$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer File: 2123fd68-596c-4806-bd9e-91167a6dc6d4.cer (raw, json) Hash identifier: GuK220lM1iY6x0QFoE/anFLKoi6Ztk8T/VT9Gn+qTd0= Subject key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F46A0631FB98F8ED4A742B300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 00:45:11 +0000 Certificate not after: Wed 27 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 401442 IP: 23.137.196.0/24 IP: 2604:ba0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a0:63:1f:b9:8f:8e:d4:a7:42:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 24 00:45:11 2026 GMT Not After : Dec 27 01:45:11 2028 GMT Subject: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:71:13:ee:8f:8c:8e:15:2d:ef:c0:e5:fa: 5d:9e:6b:60:29:00:f3:57:29:94:cc:59:8d:9f:b4: c5:04:58:3b:63:65:23:9f:ae:55:0c:44:36:68:28: f2:08:f8:ab:a2:09:cd:6b:dc:8d:f0:e9:cc:01:3b: a5:8a:b4:cc:cc:26:2c:2c:72:0e:85:f3:fb:a8:c3: ca:4e:fb:a4:e6:89:c7:45:14:95:27:37:af:08:2e: 67:75:45:a4:b2:bd:e0:7b:8f:56:1c:8d:f8:f3:61: 05:8a:57:7d:c5:c3:1d:ad:ec:af:ba:29:90:2b:11: 9a:55:b2:e8:b4:45:f1:78:2e:52:93:90:b2:1d:a9: 64:2e:f3:be:f0:67:39:fd:ea:10:48:72:6e:2d:f4: 1b:75:5a:24:54:44:20:ad:77:c4:0e:67:61:cb:e8: c9:a6:91:ab:59:ad:48:2d:60:7c:26:31:49:df:21: fd:bf:ec:5e:32:f7:6f:fd:bb:38:bd:3c:ca:37:46: eb:d6:0a:12:cc:b3:a5:06:95:25:af:cf:d7:2f:81: 69:01:3f:51:45:7a:90:48:85:d7:41:1f:bd:45:1c: 94:ac:b6:1c:e2:96:fa:f3:ac:3b:36:34:c4:22:1a: 20:4f:65:cc:8a:3a:6c:d1:4e:46:97:57:02:19:ff: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.196.0/24 IPv6: 2604:ba0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401442 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:46:a0:27:f3:92:8a:28:ff:58:83:1c:14:d8:4f:85:d6:83: 5c:72:34:b1:c2:59:69:9c:68:02:1b:eb:e6:64:c8:8b:01:5c: ea:bc:7d:32:d7:29:8c:59:95:87:ee:b4:0b:47:c6:4f:7e:7e: a7:a8:d7:22:19:c8:b9:5b:fb:54:b2:96:e4:ed:64:19:bd:8f: 6b:af:63:c1:41:da:80:6f:2e:0d:4e:c0:87:92:1a:93:f7:2f: e8:e3:10:c6:40:9a:66:a5:72:c4:4a:f0:d0:fa:7f:91:3f:18: 46:ff:90:73:32:b9:b5:9b:97:d7:cd:46:0c:a3:5e:6c:d9:6e: ea:eb:55:5b:79:24:65:3c:9d:6e:bd:e2:94:25:dc:0b:30:2b: 5e:df:60:63:ea:5b:d4:f6:8a:0b:13:9c:c9:d2:b3:b7:76:7e: df:01:a1:3c:fb:30:61:d1:79:be:7a:fe:2d:ae:8f:eb:e9:89: 6b:db:be:ac:17:26:4c:ea:c3:10:b9:d3:ca:51:15:20:a5:07: 96:70:3b:b7:40:67:32:6d:95:9d:4b:87:f6:79:be:43:a1:25: 05:7c:3e:62:f1:2a:10:06:2d:10:8c:53:9c:ed:cf:4f:c7:3f: 44:e8:bd:ed:63:54:44:a3:cc:05:95:7f:eb:1a:43:59:f9:78: c1:a3:88:2b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE9GoGMfuY+O1KdCswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyNDAwNDUxMVoXDTI4MTIyNzAxNDUxMVowLzEtMCsGA1UEAxMk MjEyM2ZkNjgtNTk2Yy00ODA2LWJkOWUtOTExNjdhNmRjNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE9xE+6PjI4VLe/A5fpdnmtgKQDzVymUzFmN n7TFBFg7Y2Ujn65VDEQ2aCjyCPirognNa9yN8OnMATulirTMzCYsLHIOhfP7qMPK Tvuk5onHRRSVJzevCC5ndUWksr3ge49WHI3482EFild9xcMdreyvuimQKxGaVbLo tEXxeC5Sk5CyHalkLvO+8Gc5/eoQSHJuLfQbdVokVEQgrXfEDmdhy+jJppGrWa1I LWB8JjFJ3yH9v+xeMvdv/bs4vTzKN0br1goSzLOlBpUlr8/XL4FpAT9RRXqQSIXX QR+9RRyUrLYc4pb686w7NjTEIhogT2XMijps0U5Gl1cCGf8LIwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJhO/PsdEeRQgSrH6TWsxhpJ9oGLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2ZGM2ZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIxMjNmZDY4LTU5NmMtNDgwNi1i ZDllLTkxMTY3YTZkYzZkNC8yMTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2 ZGM2ZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXicQwDQQCAAIwBwMFACYEC6AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiAiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGZGoCfzkooo/1iDHBTYT4XWg1xy NLHCWWmcaAIb6+ZkyIsBXOq8fTLXKYxZlYfutAtHxk9+fqeo1yIZyLlb+1SyluTt ZBm9j2uvY8FB2oBvLg1OwIeSGpP3L+jjEMZAmmalcsRK8ND6f5E/GEb/kHMyubWb l9fNRgyjXmzZburrVVt5JGU8nW694pQl3AswK17fYGPqW9T2igsTnMnSs7d2ft8B oTz7MGHReb56/i2uj+vpiWvbvqwXJkzqwxC508pRFSClB5ZwO7dAZzJtlZ1Lh/Z5 vkOhJQV8PmLxKhAGLRCMU5ztz0/HP0Tove1jVESjzAWVf+saQ1n5eMGjiCs= -----END CERTIFICATE-----Generated at Sun Sep 27 05:45:19 2026 by rpki-client