$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.cer File: 82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.cer (raw, json) Hash identifier: 5xbx2xQbZo+CeNSn+VyWvsyFRXJz15YbDZzdhdop+ds= Subject key identifier: 8C:CA:BD:97:8E:DF:42:C9:96:D3:16:67:FA:C1:9E:2D:2C:26:51:85 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F5E5B35163831458B490B0300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 12:45:12 +0000 Certificate not after: Thu 04 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 23.150.248.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:5b:35:16:38:31:45:8b:49:0b:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 2 12:45:12 2026 GMT Not After : Jan 4 13:45:12 2029 GMT Subject: CN=82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:be:fc:d7:54:1f:81:a7:38:6c:95:20:a5: 81:66:f8:8a:af:22:8f:c4:f4:c8:2c:f9:a3:ac:52: bd:67:66:a9:d0:e8:ba:37:3e:c7:6f:72:78:70:b5: a3:56:ac:c7:53:82:53:59:30:5a:c6:67:d2:08:31: be:55:58:f0:5f:90:a0:a2:e6:46:f1:32:cc:ba:3f: e7:4a:4c:d2:a3:3b:46:53:b9:96:f1:a7:d4:ad:ee: f9:84:9b:d7:33:0b:0b:d6:e0:3e:6d:53:91:dc:fd: 8d:01:80:dd:32:19:7f:27:23:d8:cf:9b:24:b5:ca: f9:6c:9b:97:b2:6e:48:84:63:6b:64:89:20:ec:65: 68:13:a2:52:06:d2:cc:f1:15:b1:80:44:f3:f3:28: 5d:82:cf:2e:e9:e0:04:6f:c9:cc:b1:cb:0a:c8:6d: 29:d6:77:bd:79:4c:1b:0c:f9:89:d1:b8:1f:25:72: b9:a4:cf:26:bc:9e:4a:63:cc:86:65:00:59:df:31: 71:8f:6a:76:6e:6a:bb:f7:06:4b:2c:cb:7c:4f:a2: 0f:76:55:3c:9c:c2:1a:ee:13:18:cc:1a:d8:cd:53: 26:39:0b:23:42:30:6d:6c:73:7c:00:0e:e2:70:b3: e4:94:7e:0d:ec:0e:a4:49:2e:d9:98:76:8a:9c:11: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CA:BD:97:8E:DF:42:C9:96:D3:16:67:FA:C1:9E:2D:2C:26:51:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a/82b0c2c5-d5f8-4fbb-9588-a5e996d49a9a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:41:5a:02:23:84:c8:ef:62:1b:28:5e:c5:d3:1f:c8:d6:e9: da:bc:4a:3a:52:75:8b:8a:1f:0a:99:fe:68:ca:78:3d:d5:b8: 22:44:49:f4:1f:ea:d6:ba:0a:df:1d:42:cb:84:d0:d0:5b:79: fc:b2:68:72:b6:d4:4d:a5:87:44:ac:6b:08:41:85:80:f6:cd: b1:8b:f6:cc:cf:17:ab:b8:84:ef:10:75:47:be:35:a6:6b:60: 0f:06:07:6f:a5:fb:7e:0d:f6:87:4a:92:64:42:56:b7:0d:30: 2a:7d:45:ac:55:44:70:73:05:a9:7a:47:66:49:eb:d8:04:24: b1:a4:e2:44:ea:14:03:b2:60:a3:78:4f:9e:6c:43:d0:13:75: 52:80:39:a2:fc:f8:ab:09:11:ec:9a:a8:15:8a:1f:2e:53:af: 94:dc:76:dc:b1:3c:83:7f:3b:1e:3a:91:ce:30:96:69:02:b4: 68:0c:f8:11:e3:d6:f7:2c:27:6d:df:f9:b1:ac:f8:63:b1:8e: 2d:82:a0:b4:1a:52:28:2f:e9:fd:80:d8:f4:66:a6:00:9c:7b: d4:59:f0:c1:dc:ab:5a:db:bb:74:e1:35:8a:01:46:2d:d1:bb: 31:1f:c5:8f:c6:94:07:79:3e:49:54:77:80:a6:b5:81:64:b3: 68:cc:98:77 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9eWzUWODFFi0kLAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MTAwMjEyNDUxMloXDTI5MDEwNDEzNDUxMlowLzEtMCsGA1UEAxMk ODJiMGMyYzUtZDVmOC00ZmJiLTk1ODgtYTVlOTk2ZDQ5YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTy+/NdUH4GnOGyVIKWBZviKryKPxPTILPmj rFK9Z2ap0Oi6Nz7Hb3J4cLWjVqzHU4JTWTBaxmfSCDG+VVjwX5CgouZG8TLMuj/n SkzSoztGU7mW8afUre75hJvXMwsL1uA+bVOR3P2NAYDdMhl/JyPYz5sktcr5bJuX sm5IhGNrZIkg7GVoE6JSBtLM8RWxgETz8yhdgs8u6eAEb8nMscsKyG0p1ne9eUwb DPmJ0bgfJXK5pM8mvJ5KY8yGZQBZ3zFxj2p2bmq79wZLLMt8T6IPdlU8nMIa7hMY zBrYzVMmOQsjQjBtbHN8AA7icLPklH4N7A6kSS7ZmHaKnBFkPwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIzKvZeO30LJltMWZ/rBni0sJlGFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 MmIwYzJjNS1kNWY4LTRmYmItOTU4OC1hNWU5OTZkNDlhOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgyYjBjMmM1LWQ1ZjgtNGZiYi05 NTg4LWE1ZTk5NmQ0OWE5YS84MmIwYzJjNS1kNWY4LTRmYmItOTU4OC1hNWU5OTZk NDlhOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXlvgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcUFaAiOEyO9iGyhexdMf yNbp2rxKOlJ1i4ofCpn+aMp4PdW4IkRJ9B/q1roK3x1Cy4TQ0Ft5/LJocrbUTaWH RKxrCEGFgPbNsYv2zM8Xq7iE7xB1R741pmtgDwYHb6X7fg32h0qSZEJWtw0wKn1F rFVEcHMFqXpHZknr2AQksaTiROoUA7Jgo3hPnmxD0BN1UoA5ovz4qwkR7JqoFYof LlOvlNx23LE8g387HjqRzjCWaQK0aAz4EePW9ywnbd/5saz4Y7GOLYKgtBpSKC/p /YDY9GamAJx71FnwwdyrWtu7dOE1igFGLdG7MR/Fj8aUB3k+SVR3gKa1gWSzaMyY dw== -----END CERTIFICATE-----Generated at Mon Oct 12 20:01:45 2026 by rpki-client