$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer File: 8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer (raw, json) Hash identifier: Q16A1PPRsroKETtKdrE3q1J8xFT9D0KolVCRiBBgIY0= Subject key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F2685856DDC588195B8D4B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Sep 2026 12:45:12 +0000 Certificate not after: Fri 15 Dec 2028 13:45:12 +0000 Subordinate resources: IP: 198.99.189.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:85:85:6d:dc:58:81:95:b8:d4:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 12 12:45:12 2026 GMT Not After : Dec 15 13:45:12 2028 GMT Subject: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:58:1a:c1:67:8d:4a:26:2a:19:99:2b:6c:e2: b8:fa:14:69:b4:00:25:98:a3:fb:3e:1b:73:85:87: 88:b0:3c:1b:79:90:33:87:34:32:39:8f:dc:21:44: e0:1d:5e:28:3f:dd:07:fc:94:07:25:36:6a:9d:cc: c4:e2:33:3b:85:5e:e0:b4:54:3b:91:de:80:27:26: a8:67:48:bb:c0:ef:39:4b:0d:a9:27:5f:3e:fb:0d: a4:1c:d9:e5:36:c4:5c:4d:62:f0:32:00:a0:fb:6c: a9:b8:8f:92:53:f5:31:0e:d1:7a:c7:1e:7e:3e:d4: b5:b7:21:1a:fc:04:ca:f1:a3:84:4d:8a:6d:1e:de: 8d:0f:9b:a3:7c:8c:69:58:07:92:64:e8:c4:13:bb: ee:97:23:6a:7b:8e:90:86:6e:ba:9d:77:34:1e:12: ae:b3:38:8e:a0:bf:8a:68:46:c3:14:b3:77:f7:cd: 4e:06:1e:31:0a:6e:47:23:41:2c:27:b2:9b:80:b6: 5d:bb:48:0e:bf:18:39:ca:05:38:64:dd:6b:a0:97: eb:d9:c8:85:00:71:e1:6a:bf:db:da:0c:e2:70:0d: 72:35:b3:7c:9d:ee:3f:86:54:28:89:20:6c:bc:dd: 5b:8d:f8:43:a7:5b:24:bf:f8:af:fa:95:19:b9:e1: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 198.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:94:fc:26:89:e2:83:a8:13:17:2c:47:c9:aa:e6:69:14:0e: 9e:2c:dd:cd:df:c2:93:ef:ea:22:6b:c2:ee:81:32:cb:c3:6e: 94:3e:2e:f5:28:0d:b6:af:79:1d:10:4f:34:35:af:7e:a2:f1: 8f:66:fb:a3:95:3e:23:67:f8:d6:d8:37:5d:e9:2f:4e:8c:61: 24:16:06:a6:d1:00:ae:ee:ee:4a:ee:b9:80:42:60:08:31:90: 29:ee:bc:5f:24:67:83:b8:22:df:75:d5:3f:f6:93:d2:0b:85: 3d:cd:7a:af:f8:4e:f8:1f:50:2d:5e:31:9d:21:39:e1:fc:73: 1e:cd:f5:9d:53:05:23:92:27:fe:1c:97:24:62:f7:d6:cb:b1: b3:68:b6:f9:7e:c4:8d:9c:60:b5:d8:4a:fa:2f:4e:e4:01:40: 8f:96:a2:32:dc:43:e5:4c:41:00:58:3e:ac:0c:cb:e1:39:4b: 88:ee:c2:e4:1e:3c:e0:01:8a:2d:30:04:74:60:b7:9b:3d:11: bd:ba:e6:e8:41:ed:8e:7e:f8:e9:c4:92:fb:d6:02:08:e9:4c: 7c:ba:71:2d:be:de:0a:c1:1e:a0:8b:a2:b8:9f:93:87:66:c3: 8b:a7:7e:cd:02:cf:fc:87:3e:4d:63:7b:d0:77:8b:de:11:96: 09:a4:c3:b3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE8mhYVt3FiBlbjUtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkxMjEyNDUxMloXDTI4MTIxNTEzNDUxMlowLzEtMCsGA1UEAxMk OGEyYWQ5MjMtN2RiYy00ZWQ0LWIzNTEtZTJmZDIzNTlhMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklgawWeNSiYqGZkrbOK4+hRptAAlmKP7Phtz hYeIsDwbeZAzhzQyOY/cIUTgHV4oP90H/JQHJTZqnczE4jM7hV7gtFQ7kd6AJyao Z0i7wO85Sw2pJ18++w2kHNnlNsRcTWLwMgCg+2ypuI+SU/UxDtF6xx5+PtS1tyEa /ATK8aOETYptHt6ND5ujfIxpWAeSZOjEE7vulyNqe46Qhm66nXc0HhKusziOoL+K aEbDFLN3981OBh4xCm5HI0EsJ7KbgLZdu0gOvxg5ygU4ZN1roJfr2ciFAHHhar/b 2gzicA1yNbN8ne4/hlQoiSBsvN1bjfhDp1skv/iv+pUZueHn1wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPh+Gaz5DRJI/7PIV2JUehKsG9MZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1OWEyMTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhhMmFkOTIzLTdkYmMtNGVkNC1i MzUxLWUyZmQyMzU5YTIxNi84YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1 OWEyMTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGY70wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADpT8Jonig6gTFyxHyarm aRQOnizdzd/Ck+/qImvC7oEyy8NulD4u9SgNtq95HRBPNDWvfqLxj2b7o5U+I2f4 1tg3XekvToxhJBYGptEAru7uSu65gEJgCDGQKe68XyRng7gi33XVP/aT0guFPc16 r/hO+B9QLV4xnSE54fxzHs31nVMFI5In/hyXJGL31suxs2i2+X7EjZxgtdhK+i9O 5AFAj5aiMtxD5UxBAFg+rAzL4TlLiO7C5B484AGKLTAEdGC3mz0Rvbrm6EHtjn74 6cSS+9YCCOlMfLpxLb7eCsEeoIuiuJ+Th2bDi6d+zQLP/Ic+TWN70HeL3hGWCaTD sw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:33:58 2026 by rpki-client