$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer File: c8607cef-f8a0-4a7c-8845-db8d32964491.cer (raw, json) Hash identifier: ux8tZheL3hmiqL1ufF/L0IUWvO3zQXX9a5QWKHZpf60= Subject key identifier: 44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EEBE526800BB64AA739A6DE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Aug 2026 12:45:11 +0000 Certificate not after: Fri 24 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 52.129.46.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:e5:26:80:0b:b6:4a:a7:39:a6:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 22 12:45:11 2026 GMT Not After : Nov 24 13:45:11 2028 GMT Subject: CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:1e:ee:a9:9a:6b:8c:f8:1a:9b:93:9b:bb: 69:34:86:ac:93:56:92:cd:3e:73:2f:57:24:df:1b: 53:76:95:68:f9:e1:48:9a:03:57:bd:5e:eb:a9:0c: 6c:3c:ab:af:2a:f4:74:ef:0e:f1:37:23:5f:d9:47: 72:22:b7:10:31:1c:04:97:f3:29:05:6b:99:02:98: f2:ca:43:fd:8b:ab:b6:a9:65:1b:db:e5:eb:0a:50: 97:fc:0b:fe:44:05:24:83:09:3b:b9:64:eb:af:15: bf:ef:9d:a4:ae:9f:b4:56:47:8f:d4:a8:51:02:be: e4:95:0a:03:ee:55:8b:b0:52:dd:fe:58:13:09:1e: 62:3d:2a:bc:a1:b1:df:85:7b:26:fe:7c:7e:9e:f4: 24:76:88:25:88:53:de:be:eb:6a:86:05:30:b0:f0: 22:3c:5a:59:80:1a:ad:e0:dc:c6:a9:b6:7d:1e:36: e4:bc:ad:27:9a:ba:d8:71:dd:04:93:90:50:c1:c9: 61:e3:f7:1f:ec:43:0a:a2:07:03:9f:0f:4c:ba:8b: 32:17:fd:41:8f:f1:41:4c:4a:34:8a:50:6b:3b:47: 01:da:ff:a6:87:b3:5d:72:d8:c9:37:64:8f:21:9c: a0:35:93:e2:1a:ad:ff:0f:c5:49:0f:f9:f0:2b:c6: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 52.129.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:41:3d:08:07:65:f3:07:83:1f:63:f4:b8:dc:39:5f:4d:3e: 4d:ff:c1:48:e6:c2:ab:b0:83:0c:9b:a0:a3:6f:a0:c1:55:13: 15:9a:8a:a6:5b:7d:91:8e:8b:79:65:70:c4:7d:f2:33:5f:48: b2:5c:c0:77:55:f6:2d:38:1b:55:ca:68:2a:b8:2a:41:1c:da: 71:3f:23:b5:55:7e:5a:05:d3:ab:8f:91:eb:61:6a:cc:0c:98: 0a:2b:6f:e8:9f:c6:71:ee:61:cd:f3:4d:e6:68:8e:9e:5f:14: 91:49:85:d8:b6:48:f9:f3:0b:03:b1:48:b5:36:d2:16:75:cc: 6e:e0:e9:8d:db:bf:e2:98:f9:d7:a1:7e:d2:95:3b:24:00:61: e8:ff:8c:7a:87:21:5b:8f:93:6f:5d:49:6f:5f:e4:79:c5:31: 63:29:1b:38:c8:4a:ab:b8:10:5d:7b:31:45:ea:eb:4c:8c:7c: c5:b2:71:f7:a5:20:52:89:e9:51:14:0b:82:4d:af:a3:0c:ba: b2:32:d4:80:2c:2a:94:b3:e7:c0:c3:ef:78:a5:9f:82:3f:7c: e4:8c:80:54:7b:32:22:04:af:84:a1:e6:3a:86:4e:ad:68:92: c9:a1:e0:d1:52:2f:a0:29:67:cb:5a:87:84:1e:ca:07:58:45: 28:b8:7a:ba -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7r5SaAC7ZKpzmm3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyMjEyNDUxMVoXDTI4MTEyNDEzNDUxMVowLzEtMCsGA1UEAxMk Yzg2MDdjZWYtZjhhMC00YTdjLTg4NDUtZGI4ZDMyOTY0NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrge7qmaa4z4GpuTm7tpNIask1aSzT5zL1ck 3xtTdpVo+eFImgNXvV7rqQxsPKuvKvR07w7xNyNf2UdyIrcQMRwEl/MpBWuZApjy ykP9i6u2qWUb2+XrClCX/Av+RAUkgwk7uWTrrxW/752krp+0VkeP1KhRAr7klQoD 7lWLsFLd/lgTCR5iPSq8obHfhXsm/nx+nvQkdogliFPevutqhgUwsPAiPFpZgBqt 4NzGqbZ9HjbkvK0nmrrYcd0Ek5BQwclh4/cf7EMKogcDnw9MuosyF/1Bj/FBTEo0 ilBrO0cB2v+mh7NdctjJN2SPIZygNZPiGq3/D8VJD/nwK8YYzwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEQIxNDV4S8YikI3aWAehE9p9000MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j ODYwN2NlZi1mOGEwLTRhN2MtODg0NS1kYjhkMzI5NjQ0OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2M4NjA3Y2VmLWY4YTAtNGE3Yy04 ODQ1LWRiOGQzMjk2NDQ5MS9jODYwN2NlZi1mOGEwLTRhN2MtODg0NS1kYjhkMzI5 NjQ0OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAE0gS4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG0E9CAdl8weDH2P0uNw5 X00+Tf/BSObCq7CDDJugo2+gwVUTFZqKplt9kY6LeWVwxH3yM19IslzAd1X2LTgb VcpoKrgqQRzacT8jtVV+WgXTq4+R62FqzAyYCitv6J/Gce5hzfNN5miOnl8UkUmF 2LZI+fMLA7FItTbSFnXMbuDpjdu/4pj516F+0pU7JABh6P+MeochW4+Tb11Jb1/k ecUxYykbOMhKq7gQXXsxRerrTIx8xbJx96UgUonpURQLgk2vowy6sjLUgCwqlLPn wMPveKWfgj985IyAVHsyIgSvhKHmOoZOrWiSyaHg0VIvoClny1qHhB7KB1hFKLh6 ug== -----END CERTIFICATE-----Generated at Mon Sep 21 04:07:52 2026 by rpki-client