$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer File: 4281be58-d566-431e-b0b8-c563e631a010.cer (raw, json) Hash identifier: QMH2zvbC6JZ7VbkN/vh2C1UX9xcqzI4YlmqxiPD73ao= Subject key identifier: EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F777B5C66CBD12A068344F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 12:45:12 +0000 Certificate not after: Sat 13 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 104.192.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:7b:5c:66:cb:d1:2a:06:83:44:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 11 12:45:12 2026 GMT Not After : Jan 13 13:45:12 2029 GMT Subject: CN=4281be58-d566-431e-b0b8-c563e631a010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:8c:32:75:9e:48:e7:70:1a:39:78:f3:16: 1f:75:0b:29:4e:fa:15:03:33:f6:8c:1f:b3:eb:a8: d2:e7:8a:c3:ea:ee:2c:73:3e:a0:5d:44:44:fc:28: 04:b5:d3:3e:52:93:8a:d5:55:dc:fd:93:13:82:81: 5f:c8:c9:38:f4:57:2d:bd:9b:c2:34:be:dd:73:3e: 12:64:08:80:87:c3:05:14:49:60:68:69:79:75:f7: 0f:1b:c3:76:a8:69:76:71:87:9a:63:44:03:ff:9e: b2:27:85:30:36:b1:1c:d5:d5:52:ef:dc:da:44:c4: f3:5a:f1:c9:61:c7:48:47:a1:f5:1e:42:53:05:a6: 7a:a5:46:0d:77:02:bb:38:1b:43:fb:8e:cf:43:eb: 70:6c:17:1f:fd:7c:46:22:43:21:41:68:d3:25:9d: cd:41:5a:82:07:10:56:b2:75:bc:82:95:0d:4d:88: 0c:23:5d:ea:66:b2:8a:fb:82:79:22:04:7f:cd:e4: fe:46:6b:0b:f2:55:5e:30:1b:71:82:3a:cd:e9:07: ee:bd:6f:49:53:bb:04:8b:11:73:27:1b:be:7b:b5: 51:98:c5:4a:84:af:47:bd:c1:a7:19:4f:82:33:a1: f5:7a:fc:ea:2c:98:b0:61:13:a6:df:77:34:7e:d1: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.192.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ec:ad:9f:dc:a9:29:c0:6f:b1:3c:ae:c0:c3:d3:a2:05:2d: 33:e8:9b:75:a3:93:f5:35:ef:b6:6d:33:5a:5d:12:96:6f:30: 0f:2a:b1:cb:27:5c:27:dc:af:0b:e9:00:00:3b:e1:e1:63:2c: 5e:6b:31:1c:64:12:40:cf:20:86:d0:bd:0c:13:bd:7d:90:9e: 16:47:2b:df:52:a5:e5:51:c8:5d:63:bf:4d:c1:61:d6:41:f0: 7a:6a:3d:99:85:ef:6e:75:d6:4c:38:1a:da:7a:81:de:97:4b: 3e:08:d0:84:4c:83:76:09:52:df:40:02:f8:c7:29:eb:0f:05: 3c:e6:d8:3c:59:c6:a9:f4:b0:88:3c:39:4d:58:15:0a:bb:0b: 73:6d:52:fe:92:6f:1e:af:a4:7c:20:b9:89:c2:a4:85:66:53: 60:42:e6:1e:b5:86:75:71:60:c6:b5:cd:8b:1d:d1:4e:3e:c1: ea:31:39:28:f2:6b:06:3e:ce:3a:2d:ec:95:21:49:1c:19:14: ff:47:2b:90:df:d5:85:46:9a:9f:06:3f:02:3b:cd:68:ee:4e: e8:89:97:09:03:ff:3d:08:5a:b2:15:a3:74:82:a9:fa:6f:d5: 28:31:63:73:b6:b0:ef:08:62:83:e8:3e:84:5e:59:84:98:6a: 2c:55:0f:09 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE93e1xmy9EqBoNE8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAxMTEyNDUxMloXDTI5MDExMzEzNDUxMlowLzEtMCsGA1UEAxMk NDI4MWJlNTgtZDU2Ni00MzFlLWIwYjgtYzU2M2U2MzFhMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRiMMnWeSOdwGjl48xYfdQspTvoVAzP2jB+z 66jS54rD6u4scz6gXURE/CgEtdM+UpOK1VXc/ZMTgoFfyMk49FctvZvCNL7dcz4S ZAiAh8MFFElgaGl5dfcPG8N2qGl2cYeaY0QD/56yJ4UwNrEc1dVS79zaRMTzWvHJ YcdIR6H1HkJTBaZ6pUYNdwK7OBtD+47PQ+twbBcf/XxGIkMhQWjTJZ3NQVqCBxBW snW8gpUNTYgMI13qZrKK+4J5IgR/zeT+RmsL8lVeMBtxgjrN6QfuvW9JU7sEixFz Jxu+e7VRmMVKhK9HvcGnGU+CM6H1evzqLJiwYROm33c0ftFaSQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOqagF59+IziB805/eW97TP4s/7qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 MjgxYmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYzZTYzMWEwMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQyODFiZTU4LWQ1NjYtNDMxZS1i MGI4LWM1NjNlNjMxYTAxMC80MjgxYmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYzZTYz MWEwMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowFwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOuytn9ypKcBvsTyuwMPT ogUtM+ibdaOT9TXvtm0zWl0Slm8wDyqxyydcJ9yvC+kAADvh4WMsXmsxHGQSQM8g htC9DBO9fZCeFkcr31Kl5VHIXWO/TcFh1kHwemo9mYXvbnXWTDga2nqB3pdLPgjQ hEyDdglS30AC+Mcp6w8FPObYPFnGqfSwiDw5TVgVCrsLc21S/pJvHq+kfCC5icKk hWZTYELmHrWGdXFgxrXNix3RTj7B6jE5KPJrBj7OOi3slSFJHBkU/0crkN/VhUaa nwY/AjvNaO5O6ImXCQP/PQhashWjdIKp+m/VKDFjc7aw7whig+g+hF5ZhJhqLFUP CQ== -----END CERTIFICATE-----Generated at Mon Oct 12 08:49:57 2026 by rpki-client