$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer File: 0858b07f-775e-4c05-ae48-d43b5d938b9b.cer (raw, json) Hash identifier: xSxewXUxADRVvf1LSFhE9tjLEfxlirLS6qZt7jCfdo8= Subject key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EB2AA21CE5F722963016F23C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Aug 2026 00:45:11 +0000 Certificate not after: Sat 04 Nov 2028 00:45:11 +0000 Subordinate resources: IP: 165.125.0.0/16 IP: 199.79.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:aa:21:ce:5f:72:29:63:01:6f:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 2 00:45:11 2026 GMT Not After : Nov 4 00:45:11 2028 GMT Subject: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:9f:6c:8c:b7:23:76:e7:ad:b6:a3:45:9e: a7:f1:16:ea:25:d2:19:03:94:a8:b9:0f:f1:32:23: 9a:34:a5:62:ee:07:ea:63:82:03:98:ee:d5:fe:31: 37:84:33:13:7e:fb:d4:48:51:f7:1d:99:e0:c6:f2: 41:72:46:20:40:c4:c9:e1:30:d4:a7:bf:0d:f8:71: fd:f9:f4:69:55:e6:50:65:e7:0b:b0:e9:f5:2c:b0: 83:0d:8f:e0:dc:0d:c4:eb:b4:89:1c:9e:6f:08:0b: 19:26:fd:f9:ee:c8:56:34:b9:0b:a0:b7:e7:25:79: 09:f0:2d:ee:61:a2:1b:e7:ef:f9:f6:e4:1e:11:02: 60:96:0b:33:19:9b:1e:39:5e:3f:0c:fe:d9:90:1c: 72:56:03:a5:32:85:77:43:46:d1:87:7d:44:27:f3: b0:f0:04:47:3c:0d:98:d7:83:ce:09:15:5e:59:a9: 05:59:e7:95:77:ea:7d:ab:2e:2a:03:bc:f5:9f:d6: 2b:52:df:a9:04:1d:fd:1e:46:23:a4:fb:b7:b5:db: 37:32:9d:82:e5:08:50:b0:8d:24:b2:ca:f6:54:7f: d0:92:ea:27:5b:d2:6d:fc:40:78:48:3b:01:88:04: b0:65:b4:5d:7a:26:e0:be:5b:ce:78:f8:e9:1f:f5: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 165.125.0.0/16 199.79.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:af:f6:e1:08:09:d4:a6:4b:e8:3a:77:ed:51:86:90:0e:69: 4f:bd:6a:ea:90:c7:79:4e:22:ff:6a:f9:51:75:72:ab:b1:5d: 79:4b:13:b7:47:4b:89:38:ce:d0:25:ca:9a:7d:64:9e:91:5d: a9:2e:70:55:41:08:78:46:d0:8b:a7:6a:b9:36:de:3c:d3:2b: cf:f2:07:39:8b:cc:82:ee:6f:d2:75:4d:9d:7e:f6:4d:8c:f8: 9a:ca:0e:87:27:55:70:aa:ca:e4:77:a2:0c:85:ef:1f:ac:56: 04:c0:07:19:1a:3b:34:8b:12:c9:a4:95:af:95:52:36:58:6c: c6:5d:b4:29:aa:ce:82:33:23:c1:12:5e:e9:f5:2b:b7:ea:2a: 22:50:d3:88:ae:a5:dd:95:c8:e2:9b:c8:74:54:5b:77:c9:c7: 9b:1b:0d:cf:1e:ee:f1:ac:58:b2:ea:f3:07:2b:fd:c4:8c:36: b5:17:40:68:d7:99:8a:a9:53:8f:3e:ac:9d:c7:58:4b:f3:c3: 92:19:aa:40:82:86:fa:a9:44:91:a6:83:55:8d:3f:e7:c3:1a: 43:29:1e:c2:33:c5:78:44:1d:0b:93:f5:e2:d5:51:44:34:a9: 42:61:85:72:7d:b2:5f:22:16:13:8b:20:96:4f:78:6f:44:67: 40:18:67:c7 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWE6yqiHOX3IpYwFvI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgwMjAwNDUxMVoXDTI4MTEwNDAwNDUxMVowLzEtMCsGA1UEAxMk MDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloefbIy3I3bnrbajRZ6n8RbqJdIZA5SouQ/x MiOaNKVi7gfqY4IDmO7V/jE3hDMTfvvUSFH3HZngxvJBckYgQMTJ4TDUp78N+HH9 +fRpVeZQZecLsOn1LLCDDY/g3A3E67SJHJ5vCAsZJv357shWNLkLoLfnJXkJ8C3u YaIb5+/59uQeEQJglgszGZseOV4/DP7ZkBxyVgOlMoV3Q0bRh31EJ/Ow8ARHPA2Y 14POCRVeWakFWeeVd+p9qy4qA7z1n9YrUt+pBB39HkYjpPu3tds3Mp2C5QhQsI0k ssr2VH/QkuonW9Jt/EB4SDsBiASwZbRdeibgvlvOePjpH/VJ/wIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFM5vpPS4ASzWxu/GMkotjXi8HQ2LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA4NThiMDdmLTc3NWUtNGMwNS1h ZTQ4LWQ0M2I1ZDkzOGI5Yi8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5 MzhiOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwClfQMEAsdP6DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWr/bhCAnUpkvo OnftUYaQDmlPvWrqkMd5TiL/avlRdXKrsV15SxO3R0uJOM7QJcqafWSekV2pLnBV QQh4RtCLp2q5Nt480yvP8gc5i8yC7m/SdU2dfvZNjPiayg6HJ1Vwqsrkd6IMhe8f rFYEwAcZGjs0ixLJpJWvlVI2WGzGXbQpqs6CMyPBEl7p9Su36ioiUNOIrqXdlcji m8h0VFt3ycebGw3PHu7xrFiy6vMHK/3EjDa1F0Bo15mKqVOPPqydx1hL88OSGapA gob6qUSRpoNVjT/nwxpDKR7CM8V4RB0Lk/Xi1VFENKlCYYVyfbJfIhYTiyCWT3hv RGdAGGfH -----END CERTIFICATE-----Generated at Fri Sep 4 23:44:50 2026 by rpki-client