$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer File: 86d41278-dbec-4ce1-a2aa-72427ed93680.cer (raw, json) Hash identifier: lOskz+hg3E32/f+8DeVaYb1Gw5Lbrsg7JMAFhrnholM= Subject key identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EED4A7F380F3D6D602B084380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Aug 2026 00:45:11 +0000 Certificate not after: Sat 25 Nov 2028 01:45:11 +0000 Subordinate resources: IP: 23.148.64.0/24 IP: 216.176.36.0/22 IP: 2602:fedc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:4a:7f:38:0f:3d:6d:60:2b:08:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 23 00:45:11 2026 GMT Not After : Nov 25 01:45:11 2028 GMT Subject: CN=86d41278-dbec-4ce1-a2aa-72427ed93680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:09:ad:70:44:18:c6:02:50:4d:a9:e7:bb: 0d:66:d3:a0:c4:ac:ee:23:08:19:0d:d2:69:24:f7: 2e:d8:5c:91:49:cf:6d:ff:1d:2d:67:b3:55:20:02: b3:9c:f6:9d:a4:16:e0:89:3f:c2:b4:91:d9:0f:27: 3a:39:57:ed:3d:37:79:26:53:79:16:6a:e8:40:2c: f1:f9:a6:6c:be:62:c5:b1:f5:e5:92:7b:29:e3:ba: ac:23:01:a2:32:d4:e1:93:bb:39:09:29:06:e7:8e: fd:13:1c:7f:10:f5:fc:2d:a6:be:6f:d6:8b:81:a3: 96:e8:3a:2b:ad:fd:c5:d3:e6:84:97:d0:99:34:d2: 02:0b:f4:2c:d2:18:10:ee:cd:5f:71:a1:9b:45:5d: af:c1:a1:e9:09:61:e6:d2:15:e8:50:7b:a9:d3:50: 21:fe:f1:55:ae:e8:55:08:5f:47:c0:b3:62:3f:55: c6:16:cd:02:19:5c:b5:1d:a0:f7:b3:c0:8a:be:a3: 3d:48:23:91:79:9b:7f:af:3f:e9:86:00:12:d7:d2: 39:1a:95:88:61:79:77:aa:8f:39:8f:23:29:17:1f: 77:03:0e:28:4d:5e:88:29:14:e7:4b:55:75:cf:83: 4b:87:ce:3f:0b:6a:d5:05:0e:4f:85:e0:0c:68:88: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.64.0/24 216.176.36.0/22 IPv6: 2602:fedc::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8f:b6:c5:55:8e:21:d7:51:9e:bc:23:c1:1e:90:c3:dd:69: a5:f3:66:27:01:df:d5:ff:ca:88:db:ba:20:9a:cc:c0:bb:59: 9e:f6:53:24:d4:37:30:6f:a7:84:99:a9:d8:96:15:0f:80:a2: d1:4f:ac:85:7b:7b:4b:7b:87:3d:d8:be:20:5a:b8:b2:b3:73: 32:89:d2:a3:49:97:62:18:3e:e3:37:92:86:bf:de:f1:fe:3a: 02:1a:1e:db:80:fd:e2:a9:6a:cb:96:59:e8:71:2f:1b:71:3f: 3b:53:a8:d9:7e:3e:b6:d4:40:db:d6:46:ae:69:b2:a9:65:81: 15:34:20:f9:d4:4a:b7:53:f2:3c:a8:8b:bd:3e:10:69:f0:b3: 94:5a:de:71:88:e9:88:50:03:59:54:e3:a9:4e:d0:b2:e5:1a: 72:a8:09:93:0a:3a:63:72:c9:cc:95:08:46:75:f6:35:9c:be: 70:e6:52:e5:43:7e:e4:4f:92:2f:57:e2:26:7c:b7:2a:e2:e2: 0d:90:09:7e:c7:cb:21:a2:92:67:38:82:5e:f4:79:e0:0a:d6: fc:23:78:b8:5f:35:8a:43:51:d5:a5:3d:05:62:7d:44:c6:62: 89:8f:b0:6e:ec:62:20:a5:08:2a:07:73:3a:c1:b8:fb:a3:fd: 63:1a:9d:ac -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE7tSn84Dz1tYCsIQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyMzAwNDUxMVoXDTI4MTEyNTAxNDUxMVowLzEtMCsGA1UEAxMk ODZkNDEyNzgtZGJlYy00Y2UxLWEyYWEtNzI0MjdlZDkzNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WIJrXBEGMYCUE2p57sNZtOgxKzuIwgZDdJp JPcu2FyRSc9t/x0tZ7NVIAKznPadpBbgiT/CtJHZDyc6OVftPTd5JlN5FmroQCzx +aZsvmLFsfXlknsp47qsIwGiMtThk7s5CSkG5479Exx/EPX8Laa+b9aLgaOW6Dor rf3F0+aEl9CZNNICC/Qs0hgQ7s1fcaGbRV2vwaHpCWHm0hXoUHup01Ah/vFVruhV CF9HwLNiP1XGFs0CGVy1HaD3s8CKvqM9SCOReZt/rz/phgAS19I5GpWIYXl3qo85 jyMpFx93Aw4oTV6IKRTnS1V1z4NLh84/C2rVBQ5PheAMaIhpAQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFIk9jFsaPwmi2tRXYybAcEpnG3WEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 NmQ0MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQyN2VkOTM2ODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzg2ZDQxMjc4LWRiZWMtNGNlMS1h MmFhLTcyNDI3ZWQ5MzY4MC84NmQ0MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQyN2Vk OTM2ODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlEADBALYsCQwDgQCAAIwCAMGBCYC/twAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKPtsVVjiHXUZ68I8EekMPdaaXzZicB39X/yojbuiCazMC7WZ72UyTU NzBvp4SZqdiWFQ+AotFPrIV7e0t7hz3YviBauLKzczKJ0qNJl2IYPuM3koa/3vH+ OgIaHtuA/eKpasuWWehxLxtxPztTqNl+PrbUQNvWRq5psqllgRU0IPnUSrdT8jyo i70+EGnws5Ra3nGI6YhQA1lU46lO0LLlGnKoCZMKOmNyycyVCEZ19jWcvnDmUuVD fuRPki9X4iZ8tyri4g2QCX7HyyGikmc4gl70eeAK1vwjeLhfNYpDUdWlPQVifUTG YomPsG7sYiClCCoHczrBuPuj/WManaw= -----END CERTIFICATE-----Generated at Sun Sep 20 16:55:25 2026 by rpki-client