$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer File: d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer (raw, json) Hash identifier: 8/W6YEWlSvUZ9skAdDVDlrHVjjRD/Xmh5cVBcxtU8Vs= Subject key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F2C1AE330170E4BF9063CA3A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 12:45:11 +0000 Certificate not after: Sun 17 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 400725 IP: 199.45.241.0/24 IP: 2606:dbc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:1a:e3:30:17:0e:4b:f9:06:3c:a3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 14 12:45:11 2026 GMT Not After : Dec 17 13:45:11 2028 GMT Subject: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:16:bf:14:7b:d6:35:21:29:67:4d:41:18: d6:62:ab:6c:a8:ee:e3:04:9b:b1:96:40:d7:9d:2a: 9a:0d:c3:04:00:35:80:80:25:1d:6e:6a:2b:29:a1: 9d:ec:fd:f2:71:63:78:4c:c4:35:6f:b3:22:9d:e8: c3:a2:74:26:c3:a3:c7:49:2e:ec:14:68:61:35:12: 84:4a:c6:44:7d:52:1a:9f:0d:57:a3:9a:e0:14:65: 18:b9:21:44:ad:3d:96:ae:53:f1:e7:9d:c6:90:ea: 3c:47:02:b7:e1:6e:5d:0c:5f:35:fe:61:4c:27:b8: c5:89:b0:84:98:4a:94:10:f4:b1:a3:4d:8f:63:5e: bf:2d:04:b2:31:03:ca:83:c2:4b:9a:a3:d9:c0:0a: b7:46:37:02:0e:67:83:c5:d0:90:72:66:ff:b7:63: b0:ca:b6:10:b3:de:2b:e8:54:8e:c0:5a:27:44:90: d0:d3:77:c1:39:8f:e0:32:b4:4c:25:63:92:ea:c4: 20:6a:22:66:65:48:31:d1:f2:33:c8:90:7e:72:78: 80:01:32:21:ca:67:50:01:4e:f1:2c:25:07:99:76: 8e:3d:6f:b0:a7:cc:2f:8e:59:d6:41:ac:08:cf:94: fa:97:59:06:fb:28:23:51:ad:5e:2c:fa:17:19:15: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.45.241.0/24 IPv6: 2606:dbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:80:bf:c4:3d:c9:b5:08:12:04:11:d5:58:d0:2b:a9:5c:4f: 81:f6:d4:d0:86:04:30:69:6b:e2:e1:49:10:f3:77:91:21:fc: 8e:f9:69:d1:97:c6:42:a9:3e:76:ea:dc:05:53:87:fe:9f:2d: c5:8e:ac:98:01:c8:f0:0e:18:aa:3c:78:2a:00:54:14:1a:b6: 51:0a:86:95:50:ba:1d:37:a3:fb:d3:80:db:92:a9:9b:90:25: 55:43:67:d0:55:44:43:6e:72:d3:dd:57:37:89:33:f5:20:ee: b7:1a:f4:02:2d:d8:9c:95:97:72:c6:1a:2a:5a:45:f2:2b:f0: d8:a9:f5:3d:a2:c0:fa:e2:6a:c0:2b:57:87:48:c0:e6:00:90: 7a:1d:57:a2:01:d7:20:8a:82:38:1f:db:d7:b8:c3:ec:cb:fe: bf:49:c5:0c:cf:f0:35:93:60:15:24:c2:c1:51:bc:08:33:de: 81:4d:ab:a1:cd:6f:b7:c8:7d:1b:7f:8b:9f:02:83:c7:9c:d7: 9a:45:17:30:2f:b4:e4:36:77:8d:c4:f4:51:68:e7:da:1e:e7: e8:6c:f1:6a:de:f8:4d:5e:a8:6b:5a:71:4c:69:18:8f:40:fb: 53:bf:65:32:90:87:e5:26:b8:99:a0:07:27:82:9a:eb:1d:34: b3:b2:80:fa -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE8sGuMwFw5L+QY8o6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkxNDEyNDUxMVoXDTI4MTIxNzEzNDUxMVowLzEtMCsGA1UEAxMk ZDA1MGI0ZGUtZjRjOC00ZWU3LTkwN2EtNGRmMzkyNTNlMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXAWvxR71jUhKWdNQRjWYqtsqO7jBJuxlkDX nSqaDcMEADWAgCUdbmorKaGd7P3ycWN4TMQ1b7MinejDonQmw6PHSS7sFGhhNRKE SsZEfVIanw1Xo5rgFGUYuSFErT2WrlPx553GkOo8RwK34W5dDF81/mFMJ7jFibCE mEqUEPSxo02PY16/LQSyMQPKg8JLmqPZwAq3RjcCDmeDxdCQcmb/t2OwyrYQs94r 6FSOwFonRJDQ03fBOY/gMrRMJWOS6sQgaiJmZUgx0fIzyJB+cniAATIhymdQAU7x LCUHmXaOPW+wp8wvjlnWQawIz5T6l1kG+ygjUa1eLPoXGRUnTQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFuBtqm88Yl9Bc1EDfPqDu8dTXjmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k MDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1M2UxYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QwNTBiNGRlLWY0YzgtNGVlNy05 MDdhLTRkZjM5MjUzZTFhZS9kMDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1 M2UxYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHLfEwDQQCAAIwBwMFACYG28AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh1VMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADSAv8Q9ybUIEgQR1VjQK6lcT4H2 1NCGBDBpa+LhSRDzd5Eh/I75adGXxkKpPnbq3AVTh/6fLcWOrJgByPAOGKo8eCoA VBQatlEKhpVQuh03o/vTgNuSqZuQJVVDZ9BVRENuctPdVzeJM/Ug7rca9AIt2JyV l3LGGipaRfIr8Nip9T2iwPriasArV4dIwOYAkHodV6IB1yCKgjgf29e4w+zL/r9J xQzP8DWTYBUkwsFRvAgz3oFNq6HNb7fIfRt/i58Cg8ec15pFFzAvtOQ2d43E9FFo 59oe5+hs8Wre+E1eqGtacUxpGI9A+1O/ZTKQh+UmuJmgByeCmusdNLOygPo= -----END CERTIFICATE-----Generated at Mon Sep 21 11:09:51 2026 by rpki-client