$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer File: d4d337ac-64ad-496d-856c-8c2412a7cb34.cer (raw, json) Hash identifier: 6bVmUoaADNjHWIrdFBI+0k9NAecaAUbLvsAqIpJBWEs= Subject key identifier: 81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EBC6F860023CB2446B0CFEA90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Aug 2026 12:45:11 +0000 Certificate not after: Tue 07 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 46227 IP: 162.245.54.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:6f:86:00:23:cb:24:46:b0:cf:ea:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 5 12:45:11 2026 GMT Not After : Nov 7 13:45:11 2028 GMT Subject: CN=d4d337ac-64ad-496d-856c-8c2412a7cb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:c4:53:8c:3c:de:3c:7d:c0:bc:a3:d2:67: 37:f3:ba:55:cb:e5:5b:f7:dd:47:c6:96:8a:ab:1a: 28:6c:ea:92:2b:d3:31:a9:c3:af:a9:64:86:a7:5d: 19:f9:c8:29:44:60:f1:1b:3a:91:1d:3a:12:05:1f: 7a:0f:8f:9c:7c:3b:87:56:29:89:aa:8a:a5:65:8c: e6:b1:ff:c0:fe:0a:e4:53:4f:ee:6b:ff:3d:11:bc: 0e:41:de:30:7b:47:71:74:c6:88:a7:94:32:39:29: 10:15:c5:8d:47:bc:e5:32:95:02:80:34:64:58:73: 5b:9a:f9:37:2e:d0:b8:9a:2c:71:5f:05:90:50:42: 15:1e:fb:3d:df:e6:18:5a:32:d0:60:90:6e:e5:86: 25:6f:fc:08:29:d8:97:d9:02:f2:f1:2e:e6:0c:15: dd:d1:e5:e9:8a:05:52:d9:f9:fe:78:31:ab:cd:7e: cf:e4:16:27:36:2d:c0:d9:bc:f9:77:2b:c7:bf:b4: c6:fc:23:e6:7d:51:bd:67:7c:87:8e:b2:95:74:7e: 87:6d:c7:5a:f1:13:88:66:e6:32:b3:d5:3e:78:d7: 75:33:0c:a4:79:e5:c2:d1:38:05:68:d6:65:8a:a7: db:b7:ae:d8:ee:64:7c:a9:42:63:ab:14:39:6b:31: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.245.54.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:35:3d:dc:a5:a0:ff:50:d6:ba:fe:67:e8:ac:05:60:6b:d3: f8:dd:3d:d8:05:d2:45:ef:07:d8:9b:5d:54:b2:60:fb:da:9e: 1d:e2:8b:91:02:10:78:c7:01:8e:69:37:3c:bb:0d:c1:e3:24: 13:13:3a:e8:ea:11:10:62:97:59:e9:ec:ff:c6:a9:b4:8b:6d: 6b:bd:c0:7d:46:45:6e:e6:2b:20:a7:94:ee:e2:15:07:28:d9: ac:89:a7:53:cf:81:24:70:a0:f5:ca:91:6c:74:dc:28:89:ad: ac:aa:bc:eb:b4:20:67:85:a5:87:8a:f9:77:44:9c:85:a9:46: 55:6b:41:ce:b3:47:7b:5f:43:ab:17:7e:1a:31:6a:57:21:59: f9:e2:ad:f5:2e:85:d9:d3:01:fd:78:8a:f7:0a:f8:7c:e3:d3: 15:3f:8f:37:d4:57:a8:87:37:e1:55:6d:a0:0d:4d:51:85:b0: 99:1a:37:01:4b:59:e2:3e:7d:98:0a:e2:1b:d1:60:c1:be:66: bf:7d:af:41:8e:d8:76:4a:fa:41:d9:4f:44:f7:f7:03:7c:25: 20:7e:39:c4:27:3b:75:8a:a2:83:3f:78:24:2d:84:e3:65:34: a6:c9:75:7f:f7:5d:ec:65:82:15:b2:7f:73:d8:8f:04:a8:41: 74:1d:ed:ad -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE68b4YAI8skRrDP6pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgwNTEyNDUxMVoXDTI4MTEwNzEzNDUxMVowLzEtMCsGA1UEAxMk ZDRkMzM3YWMtNjRhZC00OTZkLTg1NmMtOGMyNDEyYTdjYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfvEU4w83jx9wLyj0mc387pVy+Vb991HxpaK qxoobOqSK9MxqcOvqWSGp10Z+cgpRGDxGzqRHToSBR96D4+cfDuHVimJqoqlZYzm sf/A/grkU0/ua/89EbwOQd4we0dxdMaIp5QyOSkQFcWNR7zlMpUCgDRkWHNbmvk3 LtC4mixxXwWQUEIVHvs93+YYWjLQYJBu5YYlb/wIKdiX2QLy8S7mDBXd0eXpigVS 2fn+eDGrzX7P5BYnNi3A2bz5dyvHv7TG/CPmfVG9Z3yHjrKVdH6Hbcda8ROIZuYy s9U+eNd1MwykeeXC0TgFaNZliqfbt67Y7mR8qUJjqxQ5azEDvwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIFrA6b1Y7ReqPnyhVcwEJY7ZQh/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k NGQzMzdhYy02NGFkLTQ5NmQtODU2Yy04YzI0MTJhN2NiMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q0ZDMzN2FjLTY0YWQtNDk2ZC04 NTZjLThjMjQxMmE3Y2IzNC9kNGQzMzdhYy02NGFkLTQ5NmQtODU2Yy04YzI0MTJh N2NiMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGi9TYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALSTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE01PdyloP9Q1rr+Z+isBWBr0/jdPdgF0kXvB9ibXVSyYPva nh3ii5ECEHjHAY5pNzy7DcHjJBMTOujqERBil1np7P/GqbSLbWu9wH1GRW7mKyCn lO7iFQco2ayJp1PPgSRwoPXKkWx03CiJrayqvOu0IGeFpYeK+XdEnIWpRlVrQc6z R3tfQ6sXfhoxalchWfnirfUuhdnTAf14ivcK+Hzj0xU/jzfUV6iHN+FVbaANTVGF sJkaNwFLWeI+fZgK4hvRYMG+Zr99r0GO2HZK+kHZT0T39wN8JSB+OcQnO3WKooM/ eCQthONlNKbJdX/3XexlghWyf3PYjwSoQXQd7a0= -----END CERTIFICATE-----Generated at Wed Sep 16 12:51:18 2026 by rpki-client