$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer File: a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer (raw, json) Hash identifier: NWzq9FFaVaf66nZvVYICBFaQO6+LK0TQMg88opid9f4= Subject key identifier: 41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F5C5811B301059A8F69961880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 19:27:16 +0000 Certificate not after: Sun 26 Nov 2028 01:45:12 +0000 Subordinate resources: AS: 23228 IP: 204.154.28.0/22 IP: 2620:13b:9000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:58:11:b3:01:05:9a:8f:69:96:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Oct 1 19:27:16 2026 GMT Not After : Nov 26 01:45:12 2028 GMT Subject: CN=a23e4fc3-9953-40b8-8d08-ac7981cb8d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:11:95:52:1b:79:bd:7b:bd:e7:5e:a4:00: d1:bd:3e:3f:22:ed:74:2a:b2:c9:e8:8d:5a:e5:d3: 98:0a:41:85:00:3a:80:60:20:36:b8:c2:8d:fd:81: 22:b3:a9:6a:5d:64:74:cb:59:92:7c:4e:26:c9:47: 96:b9:ac:ff:d5:d3:4f:89:a3:22:d8:40:3f:1d:5c: d0:a7:8f:be:7b:65:d4:6c:70:7d:a6:ed:cd:c9:4e: 4d:73:af:43:d5:69:9b:5c:89:a8:3f:f5:d3:e2:53: 21:75:44:88:d5:28:c9:5b:bf:40:88:f2:ff:53:0d: 05:c4:84:a2:d4:a7:58:a0:74:db:d5:c2:e1:73:82: fb:73:7d:f6:36:85:54:39:f7:e1:49:7a:73:44:59: 85:80:89:c7:15:56:77:21:20:a4:81:b1:61:24:2f: 75:47:7a:26:c5:88:32:81:70:e4:4d:72:d3:d5:88: e7:c2:b9:fd:c5:e7:49:ae:c8:c7:2d:4a:13:bb:36: a2:e6:0c:48:e6:29:95:d7:7b:96:86:30:4c:c1:65: 5f:74:f6:4b:d1:4d:ac:ba:a6:05:fd:b9:d6:67:c4: ba:d7:6e:65:94:d5:30:08:52:a4:fa:2c:28:a6:94: 35:5c:89:46:86:c8:14:b6:22:89:bb:99:23:39:31: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.154.28.0/22 IPv6: 2620:13b:9000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:27:73:e5:72:5b:31:32:59:72:8f:4f:d6:36:c0:30:c2:5d: 23:34:3f:79:0a:bd:57:6e:d2:4b:a8:58:b9:49:db:19:47:33: 44:4d:f2:c4:62:1e:65:45:11:28:12:9a:59:39:34:78:e6:d9: 06:5e:93:55:a9:a1:5c:b6:ba:52:c9:a2:51:e6:f9:e8:d7:fb: 11:bb:39:7c:1e:90:f6:bf:7d:c8:86:06:57:ab:17:65:e2:fd: 5d:01:89:f7:a8:62:e0:06:8c:35:9b:ab:40:ec:71:ad:8b:c0: 82:70:8e:9d:8e:79:c9:11:33:00:52:c3:20:20:6c:ab:a9:13: cb:a3:50:32:9a:87:7d:bf:6d:40:f8:7f:e1:f2:42:96:b3:51: 58:4e:f2:f6:60:ff:55:5d:6d:72:3f:de:71:09:41:ee:39:3f: dc:96:c9:0a:3e:d4:a6:5e:20:8a:6d:c4:9a:53:c5:30:f2:4b: 6b:d3:91:02:6b:41:3c:61:ef:61:3e:df:a4:0c:ab:e6:30:fc: 75:9e:b2:c4:37:bc:ce:2c:4e:e4:e0:b3:12:81:17:c1:23:5e: 20:92:1b:8a:c8:e6:fc:64:c2:4b:88:d5:94:0c:2e:1b:fa:9b: d8:79:32:3b:81:a7:72:84:33:5b:7f:65:ba:bc:3b:3e:37:45: 97:4c:5d:29 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE9cWBGzAQWaj2mWGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MTAwMTE5MjcxNloXDTI4MTEyNjAxNDUxMlowLzEtMCsGA1UEAxMk YTIzZTRmYzMtOTk1My00MGI4LThkMDgtYWM3OTgxY2I4ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzERlVIbeb17vedepADRvT4/Iu10KrLJ6I1a 5dOYCkGFADqAYCA2uMKN/YEis6lqXWR0y1mSfE4myUeWuaz/1dNPiaMi2EA/HVzQ p4++e2XUbHB9pu3NyU5Nc69D1WmbXImoP/XT4lMhdUSI1SjJW79AiPL/Uw0FxISi 1KdYoHTb1cLhc4L7c332NoVUOffhSXpzRFmFgInHFVZ3ISCkgbFhJC91R3omxYgy gXDkTXLT1Yjnwrn9xedJrsjHLUoTuzai5gxI5imV13uWhjBMwWVfdPZL0U2suqYF /bnWZ8S6125llNUwCFKk+iwoppQ1XIlGhsgUtiKJu5kjOTG/sQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEHPjSCT7ikQYS/9plHuPACJtK3dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h MjNlNGZjMy05OTUzLTQwYjgtOGQwOC1hYzc5ODFjYjhkNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyM2U0ZmMzLTk5NTMtNDBiOC04 ZDA4LWFjNzk4MWNiOGQ0NC9hMjNlNGZjMy05OTUzLTQwYjgtOGQwOC1hYzc5ODFj YjhkNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALMmhwwDgQCAAIwCAMGACYgATuQMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlq8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB0nc+VyWzEyWXKPT9Y2wDDCXSM0 P3kKvVdu0kuoWLlJ2xlHM0RN8sRiHmVFESgSmlk5NHjm2QZek1WpoVy2ulLJolHm +ejX+xG7OXwekPa/fciGBlerF2Xi/V0BifeoYuAGjDWbq0Dsca2LwIJwjp2OeckR MwBSwyAgbKupE8ujUDKah32/bUD4f+HyQpazUVhO8vZg/1VdbXI/3nEJQe45P9yW yQo+1KZeIIptxJpTxTDyS2vTkQJrQTxh72E+36QMq+Yw/HWessQ3vM4sTuTgsxKB F8EjXiCSG4rI5vxkwkuI1ZQMLhv6m9h5MjuBp3KEM1t/Zbq8Oz43RZdMXSk= -----END CERTIFICATE-----Generated at Sat Oct 3 17:51:33 2026 by rpki-client