$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea.cer File: e0071824-c398-470a-8592-de2954877cea.cer (raw, json) Hash identifier: cajSiAtnLE00rAWfwCkGfG1jFBbIoTCHiTEhkvyPeL8= Subject key identifier: 43:BA:D1:B3:E5:10:8D:AB:6F:C2:3D:6C:7C:29:20:88:18:76:FD:B2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F37459F9C203D8D0CAB1C4B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/e0071824-c398-470a-8592-de2954877cea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 12:45:11 +0000 Certificate not after: Thu 21 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 204.75.186.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:45:9f:9c:20:3d:8d:0c:ab:1c:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 18 12:45:11 2026 GMT Not After : Dec 21 13:45:11 2028 GMT Subject: CN=e0071824-c398-470a-8592-de2954877cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:90:7d:1b:d4:35:ba:04:0b:9b:90:24:5b: 18:86:b9:3e:55:db:2e:39:89:4c:be:97:ae:51:d2: 23:86:94:b0:c7:3f:f9:84:90:67:ab:9b:1e:47:10: e6:41:7b:7a:60:8b:83:c2:84:68:76:d2:c5:fe:c7: ac:c2:b1:23:65:b1:82:7d:b4:73:95:1f:2a:33:6a: 9c:f4:88:d0:9e:ec:77:4a:82:81:26:44:85:03:7c: fb:ec:e8:b7:d8:29:47:4f:b1:d3:37:e6:c3:e5:6a: 7c:85:2b:6f:25:22:bb:ad:3a:0b:1a:34:53:98:73: 5e:55:f0:b5:1e:52:24:40:2b:d4:63:05:ca:2b:40: f6:32:dd:ab:1f:4c:cf:22:8a:cb:29:e3:ef:d1:6b: 68:73:90:48:01:2f:12:83:45:e3:39:64:6b:d8:00: f8:72:24:f8:f2:d8:80:16:de:d2:c5:82:93:95:61: 88:42:58:ab:62:e0:7d:6d:04:7e:d3:7e:79:8f:b0: da:4c:c8:bc:b0:1b:e1:2c:10:21:3d:20:06:de:56: 5c:23:5d:b2:b1:d7:fb:cc:7d:ec:1d:75:c4:19:0d: cf:8a:62:c9:81:af:bc:fd:5a:60:a3:e6:44:83:cc: 11:ad:af:2d:fd:7c:64:b5:91:ba:66:6b:98:35:7c: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BA:D1:B3:E5:10:8D:AB:6F:C2:3D:6C:7C:29:20:88:18:76:FD:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0071824-c398-470a-8592-de2954877cea/e0071824-c398-470a-8592-de2954877cea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 204.75.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ed:d2:bb:77:cc:a7:18:f5:7a:40:72:e6:a4:f9:a0:60:68: 62:ab:ab:fc:15:ed:d0:cb:22:ca:79:c6:7d:dc:64:87:7f:af: 1a:c3:0a:d5:27:3d:54:b4:13:e8:59:29:1a:95:ec:fb:34:67: 2b:1c:63:17:fc:44:f7:49:d6:05:fd:07:cb:42:59:ce:1b:15: 28:95:7b:c3:eb:d6:32:7c:8d:a7:70:f7:cf:fc:40:21:3b:32: 51:bf:00:be:09:3f:fb:2a:bf:70:8c:7a:64:e6:64:c7:d7:35: 3b:be:74:94:06:e2:96:a7:04:c1:79:19:bb:a3:b4:da:0e:f9: fe:1b:e2:b8:47:19:a8:d9:5e:0a:b8:8c:2e:a6:96:9b:11:f3: 9e:1b:ee:1d:25:4e:d7:65:ec:ff:16:36:98:a4:c7:1e:69:6c: e9:63:63:91:97:3b:15:56:c6:76:ba:6c:60:2b:5b:80:c4:22: 6b:12:50:ca:90:69:87:95:ec:66:a8:0b:e0:a2:05:c3:b9:43: 16:50:4b:c5:da:d3:d5:9c:17:b0:b2:4d:3a:bd:bb:90:a4:bd: 14:33:34:a1:8b:0d:d8:fc:0f:0d:36:80:2b:f1:fc:72:77:c4: 92:c4:12:d0:03:cb:9c:f8:b2:a6:03:dc:57:63:ca:2e:6e:1f: 31:aa:67:8e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE83RZ+cID2NDKscSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxODEyNDUxMVoXDTI4MTIyMTEzNDUxMVowLzEtMCsGA1UEAxMk ZTAwNzE4MjQtYzM5OC00NzBhLTg1OTItZGUyOTU0ODc3Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttWQfRvUNboEC5uQJFsYhrk+VdsuOYlMvpeu UdIjhpSwxz/5hJBnq5seRxDmQXt6YIuDwoRodtLF/seswrEjZbGCfbRzlR8qM2qc 9IjQnux3SoKBJkSFA3z77Oi32ClHT7HTN+bD5Wp8hStvJSK7rToLGjRTmHNeVfC1 HlIkQCvUYwXKK0D2Mt2rH0zPIorLKePv0Wtoc5BIAS8Sg0XjOWRr2AD4ciT48tiA Ft7SxYKTlWGIQlirYuB9bQR+0355j7DaTMi8sBvhLBAhPSAG3lZcI12ysdf7zH3s HXXEGQ3PimLJga+8/Vpgo+ZEg8wRra8t/XxktZG6ZmuYNXxB6wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEO60bPlEI2rb8I9bHwpIIgYdv2yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l MDA3MTgyNC1jMzk4LTQ3MGEtODU5Mi1kZTI5NTQ4NzdjZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2UwMDcxODI0LWMzOTgtNDcwYS04 NTkyLWRlMjk1NDg3N2NlYS9lMDA3MTgyNC1jMzk4LTQ3MGEtODU5Mi1kZTI5NTQ4 NzdjZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMS7owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG+3Su3fMpxj1ekBy5qT5 oGBoYqur/BXt0MsiynnGfdxkh3+vGsMK1Sc9VLQT6FkpGpXs+zRnKxxjF/xE90nW Bf0Hy0JZzhsVKJV7w+vWMnyNp3D3z/xAITsyUb8Avgk/+yq/cIx6ZOZkx9c1O750 lAbilqcEwXkZu6O02g75/hviuEcZqNleCriMLqaWmxHznhvuHSVO12Xs/xY2mKTH Hmls6WNjkZc7FVbGdrpsYCtbgMQiaxJQypBph5XsZqgL4KIFw7lDFlBLxdrT1ZwX sLJNOr27kKS9FDM0oYsN2PwPDTaAK/H8cnfEksQS0APLnPiypgPcV2PKLm4fMapn jg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:54:34 2026 by rpki-client