$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer File: f32917d5-115d-4c33-8f66-98c515f1b37c.cer (raw, json) Hash identifier: afksIHClA5jUfMzel1WLVKnHwMOUuYNDeHWi8pX0yqY= Subject key identifier: 01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F31B040797EC9E29C428259C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Sep 2026 12:45:11 +0000 Certificate not after: Tue 19 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 14556 IP: 74.114.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b0:40:79:7e:c9:e2:9c:42:82:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 16 12:45:11 2026 GMT Not After : Dec 19 13:45:11 2028 GMT Subject: CN=f32917d5-115d-4c33-8f66-98c515f1b37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3c:28:6f:97:ab:6f:36:c6:31:4a:bf:2f:73: c0:2f:d0:3a:7b:e0:e9:21:91:0b:36:61:b5:90:f6: 6e:43:00:b8:65:43:b2:85:4c:f3:ba:c0:56:f2:4b: 05:07:19:8b:c3:71:6b:36:a9:da:73:9a:dc:49:0c: 33:76:ba:6b:a7:80:31:bc:5c:ce:2e:bd:18:6f:b8: 07:e6:6d:94:0e:19:86:a9:70:77:59:54:cf:39:ee: 24:63:1a:be:59:a9:4c:5b:32:91:4d:e5:d0:ee:57: 28:c5:da:7b:77:31:4a:ac:7b:be:45:91:be:cd:17: a8:eb:e0:61:a0:88:2a:76:00:b3:cc:53:c4:d7:28: 7f:97:af:52:1a:83:f3:83:d4:96:b8:c1:b3:d4:a5: 38:7b:df:e1:db:e5:84:f7:b4:7b:76:2e:30:5a:64: 39:41:4a:5c:b6:1e:c4:8d:74:f1:5e:16:ad:2d:09: 4f:d5:63:2a:5c:0d:f6:92:86:01:c0:e9:f8:88:99: 3b:b1:ff:14:af:78:26:33:cd:74:74:1b:4e:3f:83: ec:13:2c:b4:aa:fe:5d:55:08:7c:ca:ad:2f:55:a1: 6c:86:8c:b8:07:fe:33:59:c7:50:c1:05:1c:a8:45: 8a:96:fc:bc:e5:ce:94:86:5e:50:6c:84:d0:d5:ce: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.114.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14556 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:fe:df:3d:f8:0b:fb:dc:03:f9:a3:cc:e3:03:08:67:63:dc: cc:d4:27:94:f1:5c:b0:a9:8a:3d:82:fc:4a:ec:fe:4f:0e:84: 7c:7a:cb:fb:2f:cf:37:ae:04:c1:56:22:02:81:c5:23:ee:cf: 0f:6b:06:46:c9:7b:4a:f0:bc:5a:16:4f:e6:ac:18:8d:f1:b1: 55:b5:6b:13:75:1c:81:a7:50:f0:c9:af:60:00:95:1c:ae:ba: 97:65:41:e4:62:c2:82:e7:fe:63:7d:44:3a:41:dd:bf:f5:46: 0b:7a:c8:72:ab:8c:30:a0:32:77:5f:97:5b:cc:2e:98:19:b8: 6a:7c:47:a2:79:5f:41:b6:bb:22:e2:f2:37:07:bc:a5:c3:5e: b0:2a:85:bb:06:9f:fb:d2:23:e5:48:e7:b0:af:79:b2:ed:41: 39:c5:20:88:68:e7:12:2b:8f:98:84:43:37:5f:cf:cc:74:f2: 96:30:3f:7d:fb:05:45:0b:4e:4e:cc:c5:5f:d8:2f:94:10:49: f1:ac:1d:8e:d2:e2:49:10:dd:68:cd:f8:fe:99:85:b3:7c:84: 20:27:6a:27:bf:2b:6f:86:05:6f:b9:72:83:89:9c:e2:6d:9f: 1a:05:2b:de:07:d5:c1:a9:01:80:5e:0a:d9:2f:63:e2:31:e5: e6:37:a8:20 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE8xsEB5fsninEKCWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkxNjEyNDUxMVoXDTI4MTIxOTEzNDUxMVowLzEtMCsGA1UEAxMk ZjMyOTE3ZDUtMTE1ZC00YzMzLThmNjYtOThjNTE1ZjFiMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Twob5erbzbGMUq/L3PAL9A6e+DpIZELNmG1 kPZuQwC4ZUOyhUzzusBW8ksFBxmLw3FrNqnac5rcSQwzdrprp4AxvFzOLr0Yb7gH 5m2UDhmGqXB3WVTPOe4kYxq+WalMWzKRTeXQ7lcoxdp7dzFKrHu+RZG+zReo6+Bh oIgqdgCzzFPE1yh/l69SGoPzg9SWuMGz1KU4e9/h2+WE97R7di4wWmQ5QUpcth7E jXTxXhatLQlP1WMqXA32koYBwOn4iJk7sf8Ur3gmM810dBtOP4PsEyy0qv5dVQh8 yq0vVaFshoy4B/4zWcdQwQUcqEWKlvy85c6Uhl5QbITQ1c5EJQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAF5lxOkrzTBL3hSpMDD2FCvKtWiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m MzI5MTdkNS0xMTVkLTRjMzMtOGY2Ni05OGM1MTVmMWIzN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YzMjkxN2Q1LTExNWQtNGMzMy04 ZjY2LTk4YzUxNWYxYjM3Yy9mMzI5MTdkNS0xMTVkLTRjMzMtOGY2Ni05OGM1MTVm MWIzN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKcrwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ONwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYf7fPfgL+9wD+aPM4wMIZ2PczNQnlPFcsKmKPYL8Suz+Tw6E fHrL+y/PN64EwVYiAoHFI+7PD2sGRsl7SvC8WhZP5qwYjfGxVbVrE3UcgadQ8Mmv YACVHK66l2VB5GLCguf+Y31EOkHdv/VGC3rIcquMMKAyd1+XW8wumBm4anxHonlf Qba7IuLyNwe8pcNesCqFuwaf+9Ij5UjnsK95su1BOcUgiGjnEiuPmIRDN1/PzHTy ljA/ffsFRQtOTszFX9gvlBBJ8awdjtLiSRDdaM34/pmFs3yEICdqJ78rb4YFb7ly g4mc4m2fGgUr3gfVwakBgF4K2S9j4jHl5jeoIA== -----END CERTIFICATE-----Generated at Wed Sep 23 00:54:57 2026 by rpki-client