$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer File: da61f786-99c2-4468-90f7-0b35abd168e5.cer (raw, json) Hash identifier: CnGXwlfWAtK6JrxbZB4u90IuVzUgHAYAO3zaVfJlxiU= Subject key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584F4D9B18B997D708B9F09AFD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Sep 2026 12:45:11 +0000 Certificate not after: Fri 29 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 54650 IP: 206.166.208.0/22 IP: 206.188.200.0/23 IP: 209.172.14.0/23 IP: 2604:bb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:9b:18:b9:97:d7:08:b9:f0:9a:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 26 12:45:11 2026 GMT Not After : Dec 29 13:45:11 2028 GMT Subject: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:b0:da:63:a4:eb:39:67:d1:d6:4e:6a:72: a7:45:c8:64:df:bf:73:b7:72:85:0e:24:6e:58:76: 6f:14:14:de:8c:b9:b9:d4:be:9c:9a:09:e9:7a:d0: 1a:21:04:c9:72:fc:78:87:06:4a:61:b7:9c:8b:cb: a4:b4:58:53:93:e8:bc:2a:e1:41:a6:3c:e5:4a:7b: 48:03:8b:4a:84:5f:e8:d3:e9:31:6c:6a:7b:d9:e5: 33:98:8a:7a:3f:f6:8b:cb:a5:f5:89:18:43:2e:17: c5:57:3c:06:3f:4c:ec:d7:9a:eb:67:9e:ac:c2:9a: 97:9c:b4:36:db:c3:37:77:b9:01:f7:d0:04:30:27: 78:85:4a:29:29:82:fa:d4:28:ac:90:84:59:c0:76: 3d:77:b8:36:69:35:02:c6:d8:e5:bf:0d:26:b7:d1: 9a:0f:40:0d:ba:fb:26:4e:8e:cd:b4:a4:b9:da:35: f2:f3:45:7e:43:f8:f5:cb:40:86:3a:13:e3:4c:10: 5e:bb:30:bd:45:af:33:b7:a5:3f:53:6d:d3:c1:da: 46:90:c7:b7:bc:ff:82:52:42:6e:57:aa:2d:7e:a6: 4a:10:2d:5e:ab:5b:95:0c:4b:f6:d8:11:c7:26:d4: 38:9d:98:7f:be:25:92:2b:4f:32:a3:1d:e9:c3:9d: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 206.166.208.0/22 206.188.200.0/23 209.172.14.0/23 IPv6: 2604:bb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54650 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:03:d7:af:be:92:b8:93:4c:8b:3e:79:af:50:9d:1b:0e:a3: e4:b1:e3:9a:26:de:6e:30:b4:37:98:e5:9e:53:52:ff:f7:f2: a5:d4:bb:e2:6c:1a:3e:f5:eb:26:d1:6d:be:ff:e4:64:67:23: ab:05:bb:01:bd:52:b5:53:1e:b8:82:e8:37:b0:e3:65:db:0a: e2:17:4b:37:80:44:88:04:22:fe:c2:31:08:dc:4a:97:e5:da: 0d:6e:20:f1:98:8e:b8:e7:a9:f5:43:d5:4b:27:c9:73:5d:b3: db:d0:d5:05:a3:0f:79:77:99:a3:7c:9c:5e:43:91:38:d9:cc: d1:a4:b0:57:f0:6a:d1:7c:b0:c5:7a:c8:77:29:a1:3d:09:9f: 45:8d:a4:e9:12:bf:41:6d:2a:68:36:5a:7f:c2:8e:8f:08:7e: 47:9e:7a:1f:79:61:3b:a3:bf:8b:52:57:7a:4e:e2:2a:04:c1: 45:3c:14:56:0b:e1:78:a9:99:b7:f6:09:0f:67:ec:94:0a:a6: 29:77:15:db:8e:0b:eb:91:e2:42:bf:a1:9c:ee:a0:85:3b:b2: a9:a2:86:f0:19:63:98:eb:45:9f:82:71:df:6b:a1:a1:32:d1: 83:3c:b4:e6:cc:a8:ef:51:dc:ab:d3:f9:2e:d3:34:5b:90:f2: 42:98:5f:e7 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9Nmxi5l9cIufCa/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDkyNjEyNDUxMVoXDTI4MTIyOTEzNDUxMVowLzEtMCsGA1UEAxMk ZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc6w2mOk6zln0dZOanKnRchk379zt3KFDiRu WHZvFBTejLm51L6cmgnpetAaIQTJcvx4hwZKYbeci8uktFhTk+i8KuFBpjzlSntI A4tKhF/o0+kxbGp72eUzmIp6P/aLy6X1iRhDLhfFVzwGP0zs15rrZ56swpqXnLQ2 28M3d7kB99AEMCd4hUopKYL61CiskIRZwHY9d7g2aTUCxtjlvw0mt9GaD0ANuvsm To7NtKS52jXy80V+Q/j1y0CGOhPjTBBeuzC9Ra8zt6U/U23TwdpGkMe3vP+CUkJu V6otfqZKEC1eq1uVDEv22BHHJtQ4nZh/viWSK08yox3pw51lsQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJuyVt2OjOQTAh+suk3rwFKi5QVZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k YTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2RhNjFmNzg2LTk5YzItNDQ2OC05 MGY3LTBiMzVhYmQxNjhlNS9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJk MTY4ZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBALOptADBAHOvMgDBAHRrA4wDQQCAAIwBwMFACYE u0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANV6MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABcD16++kriT TIs+ea9QnRsOo+Sx45om3m4wtDeY5Z5TUv/38qXUu+JsGj716ybRbb7/5GRnI6sF uwG9UrVTHriC6Dew42XbCuIXSzeARIgEIv7CMQjcSpfl2g1uIPGYjrjnqfVD1Usn yXNds9vQ1QWjD3l3maN8nF5DkTjZzNGksFfwatF8sMV6yHcpoT0Jn0WNpOkSv0Ft Kmg2Wn/Cjo8Ifkeeeh95YTujv4tSV3pO4ioEwUU8FFYL4Xipmbf2CQ9n7JQKpil3 FduOC+uR4kK/oZzuoIU7sqmihvAZY5jrRZ+Ccd9roaEy0YM8tObMqO9R3KvT+S7T NFuQ8kKYX+c= -----END CERTIFICATE-----Generated at Sat Oct 3 22:38:41 2026 by rpki-client