$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer File: 716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer (raw, json) Hash identifier: w9avU0FJ6V1Jm4zLzMHZ0cd3XEH3OWZiK4dCPS/F0D0= Subject key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FB7CEE403EDB16908D334FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 13:45:14 +0000 Certificate not after: Mon 05 Feb 2029 13:45:14 +0000 Subordinate resources: AS: 32121 IP: 142.152.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:ce:e4:03:ed:b1:69:08:d3:34:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 3 13:45:14 2026 GMT Not After : Feb 5 13:45:14 2029 GMT Subject: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:e7:98:4d:10:ce:df:a7:a6:85:33:a6:89: c2:bc:ec:6b:08:f9:c9:0d:69:21:f7:60:c9:2a:3c: 90:58:1e:bd:e3:c5:a7:99:3a:76:df:78:a2:31:e2: d8:8a:c6:71:70:a5:c4:0c:c0:95:db:16:ca:ba:42: 0c:f5:20:d0:e1:c7:2e:d6:b7:61:10:3d:cf:9c:e0: 31:cb:9b:3f:63:d3:07:bf:67:7b:ca:54:c9:9e:a2: 5e:89:f6:b0:1d:fc:a8:3b:4d:14:36:ae:1c:04:ed: 5b:9c:bf:83:05:c0:5d:3b:a0:b3:2d:6e:ab:6f:6d: aa:73:f7:20:8c:2f:12:94:32:ea:4b:7a:3e:4a:11: ba:7d:37:0d:3d:89:45:cc:be:37:d2:a0:bf:92:b2: 7b:91:94:20:54:e9:61:9a:d3:9f:0d:94:d7:e6:d5: 39:20:27:54:9f:a1:27:1b:5d:d8:49:a7:fd:cc:9e: d9:11:2d:5f:ce:8f:19:ad:7d:25:35:25:69:ad:a3: 05:9a:07:be:ac:06:57:08:32:72:f9:45:aa:1b:23: d1:7c:55:b0:06:8f:70:8d:61:b2:d0:ba:b5:fe:f0: 01:86:77:79:69:70:ac:d1:db:7e:a6:b0:27:18:6d: 46:b6:f3:09:19:b5:0a:3a:a0:52:64:89:83:55:1a: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 142.152.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32121 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0d:a9:bc:2d:93:64:7a:75:4e:93:dd:ed:7e:b0:f2:03:25: 56:44:e3:3f:00:6f:27:e5:eb:52:14:78:b5:12:0e:8e:f9:01: 43:1e:91:c9:71:b1:8f:20:ec:e0:b9:a6:9a:94:7e:5c:d9:8e: e9:21:af:a6:60:eb:b7:48:6d:82:f4:ac:37:33:f6:3e:a1:db: 8f:c5:aa:8d:70:1c:c9:8a:5e:29:a9:56:2f:da:35:31:2d:bf: 47:ff:2f:e9:c1:c7:9f:ba:d0:f8:c4:a7:e3:df:64:7c:a2:f0: 6a:d2:c3:5d:f0:58:5f:8c:d8:5d:4b:f5:41:08:d0:db:89:db: 37:45:c8:62:0e:2d:c0:46:26:d9:60:47:69:9c:b4:b2:d0:d8: bc:3a:d9:92:a9:2e:bf:7c:e1:a0:f6:c4:53:fd:ab:15:c4:41: e1:08:47:ca:18:d6:eb:e9:9f:69:83:6c:c7:0a:db:98:eb:b5: e2:6b:fa:f1:9d:0f:28:a4:67:1a:1c:cb:2b:1b:c3:e8:a9:12: c3:0d:ed:5b:00:50:7e:f9:88:bf:ce:f3:d4:0c:19:da:c0:f7: e5:5a:13:7a:dd:c8:f6:2d:89:a7:2f:f8:09:fb:1e:e7:c2:d5: 0e:7b:b6:f5:07:76:20:91:4c:51:d2:f3:db:13:1e:ec:cc:e2: 94:76:00:4e -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE+3zuQD7bFpCNM0/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwMzEzNDUxNFoXDTI5MDIwNTEzNDUxNFowLzEtMCsGA1UEAxMk NzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6XnmE0Qzt+npoUzponCvOxrCPnJDWkh92DJ KjyQWB6948WnmTp233iiMeLYisZxcKXEDMCV2xbKukIM9SDQ4ccu1rdhED3PnOAx y5s/Y9MHv2d7ylTJnqJeifawHfyoO00UNq4cBO1bnL+DBcBdO6CzLW6rb22qc/cg jC8SlDLqS3o+ShG6fTcNPYlFzL430qC/krJ7kZQgVOlhmtOfDZTX5tU5ICdUn6En G13YSaf9zJ7ZES1fzo8ZrX0lNSVpraMFmge+rAZXCDJy+UWqGyPRfFWwBo9wjWGy 0Lq1/vABhnd5aXCs0dt+prAnGG1GtvMJGbUKOqBSZImDVRp5oQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFCCIA5+IZmfaQWlkm59FC1+hW1wSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzcxNmIzZjkxLTRkOWQtNDUyMC04 Y2E5LWNlMjYxNmMzN2Y0ZC83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZj MzdmNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCOmDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ9 eTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQATDam8LZNkenVOk93tfrDyAyVWROM/AG8n5etSFHi1Eg6O+QFD HpHJcbGPIOzguaaalH5c2Y7pIa+mYOu3SG2C9Kw3M/Y+oduPxaqNcBzJil4pqVYv 2jUxLb9H/y/pwcefutD4xKfj32R8ovBq0sNd8FhfjNhdS/VBCNDbids3RchiDi3A RibZYEdpnLSy0Ni8OtmSqS6/fOGg9sRT/asVxEHhCEfKGNbr6Z9pg2zHCtuY67Xi a/rxnQ8opGcaHMsrG8PoqRLDDe1bAFB++Yi/zvPUDBnawPflWhN63cj2LYmnL/gJ +x7nwtUOe7b1B3YgkUxR0vPbEx7szOKUdgBO -----END CERTIFICATE-----Generated at Sun Nov 15 20:39:10 2026 by rpki-client