$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/78928237-00f8-41af-9920-dc834a553f1d.cer File: 78928237-00f8-41af-9920-dc834a553f1d.cer (raw, json) Hash identifier: anSOcNQaoqSPgyCmmpnkBoyPK5TKQ2UNZKiAa433Dm0= Subject key identifier: 64:94:1E:71:92:D4:A9:55:99:5C:C1:6D:54:93:D5:79:2B:DF:27:23 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F6A116DCA3E8356DA50767580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/78928237-00f8-41af-9920-dc834a553f1d/78928237-00f8-41af-9920-dc834a553f1d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/78928237-00f8-41af-9920-dc834a553f1d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 17:26:15 +0000 Certificate not after: Mon 08 Jan 2029 18:26:15 +0000 Subordinate resources: IP: 198.212.164.0/23 IP: 204.144.0.0 -- 204.144.11.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:11:6d:ca:3e:83:56:da:50:76:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 6 17:26:15 2026 GMT Not After : Jan 8 18:26:15 2029 GMT Subject: CN=78928237-00f8-41af-9920-dc834a553f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:aa:34:b3:cb:68:5d:ff:6a:c6:b1:20:fe: 88:be:85:d2:fa:72:6d:ba:9d:cc:21:59:7e:4d:45: a2:fa:6b:40:7b:02:fd:eb:2c:33:88:cc:ac:3b:50: 25:0b:eb:16:7f:6e:b3:f9:f8:d6:f7:15:b6:cd:23: c1:90:be:cf:dd:83:21:c3:2e:67:0d:39:b1:e6:8c: c1:33:49:9b:7a:3b:09:bd:f4:db:d4:c3:7a:a6:18: c9:1f:7d:7d:4e:d9:c4:bc:24:13:12:cc:89:d2:14: d0:8a:92:61:91:03:4b:c0:58:4e:3f:05:a2:8a:c5: 16:6a:2c:ba:76:a7:84:0b:e6:e9:d2:af:45:8d:24: a9:95:27:c4:52:7f:db:d5:9c:ec:ad:11:4a:e4:02: 13:71:06:05:d2:98:2b:84:a8:c2:7f:d9:fb:f2:cd: 78:7a:82:1e:2d:49:49:b6:14:3e:bd:d8:87:21:f3: 99:c2:c0:c0:6f:57:65:35:79:c1:0f:28:6d:1d:1c: 14:9e:d5:cc:1f:fd:d3:98:b2:25:0c:65:ec:cd:3c: d7:1e:62:a1:6f:d6:05:1d:76:63:32:4c:e0:85:2d: bb:ac:43:e6:eb:44:21:0f:dd:88:c4:e6:6b:3b:10: c7:36:e2:fb:1c:ca:f4:03:69:6c:85:08:a7:92:59: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:94:1E:71:92:D4:A9:55:99:5C:C1:6D:54:93:D5:79:2B:DF:27:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/78928237-00f8-41af-9920-dc834a553f1d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/78928237-00f8-41af-9920-dc834a553f1d/78928237-00f8-41af-9920-dc834a553f1d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.212.164.0/23 204.144.0.0-204.144.11.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3f:4c:87:a5:9c:af:9a:f7:0f:36:db:95:df:3c:38:8b:84: 12:4d:39:34:68:da:83:d8:13:bf:4d:c6:31:90:d3:4e:c2:72: d8:a3:ee:66:01:b8:8e:06:46:82:a4:b4:f6:9d:ec:98:27:b8: 5a:49:e2:24:b2:39:a1:60:c7:01:2c:75:bb:96:aa:3c:23:59: 08:b9:91:cb:44:8f:b4:49:9e:40:df:1c:01:4d:ec:78:61:56: ac:1b:b9:fe:3a:84:f1:ff:97:c4:e4:dd:85:0f:b4:66:e6:42: 53:ad:89:5d:21:4b:06:ad:b5:33:8e:6b:bd:c6:f5:25:53:75: 1e:a5:58:4b:83:71:f3:4c:46:ef:db:a8:66:dc:c0:70:0c:7a: 31:cd:36:ff:98:08:bb:e8:88:9d:f8:33:27:c1:d6:bd:ed:25: d9:a8:0b:8d:39:3f:15:dd:09:ee:d5:0b:d7:b8:1a:d7:e3:e3: 06:38:b3:2f:63:77:27:b1:15:40:65:ce:c8:5a:80:ec:a1:57: 05:56:55:f8:2d:2a:c3:88:e8:20:02:e3:66:08:9d:e2:63:89: 7c:70:73:0c:bc:e4:ef:5f:77:e9:87:d2:5d:09:00:6e:08:13: 3f:9b:90:89:47:89:8a:1c:55:0e:47:b4:cb:1d:9a:88:e2:df: 6b:ed:00:a3 -----BEGIN CERTIFICATE----- MIIG+jCCBeKgAwIBAgIUAQ0Mn0MoWE9qEW3KPoNW2lB2dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwNjE3MjYxNVoXDTI5MDEwODE4MjYxNVowLzEtMCsGA1UEAxMk Nzg5MjgyMzctMDBmOC00MWFmLTk5MjAtZGM4MzRhNTUzZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiGqNLPLaF3/asaxIP6IvoXS+nJtup3MIVl+ TUWi+mtAewL96ywziMysO1AlC+sWf26z+fjW9xW2zSPBkL7P3YMhwy5nDTmx5ozB M0mbejsJvfTb1MN6phjJH319TtnEvCQTEsyJ0hTQipJhkQNLwFhOPwWiisUWaiy6 dqeEC+bp0q9FjSSplSfEUn/b1ZzsrRFK5AITcQYF0pgrhKjCf9n78s14eoIeLUlJ thQ+vdiHIfOZwsDAb1dlNXnBDyhtHRwUntXMH/3TmLIlDGXszTzXHmKhb9YFHXZj MkzghS27rEPm60QhD92IxOZrOxDHNuL7HMr0A2lshQinkllv5QIDAQABo4IEDDCC BAgwHQYDVR0OBBYEFGSUHnGS1KlVmVzBbVST1Xkr3ycjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 ODkyODIzNy0wMGY4LTQxYWYtOTkyMC1kYzgzNGE1NTNmMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzc4OTI4MjM3LTAwZjgtNDFhZi05 OTIwLWRjODM0YTU1M2YxZC83ODkyODIzNy0wMGY4LTQxYWYtOTkyMC1kYzgzNGE1 NTNmMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLAYIKwYBBQUH AQcBAf8EHTAbMBkEAgABMBMDBAHG1KQwCwMDBMyQAwQCzJAIMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAc/ TIelnK+a9w8225XfPDiLhBJNOTRo2oPYE79NxjGQ007Cctij7mYBuI4GRoKktPad 7JgnuFpJ4iSyOaFgxwEsdbuWqjwjWQi5kctEj7RJnkDfHAFN7HhhVqwbuf46hPH/ l8Tk3YUPtGbmQlOtiV0hSwattTOOa73G9SVTdR6lWEuDcfNMRu/bqGbcwHAMejHN Nv+YCLvoiJ34MyfB1r3tJdmoC405PxXdCe7VC9e4Gtfj4wY4sy9jdyexFUBlzsha gOyhVwVWVfgtKsOI6CAC42YIneJjiXxwcwy85O9fd+mH0l0JAG4IEz+bkIlHiYoc VQ5HtMsdmoji32vtAKM= -----END CERTIFICATE-----Generated at Thu Oct 8 16:00:29 2026 by rpki-client