$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer File: 25b8413b-5254-4959-a9f1-d00f0fc1b819.cer (raw, json) Hash identifier: +DazfmtbrXneTV1Px9/yqkluFDos7UzwB2jKs2wOxzA= Subject key identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F27EADC7994BC425F63ADCF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Sep 2026 00:45:11 +0000 Certificate not after: Sat 16 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 150.250.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:ea:dc:79:94:bc:42:5f:63:ad:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 13 00:45:11 2026 GMT Not After : Dec 16 01:45:11 2028 GMT Subject: CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:93:cb:8e:01:c3:1e:ff:4e:ae:5f:87:53: 80:89:36:d2:1b:5f:03:fb:2a:a5:f6:27:33:f4:c6: 4e:96:9d:a2:b0:4b:66:9f:f0:30:83:63:b0:0f:cd: 6d:54:d8:20:bc:52:a1:55:ea:a7:6f:be:cf:45:16: 02:50:7a:8d:1a:a5:4f:8e:19:16:70:b7:0a:4d:59: be:4b:0c:af:ad:ce:85:ce:ba:ba:2b:fa:dd:66:ed: 97:38:aa:a3:1c:eb:5a:c3:02:52:a6:d6:45:6d:85: 2c:61:fc:f0:20:99:0b:67:b5:e5:17:b5:8d:d8:c7: 98:a0:3b:61:20:4c:05:db:a6:3e:fc:e4:b0:b0:a1: 56:a4:49:b4:bd:64:ef:17:80:82:c9:f6:1d:c1:a5: 42:ac:09:a1:49:a7:49:46:bd:d3:50:47:62:10:4c: 63:73:c7:76:3b:67:96:3d:ef:21:e2:3a:a5:b3:72: 24:3e:21:58:6f:8f:93:1d:d0:50:dc:5e:a6:f5:c0: 89:19:f8:5d:3c:fb:80:9f:d5:6e:67:6c:ae:cd:5b: f8:70:a0:cd:e5:1c:90:b9:d5:98:d7:e9:03:8d:30: 97:51:7c:7a:bb:ee:ba:2c:de:14:50:6c:e2:50:bf: 4c:4b:64:39:73:b4:14:c5:28:77:17:1f:7d:76:a1: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 150.250.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5f:30:53:d9:a1:80:97:16:ac:e9:2a:0d:76:b8:b2:72:62: 40:97:3b:db:b1:09:6d:dc:23:8e:c2:4c:96:a1:38:f0:f2:84: d4:a2:e0:54:98:00:79:f7:45:de:c3:1b:b2:8d:76:7a:b5:c6: c2:12:ee:11:33:06:8a:71:d8:6d:5f:fa:96:28:e0:e6:c7:47: 70:4e:3e:d4:63:f3:ae:d5:b7:79:f4:6b:56:19:74:43:1e:75: 38:20:a7:8a:ea:13:22:01:eb:17:03:2e:84:c0:37:b6:01:2a: aa:63:4b:44:fd:1c:8b:4a:4c:f7:88:fc:fe:c8:89:a0:b1:a3: 15:a3:ed:94:d7:91:a0:c8:af:f2:e6:4e:67:3f:55:e9:a6:6a: 3c:87:65:92:ea:a3:7f:46:aa:41:d0:a3:f8:ec:68:08:fa:b9: 3a:71:e7:2a:c5:00:73:bc:2d:6e:29:70:6c:c4:3e:0e:ba:e0: b9:76:f8:7c:7f:eb:a7:b7:6c:4a:d0:c3:61:fd:9f:e3:06:be: 4c:87:99:0d:a9:d0:c7:04:8f:94:8c:3e:99:6d:8d:2a:24:37: 7f:2d:85:23:51:6a:70:cc:02:91:dd:f0:c6:6e:ea:6a:25:f7: 9f:98:c0:43:9a:22:86:b3:7e:6f:ba:a6:a3:d2:b8:30:c0:80: 06:7a:f0:0e -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE8n6tx5lLxCX2OtzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxMzAwNDUxMVoXDTI4MTIxNjAxNDUxMVowLzEtMCsGA1UEAxMk MjViODQxM2ItNTI1NC00OTU5LWE5ZjEtZDAwZjBmYzFiODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUeTy44Bwx7/Tq5fh1OAiTbSG18D+yql9icz 9MZOlp2isEtmn/Awg2OwD81tVNggvFKhVeqnb77PRRYCUHqNGqVPjhkWcLcKTVm+ Swyvrc6Fzrq6K/rdZu2XOKqjHOtawwJSptZFbYUsYfzwIJkLZ7XlF7WN2MeYoDth IEwF26Y+/OSwsKFWpEm0vWTvF4CCyfYdwaVCrAmhSadJRr3TUEdiEExjc8d2O2eW Pe8h4jqls3IkPiFYb4+THdBQ3F6m9cCJGfhdPPuAn9VuZ2yuzVv4cKDN5RyQudWY 1+kDjTCXUXx6u+66LN4UUGziUL9MS2Q5c7QUxSh3Fx99dqGh0QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJvB1fKfDPV2eWffcCVKa4tluR5aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y NWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZjMWI4MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI1Yjg0MTNiLTUyNTQtNDk1OS1h OWYxLWQwMGYwZmMxYjgxOS8yNWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZj MWI4MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCW+jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+XzBT2aGAlxas6SoNdriy cmJAlzvbsQlt3COOwkyWoTjw8oTUouBUmAB590XewxuyjXZ6tcbCEu4RMwaKcdht X/qWKODmx0dwTj7UY/Ou1bd59GtWGXRDHnU4IKeK6hMiAesXAy6EwDe2ASqqY0tE /RyLSkz3iPz+yImgsaMVo+2U15GgyK/y5k5nP1Xppmo8h2WS6qN/RqpB0KP47GgI +rk6cecqxQBzvC1uKXBsxD4OuuC5dvh8f+unt2xK0MNh/Z/jBr5Mh5kNqdDHBI+U jD6ZbY0qJDd/LYUjUWpwzAKR3fDGbupqJfefmMBDmiKGs35vuqaj0rgwwIAGevAO -----END CERTIFICATE-----Generated at Tue Sep 22 17:02:57 2026 by rpki-client