$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer File: b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer (raw, json) Hash identifier: QIIiLfAeP1kXsIjC+CU7TTwAiJzIYrsd680kQ2ehZHk= Subject key identifier: B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F2C1AE398B86C32789F862E50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 12:45:11 +0000 Certificate not after: Sun 17 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 140.161.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:1a:e3:98:b8:6c:32:78:9f:86:2e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 14 12:45:11 2026 GMT Not After : Dec 17 13:45:11 2028 GMT Subject: CN=b7ac9cc8-4173-45cf-bc59-200a8d6d9b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:7e:18:52:1c:f4:ef:3b:99:af:98:51:33: d4:3a:1c:af:05:99:7d:be:fa:7d:29:aa:ff:ac:8b: 21:74:93:1b:24:5f:a5:6a:bc:dc:6c:a6:a0:d5:b4: 40:79:37:16:36:ec:1e:42:6b:dd:1c:c7:13:15:f9: 8e:a9:a7:60:11:e2:5c:a4:4f:44:48:60:d0:9a:e3: 0b:93:f8:da:a1:ec:c8:cf:da:9d:d3:96:1c:80:45: 8c:cf:d5:2a:00:ff:0d:af:e4:02:a8:4d:0b:30:8c: c3:e1:9f:1b:d7:02:fa:13:fb:db:f2:4d:8c:71:42: f0:d0:f2:a2:7e:5f:46:a3:c8:89:13:0e:ce:ae:c2: 02:50:70:6c:c3:0f:79:8b:8d:d0:08:94:14:5e:1e: 02:9d:fa:57:55:52:fa:fe:77:7f:94:2b:6e:4e:0b: 30:ed:96:14:dc:ef:ee:73:01:97:96:1e:16:99:1e: 79:03:d2:b9:5d:3e:7e:89:ea:3f:99:f0:79:ec:f6: df:e0:d2:6b:33:8d:ab:78:40:12:87:f6:ee:f3:f3: 57:e7:f0:b6:c6:87:44:05:14:a0:32:18:61:fd:4e: cb:20:75:31:10:b4:6f:21:34:cc:02:96:f0:4b:d1: 1a:93:09:91:ae:08:b3:98:59:8a:b9:1a:0b:bc:46: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 140.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:04:4f:d0:e9:23:c4:c8:6c:28:1c:57:38:75:f6:63:ff:b0: 29:24:bb:14:28:73:f3:83:b1:fe:ca:b1:6a:df:17:66:9f:15: dc:f9:b9:bc:ae:ac:53:e2:a8:cd:12:12:86:e2:2a:07:d5:71: de:8f:c2:d4:e0:f0:1f:9f:32:1a:5f:8d:21:b7:a4:49:d0:f6: ae:a0:ae:23:02:2d:43:fb:dc:30:f2:ce:e6:21:43:7a:92:f7: c3:46:ae:30:05:c9:d9:12:dc:22:53:8d:7e:8a:17:50:0c:86: ee:ef:91:e6:06:29:5f:3c:ed:94:9e:6e:9f:07:7e:5d:bb:b9: 21:23:2b:eb:38:8a:78:4d:73:ca:c5:2a:3c:6e:c7:c3:7f:fc: 1d:26:a7:4b:28:b7:bd:98:8f:5d:cd:6e:00:d1:58:a1:28:d1: 1f:4e:0c:b9:38:c4:43:4f:b7:0a:e0:9f:fe:71:7b:ce:2f:f5: d4:b0:5d:5e:16:4e:22:ac:bd:e4:88:a8:23:00:97:61:69:6d: 75:0c:50:c4:e4:ad:e8:45:8a:f9:4e:46:b9:22:58:27:09:d9: 71:36:2e:d6:a2:da:ca:e8:b0:c4:59:ca:69:04:68:9b:3c:f2: 23:15:79:f5:c6:6b:a5:c0:35:32:fe:f9:d1:07:a8:b0:4a:ec: c7:a3:c5:6b -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE8sGuOYuGwyeJ+GLlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxNDEyNDUxMVoXDTI4MTIxNzEzNDUxMVowLzEtMCsGA1UEAxMk YjdhYzljYzgtNDE3My00NWNmLWJjNTktMjAwYThkNmQ5YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdR+GFIc9O87ma+YUTPUOhyvBZl9vvp9Kar/ rIshdJMbJF+larzcbKag1bRAeTcWNuweQmvdHMcTFfmOqadgEeJcpE9ESGDQmuML k/jaoezIz9qd05YcgEWMz9UqAP8Nr+QCqE0LMIzD4Z8b1wL6E/vb8k2McULw0PKi fl9Go8iJEw7OrsICUHBsww95i43QCJQUXh4CnfpXVVL6/nd/lCtuTgsw7ZYU3O/u cwGXlh4WmR55A9K5XT5+ieo/mfB57Pbf4NJrM42reEASh/bu8/NX5/C2xodEBRSg Mhhh/U7LIHUxELRvITTMApbwS9EakwmRrgizmFmKuRoLvEbpTwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFLfhEYDjsTzhC3Hf3/0ADoODQBF+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i N2FjOWNjOC00MTczLTQ1Y2YtYmM1OS0yMDBhOGQ2ZDliMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I3YWM5Y2M4LTQxNzMtNDVjZi1i YzU5LTIwMGE4ZDZkOWIzNi9iN2FjOWNjOC00MTczLTQ1Y2YtYmM1OS0yMDBhOGQ2 ZDliMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCMoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxBE/Q6SPEyGwoHFc4dfZj /7ApJLsUKHPzg7H+yrFq3xdmnxXc+bm8rqxT4qjNEhKG4ioH1XHej8LU4PAfnzIa X40ht6RJ0PauoK4jAi1D+9ww8s7mIUN6kvfDRq4wBcnZEtwiU41+ihdQDIbu75Hm BilfPO2Unm6fB35du7khIyvrOIp4TXPKxSo8bsfDf/wdJqdLKLe9mI9dzW4A0Vih KNEfTgy5OMRDT7cK4J/+cXvOL/XUsF1eFk4irL3kiKgjAJdhaW11DFDE5K3oRYr5 Tka5IlgnCdlxNi7WotrK6LDEWcppBGibPPIjFXn1xmulwDUy/vnRB6iwSuzHo8Vr -----END CERTIFICATE-----Generated at Sun Sep 20 13:46:16 2026 by rpki-client