$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer File: f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer (raw, json) Hash identifier: 3100UoJKn+oDc/x/TmIkbLI5GQ5cXslnyGnN/4AbLrM= Subject key identifier: D0:3C:96:E1:0C:B6:6C:11:4A:A8:F4:92:61:4B:1F:28:22:B8:89:67 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584D6DC03B278B5EAD032FDDD400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Apr 2026 15:32:00 +0000 Certificate not after: Mon 10 Jul 2028 15:32:00 +0000 Subordinate resources: IP: 74.214.160.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:c0:3b:27:8b:5e:ad:03:2f:dd:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 7 15:32:00 2026 GMT Not After : Jul 10 15:32:00 2028 GMT Subject: CN=f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:05:b0:c8:51:31:51:c7:7a:3b:4f:e5:0e: 88:69:c3:8d:f9:af:0a:8e:4b:b5:fe:85:f2:d0:0a: e0:6a:69:04:d0:74:4a:18:61:98:95:26:7a:fe:54: 8e:94:77:02:4e:7c:3f:7d:82:26:08:bc:9d:3d:d7: 98:af:b8:2d:6e:ae:89:ca:6b:2d:f0:cf:86:35:88: 15:39:2b:3d:59:55:16:dc:06:e4:09:9c:61:18:bb: 27:98:da:8f:c6:3a:1b:28:36:8e:03:91:bc:4a:52: 61:77:a5:e7:72:83:bb:c7:b3:76:cf:e3:d0:f8:7a: 9d:12:e4:98:9b:49:80:9e:33:5b:10:23:2c:a8:d1: d0:7f:e6:43:08:84:bb:2d:2c:37:11:2d:36:00:c1: 8d:b0:92:91:29:b9:d8:04:b8:47:b0:8b:a7:da:a2: a0:42:9d:47:a0:e5:f2:71:b2:47:ef:ea:82:85:39: 91:31:82:e2:9e:b7:da:0c:d2:8e:35:d1:b5:da:e0: 01:83:e4:41:15:90:8a:0e:10:a0:1a:7d:b3:41:12: 25:24:b8:41:4b:f2:cc:f6:f6:be:d1:35:e2:f6:8c: 21:e5:67:d7:08:2e:5e:5e:8a:32:5e:9f:1c:57:7e: 86:95:3e:ff:1d:48:fd:b9:b4:60:70:33:9a:60:d4: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3C:96:E1:0C:B6:6C:11:4A:A8:F4:92:61:4B:1F:28:22:B8:89:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 74.214.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0c:9f:be:06:cc:7d:67:15:af:73:37:c1:d3:20:40:a7:4e: 1d:73:f2:be:84:3a:ed:fe:ce:84:04:86:73:9f:96:bc:b7:52: 36:55:98:bb:15:8e:42:9f:21:14:6f:5a:c7:4a:5f:e8:6c:9d: 3b:6c:e6:f8:4a:99:52:13:e9:21:e4:27:c3:d5:3e:48:5c:dc: 6b:cf:74:4d:18:c8:60:de:5d:5e:37:c9:e3:83:e4:d4:70:0a: d2:fb:f9:a1:e1:a1:15:5c:a3:2c:99:d1:96:43:e9:b7:e0:b5: 88:73:57:21:27:aa:3d:f1:41:31:a0:7a:f2:2c:89:17:b4:59: 0a:44:17:5b:6d:95:d9:a4:c6:84:38:b6:dd:09:61:b2:d4:3f: 89:39:6e:ac:03:20:bb:34:0e:a4:cd:86:1b:e7:6b:7b:9f:0f: 60:a9:4a:25:03:dc:11:ad:91:86:5f:44:07:c3:ad:b7:49:cc: c1:23:63:89:ff:c3:15:0a:94:f0:b7:07:95:d1:20:f0:13:46: 02:60:c7:d3:1a:22:ca:a9:d7:ab:48:3c:e4:33:1d:2d:c2:42: 07:31:5f:00:58:6b:c4:8f:14:4d:8c:71:d6:47:7b:e0:75:c3: 5c:f1:b2:51:8e:91:82:1b:85:e3:16:91:c5:b7:de:0f:1b:c0: a6:7d:69:de -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1twDsni16tAy/d1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDQwNzE1MzIwMFoXDTI4MDcxMDE1MzIwMFowLzEtMCsGA1UEAxMk ZjU2ZmQ5ZWEtM2IwMy00YWE0LWExZmItMGU2MjZlMTdmZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5UFsMhRMVHHejtP5Q6IacON+a8Kjku1/oXy 0ArgamkE0HRKGGGYlSZ6/lSOlHcCTnw/fYImCLydPdeYr7gtbq6Jymst8M+GNYgV OSs9WVUW3AbkCZxhGLsnmNqPxjobKDaOA5G8SlJhd6XncoO7x7N2z+PQ+HqdEuSY m0mAnjNbECMsqNHQf+ZDCIS7LSw3ES02AMGNsJKRKbnYBLhHsIun2qKgQp1HoOXy cbJH7+qChTmRMYLinrfaDNKONdG12uABg+RBFZCKDhCgGn2zQRIlJLhBS/LM9va+ 0TXi9owh5WfXCC5eXooyXp8cV36GlT7/HUj9ubRgcDOaYNS14wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNA8luEMtmwRSqj0kmFLHygiuIlnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m NTZmZDllYS0zYjAzLTRhYTQtYTFmYi0wZTYyNmUxN2ZlOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y1NmZkOWVhLTNiMDMtNGFhNC1h MWZiLTBlNjI2ZTE3ZmU5OC9mNTZmZDllYS0zYjAzLTRhYTQtYTFmYi0wZTYyNmUx N2ZlOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJK1qAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXAyfvgbMfWcVr3M3wdMg QKdOHXPyvoQ67f7OhASGc5+WvLdSNlWYuxWOQp8hFG9ax0pf6GydO2zm+EqZUhPp IeQnw9U+SFzca890TRjIYN5dXjfJ44Pk1HAK0vv5oeGhFVyjLJnRlkPpt+C1iHNX ISeqPfFBMaB68iyJF7RZCkQXW22V2aTGhDi23QlhstQ/iTlurAMguzQOpM2GG+dr e58PYKlKJQPcEa2Rhl9EB8Ott0nMwSNjif/DFQqU8LcHldEg8BNGAmDH0xoiyqnX q0g85DMdLcJCBzFfAFhrxI8UTYxx1kd74HXDXPGyUY6RghuF4xaRxbfeDxvApn1p 3g== -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:26 2026 by rpki-client