$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer File: 5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer (raw, json) Hash identifier: zNhqAdyLbbJv+LkEBkYpPI4wTF4FX7vIHEq+xUw1SC0= Subject key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F26858546CBE8AED6F6BDBE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Sep 2026 12:45:12 +0000 Certificate not after: Fri 15 Dec 2028 13:45:12 +0000 Subordinate resources: IP: 198.184.131.0/24 IP: 198.184.155.0 -- 198.184.158.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:85:85:46:cb:e8:ae:d6:f6:bd:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 12 12:45:12 2026 GMT Not After : Dec 15 13:45:12 2028 GMT Subject: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:39:42:10:4c:f3:1b:e3:4e:f6:a8:b5:e3: d6:74:45:2e:fb:2c:66:19:28:d4:91:6b:72:35:86: 13:b7:29:71:24:d8:0c:e8:e6:eb:3b:90:ca:aa:4b: e1:9e:ab:e9:5c:0b:53:26:fe:f4:4b:a3:95:c8:2d: 53:27:f2:a4:1c:b9:fd:cb:fe:ff:0c:e3:c5:d5:52: 68:a5:40:82:d0:3e:c7:31:50:9d:b7:a9:d9:02:2b: cd:40:78:73:f8:65:19:06:e2:e6:56:b9:86:11:cb: a8:35:9b:c4:2a:60:46:b6:52:58:a2:c9:55:51:ba: 69:66:2a:36:fb:37:46:4a:c3:11:94:de:89:9c:66: be:76:ce:9c:03:df:43:5d:b3:58:03:32:9b:57:57: ef:53:b5:ed:8c:80:15:ba:0c:e6:eb:4e:3a:3a:87: 53:74:13:b8:e2:36:f7:80:a0:36:28:b7:6e:99:2d: 83:48:6a:78:fa:3e:c6:bb:d8:4b:d2:e8:5a:3c:52: 5e:26:94:77:2d:e1:d5:86:d2:9e:0a:d9:a4:13:2f: 07:00:0f:17:0b:6a:72:ca:8c:d7:d7:cc:a0:5c:42: e0:e3:25:f1:68:3a:c2:8a:00:5a:04:12:dc:13:a5: e2:b5:c7:5e:02:69:e7:2b:67:ad:3d:bc:4d:bd:8c: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.184.131.0/24 198.184.155.0-198.184.158.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fa:d1:a6:0f:03:6c:f2:38:9b:c6:f0:ac:b8:aa:94:28:9a: 3b:04:2e:2c:ee:f3:6f:8c:52:ea:b6:ed:3a:e2:05:28:83:c6: 03:20:88:70:0d:18:a2:02:81:e8:12:2c:a8:f6:24:e5:03:d9: 34:66:65:80:6d:a7:39:45:9a:f8:bd:6f:90:d1:92:8a:88:f9: fe:10:f3:c2:5a:10:a0:a1:d7:bb:d3:91:01:ff:de:60:5e:04: c1:8e:c3:73:3a:85:56:61:25:80:0c:0a:2d:f2:13:cd:0f:88: 6c:4f:eb:08:e8:c3:76:73:76:c1:21:a8:f4:d0:c0:b4:34:07: e6:c6:ff:eb:b6:c5:cd:70:f4:db:10:84:3c:3e:96:15:c2:52: 21:7a:06:b9:76:9e:ba:5c:28:94:bd:0d:5b:ed:af:00:ae:eb: f6:c2:31:48:1b:42:d8:d8:e4:dd:53:4b:93:ac:fe:60:82:64: 50:e2:e3:08:fd:a5:98:92:d9:21:1a:a0:15:d6:a7:b9:de:c4: 6b:ec:c2:c8:37:9f:38:cd:52:d6:ab:9b:a1:ad:ef:33:8b:7a: b8:5e:5d:06:34:3b:c8:08:e8:3e:ac:e6:74:95:15:b4:5b:1f: 6b:e8:21:49:1b:7d:60:e2:c1:04:a3:4b:73:b5:9e:38:13:76: 37:0e:5c:8c -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWE8mhYVGy+iu1va9voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxMjEyNDUxMloXDTI4MTIxNTEzNDUxMlowLzEtMCsGA1UEAxMk NWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZmNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIs5QhBM8xvjTvaotePWdEUu+yxmGSjUkWty NYYTtylxJNgM6ObrO5DKqkvhnqvpXAtTJv70S6OVyC1TJ/KkHLn9y/7/DOPF1VJo pUCC0D7HMVCdt6nZAivNQHhz+GUZBuLmVrmGEcuoNZvEKmBGtlJYoslVUbppZio2 +zdGSsMRlN6JnGa+ds6cA99DXbNYAzKbV1fvU7XtjIAVugzm6046OodTdBO44jb3 gKA2KLdumS2DSGp4+j7Gu9hL0uhaPFJeJpR3LeHVhtKeCtmkEy8HAA8XC2pyyozX 18ygXELg4yXxaDrCigBaBBLcE6XitcdeAmnnK2etPbxNvYzL6wIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFNP17OBeItnP1jSCiPw4iV/mV8IXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkN2Y4MjdiLWY1OWMtNDBmNC04 M2E1LWNkMGM0YjE2ZjQyZS81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIx NmY0MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADGuIMwDAMEAMa4mwMEAMa4njBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC +tGmDwNs8jibxvCsuKqUKJo7BC4s7vNvjFLqtu064gUog8YDIIhwDRiiAoHoEiyo 9iTlA9k0ZmWAbac5RZr4vW+Q0ZKKiPn+EPPCWhCgode705EB/95gXgTBjsNzOoVW YSWADAot8hPND4hsT+sI6MN2c3bBIaj00MC0NAfmxv/rtsXNcPTbEIQ8PpYVwlIh ega5dp66XCiUvQ1b7a8Aruv2wjFIG0LY2OTdU0uTrP5ggmRQ4uMI/aWYktkhGqAV 1qe53sRr7MLIN584zVLWq5uhre8zi3q4Xl0GNDvICOg+rOZ0lRW0Wx9r6CFJG31g 4sEEo0tztZ44E3Y3DlyM -----END CERTIFICATE-----Generated at Sun Sep 20 13:46:50 2026 by rpki-client