$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer File: e49f1cd9-302a-4377-9a40-b12c78b69f87.cer (raw, json) Hash identifier: F9/KIxYpwHhTiaPULHcqVu4IgdCrs8Gk7+5vw4MSDDE= Subject key identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584EF70FE40F2A547A765CB7D1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Aug 2026 12:45:11 +0000 Certificate not after: Tue 28 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 192.195.107.0/24 IP: 205.134.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:0f:e4:0f:2a:54:7a:76:5c:b7:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 26 12:45:11 2026 GMT Not After : Nov 28 13:45:11 2028 GMT Subject: CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:b2:16:7b:ec:af:24:26:ec:08:8d:99:09: 90:04:d2:c5:0c:6e:42:d1:39:7b:5d:62:6c:2e:f8: 40:cd:50:87:8e:88:a9:d1:c7:30:30:22:b6:5d:a9: 03:ea:20:a7:8c:04:1d:fe:8f:b3:81:38:32:13:cc: fa:48:82:43:e9:77:be:53:67:b2:e1:88:92:bd:60: 07:3a:4b:c7:fd:92:1c:4b:e5:fd:e0:82:d7:35:b3: 52:92:f1:f0:fe:2a:f4:0c:c5:6d:2a:22:3a:47:a9: f0:30:ff:47:e8:7d:91:80:26:19:ca:51:f7:14:f2: bc:69:9c:9d:48:85:ef:b7:a0:e4:e0:ee:da:73:5f: 90:65:69:e9:00:29:30:bf:24:9b:d2:58:7c:5c:05: bf:60:a2:06:05:bd:e7:b3:5e:19:64:36:d1:2b:69: 17:46:5d:6d:d0:1f:3e:0a:77:d6:67:ba:d5:38:0f: 51:93:1a:fd:71:2e:99:57:81:63:1c:61:73:a2:02: 0e:8f:77:73:21:e7:3f:11:f0:75:4d:5f:7c:57:c0: 28:1d:00:f4:51:54:ad:a2:0c:55:14:09:e7:b8:ac: da:bb:15:54:3d:d5:e7:50:fc:58:66:ec:79:ec:e5: 6a:9c:51:5b:16:29:13:44:4f:3d:c1:32:f1:3a:7e: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.195.107.0/24 205.134.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fa:e8:eb:f4:b1:55:b4:c8:72:a3:64:ef:51:26:2f:d6:2e: b4:ed:f2:93:c5:44:e3:3c:20:5c:2e:2c:b6:f9:9d:71:9f:a7: f2:2d:41:32:32:0b:bd:97:9d:41:56:5b:fd:a1:72:1f:ef:9d: f7:9a:2d:54:97:75:e1:f8:34:44:35:fa:42:ef:ff:8b:2c:ac: ee:31:0d:f9:9e:40:e9:cf:65:89:ff:c1:69:60:d3:3e:08:03: ce:17:7b:09:1a:ce:79:57:18:e1:57:23:55:23:99:2f:4f:ea: c9:a2:a2:af:94:9b:67:37:45:96:2a:b1:ed:e0:17:58:8b:9e: ac:69:e4:c0:8f:18:9d:41:23:00:47:3d:bf:89:e6:7f:43:39: 60:52:f1:93:d5:95:49:0a:fe:d7:ef:73:8d:68:83:08:60:6d: ff:42:b3:a4:05:c1:8a:cb:5a:45:a3:c9:a0:cf:1b:24:33:4b: 84:b5:72:ec:9f:79:22:c6:65:0e:db:1e:6f:be:26:3a:31:50: 91:9e:67:9a:69:e5:c3:8e:31:fc:a6:07:60:aa:75:83:d8:35: dc:a9:f0:98:9c:f0:21:97:9f:72:44:58:c9:0e:22:ed:ef:c0: 2b:0f:00:ae:6a:32:77:4e:b7:14:c7:60:24:43:42:57:61:64: b9:11:16:04 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE73D+QPKlR6dly30cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDgyNjEyNDUxMVoXDTI4MTEyODEzNDUxMVowLzEtMCsGA1UEAxMk ZTQ5ZjFjZDktMzAyYS00Mzc3LTlhNDAtYjEyYzc4YjY5Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbayFnvsryQm7AiNmQmQBNLFDG5C0Tl7XWJs LvhAzVCHjoip0ccwMCK2XakD6iCnjAQd/o+zgTgyE8z6SIJD6Xe+U2ey4YiSvWAH OkvH/ZIcS+X94ILXNbNSkvHw/ir0DMVtKiI6R6nwMP9H6H2RgCYZylH3FPK8aZyd SIXvt6Dk4O7ac1+QZWnpACkwvySb0lh8XAW/YKIGBb3ns14ZZDbRK2kXRl1t0B8+ CnfWZ7rVOA9Rkxr9cS6ZV4FjHGFzogIOj3dzIec/EfB1TV98V8AoHQD0UVStogxV FAnnuKzauxVUPdXnUPxYZux57OVqnFFbFikTRE89wTLxOn4hQwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOdgDxLBAryXN6PzadKnPETlTrzfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l NDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhiNjlmODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U0OWYxY2Q5LTMwMmEtNDM3Ny05 YTQwLWIxMmM3OGI2OWY4Ny9lNDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhi NjlmODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAw2sDBAXNhmAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR/ro6/SxVbTI cqNk71EmL9YutO3yk8VE4zwgXC4stvmdcZ+n8i1BMjILvZedQVZb/aFyH++d95ot VJd14fg0RDX6Qu//iyys7jEN+Z5A6c9lif/BaWDTPggDzhd7CRrOeVcY4VcjVSOZ L0/qyaKir5SbZzdFliqx7eAXWIuerGnkwI8YnUEjAEc9v4nmf0M5YFLxk9WVSQr+ 1+9zjWiDCGBt/0KzpAXBistaRaPJoM8bJDNLhLVy7J95IsZlDtseb74mOjFQkZ5n mmnlw44x/KYHYKp1g9g13KnwmJzwIZefckRYyQ4i7e/AKw8Armoyd063FMdgJENC V2FkuREWBA== -----END CERTIFICATE-----Generated at Tue Sep 22 20:21:53 2026 by rpki-client