$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer File: 71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer (raw, json) Hash identifier: ifnYWzeaStHBazJzXO3B/sRxmYPWQ4fdto+dyF0+Q/0= Subject key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FBB434FFF11F8478D9179A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Nov 2026 19:27:14 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 401170 AS: 403188 IP: 23.181.136.0/24 IP: 131.143.59.0/24 IP: 2602:f8bf::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bb:43:4f:ff:11:f8:47:8d:91:79:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 4 19:27:14 2026 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:19:90:51:71:cb:87:f2:69:cc:da:4f:c6: 8c:ee:60:66:07:69:e8:3f:35:7e:12:34:dc:56:6b: df:d0:c2:63:32:4c:a9:12:e1:94:6a:0b:ca:8d:21: 22:70:02:7c:8c:5d:84:1f:14:91:c3:37:90:a4:ca: 95:6d:05:e2:c8:8e:f5:41:d9:4f:69:e0:15:09:62: c6:e5:48:86:84:91:58:a7:0c:f7:e7:14:90:3f:f0: 2d:66:94:1b:95:d6:b9:5a:0e:24:b8:40:10:7a:84: 9b:4d:69:c1:70:c2:bd:7a:58:14:ab:c8:bb:ef:cb: ac:57:c4:28:ab:4a:ee:2b:69:01:ae:90:9d:2e:c2: 72:00:b8:90:65:93:75:2b:cb:4b:0a:dd:a9:3b:ea: af:01:5e:94:06:6c:58:58:46:c5:fb:ae:86:07:9a: 88:fc:da:c3:fd:f8:e4:75:7b:23:f9:13:4b:70:2a: e8:61:26:7e:b3:61:3b:19:e3:45:b9:d6:a1:9d:51: e4:a5:a4:8a:1b:bc:f8:3b:3a:fb:1b:f1:75:dc:8f: 12:15:84:c6:91:fb:f8:3a:eb:46:af:b6:77:1c:ca: 2b:3c:15:a3:30:20:1b:74:13:ab:49:97:82:d1:13: 6f:ea:b7:be:13:6a:5c:d8:2a:f5:8b:ff:a3:a7:33: 4e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.181.136.0/24 131.143.59.0/24 IPv6: 2602:f8bf::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401170 403188 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d4:16:19:9b:3b:0e:fd:8d:86:78:8f:f7:a2:30:34:67:b6: 62:d2:07:69:12:bb:46:0a:ad:59:11:81:09:55:a6:d9:3a:36: a4:f6:16:61:2e:f9:13:da:a3:03:f3:be:59:64:a1:65:17:d2: 63:10:c4:a1:0b:28:c1:97:49:79:dc:a2:e3:3f:7c:e3:f2:02: 68:4d:eb:70:3b:3d:da:5f:a3:69:b4:05:ce:67:59:18:11:e8: c9:fa:7d:d0:48:a9:6c:4e:c5:b5:de:0a:02:ca:8d:07:10:c1: b7:31:d9:33:c4:47:a8:ce:f8:aa:95:14:57:23:64:16:cd:b1: 0f:6f:45:52:c8:ee:be:6f:bd:02:4f:f8:09:b9:22:cf:8a:c6: 23:b4:2d:7c:97:f9:ee:98:ea:52:cc:c9:e8:45:43:b4:9a:3c: b5:ea:c5:8e:79:e5:96:52:97:b8:5a:77:3a:e7:5b:e7:48:64: c3:27:fb:a3:ec:4c:d5:50:b3:2c:e4:96:31:47:ae:dc:5d:d8: 13:89:47:c8:0e:aa:a9:a5:55:b4:6e:a5:2d:d0:2d:87:f0:3b: 77:0d:07:f7:2d:0b:5f:c1:fd:30:23:a5:dd:6f:f3:70:7e:c9: 69:7a:fe:ba:55:4d:cf:01:44:c3:5b:c7:71:80:83:11:b1:b3: 5d:43:81:67 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE+7Q0//EfhHjZF5pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwNDE5MjcxNFoXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk NzE2OTRkOWEtOGExZi00NzhkLThkNWYtYzNkNGM4NGRkZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqgZkFFxy4fyaczaT8aM7mBmB2noPzV+EjTc Vmvf0MJjMkypEuGUagvKjSEicAJ8jF2EHxSRwzeQpMqVbQXiyI71QdlPaeAVCWLG 5UiGhJFYpwz35xSQP/AtZpQblda5Wg4kuEAQeoSbTWnBcMK9elgUq8i778usV8Qo q0ruK2kBrpCdLsJyALiQZZN1K8tLCt2pO+qvAV6UBmxYWEbF+66GB5qI/NrD/fjk dXsj+RNLcCroYSZ+s2E7GeNFudahnVHkpaSKG7z4Ozr7G/F13I8SFYTGkfv4OutG r7Z3HMorPBWjMCAbdBOrSZeC0RNv6re+E2pc2Cr1i/+jpzNOcQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFC3X80mYbFhrx7/gwZ2/j7wu5LzcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 MTY5NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0Yzg0ZGRlYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzcxNjk0ZDlhLThhMWYtNDc4ZC04 ZDVmLWMzZDRjODRkZGVhOC83MTY5NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0Yzg0 ZGRlYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXtYgDBACDjzswDgQCAAIwCAMGACYC+L8AMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYfEgIDBib0MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIHUFhmbOw79 jYZ4j/eiMDRntmLSB2kSu0YKrVkRgQlVptk6NqT2FmEu+RPaowPzvllkoWUX0mMQ xKELKMGXSXncouM/fOPyAmhN63A7Pdpfo2m0Bc5nWRgR6Mn6fdBIqWxOxbXeCgLK jQcQwbcx2TPER6jO+KqVFFcjZBbNsQ9vRVLI7r5vvQJP+Am5Is+KxiO0LXyX+e6Y 6lLMyehFQ7SaPLXqxY555ZZSl7hadzrnW+dIZMMn+6PsTNVQsyzkljFHrtxd2BOJ R8gOqqmlVbRupS3QLYfwO3cNB/ctC1/B/TAjpd1v83B+yWl6/rpVTc8BRMNbx3GA gxGxs11DgWc= -----END CERTIFICATE-----Generated at Sun Nov 15 13:09:59 2026 by rpki-client