$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer File: e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer (raw, json) Hash identifier: S1yJ200Hd9KcgqyXOi1onQVElv+x17C2SsPVIs8T0Q8= Subject key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F2AB589AF046006840F244580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 00:45:11 +0000 Certificate not after: Sun 17 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 32688 IP: 66.6.192.0/21 IP: 168.245.158.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:b5:89:af:04:60:06:84:0f:24:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 14 00:45:11 2026 GMT Not After : Dec 17 01:45:11 2028 GMT Subject: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:99:6d:8e:4e:22:36:80:33:53:bd:8e:34: 95:69:09:b0:c1:71:54:be:38:9c:31:ab:fc:03:06: 71:b1:0b:95:2c:b5:97:75:54:66:29:54:07:a1:32: 7d:52:45:17:4d:45:d0:07:f4:d9:f0:08:8c:c0:60: 38:0e:5d:8a:2b:28:48:00:fd:88:d7:68:a7:26:94: 3a:23:25:42:6f:f8:37:cc:d1:00:62:e3:75:2a:f6: 88:be:fc:f0:5f:1a:54:7f:ca:8b:4c:1b:5e:c2:9e: 86:e9:bc:6f:ed:7a:c7:8c:ee:e5:ba:9e:97:ee:29: 35:fe:16:44:c6:23:7b:dd:61:6a:80:ec:f5:a7:fd: 4d:22:af:8b:5e:ef:9a:4f:a7:1d:02:4e:c3:d3:76: e4:80:c9:f6:5d:cb:6a:fe:94:63:63:be:87:23:9b: 20:db:7d:cf:d7:c8:c7:eb:f5:f8:54:9e:b3:01:91: a4:6e:6e:7f:c7:8c:05:7a:f0:c3:05:74:bc:a0:5b: d3:18:8f:bb:10:90:d1:8d:f5:52:eb:7a:50:89:d3: 95:2c:88:af:4e:cc:1c:a7:cc:64:b5:78:37:52:a3: 74:09:50:19:0a:35:3b:41:c5:c4:f5:24:e4:f3:c6: ed:7b:d3:36:3a:cb:5f:67:a9:2f:3b:62:99:ae:25: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.6.192.0/21 168.245.158.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32688 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:36:39:c7:98:27:1e:fe:0d:69:24:b0:9e:4f:ac:a9:87:00: 52:5f:6d:18:fb:ae:90:d0:4f:58:3e:14:b2:4d:b9:ee:1a:45: b4:f0:ce:69:3c:3c:76:f0:ae:9a:78:53:ef:99:9b:80:6f:a4: c2:5c:de:5d:f8:0d:8f:14:cf:fa:6a:c9:ef:a2:20:1a:65:ce: 0a:53:b9:1b:a0:94:b7:d8:a2:96:7e:6d:61:3b:81:36:08:93: f2:ed:65:40:df:f7:c1:ac:21:65:f7:d3:ec:51:64:b3:7d:3f: 31:43:40:e4:b4:45:3f:d5:74:d9:03:c9:f7:49:93:91:73:8c: 63:22:d9:b0:35:27:bc:46:e1:49:98:3f:ad:88:8f:34:bc:94: 8d:46:9e:d9:34:c0:d8:6c:18:2d:70:14:43:81:3e:49:6f:7c: 3c:4e:fa:38:0d:9f:42:67:8d:e8:c6:70:4e:9a:1c:c5:a1:d1: e2:49:23:f5:fe:c7:d3:e8:c3:b4:60:38:29:7f:d0:82:86:6f: 5e:d2:f3:77:af:19:85:c3:c1:bb:bf:90:79:3e:3d:37:f8:91: 04:78:bd:57:4d:bf:c7:df:86:6c:ac:26:f2:bb:4a:61:f5:1a: 17:ad:4a:f5:7d:aa:3d:3e:6c:18:c6:6f:a8:ae:25:42:8f:2f: d8:aa:b4:66 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE8qtYmvBGAGhA8kRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxNDAwNDUxMVoXDTI4MTIxNzAxNDUxMVowLzEtMCsGA1UEAxMk ZTdlYzA4N2EtYWZiZS00ZTE1LTkyZDMtYWJhYmNjYzBiYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwaZbY5OIjaAM1O9jjSVaQmwwXFUvjicMav8 AwZxsQuVLLWXdVRmKVQHoTJ9UkUXTUXQB/TZ8AiMwGA4Dl2KKyhIAP2I12inJpQ6 IyVCb/g3zNEAYuN1KvaIvvzwXxpUf8qLTBtewp6G6bxv7XrHjO7lup6X7ik1/hZE xiN73WFqgOz1p/1NIq+LXu+aT6cdAk7D03bkgMn2Xctq/pRjY76HI5sg233P18jH 6/X4VJ6zAZGkbm5/x4wFevDDBXS8oFvTGI+7EJDRjfVS63pQidOVLIivTswcp8xk tXg3UqN0CVAZCjU7QcXE9STk88bte9M2OstfZ6kvO2KZriU/vwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFPcJL7nELX4BNZEeqd3t1eu2m4JiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l N2VjMDg3YS1hZmJlLTRlMTUtOTJkMy1hYmFiY2NjMGJiZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U3ZWMwODdhLWFmYmUtNGUxNS05 MmQzLWFiYWJjY2MwYmJlMC9lN2VjMDg3YS1hZmJlLTRlMTUtOTJkMy1hYmFiY2Nj MGJiZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANCBsADBAGo9Z4wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICf7AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAKDY5x5gnHv4NaSSwnk+sqYcAUl9tGPuukNBPWD4U sk257hpFtPDOaTw8dvCumnhT75mbgG+kwlzeXfgNjxTP+mrJ76IgGmXOClO5G6CU t9iiln5tYTuBNgiT8u1lQN/3wawhZffT7FFks30/MUNA5LRFP9V02QPJ90mTkXOM YyLZsDUnvEbhSZg/rYiPNLyUjUae2TTA2GwYLXAUQ4E+SW98PE76OA2fQmeN6MZw TpocxaHR4kkj9f7H0+jDtGA4KX/QgoZvXtLzd68ZhcPBu7+QeT49N/iRBHi9V02/ x9+GbKwm8rtKYfUaF61K9X2qPT5sGMZvqK4lQo8v2Kq0Zg== -----END CERTIFICATE-----Generated at Sun Sep 20 16:43:22 2026 by rpki-client