$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer File: a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer (raw, json) Hash identifier: f+VFDV7yta3uify3gaS0rbelUJ2mlqXMEYRHkaBZs9E= Subject key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EF44535055D6326E4F2166D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Aug 2026 12:45:11 +0000 Certificate not after: Mon 27 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 199.9.57.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:45:35:05:5d:63:26:e4:f2:16:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 25 12:45:11 2026 GMT Not After : Nov 27 13:45:11 2028 GMT Subject: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:e4:c1:ad:3a:4a:2d:38:06:2c:76:8c:0a: 84:41:a8:6e:f8:6b:20:6f:f0:0f:0c:9a:5d:eb:37: 3a:5c:91:26:dd:a1:79:4c:1a:54:65:9e:b4:4f:a0: 64:e6:18:e1:5a:4c:6e:90:6a:76:37:63:8d:97:ee: 92:0e:25:9c:fc:d5:07:10:a2:c5:5c:9a:1e:25:fb: 19:d9:6e:01:4b:77:bd:cf:94:c4:f9:42:99:47:5a: af:75:a9:20:c4:7a:92:dd:17:60:d6:9c:05:85:ae: a0:3c:af:28:95:c0:bf:d7:8f:56:87:79:2f:7f:52: b3:82:cb:28:95:88:50:16:5f:cb:6e:65:a9:58:6f: 5f:37:e3:65:c2:30:0a:4a:14:b6:bc:c8:29:77:3f: 58:36:fc:4b:a6:bc:5a:97:97:8c:cf:94:39:2e:a6: 05:16:64:6d:d7:3b:52:62:af:e3:76:d5:81:35:c8: 4c:a4:8e:c6:37:da:c2:ff:11:20:d8:15:60:04:83: 82:9d:9b:a0:41:7e:9d:7d:d0:a5:8f:96:c6:cf:22: bb:e5:31:98:87:c9:2a:d7:63:45:f7:74:25:36:3f: 79:ce:84:b6:c5:76:69:9d:da:9c:af:2e:58:30:21: 47:b9:48:ee:8a:38:00:08:8c:85:49:c6:8e:ff:19: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.9.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c6:18:c5:f7:38:23:ee:84:43:1d:3b:4d:26:fe:33:e3:83: 5c:cd:3f:39:42:c6:de:ac:17:2d:40:c1:73:d7:ea:c4:75:fc: ca:39:30:b2:5a:ff:0e:2b:3b:a5:79:b8:ff:c0:82:8d:87:af: 59:c9:38:d0:f9:30:d0:b0:96:68:39:dd:15:2b:32:f0:c9:0c: df:fc:bc:06:f1:56:3b:db:71:13:49:2b:4b:30:55:44:d8:c3: 32:77:9d:78:e0:38:db:05:43:ed:b6:5b:e4:1f:a2:b3:08:45: a4:bd:92:51:e6:7b:78:c2:19:cf:0f:c3:b4:9a:6f:52:35:49: 97:9c:90:9b:36:11:de:32:ae:a3:4b:dc:c3:ea:3b:02:f7:64: ab:37:91:b1:ac:a4:94:24:55:58:b0:d3:66:aa:5d:90:f3:cf: 8e:d9:00:78:ba:6f:32:e5:40:ee:05:af:44:4f:14:1e:f0:ba: 07:ef:70:1f:58:3e:5f:bb:da:2f:64:da:09:9e:5f:81:46:04: 01:d1:7b:20:87:3a:3e:f1:e4:26:ea:1e:12:11:18:46:22:81: db:98:14:fa:cc:9d:16:0a:57:4e:49:da:c9:7f:96:d0:94:9f: ee:24:77:e1:d8:2c:b9:1e:ec:59:39:28:c7:ff:44:c0:1c:22: bf:df:b8:37 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE70RTUFXWMm5PIWbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyNTEyNDUxMVoXDTI4MTEyNzEzNDUxMVowLzEtMCsGA1UEAxMk YTFiMWZiNDMtZGIwYy00MmU0LWFkNjItNGUwODZjYTJmNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscrkwa06Si04Bix2jAqEQahu+Gsgb/APDJpd 6zc6XJEm3aF5TBpUZZ60T6Bk5hjhWkxukGp2N2ONl+6SDiWc/NUHEKLFXJoeJfsZ 2W4BS3e9z5TE+UKZR1qvdakgxHqS3Rdg1pwFha6gPK8olcC/149Wh3kvf1Kzgsso lYhQFl/LbmWpWG9fN+NlwjAKShS2vMgpdz9YNvxLprxal5eMz5Q5LqYFFmRt1ztS Yq/jdtWBNchMpI7GN9rC/xEg2BVgBIOCnZugQX6dfdClj5bGzyK75TGYh8kq12NF 93QlNj95zoS2xXZpndqcry5YMCFHuUjuijgACIyFScaO/xlXuQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHKXsU4wztl+LrgOi5WKtx03XUXXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h MWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNhMmY0ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ExYjFmYjQzLWRiMGMtNDJlNC1h ZDYyLTRlMDg2Y2EyZjRkNy9hMWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNh MmY0ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHCTkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOsYYxfc4I+6EQx07TSb+ M+ODXM0/OULG3qwXLUDBc9fqxHX8yjkwslr/Dis7pXm4/8CCjYevWck40Pkw0LCW aDndFSsy8MkM3/y8BvFWO9txE0krSzBVRNjDMnedeOA42wVD7bZb5B+iswhFpL2S UeZ7eMIZzw/DtJpvUjVJl5yQmzYR3jKuo0vcw+o7AvdkqzeRsayklCRVWLDTZqpd kPPPjtkAeLpvMuVA7gWvRE8UHvC6B+9wH1g+X7vaL2TaCZ5fgUYEAdF7IIc6PvHk JuoeEhEYRiKB25gU+sydFgpXTknayX+W0JSf7iR34dgsuR7sWTkox/9EwBwiv9+4 Nw== -----END CERTIFICATE-----Generated at Sun Sep 20 11:47:07 2026 by rpki-client