$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer File: 43cfd68f-5452-437e-b80d-ac981dd1cf19.cer (raw, json) Hash identifier: cZS1jyVdg0qc84r9V0GueA6rOf5f6MYtqRCkuIqnVTM= Subject key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FC9F4511B399F8546A047B3A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 01:45:12 +0000 Certificate not after: Mon 12 Feb 2029 01:45:12 +0000 Subordinate resources: AS: 63208 IP: 66.33.95.0/24 IP: 2602:f499::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c9:f4:51:1b:39:9f:85:46:a0:47:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 10 01:45:12 2026 GMT Not After : Feb 12 01:45:12 2029 GMT Subject: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:a8:99:10:43:a6:11:ed:36:78:5d:7e:96: b5:d7:6a:57:13:12:f2:45:d6:39:45:71:b7:7c:69: 83:ad:68:f6:40:e9:65:e9:c0:f9:79:fc:71:9c:57: 78:f1:1a:8b:86:80:9f:14:d2:4b:ed:5f:b1:d0:ed: 63:8d:26:27:ab:5b:b4:e1:6a:90:ab:0d:3c:09:c6: e8:3e:12:5d:49:68:34:0d:40:a0:80:46:de:4b:7d: d8:e9:80:63:d3:a4:b0:ea:df:17:de:5a:8c:f9:fe: c4:64:65:db:1a:8d:88:ef:8f:73:07:bd:ba:4d:97: eb:66:d7:d9:c8:31:ba:7c:b5:fb:be:f7:01:cb:92: 0c:78:43:53:9b:cd:ba:e9:dd:e3:30:ec:d0:f6:97: b4:d1:8b:6d:56:0d:57:a3:16:c3:d8:a3:fc:45:8f: 62:41:e7:a5:34:c6:8c:ef:1f:2f:1c:dd:5d:c2:65: 6c:ef:5f:cb:83:65:a3:f2:ad:c6:71:c8:92:47:be: dd:77:58:f4:9f:1b:13:3f:98:9e:82:5c:dc:b6:64: 32:e3:49:c7:23:89:5f:47:f4:05:ee:0b:6b:3e:02: 7e:a6:1f:b6:b0:e2:a1:6a:f0:ba:c4:bf:6d:d1:26: a5:67:79:2f:27:7b:65:50:5a:9a:ab:06:ea:6e:14: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.33.95.0/24 IPv6: 2602:f499::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63208 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1c:c6:af:49:8f:36:b4:cd:63:91:9d:e3:13:0d:6c:9b:29: 6f:f8:0e:d0:ee:bb:d5:c7:79:35:45:2d:8e:05:24:30:ae:d0: 3e:3e:6d:31:d1:0f:5f:68:1b:b6:0e:57:84:1a:54:54:d6:32: 88:31:76:02:06:ed:50:31:ea:fe:fe:28:aa:1c:11:4a:70:68: db:5c:e2:4d:85:9f:fa:09:a7:ad:a8:b4:76:e0:da:8a:b1:5f: 0c:fa:cd:c6:68:30:0c:12:ed:1e:d5:0d:c3:eb:6f:01:e2:e9: 37:32:04:cf:0e:d4:2a:96:2f:e8:ee:80:92:75:61:6d:0b:2f: bc:bb:96:29:eb:0a:a2:77:3f:e7:66:76:cf:7c:c5:70:7e:c6: 14:21:41:44:c4:2a:07:62:7d:6d:49:2c:2e:c0:20:0c:02:10: 4a:c6:b5:57:94:c3:97:c5:50:17:e4:30:2e:ed:e8:85:51:30: 0a:52:d5:6d:6c:b2:16:48:90:93:34:ae:a1:6a:53:ef:6b:aa: f0:97:6c:9a:69:22:aa:70:c7:aa:6f:e3:54:f2:c1:cb:dd:36: 5c:f5:c4:b1:41:75:5f:3b:7c:11:5d:03:a1:df:03:56:65:98: 5e:c5:b9:de:04:8b:37:ac:12:cb:90:6e:f7:0a:68:60:dc:28: 3c:8f:77:55 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE/J9FEbOZ+FRqBHs6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTExMDAxNDUxMloXDTI5MDIxMjAxNDUxMlowLzEtMCsGA1UEAxMk NDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFjZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgSomRBDphHtNnhdfpa112pXExLyRdY5RXG3 fGmDrWj2QOll6cD5efxxnFd48RqLhoCfFNJL7V+x0O1jjSYnq1u04WqQqw08Ccbo PhJdSWg0DUCggEbeS33Y6YBj06Sw6t8X3lqM+f7EZGXbGo2I749zB726TZfrZtfZ yDG6fLX7vvcBy5IMeENTm8266d3jMOzQ9pe00YttVg1XoxbD2KP8RY9iQeelNMaM 7x8vHN1dwmVs71/Lg2Wj8q3GcciSR77dd1j0nxsTP5ieglzctmQy40nHI4lfR/QF 7gtrPgJ+ph+2sOKhavC6xL9t0SalZ3kvJ3tlUFqaqwbqbhRIzQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCmkh6UsQMH4J/qbnyL+XM+e7RwdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQzY2ZkNjhmLTU0NTItNDM3ZS1i ODBkLWFjOTgxZGQxY2YxOS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRk MWNmMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABCIV8wDgQCAAIwCAMGACYC9JkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD26DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaHMavSY82tM1jkZ3jEw1smylv +A7Q7rvVx3k1RS2OBSQwrtA+Pm0x0Q9faBu2DleEGlRU1jKIMXYCBu1QMer+/iiq HBFKcGjbXOJNhZ/6CaetqLR24NqKsV8M+s3GaDAMEu0e1Q3D628B4uk3MgTPDtQq li/o7oCSdWFtCy+8u5Yp6wqidz/nZnbPfMVwfsYUIUFExCoHYn1tSSwuwCAMAhBK xrVXlMOXxVAX5DAu7eiFUTAKUtVtbLIWSJCTNK6halPva6rwl2yaaSKqcMeqb+NU 8sHL3TZc9cSxQXVfO3wRXQOh3wNWZZhexbneBIs3rBLLkG73Cmhg3Cg8j3dV -----END CERTIFICATE-----Generated at Sun Nov 15 13:33:46 2026 by rpki-client