01a-4c1b-8931-f3722a3633d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:71:2d:fc:bc:28:0f:df:f3:df:21:c1:1d: 37:df:83:97:34:78:e8:72:4f:8f:93:98:8b:43:e1: cf:cf:10:d6:b6:2f:88:99:17:d4:34:99:cb:8e:f3: bc:ba:b5:ee:d7:8d:46:d9:2b:cf:03:ad:c9:1d:77: 98:73:32:64:62:96:c3:7f:4a:04:6f:66:fb:4f:72: 72:0b:b5:84:c5:81:c9:38:f9:15:f0:65:8a:ab:c0: f9:7a:6a:d5:9e:7d:93:6c:c0:dc:51:7c:82:dc:f3: a9:fd:f8:d9:c7:2d:80:76:03:ba:fc:e3:17:6b:6b: 95:9d:71:88:cc:67:d7:76:89:7d:9e:bc:38:67:9e: 66:bf:c0:7b:f5:a6:7d:bc:3d:bf:dc:e4:60:5d:57: 57:7e:74:bb:57:2d:d1:4b:aa:f7:1c:b4:80:2f:ad: 1d:76:e3:3a:e6:e3:ee:7e:a9:e0:6e:37:d0:93:e8: 1e:ef:9a:62:32:48:ee:41:51:9d:d7:6e:2d:99:27: bf:bf:2d:67:d2:cd:b3:80:3d:bd:4c:73:68:44:c0: 51:c9:16:24:ef:f9:ed:4a:50:84:2a:fa:fa:1d:5b: 51:e8:0b:44:58:05:0b:31:64:9c:e5:c4:ff:43:52: 9d:a4:8a:8c:23:0b:73:65:a6:f0:5f:f6:b3:9a:77: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9F:B8:1B:BC:81:9B:CE:0E:6A:82:B4:79:AE:46:0B:62:CB:55:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.167.192.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395685 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fa:7a:3c:b0:6d:73:a6:50:9d:77:1a:2b:88:07:fe:81:6f: 86:45:83:f9:bc:c8:cc:ce:bf:86:82:ea:09:d3:ae:92:1d:f9: 88:d9:54:25:93:50:b1:e7:f7:4b:f1:2a:c6:f6:a0:51:80:52: c7:5e:17:8c:23:6c:77:18:39:22:00:1f:1b:f3:db:43:0c:5c: ae:62:8b:6a:3e:66:44:1c:f4:37:ce:2c:e7:44:3b:5b:1d:ab: 47:52:20:ed:38:da:0e:6e:28:d0:a4:3b:bd:30:d3:ad:35:62: 45:23:8a:25:2f:8d:d7:a6:34:82:4a:be:d7:b3:c3:6a:6e:fa: aa:4f:89:b6:30:23:b1:c3:cb:27:ab:29:41:96:21:68:4a:d4: e2:d5:f3:2a:3f:27:c2:a7:e9:71:cb:7c:79:43:7f:b2:65:ec: cf:dc:7f:81:12:89:3d:59:5d:0d:81:1b:ea:57:43:e4:f8:84: f6:fb:44:3a:06:52:03:04:6c:79:f2:91:c8:ed:5a:5f:f8:16: 91:a8:47:80:b1:fb:88:21:2f:51:5b:52:4a:ee:09:95:76:02: b5:99:35:73:3c:8c:fe:d2:21:71:9f:1d:cd:d1:27:c5:5a:5b: e1:70:4e:4c:5d:77:c4:51:f1:7a:0e:8f:4b:4d:0c:e8:76:5f: b1:50:8f:13 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE832T9N29EWhPeNcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDkxODE3NDIzOFoXDTI4MTIyMTE4NDIzOFowLzEtMCsGA1UEAxMk NGEwMWFiNjAtYjAxYS00YzFiLTg5MzEtZjM3MjJhMzYzM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/lxLfy8KA/f898hwR0334OXNHjock+Pk5iL Q+HPzxDWti+ImRfUNJnLjvO8urXu141G2SvPA63JHXeYczJkYpbDf0oEb2b7T3Jy C7WExYHJOPkV8GWKq8D5emrVnn2TbMDcUXyC3POp/fjZxy2AdgO6/OMXa2uVnXGI zGfXdol9nrw4Z55mv8B79aZ9vD2/3ORgXVdXfnS7Vy3RS6r3HLSAL60dduM65uPu fqngbjfQk+ge75piMkjuQVGd124tmSe/vy1n0s2zgD29THNoRMBRyRYk7/ntSlCE Kvr6HVtR6AtEWAULMWSc5cT/Q1KdpIqMIwtzZabwX/azmndLLQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKCfuBu8gZvODmqCtHmuRgtiy1VdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 YTAxYWI2MC1iMDFhLTRjMWItODkzMS1mMzcyMmEzNjMzZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzRhMDFhYjYwLWIwMWEtNGMxYi04 OTMxLWYzNzIyYTM2MzNkMi80YTAxYWI2MC1iMDFhLTRjMWItODkzMS1mMzcyMmEz NjMzZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHp8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgmlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIf6ejywbXOmUJ13GiuIB/6Bb4ZFg/m8yMzOv4aC6gnTrpId +YjZVCWTULHn90vxKsb2oFGAUsdeF4wjbHcYOSIAHxvz20MMXK5ii2o+ZkQc9DfO LOdEO1sdq0dSIO042g5uKNCkO70w0601YkUjiiUvjdemNIJKvtezw2pu+qpPibYw I7HDyyerKUGWIWhK1OLV8yo/J8Kn6XHLfHlDf7Jl7M/cf4ESiT1ZXQ2BG+pXQ+T4 hPb7RDoGUgMEbHnykcjtWl/4FpGoR4Cx+4ghL1FbUkruCZV2ArWZNXM8jP7SIXGf Hc3RJ8VaW+FwTkxdd8RR8XoOj0tNDOh2X7FQjxM= -----END CERTIFICATE-----Generated at Mon Sep 21 16:57:06 2026 by rpki-client