$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer File: a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer (raw, json) Hash identifier: 4/hqxVqYKqAKNEnCSellWkI7uNLjbnBn/Hjbmf8hPdY= Subject key identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EB40F78A8C503D5F5ABE833C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Aug 2026 12:45:11 +0000 Certificate not after: Sat 04 Nov 2028 12:45:11 +0000 Subordinate resources: IP: 216.87.48.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:0f:78:a8:c5:03:d5:f5:ab:e8:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 2 12:45:11 2026 GMT Not After : Nov 4 12:45:11 2028 GMT Subject: CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:91:61:ef:dc:39:43:34:f6:d7:cd:41:e0: 5b:bf:cf:1c:85:3b:cf:50:f8:5e:4d:7f:e6:97:42: 2d:c9:ac:22:16:c9:a5:78:22:86:c7:c6:82:df:cd: 5c:81:55:de:c3:5e:c3:c8:77:34:4c:ec:61:37:2d: 05:5c:4d:16:b2:8c:84:bb:29:4f:d1:fb:5f:fb:cb: 4c:88:1b:d3:2d:ca:87:5a:ec:e6:21:99:ee:ed:23: d7:fd:76:37:ed:2c:00:6c:8a:74:84:ec:fa:dd:4e: e1:94:d5:ca:b6:a9:cb:6d:90:2a:57:f9:3c:42:21: 37:78:bc:be:5e:e0:b0:26:ff:53:35:6a:5c:55:d7: d0:e1:6c:96:87:f6:09:46:53:b9:04:33:c5:44:0d: ef:69:45:8b:4f:02:35:e1:93:72:2a:e5:60:2d:33: a0:80:d4:b4:76:0f:f4:29:d9:09:41:d9:1d:7c:48: 30:e9:d6:72:1b:e6:d6:85:bb:e1:81:a1:ae:b1:eb: 3c:e7:7a:21:e3:09:3e:8e:89:33:30:f6:cd:ff:5a: 22:a2:65:30:1f:9f:8a:63:1b:ca:cf:86:bf:a6:d5: ff:40:64:c5:0f:ee:02:89:98:b8:37:e3:11:3b:7c: 07:1d:42:64:91:0b:ce:aa:00:61:3d:4c:5d:4e:e4: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 216.87.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e8:a8:29:e1:9a:f6:f1:55:90:25:c0:e9:75:d3:e4:93:59: 21:74:3b:2a:c4:77:75:4c:f1:90:7e:e3:8e:bb:7e:13:4c:74: 9f:9e:80:18:34:6a:22:f2:42:cc:3a:aa:e8:76:5b:ea:0d:f1: cc:98:fb:97:cf:ed:b0:0e:9b:fe:f4:93:ac:01:9d:45:48:1b: f0:25:d7:51:83:84:8a:f6:96:39:da:f2:8d:97:01:1a:4e:13: bc:dc:8f:6c:36:f9:56:26:8c:0d:bd:76:e7:e3:71:f7:43:f0: a6:9d:42:43:88:b3:c3:4a:2e:46:0f:73:fc:41:ec:42:aa:f9: e4:0e:70:6a:c2:5a:aa:aa:75:bf:9b:c0:e1:9a:2d:ba:b5:ce: a5:21:e8:66:39:7e:2e:2c:d5:80:0f:4a:e4:2e:47:df:4c:ab: d3:87:b8:a1:49:96:ed:01:00:dd:77:dc:01:7d:b1:94:37:ec: 31:56:3f:14:e6:b6:df:0a:5e:cf:14:4e:07:ba:0a:71:6f:25: 01:f7:2e:fb:64:d6:2a:79:06:c7:a7:66:30:cc:ca:7b:87:f4: 0c:f6:9f:40:a0:ff:3f:0f:28:03:35:99:cd:17:29:c2:1c:a7: 16:9c:01:f8:2c:aa:5f:b3:01:e2:57:f8:15:5b:25:5f:37:4c: 47:49:4b:b1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE60D3ioxQPV9avoM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgwMjEyNDUxMVoXDTI4MTEwNDEyNDUxMVowLzEtMCsGA1UEAxMk YTQ3ZTI4NDMtMTZlMS00ZWQwLWFjYzItN2E5NDJiZmM0NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXqRYe/cOUM09tfNQeBbv88chTvPUPheTX/m l0ItyawiFsmleCKGx8aC381cgVXew17DyHc0TOxhNy0FXE0WsoyEuylP0ftf+8tM iBvTLcqHWuzmIZnu7SPX/XY37SwAbIp0hOz63U7hlNXKtqnLbZAqV/k8QiE3eLy+ XuCwJv9TNWpcVdfQ4WyWh/YJRlO5BDPFRA3vaUWLTwI14ZNyKuVgLTOggNS0dg/0 KdkJQdkdfEgw6dZyG+bWhbvhgaGuses853oh4wk+jokzMPbN/1oiomUwH5+KYxvK z4a/ptX/QGTFD+4CiZi4N+MRO3wHHUJkkQvOqgBhPUxdTuQWWQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFO+f9kdW8OI9aapolNfh+I63zgE4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h NDdlMjg0My0xNmUxLTRlZDAtYWNjMi03YTk0MmJmYzQ2Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2E0N2UyODQzLTE2ZTEtNGVkMC1h Y2MyLTdhOTQyYmZjNDZjZS9hNDdlMjg0My0xNmUxLTRlZDAtYWNjMi03YTk0MmJm YzQ2Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHYVzAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj+ioKeGa9vFVkCXA6XXT 5JNZIXQ7KsR3dUzxkH7jjrt+E0x0n56AGDRqIvJCzDqq6HZb6g3xzJj7l8/tsA6b /vSTrAGdRUgb8CXXUYOEivaWOdryjZcBGk4TvNyPbDb5ViaMDb125+Nx90Pwpp1C Q4izw0ouRg9z/EHsQqr55A5wasJaqqp1v5vA4ZoturXOpSHoZjl+LizVgA9K5C5H 30yr04e4oUmW7QEA3XfcAX2xlDfsMVY/FOa23wpezxROB7oKcW8lAfcu+2TWKnkG x6dmMMzKe4f0DPafQKD/Pw8oAzWZzRcpwhynFpwB+CyqX7MB4lf4FVslXzdMR0lL sQ== -----END CERTIFICATE-----Generated at Thu Sep 17 23:00:41 2026 by rpki-client