$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer File: a29a724c-0ef8-416c-bb2c-359a0122375e.cer (raw, json) Hash identifier: b7viAIwBar/F8DK3F5o/OWavuJDgGHghFNdWY6Ce+rE= Subject key identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FCB59A9B086D7790AB2DD8D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 13:45:12 +0000 Certificate not after: Mon 12 Feb 2029 13:45:12 +0000 Subordinate resources: AS: 398562 IP: 170.39.52.0/22 IP: 206.168.252.0/22 IP: 2602:fcb3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cb:59:a9:b0:86:d7:79:0a:b2:dd:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 10 13:45:12 2026 GMT Not After : Feb 12 13:45:12 2029 GMT Subject: CN=a29a724c-0ef8-416c-bb2c-359a0122375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:3a:da:c1:85:ff:4d:fa:97:4f:df:5b:c4: c2:6d:db:0b:79:96:58:ef:4f:de:12:e0:6b:b7:e4: 8e:0f:64:28:09:e4:09:f4:c0:68:c7:c8:83:e0:be: 4e:77:35:a9:e9:ee:fc:b9:40:f7:62:6f:cd:41:52: ae:74:78:bf:29:0f:95:9a:11:cd:65:c1:0f:8c:ca: ad:99:41:47:fb:41:9c:0b:15:65:44:cd:42:92:a6: 5f:87:63:a1:b8:1d:c8:0a:c9:76:e2:41:9b:69:4a: e9:4c:4c:41:78:3e:f8:fc:59:c3:b4:2d:41:0f:39: f5:7e:9d:b9:4d:66:41:72:ec:e2:12:86:b1:ed:46: 71:87:d7:ce:28:c7:0e:21:1f:0d:3a:dd:6f:5e:ae: c2:d7:50:64:32:75:d9:ab:c9:e2:96:42:6f:3f:9c: 0c:f5:fe:0a:10:2b:4d:b4:72:5f:e5:41:db:3d:a4: 81:00:c4:b0:30:cf:ef:ca:7a:23:86:2f:07:55:30: 4e:01:7e:b5:fc:5f:14:b1:0a:b0:89:e5:c7:5a:0a: 86:4b:80:08:7d:b3:a7:06:d6:5e:16:1c:da:59:b1: b6:e0:84:f7:b8:e5:92:05:64:93:f2:80:cc:f1:8d: db:5a:69:c8:56:35:60:81:c4:d9:26:c1:72:d3:ed: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 170.39.52.0/22 206.168.252.0/22 IPv6: 2602:fcb3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0f:7e:e0:17:ad:ac:85:7b:69:09:0e:68:8e:58:d4:29:ec: 54:85:35:b7:af:19:39:74:74:80:09:34:40:42:d6:bd:58:f8: 44:8b:d9:20:50:ec:3c:4f:20:88:e6:cc:3e:9f:1a:b5:00:eb: 5a:12:e0:05:36:c7:21:2f:96:fd:37:c3:00:5c:2e:97:a5:09: 03:1b:8f:27:fd:da:16:63:6c:5b:78:c6:0f:5b:62:0a:33:7f: 1a:ec:a1:06:c5:eb:76:1e:aa:a2:2d:05:70:6d:c7:88:9a:35: 3f:29:7c:f4:05:72:52:82:bd:c8:7c:a1:b4:af:4a:61:5b:17: 8c:e9:b0:ee:68:8b:e2:f3:d5:0c:ce:d6:32:22:97:46:0d:27: 57:e7:31:4c:a0:b5:fb:3b:4b:eb:85:60:58:8d:ef:fc:b9:2b: ed:eb:7c:c0:d9:6f:b0:96:18:fd:3e:05:2d:b5:f2:f6:d8:74: 76:3a:d5:2a:84:79:9b:d6:98:83:ff:43:51:3c:f6:b1:c7:38: 3f:9c:6a:63:a1:ca:bd:40:6c:6c:a4:7b:5b:a1:bd:09:04:67: 74:4a:28:71:2e:c4:da:4f:92:b1:dd:d5:06:87:b4:1a:8a:c2: 40:2f:4c:c5:81:03:2f:68:85:cd:dd:ac:ed:54:da:36:5d:7d: 8c:e2:3a:e3 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE/LWamwhtd5CrLdjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTExMDEzNDUxMloXDTI5MDIxMjEzNDUxMlowLzEtMCsGA1UEAxMk YTI5YTcyNGMtMGVmOC00MTZjLWJiMmMtMzU5YTAxMjIzNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcw62sGF/036l0/fW8TCbdsLeZZY70/eEuBr t+SOD2QoCeQJ9MBox8iD4L5OdzWp6e78uUD3Ym/NQVKudHi/KQ+VmhHNZcEPjMqt mUFH+0GcCxVlRM1CkqZfh2OhuB3ICsl24kGbaUrpTExBeD74/FnDtC1BDzn1fp25 TWZBcuziEoax7UZxh9fOKMcOIR8NOt1vXq7C11BkMnXZq8nilkJvP5wM9f4KECtN tHJf5UHbPaSBAMSwMM/vynojhi8HVTBOAX61/F8UsQqwieXHWgqGS4AIfbOnBtZe FhzaWbG24IT3uOWSBWST8oDM8Y3bWmnIVjVggcTZJsFy0+1yRwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOLRsRwckhAKSV7moJrtJKLccFi3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h MjlhNzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlhMDEyMjM3NWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2EyOWE3MjRjLTBlZjgtNDE2Yy1i YjJjLTM1OWEwMTIyMzc1ZS9hMjlhNzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlhMDEy MjM3NWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKqJzQDBALOqPwwDgQCAAIwCAMGBCYC/LMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYU4jBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSD37gF62shXtpCQ5o jljUKexUhTW3rxk5dHSACTRAQta9WPhEi9kgUOw8TyCI5sw+nxq1AOtaEuAFNsch L5b9N8MAXC6XpQkDG48n/doWY2xbeMYPW2IKM38a7KEGxet2HqqiLQVwbceImjU/ KXz0BXJSgr3IfKG0r0phWxeM6bDuaIvi89UMztYyIpdGDSdX5zFMoLX7O0vrhWBY je/8uSvt63zA2W+wlhj9PgUttfL22HR2OtUqhHmb1piD/0NRPPaxxzg/nGpjocq9 QGxspHtbob0JBGd0SihxLsTaT5Kx3dUGh7QaisJAL0zFgQMvaIXN3aztVNo2XX2M 4jrj -----END CERTIFICATE-----Generated at Sun Nov 15 17:52:57 2026 by rpki-client