$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer File: a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer (raw, json) Hash identifier: mQlp/x4VH7c9ZRc6B4ZyDCcxOFVDiVpuVoD1v+NnTTM= Subject key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FD3B9B74BB0121F36E1ED2540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Nov 2026 13:45:12 +0000 Certificate not after: Thu 15 Feb 2029 13:45:12 +0000 Subordinate resources: IP: 23.177.72.0/24 IP: 142.248.68.0/22 IP: 2602:f90c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:b9:b7:4b:b0:12:1f:36:e1:ed:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 13 13:45:12 2026 GMT Not After : Feb 15 13:45:12 2029 GMT Subject: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:ca:ae:2e:a2:a3:94:c9:3f:4a:22:3d:9d: c3:b3:f3:e0:8b:3d:b4:b1:60:c9:90:92:44:7f:67: fa:22:7c:fe:12:61:9b:65:ea:f0:7a:bb:f0:ba:38: a4:bc:35:6f:9d:56:0c:cb:ae:11:b4:20:a4:b5:a9: 69:54:ae:4e:1b:02:44:3f:15:4b:51:ff:8b:a8:bf: 0b:33:3a:c4:84:b2:4b:c7:66:92:24:c0:2a:dd:c5: 10:81:7b:f5:80:96:9a:cf:a5:2b:6e:b9:2b:30:78: 7b:f3:26:ae:1f:41:36:80:36:a5:3b:45:8e:f1:5d: cc:ce:cc:d2:47:58:25:ee:bd:6e:43:2e:62:77:54: 81:7d:43:f4:1e:33:a7:73:a6:b7:31:64:6a:0f:13: ce:99:8d:d5:a4:3e:8e:45:71:a9:bc:2d:d2:7d:c2: bb:cb:73:06:20:e6:c3:7e:e6:1b:21:38:30:28:51: 65:b6:86:3e:5d:f5:ab:18:5e:f1:83:cd:80:fa:ee: d6:c6:d6:42:88:dc:49:67:61:46:f6:c2:c6:05:7c: ce:c9:73:51:0c:8a:55:15:70:8a:87:34:c7:f2:5a: 4b:9b:fa:4c:90:80:28:b1:bc:05:2f:08:c3:b7:f1: dd:66:9f:1c:be:61:4d:fd:72:fd:ff:e8:bb:9a:88: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.72.0/24 142.248.68.0/22 IPv6: 2602:f90c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b9:de:4b:34:ec:cb:2d:77:97:2d:cd:df:e3:83:a5:a4:24: cc:f7:79:4c:b4:a6:b9:d2:b6:c7:53:b9:b9:83:c3:ab:05:03: 39:71:80:1a:7f:9f:1e:be:4f:aa:7d:61:42:9c:01:a4:6a:c1: ce:d5:bb:7c:a7:03:10:47:ef:44:3f:f8:e4:b3:63:26:b9:89: 14:4d:09:61:eb:ea:eb:8f:50:66:3a:99:c2:ea:39:6a:c1:5f: 05:7f:f7:8d:bb:d7:a3:9d:53:4e:84:e2:a1:61:b1:a3:6f:80: 2e:ec:50:ee:20:cf:3e:70:78:f2:19:4b:7b:bb:c6:4f:24:84: 17:d3:9a:76:e4:2d:05:7c:34:4d:e9:46:fd:ea:93:0c:2a:d7: 60:1e:79:02:d3:14:91:69:86:7a:19:4a:ae:03:a4:60:2e:29: 28:b2:68:b2:85:fc:01:32:1c:d3:f1:30:eb:be:17:be:dd:3b: 46:5f:cf:c1:be:83:85:d3:13:95:97:28:80:e2:9f:d2:50:8d: bb:49:18:da:da:80:c6:07:b4:12:bf:9b:50:5f:d5:23:57:14: 87:55:b3:7f:90:e2:ad:46:6a:a9:fd:59:bc:ed:bf:a4:89:b1: 1d:ef:62:c5:cc:35:2c:82:70:61:f0:eb:b4:7a:5e:b2:b4:1c: 01:a0:24:2a -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE/TubdLsBIfNuHtJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTExMzEzNDUxMloXDTI5MDIxNTEzNDUxMlowLzEtMCsGA1UEAxMk YTllNWUyZmUtZGIzMy00MDBhLWIxY2EtODA1ZGU1MmVhYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiijKri6io5TJP0oiPZ3Ds/Pgiz20sWDJkJJE f2f6Inz+EmGbZerwervwujikvDVvnVYMy64RtCCktalpVK5OGwJEPxVLUf+LqL8L MzrEhLJLx2aSJMAq3cUQgXv1gJaaz6UrbrkrMHh78yauH0E2gDalO0WO8V3MzszS R1gl7r1uQy5id1SBfUP0HjOnc6a3MWRqDxPOmY3VpD6ORXGpvC3SfcK7y3MGIObD fuYbITgwKFFltoY+XfWrGF7xg82A+u7WxtZCiNxJZ2FG9sLGBXzOyXNRDIpVFXCK hzTH8lpLm/pMkIAosbwFLwjDt/HdZp8cvmFN/XL9/+i7moiCrQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFADSiKWRIlBeP/m012VrB26KBsl/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUyZWFiNmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E5ZTVlMmZlLWRiMzMtNDAwYS1i MWNhLTgwNWRlNTJlYWI2YS9hOWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUy ZWFiNmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXsUgDBAKO+EQwDgQCAAIwCAMGACYC+QwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO53ks07Mstd5ctzd/jg6WkJMz3eUy0prnStsdTubmDw6sFAzlxgBp/ nx6+T6p9YUKcAaRqwc7Vu3ynAxBH70Q/+OSzYya5iRRNCWHr6uuPUGY6mcLqOWrB XwV/942716OdU06E4qFhsaNvgC7sUO4gzz5wePIZS3u7xk8khBfTmnbkLQV8NE3p Rv3qkwwq12AeeQLTFJFphnoZSq4DpGAuKSiyaLKF/AEyHNPxMOu+F77dO0Zfz8G+ g4XTE5WXKIDin9JQjbtJGNragMYHtBK/m1Bf1SNXFIdVs3+Q4q1Gaqn9Wbztv6SJ sR3vYsXMNSyCcGHw67R6XrK0HAGgJCo= -----END CERTIFICATE-----Generated at Sun Nov 15 13:09:22 2026 by rpki-client