$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer File: 61249665-c04a-42df-b2a8-e643b7fab80e.cer (raw, json) Hash identifier: KBIv1n3IKfW89GDgfCYhN0bdWeqPh1AJfmQhQJK/btQ= Subject key identifier: EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584F1460140F79CC59E7F3F29600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Sep 2026 00:45:12 +0000 Certificate not after: Sat 09 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 40674 IP: 192.33.136.0/24 IP: 2602:80f:d000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:60:14:0f:79:cc:59:e7:f3:f2:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Sep 6 00:45:12 2026 GMT Not After : Dec 9 01:45:12 2028 GMT Subject: CN=61249665-c04a-42df-b2a8-e643b7fab80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:23:f3:df:48:96:e6:01:2a:f8:6e:09:4d: ef:23:d5:9e:de:fe:f2:3e:db:00:04:06:ef:72:9b: bd:4f:d1:cd:f1:6d:12:15:39:5b:33:de:c9:1c:2a: 26:9f:6c:73:af:a4:af:bf:dd:74:1d:07:b0:0a:23: 33:a8:79:14:cf:e5:12:6b:52:4e:65:86:17:73:cc: f4:06:20:28:51:79:9a:64:85:6c:0e:f5:54:56:6a: 50:b6:95:1d:26:b3:64:b4:27:6f:97:02:50:b1:3d: 24:3a:69:3c:36:14:1c:61:e3:bd:9f:2f:fa:6b:79: 05:fe:70:c6:bf:fe:11:43:79:1b:af:9f:61:3c:a5: 60:d2:72:ec:cd:3d:0c:a4:b6:c5:ab:25:85:d3:b4: 1b:49:81:fc:4a:f3:71:11:4c:93:a2:9f:bf:59:dd: af:36:fc:c6:cd:28:b2:02:c4:3d:84:46:3d:fb:03: 7e:61:e0:04:4e:61:bb:3a:9b:8a:d8:8b:d7:e7:07: 89:eb:c5:23:2c:22:16:f8:6f:b7:ad:db:3f:5c:31: 0b:86:fb:72:e1:34:a3:5c:cd:25:b9:98:27:13:7a: 9d:7e:3c:de:e7:6b:e4:0b:a3:f6:2d:d7:c4:c8:4e: da:ed:fa:47:5f:d6:33:7d:91:66:26:a3:5c:52:95: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.33.136.0/24 IPv6: 2602:80f:d000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40674 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:53:8f:ad:a4:d1:5f:99:0c:4e:73:0b:f8:ce:a7:0f:6f:d2: 17:ff:00:34:88:26:18:e6:44:77:47:34:b5:5b:b3:fe:54:c2: 10:2f:26:a6:1d:95:b2:95:de:51:38:3f:18:80:92:11:cf:3d: f8:41:bb:17:7c:3f:10:a3:ed:63:fb:d5:0f:81:fe:a2:9a:93: cc:44:90:9f:d0:a0:0d:32:07:29:9d:12:95:17:d9:1f:9e:77: f7:db:0e:32:de:41:2b:55:87:a2:80:e1:4a:51:56:a3:a2:eb: 8d:2c:62:8c:9c:db:46:21:b3:1c:c0:b0:30:f5:b0:94:af:44: a3:75:b2:4a:24:36:ec:d0:3a:76:7b:00:bb:62:a2:7f:3e:46: ec:ba:b8:88:2f:cc:00:f6:1b:4e:f5:07:65:7a:40:54:24:ba: 84:07:41:35:b8:60:be:47:7c:49:b2:1f:2d:61:3c:4a:f3:93: 27:15:5a:80:e9:80:4f:29:fa:02:46:fb:20:9c:18:20:a9:6f: 91:e6:81:7c:0f:7d:87:53:02:7d:c7:62:10:28:e2:85:19:7b: c9:89:5b:69:9b:28:d6:65:1e:24:26:e1:4b:c0:a8:06:b8:9d: 0b:6a:8a:52:a1:97:bf:ef:d8:a5:dc:a9:06:58:3e:b5:47:5e: 57:d9:ed:07 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE8UYBQPecxZ5/PylgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDkwNjAwNDUxMloXDTI4MTIwOTAxNDUxMlowLzEtMCsGA1UEAxMk NjEyNDk2NjUtYzA0YS00MmRmLWIyYTgtZTY0M2I3ZmFiODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYEj899IluYBKvhuCU3vI9We3v7yPtsABAbv cpu9T9HN8W0SFTlbM97JHComn2xzr6Svv910HQewCiMzqHkUz+USa1JOZYYXc8z0 BiAoUXmaZIVsDvVUVmpQtpUdJrNktCdvlwJQsT0kOmk8NhQcYeO9ny/6a3kF/nDG v/4RQ3kbr59hPKVg0nLszT0MpLbFqyWF07QbSYH8SvNxEUyTop+/Wd2vNvzGzSiy AsQ9hEY9+wN+YeAETmG7OpuK2IvX5weJ68UjLCIW+G+3rds/XDELhvty4TSjXM0l uZgnE3qdfjze52vkC6P2LdfEyE7a7fpHX9YzfZFmJqNcUpWcGwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFOrW1mR/NDZa8SXRIMg5akPH9nzjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 MTI0OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQzYjdmYWI4MGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzYxMjQ5NjY1LWMwNGEtNDJkZi1i MmE4LWU2NDNiN2ZhYjgwZS82MTI0OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQzYjdm YWI4MGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAIYgwDwQCAAIwCQMHBCYCCA/QADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAnuIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATVOPraTRX5kMTnML+M6nD2/S F/8ANIgmGOZEd0c0tVuz/lTCEC8mph2VspXeUTg/GICSEc89+EG7F3w/EKPtY/vV D4H+opqTzESQn9CgDTIHKZ0SlRfZH55399sOMt5BK1WHooDhSlFWo6LrjSxijJzb RiGzHMCwMPWwlK9Eo3WySiQ27NA6dnsAu2Kifz5G7Lq4iC/MAPYbTvUHZXpAVCS6 hAdBNbhgvkd8SbIfLWE8SvOTJxVagOmATyn6Akb7IJwYIKlvkeaBfA99h1MCfcdi ECjihRl7yYlbaZso1mUeJCbhS8CoBridC2qKUqGXv+/YpdypBlg+tUdeV9ntBw== -----END CERTIFICATE-----Generated at Mon Sep 21 18:51:15 2026 by rpki-client