$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer File: 6be678b8-74cc-4a67-8700-5a07f5c20f62.cer (raw, json) Hash identifier: TsBOeqPOz7xjFgJQWQpSqCnJ6Ej8TC5X9xDcBhVrxUM= Subject key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F3A104EBFF466A27EBF9B52C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Sep 2026 12:45:11 +0000 Certificate not after: Fri 22 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 204.81.0.0 -- 204.82.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:10:4e:bf:f4:66:a2:7e:bf:9b:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 19 12:45:11 2026 GMT Not After : Dec 22 13:45:11 2028 GMT Subject: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:c7:0d:4a:3d:84:af:c2:bf:d9:f1:d8:9c: 3c:26:8c:a6:f6:ce:47:30:d8:db:e6:ab:a2:80:4b: de:86:04:e9:46:00:09:cd:11:cf:3d:93:36:46:15: a1:d4:e5:b2:a4:6e:f3:12:d2:81:b4:65:cf:2b:1d: d6:42:63:3f:89:ab:b6:6f:b0:69:f1:15:36:68:9d: 86:c7:2f:57:c2:73:ad:22:68:8a:c1:b3:9d:a9:a0: cd:55:6d:bf:01:1f:f9:f3:eb:81:e9:ae:09:30:a3: 23:0d:34:20:32:c3:39:7f:5b:c0:cf:98:a7:68:93: 68:b0:70:7d:11:32:84:58:73:cc:5f:01:fa:18:c3: ec:a7:dd:04:59:3a:0b:fa:c6:bf:5e:6f:9f:ac:84: 9b:75:5f:80:74:5c:d1:5d:18:46:0f:75:d0:b7:7b: 6d:10:c1:8e:85:1f:9b:58:7f:42:67:84:1c:e6:b8: 74:ef:62:2a:c5:d2:95:b8:7b:b4:76:c5:88:ea:34: fd:a7:7e:24:3c:42:d1:d3:25:d2:1c:11:1c:96:d8: 4f:09:b9:83:99:92:9d:40:06:17:6c:46:31:9f:dd: f9:8a:62:ba:40:5f:04:a3:3c:47:00:04:49:eb:1c: 59:13:d8:68:03:be:74:68:78:dd:94:c5:99:bf:91: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.81.0.0-204.82.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d1:00:54:b3:56:bc:d4:1c:f1:3c:a4:ab:b6:28:57:5a:a1: 5d:2d:72:1a:56:6d:fc:07:0d:0a:a1:09:e3:dc:96:03:bd:38: 53:f9:8b:60:cf:50:b2:46:9d:12:58:27:46:d9:7d:96:92:9f: 75:08:7b:24:95:34:71:16:00:02:f4:35:a0:25:1a:5a:08:2c: 4e:06:10:02:cb:e6:0b:11:90:91:6b:97:c2:bd:1d:da:65:ab: a9:a9:1d:13:c5:d7:2b:3a:69:b6:e4:2b:db:7c:58:dc:40:3d: 9f:50:82:98:f3:25:57:21:bc:1c:97:e6:10:95:6a:94:76:b3: 12:04:68:ee:90:1a:f0:e0:6b:f2:24:27:35:ab:a6:04:92:74: 30:17:71:d5:f7:11:83:27:1a:a3:df:b0:8d:7d:5f:d5:03:00: ca:bf:1c:77:29:f2:d3:3d:59:c3:cc:0c:1e:51:9c:d6:e6:67: e1:83:34:e3:3d:71:85:71:3c:ec:2a:00:c1:ae:c3:8f:1e:7b: c2:64:48:e6:27:d7:16:7d:94:09:ba:a0:be:11:f6:a7:56:6d: fb:d3:15:a6:7c:ea:fd:ca:13:60:64:49:2d:c9:af:37:53:1a: 17:d8:e4:b2:d1:a8:92:59:53:a4:6b:e4:cc:99:89:25:a7:61: 3c:83:e4:d1 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE86EE6/9Gaifr+bUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkxOTEyNDUxMVoXDTI4MTIyMjEzNDUxMVowLzEtMCsGA1UEAxMk NmJlNjc4YjgtNzRjYy00YTY3LTg3MDAtNWEwN2Y1YzIwZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtXHDUo9hK/Cv9nx2Jw8Joym9s5HMNjb5qui gEvehgTpRgAJzRHPPZM2RhWh1OWypG7zEtKBtGXPKx3WQmM/iau2b7Bp8RU2aJ2G xy9XwnOtImiKwbOdqaDNVW2/AR/58+uB6a4JMKMjDTQgMsM5f1vAz5inaJNosHB9 ETKEWHPMXwH6GMPsp90EWToL+sa/Xm+frISbdV+AdFzRXRhGD3XQt3ttEMGOhR+b WH9CZ4Qc5rh072IqxdKVuHu0dsWI6jT9p34kPELR0yXSHBEclthPCbmDmZKdQAYX bEYxn935imK6QF8EozxHAARJ6xxZE9hoA750aHjdlMWZv5HiPQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFAcVodgpC+FiU3b0DDvjRIXujNGKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVjMjBmNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZiZTY3OGI4LTc0Y2MtNGE2Ny04 NzAwLTVhMDdmNWMyMGY2Mi82YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVj MjBmNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwwCgMDAMxRAwMAzFIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAINEAVLNWvNQc 8Tykq7YoV1qhXS1yGlZt/AcNCqEJ49yWA704U/mLYM9QskadElgnRtl9lpKfdQh7 JJU0cRYAAvQ1oCUaWggsTgYQAsvmCxGQkWuXwr0d2mWrqakdE8XXKzpptuQr23xY 3EA9n1CCmPMlVyG8HJfmEJVqlHazEgRo7pAa8OBr8iQnNaumBJJ0MBdx1fcRgyca o9+wjX1f1QMAyr8cdyny0z1Zw8wMHlGc1uZn4YM04z1xhXE87CoAwa7Djx57wmRI 5ifXFn2UCbqgvhH2p1Zt+9MVpnzq/coTYGRJLcmvN1MaF9jkstGokllTpGvkzJmJ JadhPIPk0Q== -----END CERTIFICATE-----Generated at Mon Sep 21 13:59:59 2026 by rpki-client