$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e.cer File: acbc4801-c34f-4a9c-92fc-e1576985a43e.cer (raw, json) Hash identifier: 6jUT/YJhx/wnRCdkpm5ns9XLXowS4INvtDYpwOitZRU= Subject key identifier: C3:A9:D8:8B:93:02:F6:98:B8:3D:6A:60:FC:74:DF:F2:AF:08:B6:96 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584F78E0B44D846CCD92E2E05940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/acbc4801-c34f-4a9c-92fc-e1576985a43e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 00:45:12 +0000 Certificate not after: Sun 14 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 23.141.68.0/24 IP: 2602:f5f1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e0:b4:4d:84:6c:cd:92:e2:e0:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 12 00:45:12 2026 GMT Not After : Jan 14 01:45:12 2029 GMT Subject: CN=acbc4801-c34f-4a9c-92fc-e1576985a43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:0d:11:b0:b1:f9:37:5a:a8:3b:0b:f8:4e: 9e:44:b8:45:51:2d:35:ed:49:db:64:e6:33:58:fa: 54:2b:61:22:0a:14:f9:c4:f6:b7:32:18:3f:8d:27: 4b:b9:46:cc:72:e8:a2:88:6f:19:04:4f:c5:e6:65: c8:46:2c:25:29:f1:8b:ed:e5:37:b9:fe:b3:90:af: 4b:26:c4:a1:81:7a:53:c7:f4:93:f0:b0:85:16:9e: 20:9a:9c:44:43:68:70:7f:48:95:cd:1c:39:d3:cf: 9a:b6:b3:e0:42:a0:b5:ae:e4:27:e2:01:16:4f:59: a5:ff:0a:a5:7a:b6:08:08:9c:b1:3c:c2:d5:c4:3e: 12:bd:f6:51:bf:2e:52:8b:da:91:6d:46:02:28:87: f7:16:4e:a3:d3:fa:36:34:73:40:99:10:5e:22:b7: f3:a0:4a:ee:3e:c7:0c:77:ac:24:a4:61:bd:0f:13: 03:c9:24:31:14:c7:2b:53:d4:67:88:c7:93:c9:1a: 54:46:1c:b1:23:3d:90:5c:f1:77:c4:fc:96:aa:6b: c2:cd:e0:25:22:8a:43:4e:f2:57:57:9a:48:ef:6a: f4:f8:35:f3:ca:d4:fa:e9:22:95:64:87:4d:e5:dd: 11:e3:8c:41:2d:81:dc:2c:9d:68:bf:cb:90:f3:2a: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A9:D8:8B:93:02:F6:98:B8:3D:6A:60:FC:74:DF:F2:AF:08:B6:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/acbc4801-c34f-4a9c-92fc-e1576985a43e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.141.68.0/24 IPv6: 2602:f5f1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a1:e3:cb:a9:21:a4:c1:8c:3d:eb:ba:b2:53:1f:75:74:ed: 7b:7b:9f:6f:9a:62:c2:57:61:30:1d:f6:38:f8:22:dc:13:dc: ac:9d:f7:2f:8f:7e:a0:a7:8a:b7:2f:5f:71:17:8b:3d:b8:5f: 85:3e:21:8e:73:84:44:75:54:20:58:ad:9d:69:d0:f1:4f:f6: a7:f5:81:2a:6d:fa:b7:18:9c:59:6a:be:1f:db:53:c0:cd:f5: fa:e5:7c:ae:7d:36:c6:6b:2d:8f:06:81:8c:e5:57:df:3e:12: 9f:3f:d9:67:aa:6f:ee:9e:89:20:60:c2:1f:3d:44:b5:dd:35: d4:3b:5c:4d:39:fb:7c:4f:20:1d:af:ae:a7:f6:df:8f:6f:7a: 86:c0:86:7b:78:93:2b:d0:94:ba:90:ba:1b:27:cc:39:cb:26: a1:dd:86:12:8f:fd:84:77:cd:b2:3a:ad:bc:40:fe:64:a8:b2: c7:fd:8a:21:8f:16:c8:fd:89:f4:9c:c9:79:25:b9:99:6e:34: db:c6:8b:2f:8a:35:87:a3:04:09:80:ab:71:45:f9:4b:db:89: d1:c9:12:c3:34:86:5e:0b:49:22:91:a0:4d:37:67:17:f8:f8: e1:06:0f:3f:45:1f:cb:c7:60:3b:c6:4d:c0:b8:0f:3d:f4:78: 3d:8d:44:64 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE944LRNhGzNkuLgWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MTAxMjAwNDUxMloXDTI5MDExNDAxNDUxMlowLzEtMCsGA1UEAxMk YWNiYzQ4MDEtYzM0Zi00YTljLTkyZmMtZTE1NzY5ODVhNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfINEbCx+TdaqDsL+E6eRLhFUS017UnbZOYz WPpUK2EiChT5xPa3Mhg/jSdLuUbMcuiiiG8ZBE/F5mXIRiwlKfGL7eU3uf6zkK9L JsShgXpTx/ST8LCFFp4gmpxEQ2hwf0iVzRw508+atrPgQqC1ruQn4gEWT1ml/wql erYICJyxPMLVxD4SvfZRvy5Si9qRbUYCKIf3Fk6j0/o2NHNAmRBeIrfzoEruPscM d6wkpGG9DxMDySQxFMcrU9RniMeTyRpURhyxIz2QXPF3xPyWqmvCzeAlIopDTvJX V5pI72r0+DXzytT66SKVZIdN5d0R44xBLYHcLJ1ov8uQ8yqjAwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMOp2IuTAvaYuD1qYPx03/KvCLaWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Y2JjNDgwMS1jMzRmLTRhOWMtOTJmYy1lMTU3Njk4NWE0M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FjYmM0ODAxLWMzNGYtNGE5Yy05 MmZjLWUxNTc2OTg1YTQzZS9hY2JjNDgwMS1jMzRmLTRhOWMtOTJmYy1lMTU3Njk4 NWE0M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjUQwDgQCAAIwCAMGACYC9fEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABKh48upIaTBjD3rurJTH3V07Xt7n2+aYsJXYTAd9jj4ItwT3Kyd9y+PfqCnircv X3EXiz24X4U+IY5zhER1VCBYrZ1p0PFP9qf1gSpt+rcYnFlqvh/bU8DN9frlfK59 NsZrLY8GgYzlV98+Ep8/2Weqb+6eiSBgwh89RLXdNdQ7XE05+3xPIB2vrqf2349v eobAhnt4kyvQlLqQuhsnzDnLJqHdhhKP/YR3zbI6rbxA/mSossf9iiGPFsj9ifSc yXkluZluNNvGiy+KNYejBAmAq3FF+UvbidHJEsM0hl4LSSKRoE03Zxf4+OEGDz9F H8vHYDvGTcC4Dz30eD2NRGQ= -----END CERTIFICATE-----Generated at Mon Nov 9 10:29:57 2026 by rpki-client