$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer File: 418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer (raw, json) Hash identifier: R5vB8ME/9X0o9lWIseUAQ2Ctr09JGeSWU3xrWWofqYw= Subject key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584FA15BA05D2F6CBE90F179B580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 12:45:12 +0000 Certificate not after: Sun 28 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 212.32.32.0/21 IP: 2607:aa40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:5b:a0:5d:2f:6c:be:90:f1:79:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 26 12:45:12 2026 GMT Not After : Jan 28 13:45:12 2029 GMT Subject: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:44:5e:98:06:62:9a:12:b5:3d:94:44:fb: 77:9a:c6:88:74:3a:3a:06:74:74:39:2d:6d:c7:cf: 54:4a:f4:4a:bb:ea:de:6b:86:97:e6:01:03:dd:7b: 08:dd:c7:32:ce:00:c2:49:a2:35:b3:28:6f:23:da: 00:8e:9f:e3:36:75:6a:13:ee:bf:ae:1a:de:df:01: af:94:75:07:ae:be:a0:d5:9f:10:69:db:17:c3:b4: 1c:3a:fd:49:66:b3:9d:7a:b4:c0:30:01:51:6a:45: 1e:2d:34:8d:f8:0c:ff:49:19:9b:b8:2a:dc:66:11: 80:2b:f2:d5:28:0e:6b:63:74:9d:23:61:bc:01:00: d5:73:52:b8:da:2d:c5:9c:21:4c:bf:e3:5d:41:1b: df:8a:18:68:33:4e:59:d4:0d:40:8e:05:3e:85:b2: 60:8e:6f:e6:56:20:da:fd:62:7e:5a:99:66:66:61: c5:b0:50:ad:59:96:84:59:e5:3a:b3:44:19:83:1d: 72:c4:cf:e1:e5:9b:12:0b:61:bb:03:c1:53:ea:07: 48:02:82:f9:6e:ae:5e:fe:ea:86:2d:46:c9:91:ff: 7e:6c:a2:95:a4:2c:c6:8e:ad:40:eb:2a:24:96:03: 59:67:00:f5:87:49:3e:cb:7a:bc:b8:3b:90:4b:52: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 212.32.32.0/21 IPv6: 2607:aa40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:88:66:aa:5c:10:06:92:5c:c3:9a:fe:8f:94:c4:80:09:c9: 6c:f6:f7:cc:88:a7:0a:9e:70:70:91:de:81:f3:d3:32:24:25: e2:68:80:ad:fa:26:f9:7b:42:b5:0b:fa:8a:45:40:83:2e:06: ab:1f:d1:dd:67:da:eb:a9:d9:ba:a1:30:4a:61:87:cc:94:46: 7e:ec:5c:74:2d:b2:b0:61:e8:2f:d9:7c:99:49:35:7f:c5:e2: 68:38:de:7f:da:de:3a:d6:8a:11:8f:51:51:b9:b8:00:01:92: 5e:46:6d:f5:8c:d3:16:47:1d:61:2b:e2:f2:e5:65:80:53:94: 7d:e0:69:a4:f6:78:59:5e:13:68:d5:2f:5c:eb:6e:51:6b:7c: e2:8d:3d:c2:a0:13:97:30:37:c9:db:04:09:a8:68:a5:ab:b9: b9:79:2f:b5:30:08:0e:f4:d1:bd:f4:e6:1f:4b:e5:e8:53:70: ca:f8:c0:f4:71:a4:f1:73:88:a0:f2:8c:a7:60:17:1e:ad:48: 7e:1b:68:13:e7:40:17:7f:6e:b0:ae:63:46:22:42:d3:37:72: 77:39:bb:ef:20:fd:18:b9:9d:74:b4:ae:bf:a3:93:c1:1e:5f: d3:3a:b0:67:d0:47:10:b2:89:18:a3:0e:36:1b:c9:e9:6f:e5: 12:52:e5:6e -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE+hW6BdL2y+kPF5tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAyNjEyNDUxMloXDTI5MDEyODEzNDUxMlowLzEtMCsGA1UEAxMk NDE4NTI2ZDUtMmFhMi00ZDJmLThjYjEtNWM0MTc3MjhhOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe1EXpgGYpoStT2URPt3msaIdDo6BnR0OS1t x89USvRKu+rea4aX5gED3XsI3ccyzgDCSaI1syhvI9oAjp/jNnVqE+6/rhre3wGv lHUHrr6g1Z8QadsXw7QcOv1JZrOderTAMAFRakUeLTSN+Az/SRmbuCrcZhGAK/LV KA5rY3SdI2G8AQDVc1K42i3FnCFMv+NdQRvfihhoM05Z1A1AjgU+hbJgjm/mViDa /WJ+WplmZmHFsFCtWZaEWeU6s0QZgx1yxM/h5ZsSC2G7A8FT6gdIAoL5bq5e/uqG LUbJkf9+bKKVpCzGjq1A6yoklgNZZwD1h0k+y3q8uDuQS1Iz7QIDAQABo4IEDjCC BAowHQYDVR0OBBYEFIojf65+d8ACXfkw8fxG/F4ehAkSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcyOGE5N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQxODUyNmQ1LTJhYTItNGQyZi04 Y2IxLTVjNDE3NzI4YTk3ZC80MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcy OGE5N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPUICAwDQQCAAIwBwMFACYHqkAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA AYhmqlwQBpJcw5r+j5TEgAnJbPb3zIinCp5wcJHegfPTMiQl4miArfom+XtCtQv6 ikVAgy4Gqx/R3Wfa66nZuqEwSmGHzJRGfuxcdC2ysGHoL9l8mUk1f8XiaDjef9re OtaKEY9RUbm4AAGSXkZt9YzTFkcdYSvi8uVlgFOUfeBppPZ4WV4TaNUvXOtuUWt8 4o09wqATlzA3ydsECahopau5uXkvtTAIDvTRvfTmH0vl6FNwyvjA9HGk8XOIoPKM p2AXHq1IfhtoE+dAF39usK5jRiJC0zdydzm77yD9GLmddLSuv6OTwR5f0zqwZ9BH ELKJGKMONhvJ6W/lElLlbg== -----END CERTIFICATE-----Generated at Thu Nov 5 01:22:44 2026 by rpki-client