$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer File: 7094fef3-a44f-4e12-98ee-72cf53d9de83.cer (raw, json) Hash identifier: XI+yfC5J01tU4XhOrbm+I+qyB9hKyT6kddvqvVghQU4= Subject key identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F331599365D9046124260AD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 00:45:11 +0000 Certificate not after: Wed 20 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 134.250.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:15:99:36:5d:90:46:12:42:60:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 17 00:45:11 2026 GMT Not After : Dec 20 01:45:11 2028 GMT Subject: CN=7094fef3-a44f-4e12-98ee-72cf53d9de83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:16:13:fa:c1:d7:04:11:81:d7:03:3c:c4:38: 12:10:19:39:0e:3c:97:66:44:16:87:4b:87:fc:7e: 59:1b:6c:40:c9:e0:6b:b5:65:79:21:b8:91:61:59: cf:84:ba:c2:2b:d2:59:1b:1e:5d:d4:a5:4d:1b:5f: 06:f9:90:af:76:66:ae:07:1f:28:76:a5:5f:d8:bd: a9:21:07:4e:5e:02:87:05:c3:db:7d:02:9e:f7:a8: 76:ca:4e:c3:24:0d:ea:54:6a:04:45:c2:ab:1d:34: 35:bf:34:d9:9e:a9:cb:4f:70:f2:f0:63:5d:1f:be: b5:aa:a8:1a:e3:ef:05:80:76:ab:0c:1a:d8:1c:51: b0:14:ea:52:3a:34:36:df:5f:88:70:bd:8f:17:db: cd:15:95:2d:fd:8f:01:4b:f1:5e:06:9a:33:9d:d7: 3f:a1:74:48:3f:f4:14:fc:88:d2:fa:35:2b:d1:0e: b1:b7:73:31:e7:47:aa:ea:3d:56:71:49:55:04:52: 74:16:e7:4d:7d:89:1e:1d:3b:3d:13:48:28:0f:7c: 96:d4:2b:4f:f6:bf:3b:54:5b:41:2c:14:37:09:93: ff:f2:87:be:53:9f:1d:36:ec:7d:ea:a0:a4:55:4c: 4b:67:2c:b0:8d:cb:3d:46:a7:58:6c:84:54:8a:7e: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 134.250.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:79:59:79:7a:58:34:05:ad:e6:03:16:85:90:4f:ed:7c:1a: f3:a2:e9:97:90:c1:ce:62:13:97:cd:4c:02:87:de:71:43:96: a6:4e:29:71:0a:d4:e5:c9:a9:ec:88:52:0f:41:76:40:45:57: 7c:7d:c8:78:ad:6a:d9:cf:bf:70:d7:cb:17:a0:35:94:7e:fd: e1:6c:41:e3:38:1d:27:63:ae:4e:cd:6b:dc:35:67:28:7f:6d: 00:80:ad:11:51:c5:f7:2d:7d:84:b0:af:c8:cb:10:e4:1b:f4: 9a:6a:94:ce:b7:93:4d:b8:1f:5d:63:b8:a3:d6:ee:28:79:34: 72:7f:3c:84:36:92:6a:b9:b1:3b:d8:fa:e9:4e:49:18:f0:fd: 9c:f5:4a:40:3a:b6:ed:e6:5a:7f:4a:f4:54:02:7d:d3:b7:d8: ba:5d:62:ed:7d:f9:52:65:0e:0a:6f:1b:b6:32:53:94:86:3d: fc:01:da:e0:92:ff:1a:31:5b:e6:4d:52:2d:aa:17:e1:94:41: 57:ac:0a:98:35:9c:22:5b:c3:a3:0d:ad:bf:cf:e4:70:87:7d: 5a:ab:2e:85:a9:7d:6f:62:0f:5d:40:fa:83:82:0d:47:c8:c5: 86:f3:fa:63:51:7b:12:3d:cf:26:b2:b4:93:8e:ed:1f:d0:60: 22:ac:45:5f -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE8zFZk2XZBGEkJgrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxNzAwNDUxMVoXDTI4MTIyMDAxNDUxMVowLzEtMCsGA1UEAxMk NzA5NGZlZjMtYTQ0Zi00ZTEyLTk4ZWUtNzJjZjUzZDlkZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhYT+sHXBBGB1wM8xDgSEBk5DjyXZkQWh0uH /H5ZG2xAyeBrtWV5IbiRYVnPhLrCK9JZGx5d1KVNG18G+ZCvdmauBx8odqVf2L2p IQdOXgKHBcPbfQKe96h2yk7DJA3qVGoERcKrHTQ1vzTZnqnLT3Dy8GNdH761qqga 4+8FgHarDBrYHFGwFOpSOjQ231+IcL2PF9vNFZUt/Y8BS/FeBpozndc/oXRIP/QU /IjS+jUr0Q6xt3Mx50eq6j1WcUlVBFJ0FudNfYkeHTs9E0goD3yW1CtP9r87VFtB LBQ3CZP/8oe+U58dNux96qCkVUxLZyywjcs9RqdYbIRUin6a3QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFD8S3CVzHX0O/VuIsAfy3ocSFsybMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 MDk0ZmVmMy1hNDRmLTRlMTItOThlZS03MmNmNTNkOWRlODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcwOTRmZWYzLWE0NGYtNGUxMi05 OGVlLTcyY2Y1M2Q5ZGU4My83MDk0ZmVmMy1hNDRmLTRlMTItOThlZS03MmNmNTNk OWRlODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCG+jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5eVl5elg0Ba3mAxaFkE/t fBrzoumXkMHOYhOXzUwCh95xQ5amTilxCtTlyansiFIPQXZARVd8fch4rWrZz79w 18sXoDWUfv3hbEHjOB0nY65OzWvcNWcof20AgK0RUcX3LX2EsK/IyxDkG/SaapTO t5NNuB9dY7ij1u4oeTRyfzyENpJqubE72PrpTkkY8P2c9UpAOrbt5lp/SvRUAn3T t9i6XWLtfflSZQ4Kbxu2MlOUhj38Adrgkv8aMVvmTVItqhfhlEFXrAqYNZwiW8Oj Da2/z+Rwh31aqy6FqX1vYg9dQPqDgg1HyMWG8/pjUXsSPc8msrSTju0f0GAirEVf -----END CERTIFICATE-----Generated at Sun Sep 20 17:00:51 2026 by rpki-client