$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer File: f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer (raw, json) Hash identifier: 0QUiPpyv+QXf6UQMtdPqYPxTmPhTaLQqQz8NYrKg8t0= Subject key identifier: 71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F66BB408DD9467F4726F15AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 12:45:11 +0000 Certificate not after: Sun 07 Jan 2029 13:45:11 +0000 Subordinate resources: IP: 23.174.168.0/24 IP: 2602:f935::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:bb:40:8d:d9:46:7f:47:26:f1:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 5 12:45:11 2026 GMT Not After : Jan 7 13:45:11 2029 GMT Subject: CN=f9c69ad2-7fee-4064-9683-23ee7a48db4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:11:52:f4:8b:5d:8d:db:00:ad:9f:56:3d: 4c:75:dd:af:34:9a:09:c5:00:db:24:c2:47:28:35: f6:a3:ea:3a:a7:5f:26:6c:94:b5:c5:e6:ac:75:62: 57:ef:11:13:4d:0d:e3:cd:5e:64:8e:4f:a7:68:8b: 46:7f:c1:fc:ed:b2:38:bb:8b:53:d0:96:3d:9d:70: a6:17:54:25:fd:27:d7:49:23:7a:03:1e:40:9a:fa: b8:c6:fd:cd:cc:8a:91:0b:36:4e:af:8a:53:0b:79: 97:5c:1f:6d:22:df:0b:b7:cf:b5:77:32:48:8d:a9: 19:a2:79:fe:e2:e5:1a:b4:5e:ff:74:03:88:2f:36: 0c:8a:9b:08:70:ab:fd:02:6f:86:b5:48:c5:1b:74: ed:58:1c:d4:a4:4c:e5:35:f8:56:29:33:17:06:ba: 0b:3d:c4:d5:d8:49:b3:e7:cc:78:92:36:be:64:6c: 0f:52:c1:69:54:64:4e:6f:d3:54:2b:28:58:2d:95: f4:84:b3:bc:4e:84:23:bc:4d:4b:ed:60:0f:4d:99: 52:e2:29:b0:a4:a3:1e:b3:7d:a0:44:fe:32:f7:fe: ec:21:c8:d8:bc:37:34:02:cf:d7:c5:2c:3c:a8:4a: f7:8e:6a:3e:04:66:55:06:14:ed:3c:38:f4:eb:6b: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.168.0/24 IPv6: 2602:f935::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:af:f1:d5:05:b4:45:af:da:9b:21:93:69:22:31:f3:ca:6d: 30:03:ad:8c:12:36:8d:a5:43:22:e9:1f:87:f7:b0:7e:d3:22: 32:9b:0b:43:7e:00:54:82:bf:a1:8b:f6:70:84:e1:67:32:4d: e4:e2:7d:a7:7c:e5:d6:70:e9:4e:f1:f7:f2:b6:ab:8d:b0:3b: aa:59:57:91:23:b4:82:92:b2:6f:16:b5:ff:f1:a9:85:84:85: 48:ed:63:cf:f5:8f:20:fa:65:85:b8:65:25:29:9e:1e:df:e8: 71:cd:47:ed:3e:a2:dd:e0:63:58:09:40:40:fc:12:13:0a:fe: 42:b9:52:7a:d3:c4:0e:ec:4e:fa:dc:06:32:82:d2:ee:ef:07: b3:d8:d7:09:90:5c:0b:a3:91:3f:2f:b3:f0:66:49:a9:e5:31: 7f:e3:51:43:9c:66:97:10:7e:05:84:43:5b:d5:cb:c2:dc:69: 79:5a:5a:5b:58:a2:3c:84:9f:dc:9d:1d:97:62:9b:11:4a:ee: 5e:26:a9:eb:f9:98:df:c1:0b:62:4b:a2:47:1e:b4:a2:88:a7: 23:dd:ee:d3:2f:ff:f4:10:d9:be:ae:8a:90:73:be:18:7c:13: ba:5b:db:c9:57:8a:f4:29:cf:0a:17:38:43:2d:0d:d9:20:3c: cb:85:0f:c5 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE9mu0CN2UZ/RybxWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwNTEyNDUxMVoXDTI5MDEwNzEzNDUxMVowLzEtMCsGA1UEAxMk ZjljNjlhZDItN2ZlZS00MDY0LTk2ODMtMjNlZTdhNDhkYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqsRUvSLXY3bAK2fVj1Mdd2vNJoJxQDbJMJH KDX2o+o6p18mbJS1xeasdWJX7xETTQ3jzV5kjk+naItGf8H87bI4u4tT0JY9nXCm F1Ql/SfXSSN6Ax5Amvq4xv3NzIqRCzZOr4pTC3mXXB9tIt8Lt8+1dzJIjakZonn+ 4uUatF7/dAOILzYMipsIcKv9Am+GtUjFG3TtWBzUpEzlNfhWKTMXBroLPcTV2Emz 58x4kja+ZGwPUsFpVGROb9NUKyhYLZX0hLO8ToQjvE1L7WAPTZlS4imwpKMes32g RP4y9/7sIcjYvDc0As/XxSw8qEr3jmo+BGZVBhTtPDj062sE6wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHHVjDTxNSRvJfoKSk2lhoIZWcQtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m OWM2OWFkMi03ZmVlLTQwNjQtOTY4My0yM2VlN2E0OGRiNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y5YzY5YWQyLTdmZWUtNDA2NC05 NjgzLTIzZWU3YTQ4ZGI0Zi9mOWM2OWFkMi03ZmVlLTQwNjQtOTY4My0yM2VlN2E0 OGRiNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrqgwDgQCAAIwCAMGACYC+TUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGWv8dUFtEWv2pshk2kiMfPKbTADrYwSNo2lQyLpH4f3sH7TIjKbC0N+AFSCv6GL 9nCE4WcyTeTifad85dZw6U7x9/K2q42wO6pZV5EjtIKSsm8Wtf/xqYWEhUjtY8/1 jyD6ZYW4ZSUpnh7f6HHNR+0+ot3gY1gJQED8EhMK/kK5UnrTxA7sTvrcBjKC0u7v B7PY1wmQXAujkT8vs/BmSanlMX/jUUOcZpcQfgWEQ1vVy8LcaXlaWltYojyEn9yd HZdimxFK7l4mqev5mN/BC2JLokcetKKIpyPd7tMv//QQ2b6uipBzvhh8E7pb28lX ivQpzwoXOEMtDdkgPMuFD8U= -----END CERTIFICATE-----Generated at Thu Nov 5 01:22:43 2026 by rpki-client