$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer File: 69233f52-8a17-4eb0-ae6a-62c861686718.cer (raw, json) Hash identifier: Iy/ai+X15pt3njVjHG4T2DbM1/kxvXo3W8pMgKjALRA= Subject key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F7E761120B960467F568D5940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 00:45:12 +0000 Certificate not after: Tue 16 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 167.253.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:76:11:20:b9:60:46:7f:56:8d:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 14 00:45:12 2026 GMT Not After : Jan 16 01:45:12 2029 GMT Subject: CN=69233f52-8a17-4eb0-ae6a-62c861686718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:2a:22:c4:3c:32:e5:50:50:1f:2d:23:01: 0d:fd:e3:03:60:f7:dc:8d:12:77:ad:a2:08:dc:ae: 26:9c:46:8d:3a:79:74:e7:d1:af:93:10:8c:53:b9: 27:b3:2c:3f:62:e1:7c:89:7f:09:f9:0f:6b:5b:b4: 3c:49:76:11:32:94:a1:a5:3f:93:20:4f:4b:ae:44: 5c:8b:0b:88:d3:25:a3:f9:9d:03:79:1c:c9:62:64: 56:2f:e6:95:1f:96:b5:4b:97:17:5f:b9:1a:de:1a: ce:42:b6:9b:89:f3:07:8c:bb:dd:6e:ef:8f:ff:0d: 76:44:0f:14:ad:86:bb:3e:77:60:65:04:82:1e:68: ec:56:b8:c5:3b:6a:2f:2e:c8:10:b2:da:20:9e:ba: 85:4f:bc:3a:2a:0d:e4:74:e4:94:3a:a1:13:27:89: a9:c0:51:46:d9:fd:fe:fb:69:28:fd:d7:ab:ff:00: 52:e2:ac:46:75:7f:e0:64:a8:ab:84:b6:17:3a:24: 8f:4c:f6:7c:fb:1e:11:4f:40:29:31:db:c1:04:27: 03:26:16:e7:b3:b4:72:2a:66:8f:f1:26:82:6d:37: 3b:99:e4:f8:d6:87:23:cb:9b:f1:90:34:07:df:05: ab:b3:5a:70:12:4b:50:02:92:1b:2a:5e:05:8e:0d: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 167.253.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3e:ab:4a:f3:a0:5e:c5:49:ec:79:42:45:96:5c:ce:4c:ca: 7b:7f:96:e7:1e:5f:07:e4:33:30:8c:53:2b:6b:7a:14:7c:75: 3e:d2:10:08:5b:d4:55:dd:89:31:2a:2a:2e:8f:11:56:a3:31: 95:09:2f:9f:7e:be:d3:24:06:98:41:08:bf:30:74:9e:40:0c: 29:97:de:6c:b5:0a:c3:0b:47:78:09:5b:19:d5:08:df:21:c7: c8:64:c9:4b:65:17:36:00:25:52:42:77:de:bd:e8:a3:5c:aa: 43:74:89:e4:50:65:b6:57:b6:d7:4b:92:e9:31:42:3e:f5:b9: 8f:12:da:52:71:0e:49:f5:58:ee:6e:67:02:41:9b:9e:c7:cc: 85:b8:17:13:3f:24:16:2f:04:72:98:fb:cf:2d:da:7c:16:28: 3c:f9:60:13:6f:92:74:8a:55:c4:cc:f8:60:33:4f:9c:da:2b: 34:86:13:48:1a:fc:85:fd:c0:aa:1d:bd:35:6c:5d:79:90:83: d4:87:71:22:b8:5a:e6:df:a8:93:78:3f:a2:f2:4d:b1:81:91: ce:17:a2:de:7e:4e:74:80:63:2b:41:23:1c:75:65:2c:79:d6: f8:e9:ad:d9:46:7a:25:08:2c:45:1f:0f:c8:d5:4e:df:c9:f5: 1c:fe:6f:3c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9+dhEguWBGf1aNWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAxNDAwNDUxMloXDTI5MDExNjAxNDUxMlowLzEtMCsGA1UEAxMk NjkyMzNmNTItOGExNy00ZWIwLWFlNmEtNjJjODYxNjg2NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptkqIsQ8MuVQUB8tIwEN/eMDYPfcjRJ3raII 3K4mnEaNOnl059GvkxCMU7knsyw/YuF8iX8J+Q9rW7Q8SXYRMpShpT+TIE9LrkRc iwuI0yWj+Z0DeRzJYmRWL+aVH5a1S5cXX7ka3hrOQrabifMHjLvdbu+P/w12RA8U rYa7PndgZQSCHmjsVrjFO2ovLsgQstognrqFT7w6Kg3kdOSUOqETJ4mpwFFG2f3+ +2ko/der/wBS4qxGdX/gZKirhLYXOiSPTPZ8+x4RT0ApMdvBBCcDJhbns7RyKmaP 8SaCbTc7meT41ocjy5vxkDQH3wWrs1pwEktQApIbKl4Fjg2h7wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHkAunUNqXzHUi8mP6vv847zhIFZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 OTIzM2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4NjE2ODY3MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY5MjMzZjUyLThhMTctNGViMC1h ZTZhLTYyYzg2MTY4NjcxOC82OTIzM2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4NjE2 ODY3MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/RQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkT6rSvOgXsVJ7HlCRZZc zkzKe3+W5x5fB+QzMIxTK2t6FHx1PtIQCFvUVd2JMSoqLo8RVqMxlQkvn36+0yQG mEEIvzB0nkAMKZfebLUKwwtHeAlbGdUI3yHHyGTJS2UXNgAlUkJ33r3oo1yqQ3SJ 5FBltle210uS6TFCPvW5jxLaUnEOSfVY7m5nAkGbnsfMhbgXEz8kFi8Ecpj7zy3a fBYoPPlgE2+SdIpVxMz4YDNPnNorNIYTSBr8hf3Aqh29NWxdeZCD1IdxIrha5t+o k3g/ovJNsYGRzhei3n5OdIBjK0EjHHVlLHnW+Omt2UZ6JQgsRR8PyNVO38n1HP5v PA== -----END CERTIFICATE-----Generated at Sat Oct 24 06:46:32 2026 by rpki-client