$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer File: 4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer (raw, json) Hash identifier: 1aCgchkkb21r39f5BcVMKPG799SEoF0BrfyCE8vfm8E= Subject key identifier: F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F3CDAFD8C7C372F8A8D3815C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 12:45:11 +0000 Certificate not after: Sat 23 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 112 AS: 64238 IP: 64.191.0.0/23 IP: 192.31.196.0/24 IP: 192.175.48.0/24 IP: 2001:4:112::/48 IP: 2620:4f:8000::/48 IP: 2620:ff:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:da:fd:8c:7c:37:2f:8a:8d:38:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 20 12:45:11 2026 GMT Not After : Dec 23 13:45:11 2028 GMT Subject: CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:9f:97:4b:5b:a5:13:6f:2c:32:0c:1f:05: 1c:6a:5d:0d:7c:88:d2:9b:d5:d2:6a:f6:24:e1:85: a2:01:77:19:9c:b2:c7:cf:d3:f0:3b:5d:92:99:72: b8:80:3b:69:34:48:30:01:ce:52:07:b6:f2:3c:61: cb:7b:e2:4c:74:97:4b:de:eb:bd:e3:eb:3d:17:1e: 78:5b:19:5d:34:4f:f3:e2:13:78:13:50:cc:a7:ff: db:e1:14:37:c0:e0:54:ad:c6:23:cd:58:82:39:56: de:66:72:07:0f:cb:20:49:e9:d8:3a:b1:a9:e7:92: 06:3d:8f:82:9d:da:86:ea:03:9c:2d:28:14:90:45: b4:5d:0d:c6:49:c4:cb:8d:b4:27:1f:8b:69:24:43: cf:a1:8a:64:43:29:41:b0:05:18:23:12:a2:52:4e: f8:9c:0c:44:61:53:14:aa:6f:90:ca:9c:5f:a2:59: 5c:3b:a0:57:dd:e3:ef:97:fd:21:7e:5f:ff:60:c3: 3c:14:8b:01:9b:75:e2:40:46:88:eb:2f:f2:9e:2c: 87:a1:ed:b4:01:44:0c:51:cb:cb:4d:93:be:b4:ca: 8a:30:46:3e:b6:f6:f7:27:5f:3e:b6:2d:c5:ef:03: f4:17:4b:b3:4e:fa:7c:e5:46:9c:bf:ce:17:6b:62: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.191.0.0/23 192.31.196.0/24 192.175.48.0/24 IPv6: 2001:4:112::/48 2620:4f:8000::/48 2620:ff:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 112 64238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:90:7d:83:08:b6:00:50:e1:83:a9:a7:93:34:1d:9e:ef:87: e4:d5:c4:52:9f:32:e0:85:44:11:b9:ba:f5:6a:8f:6b:b7:e2: 78:bb:3a:a5:49:1b:ea:5f:89:6c:e2:74:01:d5:58:45:42:4a: 13:ef:2b:8e:57:17:d3:da:27:65:37:07:b3:0e:71:75:41:ee: 45:b2:43:e3:7b:11:d4:29:52:49:a0:12:5b:8a:52:dc:b7:c9: e4:b6:41:be:b6:53:0e:52:f6:da:45:bb:6f:a3:4c:d4:60:e6: a5:ce:9d:5b:5a:88:86:33:d9:75:25:14:0c:31:c8:a1:61:bf: b6:3d:73:36:58:6d:85:2e:53:ec:e4:8c:8b:b0:96:2e:d5:dd: 30:d2:20:f4:c6:40:03:5f:4e:06:6f:3b:13:1b:ec:c0:59:c5: 2e:84:de:2b:56:f6:1b:ff:92:19:84:5c:e5:c7:96:4e:6a:0f: c8:a5:dc:f0:9d:33:2f:3a:1b:9d:92:c6:51:be:9d:0e:c0:c8: 00:74:b1:a2:84:5d:74:60:21:18:f1:c3:79:19:a3:ee:98:8e: 10:67:54:b0:de:15:5c:1f:43:c8:52:57:9f:ab:30:15:01:7c: 82:92:d0:d2:d4:b9:e0:d7:13:59:b3:f6:ba:3d:6d:99:b8:69: a3:34:4a:f7 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWE882v2MfDcvio04FcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyMDEyNDUxMVoXDTI4MTIyMzEzNDUxMVowLzEtMCsGA1UEAxMk NGUzYjZmMGMtMDNiYS00NjE5LWIzMmItNWM5Nzg3MThkZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/Kfl0tbpRNvLDIMHwUcal0NfIjSm9XSavYk 4YWiAXcZnLLHz9PwO12SmXK4gDtpNEgwAc5SB7byPGHLe+JMdJdL3uu94+s9Fx54 WxldNE/z4hN4E1DMp//b4RQ3wOBUrcYjzViCOVbeZnIHD8sgSenYOrGp55IGPY+C ndqG6gOcLSgUkEW0XQ3GScTLjbQnH4tpJEPPoYpkQylBsAUYIxKiUk74nAxEYVMU qm+QypxfollcO6BX3ePvl/0hfl//YMM8FIsBm3XiQEaI6y/yniyHoe20AUQMUcvL TZO+tMqKMEY+tvb3J18+ti3F7wP0F0uzTvp85Uacv84Xa2Kv4wIDAQABo4IETTCC BEkwHQYDVR0OBBYEFPnPb28fTPj98WWpIsC0fqsqMOE5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 ZTNiNmYwYy0wM2JhLTQ2MTktYjMyYi01Yzk3ODcxOGRmZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRlM2I2ZjBjLTAzYmEtNDYxOS1i MzJiLTVjOTc4NzE4ZGZlNy80ZTNiNmYwYy0wM2JhLTQ2MTktYjMyYi01Yzk3ODcx OGRmZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MBgEAgABMBIDBAFAvwADBADAH8QDBADArzAwIQQCAAIwGwMHACAB AAQBEgMHACYgAE+AAAMHACYgAP/AADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgFw AgMA+u4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAbZB9gwi2AFDhg6mnkzQdnu+H5NXEUp8y4IVEEbm69WqP a7fieLs6pUkb6l+JbOJ0AdVYRUJKE+8rjlcX09onZTcHsw5xdUHuRbJD43sR1ClS SaASW4pS3LfJ5LZBvrZTDlL22kW7b6NM1GDmpc6dW1qIhjPZdSUUDDHIoWG/tj1z NlhthS5T7OSMi7CWLtXdMNIg9MZAA19OBm87ExvswFnFLoTeK1b2G/+SGYRc5ceW TmoPyKXc8J0zLzobnZLGUb6dDsDIAHSxooRddGAhGPHDeRmj7piOEGdUsN4VXB9D yFJXn6swFQF8gpLQ0tS54NcTWbP2uj1tmbhpozRK9w== -----END CERTIFICATE-----Generated at Wed Sep 23 15:23:14 2026 by rpki-client