$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/663d4bf1-afa1-4163-b655-5dc514a5c648.cer File: 663d4bf1-afa1-4163-b655-5dc514a5c648.cer (raw, json) Hash identifier: f/bmqVjWZ2Fb7dYGL2R1uMqLYjgJQiBYHoekU1ZJ5Oo= Subject key identifier: 88:CA:87:F3:35:69:29:9A:6A:25:8B:37:FB:00:BB:8D:65:59:1E:73 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F1ECAC70B384CCD27CED22200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/663d4bf1-afa1-4163-b655-5dc514a5c648/663d4bf1-afa1-4163-b655-5dc514a5c648.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/663d4bf1-afa1-4163-b655-5dc514a5c648/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 18:18:16 +0000 Certificate not after: Thu 01 Jun 2028 15:19:42 +0000 Subordinate resources: AS: 402238 IP: 23.163.188.0/24 IP: 2602:f441::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:ca:c7:0b:38:4c:cd:27:ce:d2:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Sep 9 18:18:16 2026 GMT Not After : Jun 1 15:19:42 2028 GMT Subject: CN=663d4bf1-afa1-4163-b655-5dc514a5c648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:ec:9c:3e:18:92:56:b2:be:50:33:ba:5b: 31:45:db:df:b4:99:1c:90:07:26:32:e8:26:ab:18: 8f:6c:d3:e4:20:84:0d:c8:50:01:79:53:03:dd:50: e9:f9:ec:67:4c:a3:8e:04:4f:56:94:d8:f4:ee:9e: 41:d0:58:0e:f0:d5:3d:6a:67:51:41:ac:1c:68:1b: 29:f1:0b:b1:ab:6a:7b:25:c7:e2:8a:00:06:21:f3: 10:75:6c:fb:50:8d:6d:ba:d8:39:6c:c1:d5:87:9f: 23:74:c0:9e:a3:0d:26:f1:e3:af:1c:4d:22:c3:1f: 24:56:3e:51:43:60:bc:4b:c5:90:a0:6b:8a:fc:02: f3:ca:7d:c3:91:34:d9:73:e1:e4:0c:74:60:2b:11: 2f:68:ea:d5:a0:55:ed:68:f8:4c:ea:d5:d4:2d:31: 74:93:79:fb:f4:b2:bb:7b:38:38:72:f0:3d:f7:75: 81:5b:67:21:b0:65:f6:d8:75:f6:81:57:71:43:46: 31:ac:19:cb:fa:78:56:54:51:21:f1:7f:94:ae:05: f8:40:77:ee:50:ff:24:7a:d6:16:e3:dd:83:fd:5e: 36:1b:38:d5:c1:a3:f1:32:bc:bc:dd:0b:e4:a0:81: ae:aa:85:c2:08:5c:63:be:80:0d:4c:24:dd:53:13: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:87:F3:35:69:29:9A:6A:25:8B:37:FB:00:BB:8D:65:59:1E:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/663d4bf1-afa1-4163-b655-5dc514a5c648/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/663d4bf1-afa1-4163-b655-5dc514a5c648/663d4bf1-afa1-4163-b655-5dc514a5c648.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.163.188.0/24 IPv6: 2602:f441::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:50:18:2a:09:2b:60:9c:bf:45:fe:04:35:4a:bc:de:bc:ac: e8:56:97:ee:64:82:1d:ff:a9:12:15:52:b0:4f:e1:ed:3a:af: 2c:4c:ab:3d:59:7e:ee:d6:0c:1b:0f:0a:c9:a9:7d:d6:5a:31: f4:70:54:ac:7a:6b:28:85:18:5a:c2:7f:92:3e:23:9b:73:79: af:7d:be:7a:c2:81:fe:99:b8:79:b8:80:3c:af:25:f3:1f:1c: c6:20:93:f7:96:30:c1:9f:d3:56:72:b3:69:64:cb:9f:20:4f: 0a:c7:d6:3e:c7:74:26:29:41:fa:c0:36:6a:e9:ea:8f:af:86: 7f:5f:a0:4b:22:56:cd:bf:27:05:f4:9e:74:72:3b:ad:35:e0: 80:f3:b3:c9:c5:e8:8c:d1:4e:86:ee:b3:29:8c:2d:d8:fb:1f: 9a:e6:42:b3:dc:b2:7a:6f:3d:9a:51:4e:ae:b3:53:9e:e5:15: 43:94:e1:07:bc:89:eb:fa:d7:34:ad:3b:84:58:58:ff:21:d7: 62:c3:37:9e:73:ff:16:c7:f3:28:f2:08:79:46:29:b8:e6:43: 96:76:ce:5d:84:6d:52:87:ce:29:fe:a3:5c:c7:4a:b7:45:22: a0:05:0c:45:6b:d7:47:49:c3:e0:91:a4:76:9c:32:5c:3e:14: c7:01:74:90 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8eyscLOEzNJ87SIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDkwOTE4MTgxNloXDTI4MDYwMTE1MTk0MlowLzEtMCsGA1UEAxMk NjYzZDRiZjEtYWZhMS00MTYzLWI2NTUtNWRjNTE0YTVjNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmbsnD4YklayvlAzulsxRdvftJkckAcmMugm qxiPbNPkIIQNyFABeVMD3VDp+exnTKOOBE9WlNj07p5B0FgO8NU9amdRQawcaBsp 8Quxq2p7JcfiigAGIfMQdWz7UI1tutg5bMHVh58jdMCeow0m8eOvHE0iwx8kVj5R Q2C8S8WQoGuK/ALzyn3DkTTZc+HkDHRgKxEvaOrVoFXtaPhM6tXULTF0k3n79LK7 ezg4cvA993WBW2chsGX22HX2gVdxQ0YxrBnL+nhWVFEh8X+UrgX4QHfuUP8ketYW 492D/V42GzjVwaPxMry83QvkoIGuqoXCCFxjvoANTCTdUxPANwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIjKh/M1aSmaaiWLN/sAu41lWR5zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 NjNkNGJmMS1hZmExLTQxNjMtYjY1NS01ZGM1MTRhNWM2NDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzY2M2Q0YmYxLWFmYTEtNDE2My1i NjU1LTVkYzUxNGE1YzY0OC82NjNkNGJmMS1hZmExLTQxNjMtYjY1NS01ZGM1MTRh NWM2NDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXo7wwDgQCAAIwCAMGACYC9EEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjPjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVUBgqCStgnL9F/gQ1SrzevKzo VpfuZIId/6kSFVKwT+HtOq8sTKs9WX7u1gwbDwrJqX3WWjH0cFSsemsohRhawn+S PiObc3mvfb56woH+mbh5uIA8ryXzHxzGIJP3ljDBn9NWcrNpZMufIE8Kx9Y+x3Qm KUH6wDZq6eqPr4Z/X6BLIlbNvycF9J50cjutNeCA87PJxeiM0U6G7rMpjC3Y+x+a 5kKz3LJ6bz2aUU6us1Oe5RVDlOEHvInr+tc0rTuEWFj/Iddiwzeec/8Wx/Mo8gh5 Rim45kOWds5dhG1Sh84p/qNcx0q3RSKgBQxFa9dHScPgkaR2nDJcPhTHAXSQ -----END CERTIFICATE-----Generated at Sun Sep 20 21:12:14 2026 by rpki-client