$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.cer File: 98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.cer (raw, json) Hash identifier: oi39LSqrO+rL9dEXt6VNVLxO8dvCmaLzoKf0IJnIHpE= Subject key identifier: 4A:2F:77:A9:0C:19:FF:14:A3:3F:35:73:3C:C6:DF:F5:9D:7C:16:76 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F4805BA834C55A8F705F8D700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 12:45:11 +0000 Certificate not after: Wed 27 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 20209 IP: 209.73.32.0/19 IP: 209.81.64.0/19 IP: 2605:4800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:05:ba:83:4c:55:a8:f7:05:f8:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 24 12:45:11 2026 GMT Not After : Dec 27 13:45:11 2028 GMT Subject: CN=98cbd190-fbfe-49f7-b5c6-bda1299a2fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:5b:e8:f8:fd:8e:59:57:16:a6:f9:6c:2c: 55:00:23:9a:80:25:ff:92:98:fe:7d:b5:41:a4:ee: a9:31:7f:80:18:96:b6:9e:17:50:13:c7:74:7f:0d: a8:3b:f7:42:75:9e:1e:bf:b3:3a:0d:49:23:c2:b8: 8e:17:33:6a:b7:92:2e:8d:82:85:7e:1c:3f:3f:a4: 2b:1d:59:b9:ec:f5:45:8c:00:fa:e7:0f:59:db:af: 69:eb:50:5e:f4:5a:f2:eb:f7:28:53:f0:f1:8a:70: 78:8d:c0:ae:58:6f:26:d9:44:42:87:b0:d8:fe:82: a8:ac:94:a1:7f:04:80:ab:2c:79:e3:e3:44:5c:e6: 1d:2c:da:dd:5f:40:30:13:c9:45:6a:b4:bb:80:38: 3e:6d:1b:df:68:39:18:dd:04:b0:dc:95:50:18:38: 88:45:90:0e:30:1e:dd:c6:2b:ea:b8:7f:05:74:3f: ac:d5:76:db:0e:4e:6b:7a:17:7c:87:88:b1:31:43: ba:09:64:5c:36:a9:d5:65:8e:83:c6:22:9b:3a:e0: c4:b9:41:31:7b:11:49:14:f8:19:0f:b8:6b:a1:58: 08:6d:1c:37:c3:2b:59:bc:d0:d8:41:72:7a:36:a0: c7:a0:91:99:9b:be:bf:69:98:6f:7f:4d:92:95:75: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:77:A9:0C:19:FF:14:A3:3F:35:73:3C:C6:DF:F5:9D:7C:16:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 209.73.32.0/19 209.81.64.0/19 IPv6: 2605:4800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20209 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:47:9a:2b:51:f0:97:4a:c9:e4:e2:9c:66:9f:22:ad:40:af: dd:67:7e:67:61:b6:27:bc:87:00:22:53:a8:24:e0:1e:9b:b2: e9:8a:6a:53:59:9d:ce:8d:6d:6b:a0:11:38:b5:ce:da:51:fc: 8b:0b:df:e7:c6:7f:c7:5f:70:1e:37:30:3f:ba:db:6c:bb:90: 59:94:6c:d8:6d:b0:db:78:14:a5:2c:75:1e:1a:a9:d5:f2:00: 55:c4:9b:46:d4:af:32:62:b2:19:98:1d:9f:59:0a:d6:4e:28: 1d:b9:bb:b6:b8:fd:18:7a:7c:8b:3f:1e:87:e7:e0:40:d9:26: 5f:25:e6:f9:8f:10:4e:0b:89:2e:f0:86:f7:93:c0:42:b2:5a: b1:9d:ab:45:f2:c9:a0:07:fc:fc:78:dc:c0:48:c3:40:11:2b: 49:55:a7:3a:53:48:36:78:0c:f0:5a:24:db:6f:a8:78:82:08: a6:ec:34:c3:a6:ca:67:45:a1:c8:29:69:d4:21:13:e0:ec:49: 0e:f4:a7:dc:61:34:eb:5b:8f:d6:1e:af:00:23:ec:4e:81:b5: d9:47:da:d1:f1:60:90:6d:1d:ae:ee:90:e4:f4:9e:f9:f9:94: 57:d4:5a:2b:b0:36:6c:bd:d5:26:00:f9:be:5f:e2:a9:45:1b: 09:df:04:78 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE9IBbqDTFWo9wX41wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkyNDEyNDUxMVoXDTI4MTIyNzEzNDUxMVowLzEtMCsGA1UEAxMk OThjYmQxOTAtZmJmZS00OWY3LWI1YzYtYmRhMTI5OWEyZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN1b6Pj9jllXFqb5bCxVACOagCX/kpj+fbVB pO6pMX+AGJa2nhdQE8d0fw2oO/dCdZ4ev7M6DUkjwriOFzNqt5IujYKFfhw/P6Qr HVm57PVFjAD65w9Z269p61Be9Fry6/coU/DxinB4jcCuWG8m2URCh7DY/oKorJSh fwSAqyx54+NEXOYdLNrdX0AwE8lFarS7gDg+bRvfaDkY3QSw3JVQGDiIRZAOMB7d xivquH8FdD+s1XbbDk5rehd8h4ixMUO6CWRcNqnVZY6DxiKbOuDEuUExexFJFPgZ D7hroVgIbRw3wytZvNDYQXJ6NqDHoJGZm76/aZhvf02SlXVvcQIDAQABo4IELzCC BCswHQYDVR0OBBYEFEovd6kMGf8Uoz81czzG3/WdfBZ2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 OGNiZDE5MC1mYmZlLTQ5ZjctYjVjNi1iZGExMjk5YTJmZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk4Y2JkMTkwLWZiZmUtNDlmNy1i NWM2LWJkYTEyOTlhMmZlOS85OGNiZDE5MC1mYmZlLTQ5ZjctYjVjNi1iZGExMjk5 YTJmZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAXRSSADBAXRUUAwDQQCAAIwBwMFACYFSAAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICTvEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYkeaK1Hwl0rJ5OKcZp8i rUCv3Wd+Z2G2J7yHACJTqCTgHpuy6YpqU1mdzo1ta6AROLXO2lH8iwvf58Z/x19w HjcwP7rbbLuQWZRs2G2w23gUpSx1Hhqp1fIAVcSbRtSvMmKyGZgdn1kK1k4oHbm7 trj9GHp8iz8eh+fgQNkmXyXm+Y8QTguJLvCG95PAQrJasZ2rRfLJoAf8/HjcwEjD QBErSVWnOlNINngM8Fok22+oeIIIpuw0w6bKZ0WhyClp1CET4OxJDvSn3GE061uP 1h6vACPsToG12Ufa0fFgkG0dru6Q5PSe+fmUV9RaK7A2bL3VJgD5vl/iqUUbCd8E eA== -----END CERTIFICATE-----Generated at Fri Sep 25 20:04:15 2026 by rpki-client