$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer File: ae6e260c-421d-48c3-b47d-d76ac074fbba.cer (raw, json) Hash identifier: eUq03MhgvyJcJtD1P4kaFp8Astf/lYbM+AHfqtYU/sU= Subject key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F34B0915FFC4F0AB0028A9500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 14:33:15 +0000 Certificate not after: Mon 07 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 163.245.64.0/18 IP: 205.215.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:b0:91:5f:fc:4f:0a:b0:02:8a:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 17 14:33:15 2026 GMT Not After : Aug 7 12:45:18 2028 GMT Subject: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:51:2d:aa:be:8a:0e:8a:9a:df:07:46:af:1a: b9:dd:a8:cf:43:49:6e:4d:28:e7:ee:3b:68:ee:b7: 1f:d6:dc:79:86:f7:d2:e0:8d:d9:ac:5f:30:a6:b5: c5:f8:8c:11:27:77:60:c1:91:25:7b:60:11:82:41: f3:cd:b9:3a:59:d4:36:9a:d1:07:37:a0:7d:25:27: 85:1a:71:d6:e6:8c:fd:44:cb:bf:e1:64:6b:c3:51: 17:b0:a3:b7:ef:03:49:86:0c:c4:18:7a:67:86:2a: 00:96:75:90:c4:65:06:6d:fc:52:e6:21:30:a3:7a: c7:97:ab:e6:50:07:4e:23:9b:35:14:5b:fc:98:c4: ce:6a:de:c8:91:7e:5b:d2:af:53:6a:5a:c5:7b:4d: 32:55:c9:50:69:3d:d4:73:e9:11:a5:e7:7e:bb:f3: 22:bc:e7:79:1a:17:6e:b5:b9:a0:d6:88:14:6d:ef: be:14:1c:da:a7:04:f8:04:24:c5:ed:0b:ec:e3:ab: 2a:4f:13:62:d4:20:77:ec:96:5d:54:90:bc:fd:9d: 96:14:07:74:d0:77:6d:40:80:8b:3a:1e:8f:bb:ae: 07:79:23:64:a0:db:8a:80:76:9e:c6:8b:7c:77:bf: 37:7d:ba:53:99:9a:78:0d:e2:4b:77:a2:36:47:fa: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 163.245.64.0/18 205.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:de:9e:49:6a:07:f2:06:1d:a6:1e:9c:d0:ef:10:f1:67:de: da:20:93:72:c1:46:a1:b7:b9:c4:e1:1e:45:35:fe:7e:1c:38: 17:46:78:ee:a8:dd:c3:d1:f1:3b:56:6d:fc:90:4d:67:bf:1c: 78:f1:47:0e:9d:60:f9:86:32:e1:e4:11:f9:a7:bb:96:28:3b: a7:5e:e1:27:93:90:ac:d6:b7:a6:56:64:f9:56:93:e3:a7:fb: 1c:44:39:60:79:52:27:0f:fe:ca:0c:8d:9d:58:f0:c0:d6:64: f8:06:b3:28:01:cc:d7:47:4b:8c:3f:6f:4b:02:f1:c2:0b:71: e8:70:87:96:dd:4d:22:bc:fd:82:a6:3a:8a:9d:f2:56:93:00: 6a:63:2b:33:ec:bf:9c:ed:56:e3:bf:91:b3:54:19:16:0b:bd: 9d:54:5f:7f:15:e8:a9:c0:ec:f3:4c:54:ef:7f:88:f4:16:5c: 09:d5:d0:a2:e8:3a:35:86:7b:3f:41:d9:f8:eb:84:88:96:d4: 3b:76:1d:f7:37:5b:29:75:56:1f:b6:33:77:f5:ca:ca:3b:4e: 08:27:3f:ea:03:d8:4f:f5:52:d4:98:04:9b:3f:b8:7a:82:ee: 7d:62:f3:a4:b1:60:f8:fa:3c:e4:0f:3e:de:d9:e0:5c:2f:90: 10:bb:5f:f5 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE80sJFf/E8KsAKKlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkxNzE0MzMxNVoXDTI4MDgwNzEyNDUxOFowLzEtMCsGA1UEAxMk YWU2ZTI2MGMtNDIxZC00OGMzLWI0N2QtZDc2YWMwNzRmYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFEtqr6KDoqa3wdGrxq53ajPQ0luTSjn7jto 7rcf1tx5hvfS4I3ZrF8wprXF+IwRJ3dgwZEle2ARgkHzzbk6WdQ2mtEHN6B9JSeF GnHW5oz9RMu/4WRrw1EXsKO37wNJhgzEGHpnhioAlnWQxGUGbfxS5iEwo3rHl6vm UAdOI5s1FFv8mMTOat7IkX5b0q9TalrFe00yVclQaT3Uc+kRped+u/MivOd5Ghdu tbmg1ogUbe++FBzapwT4BCTF7Qvs46sqTxNi1CB37JZdVJC8/Z2WFAd00HdtQICL Oh6Pu64HeSNkoNuKgHaexot8d783fbpTmZp4DeJLd6I2R/r/fQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFHSTYFyspXJjGrq3lS7dZwKD3jzjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3NGZiYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlNmUyNjBjLTQyMWQtNDhjMy1i NDdkLWQ3NmFjMDc0ZmJiYS9hZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3 NGZiYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAaj9UADBAbN10AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAed6eSWoH8gYd ph6c0O8Q8Wfe2iCTcsFGobe5xOEeRTX+fhw4F0Z47qjdw9HxO1Zt/JBNZ78cePFH Dp1g+YYy4eQR+ae7lig7p17hJ5OQrNa3plZk+VaT46f7HEQ5YHlSJw/+ygyNnVjw wNZk+AazKAHM10dLjD9vSwLxwgtx6HCHlt1NIrz9gqY6ip3yVpMAamMrM+y/nO1W 47+Rs1QZFgu9nVRffxXoqcDs80xU73+I9BZcCdXQoug6NYZ7P0HZ+OuEiJbUO3Yd 9zdbKXVWH7Yzd/XKyjtOCCc/6gPYT/VS1JgEmz+4eoLufWLzpLFg+Po85A8+3tng XC+QELtf9Q== -----END CERTIFICATE-----Generated at Mon Sep 21 10:09:38 2026 by rpki-client