$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer File: ee9986fc-001f-49c5-949c-333fec29fe66.cer (raw, json) Hash identifier: nbRl66y+9sfnlI5pUovLIoNVmP2rTHtXPXmvXvV6owM= Subject key identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F4F00700D6A2A9E79615BF380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Sep 2026 00:45:11 +0000 Certificate not after: Sat 30 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 170.170.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:00:70:0d:6a:2a:9e:79:61:5b:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 27 00:45:11 2026 GMT Not After : Dec 30 01:45:11 2028 GMT Subject: CN=ee9986fc-001f-49c5-949c-333fec29fe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:49:d5:e3:ef:7d:8a:aa:e0:f4:b5:a2:ba: 29:8a:e5:6d:0e:c2:ac:4a:cc:fa:31:0a:06:8f:21: 40:c9:24:8f:c2:b1:f4:5a:d8:08:88:71:46:65:3b: f2:97:96:de:05:a4:99:e6:61:aa:46:1a:02:d2:7d: dd:79:7e:f9:09:f1:65:3c:19:58:17:ec:11:ef:ad: 11:d4:0b:a3:b1:c1:80:51:b1:be:3e:da:6b:6b:16: 45:20:93:67:e1:10:43:d4:b0:12:96:e0:15:59:1e: 6f:dc:53:89:b6:25:2a:bd:ba:01:db:43:76:5e:88: 54:36:69:43:e0:d8:24:45:ef:a7:8b:99:e3:c2:2b: 12:55:e0:dc:ba:63:e2:59:63:88:11:66:b5:c1:86: 03:66:21:0d:ff:90:36:b3:5a:dc:97:5c:a3:3c:bf: 15:e2:c4:9c:6a:eb:69:46:98:c3:7b:ae:66:52:db: 96:dc:0e:c3:c6:a2:d8:29:8b:12:bb:0e:d8:43:ff: 3c:2b:28:a7:2d:bd:33:85:3e:9b:d7:e7:e9:82:bf: 26:ed:e5:6d:b8:df:33:bd:cc:12:78:75:f8:c4:ca: a0:5d:87:f8:eb:13:ac:1a:8c:dd:fd:4d:e6:b6:05: a3:3a:e5:7b:87:d9:7f:5f:95:a3:d8:dd:19:17:b9: da:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 170.170.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5c:e7:c2:90:1d:71:ad:79:6e:ce:3c:2e:a6:37:31:05:4d: 55:ec:06:fd:eb:fb:e6:f6:6f:a9:15:9b:c1:c3:12:2e:38:2a: ab:43:8e:9d:21:77:9f:e9:4e:ca:f7:4a:29:fe:97:5e:ef:08: 21:fc:ef:06:de:8f:ba:ad:b7:5e:5d:37:c4:0c:25:7e:4b:96: 88:df:74:bc:0c:fd:ef:77:e1:5a:f2:7e:0f:ef:c7:0a:48:e2: 8b:d4:d4:cb:1e:74:3a:e1:bc:3e:ad:57:ec:2a:31:ce:14:43: 13:3e:4e:a5:80:80:0c:d3:3b:83:69:d8:0c:8e:c5:ac:44:eb: 48:b8:eb:8c:c9:dd:5f:40:75:b5:d0:24:63:bb:04:53:ac:31: e5:f3:93:e8:f1:1f:90:a9:9d:0d:10:9e:d7:ee:9c:fb:f8:e5: a2:ef:cf:27:c4:61:12:61:63:23:c4:0e:2c:12:37:8e:85:8e: 32:27:ec:9a:d4:14:b6:20:8f:ca:d5:47:05:ea:cf:a7:59:2b: d3:29:e7:2e:1e:bf:10:9c:b0:f7:20:f3:b6:7f:ca:a7:23:3a: b1:ca:4e:ad:1b:24:8a:d8:69:56:2a:6c:6e:e2:e0:1a:03:d6: 78:dd:4c:cd:7f:61:10:14:c0:b2:91:8d:c3:0f:2d:ee:21:e4: 0e:68:ef:c6 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE9PAHANaiqeeWFb84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyNzAwNDUxMVoXDTI4MTIzMDAxNDUxMVowLzEtMCsGA1UEAxMk ZWU5OTg2ZmMtMDAxZi00OWM1LTk0OWMtMzMzZmVjMjlmZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmZJ1ePvfYqq4PS1oropiuVtDsKsSsz6MQoG jyFAySSPwrH0WtgIiHFGZTvyl5beBaSZ5mGqRhoC0n3deX75CfFlPBlYF+wR760R 1AujscGAUbG+PtpraxZFIJNn4RBD1LASluAVWR5v3FOJtiUqvboB20N2XohUNmlD 4NgkRe+ni5njwisSVeDcumPiWWOIEWa1wYYDZiEN/5A2s1rcl1yjPL8V4sScautp RpjDe65mUtuW3A7DxqLYKYsSuw7YQ/88KyinLb0zhT6b1+fpgr8m7eVtuN8zvcwS eHX4xMqgXYf46xOsGozd/U3mtgWjOuV7h9l/X5Wj2N0ZF7naWwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCxqk05YGDfrCSQ9/Jok0Do2qVl4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l ZTk5ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNmZWMyOWZlNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VlOTk4NmZjLTAwMWYtNDljNS05 NDljLTMzM2ZlYzI5ZmU2Ni9lZTk5ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNmZWMy OWZlNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMXOfCkB1xrXluzjwupjcx BU1V7Ab96/vm9m+pFZvBwxIuOCqrQ46dIXef6U7K90op/pde7wgh/O8G3o+6rbde XTfEDCV+S5aI33S8DP3vd+Fa8n4P78cKSOKL1NTLHnQ64bw+rVfsKjHOFEMTPk6l gIAM0zuDadgMjsWsROtIuOuMyd1fQHW10CRjuwRTrDHl85Po8R+QqZ0NEJ7X7pz7 +OWi788nxGESYWMjxA4sEjeOhY4yJ+ya1BS2II/K1UcF6s+nWSvTKecuHr8QnLD3 IPO2f8qnIzqxyk6tGySK2GlWKmxu4uAaA9Z43UzNf2EQFMCykY3DDy3uIeQOaO/G -----END CERTIFICATE-----Generated at Sun Sep 27 21:28:28 2026 by rpki-client