$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer File: 10cf0e64-be53-4add-9414-d9b9f7f83aab.cer (raw, json) Hash identifier: RIVU8BGNitOjaDt0ALwh3mkzqiKInj4CorKfxtuWsFs= Subject key identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F039FF8453137B17099D6F540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Aug 2026 00:45:12 +0000 Certificate not after: Sun 03 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 398906 IP: 203.217.148.0/23 IP: 2602:f967::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:9f:f8:45:31:37:b1:70:99:d6:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 31 00:45:12 2026 GMT Not After : Dec 3 01:45:12 2028 GMT Subject: CN=10cf0e64-be53-4add-9414-d9b9f7f83aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:75:ff:19:f5:ec:b3:0a:22:fa:80:51:91: 91:02:58:20:b8:29:d7:0c:cf:75:0e:ce:13:04:72: 8f:6e:c8:a6:90:d4:5c:36:ac:5e:71:6d:ae:81:23: 9c:eb:e0:59:2d:22:75:2d:a7:5e:e5:2a:01:88:d8: ec:49:f1:a9:bf:1e:17:9f:f8:72:fa:62:f7:c0:b7: 35:52:b6:0d:b2:ba:33:b6:f0:93:2c:80:07:a9:36: c4:9e:8d:dd:f1:b7:98:39:c6:da:c6:bc:23:49:f8: 08:1b:e9:07:30:47:48:26:a7:a1:48:9e:49:2c:de: 52:b1:80:34:25:3d:67:ba:94:8c:f2:e5:bb:06:cb: 0a:a2:3c:a3:41:be:4a:9e:7a:84:54:6d:52:e3:8e: 48:3c:02:f3:2b:9a:55:a8:da:5e:8f:01:ff:40:e7: 53:85:bd:f1:39:21:e3:19:89:a6:51:aa:70:28:bb: 7a:75:4d:b4:f8:e6:1a:71:0e:0f:c5:51:99:98:49: 9c:1f:48:d2:e0:86:e6:18:49:28:7c:d5:58:83:18: cd:d5:f2:12:d1:e9:3f:47:a2:f7:3f:ec:05:f3:06: d0:99:5d:aa:aa:3c:89:14:66:3f:8b:62:d9:78:8a: 47:54:bb:5a:b1:c7:d9:dd:3a:04:38:0b:34:ff:30: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 203.217.148.0/23 IPv6: 2602:f967::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398906 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ee:d9:e0:fc:76:ed:86:63:1d:b5:6b:f5:b4:2b:00:1a:d7: c9:b5:ca:aa:df:e4:f0:23:cb:00:6a:5e:a3:f9:16:ce:4c:11: 5a:8d:25:e4:0e:37:5a:87:43:ca:6b:28:41:04:fb:1d:3e:ec: 4b:b6:23:5a:9c:1b:05:88:aa:df:d5:8a:1b:40:99:64:fe:7b: 93:bf:49:28:2e:fd:da:e4:e7:71:b6:22:ae:c3:6d:80:f3:22: 60:b3:a7:28:6f:64:3f:f9:63:35:36:1c:e2:75:dc:b0:04:2f: 8d:21:0b:76:56:9d:dc:63:20:72:e2:53:94:81:12:82:16:91: f2:ae:cc:51:4d:f7:59:39:1d:f4:a5:c4:63:8c:e6:7f:ac:95: 58:c0:a8:a4:09:31:21:a6:47:d6:54:32:d9:a6:dd:05:d5:0d: a3:30:4c:c7:62:9b:1a:2c:a1:32:26:83:9c:88:f5:6d:31:a3: e9:3a:47:19:fa:53:e2:7c:4e:23:f2:f1:21:e9:a9:19:f4:ee: 7a:c5:05:61:1d:ba:0f:59:27:5c:40:71:1c:ad:8d:34:7c:51: 4f:3b:af:97:05:8e:bc:62:af:81:2b:70:51:9f:9d:31:93:e5: bd:06:c8:cb:d9:44:e2:9f:e9:7b:53:c3:5e:de:f2:f6:53:44: b6:6f:80:49 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8Dn/hFMTexcJnW9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgzMTAwNDUxMloXDTI4MTIwMzAxNDUxMlowLzEtMCsGA1UEAxMk MTBjZjBlNjQtYmU1My00YWRkLTk0MTQtZDliOWY3ZjgzYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic11/xn17LMKIvqAUZGRAlgguCnXDM91Ds4T BHKPbsimkNRcNqxecW2ugSOc6+BZLSJ1Lade5SoBiNjsSfGpvx4Xn/hy+mL3wLc1 UrYNsroztvCTLIAHqTbEno3d8beYOcbaxrwjSfgIG+kHMEdIJqehSJ5JLN5SsYA0 JT1nupSM8uW7BssKojyjQb5KnnqEVG1S445IPALzK5pVqNpejwH/QOdThb3xOSHj GYmmUapwKLt6dU20+OYacQ4PxVGZmEmcH0jS4IbmGEkofNVYgxjN1fIS0ek/R6L3 P+wF8wbQmV2qqjyJFGY/i2LZeIpHVLtascfZ3ToEOAs0/zDpLQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBkKIrLimp6p4awQeA41vRKuClg/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x MGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5ZjdmODNhYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzEwY2YwZTY0LWJlNTMtNGFkZC05 NDE0LWQ5YjlmN2Y4M2FhYi8xMGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5Zjdm ODNhYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHL2ZQwDgQCAAIwCAMGACYC+WcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYWOjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA97tng/HbthmMdtWv1tCsAGtfJ tcqq3+TwI8sAal6j+RbOTBFajSXkDjdah0PKayhBBPsdPuxLtiNanBsFiKrf1Yob QJlk/nuTv0koLv3a5OdxtiKuw22A8yJgs6cob2Q/+WM1NhziddywBC+NIQt2Vp3c YyBy4lOUgRKCFpHyrsxRTfdZOR30pcRjjOZ/rJVYwKikCTEhpkfWVDLZpt0F1Q2j MEzHYpsaLKEyJoOciPVtMaPpOkcZ+lPifE4j8vEh6akZ9O56xQVhHboPWSdcQHEc rY00fFFPO6+XBY68Yq+BK3BRn50xk+W9BsjL2UTin+l7U8Ne3vL2U0S2b4BJ -----END CERTIFICATE-----Generated at Sun Sep 20 13:48:02 2026 by rpki-client