$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer File: e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer (raw, json) Hash identifier: xG2nCVVWkNCzAEPraLZvjADAVZY1gd7HAXgWWvXKmDc= Subject key identifier: 7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F761604DC322BE3F450700700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 00:45:12 +0000 Certificate not after: Sat 13 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 137.141.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:16:04:dc:32:2b:e3:f4:50:70:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 11 00:45:12 2026 GMT Not After : Jan 13 01:45:12 2029 GMT Subject: CN=e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:fb:36:f0:2c:5c:e5:88:3b:95:75:ba:49: 1e:0a:cd:4e:66:a2:93:e2:a8:2d:1b:1c:da:96:fe: 00:bc:08:7b:07:5b:45:aa:91:f4:93:54:88:79:0b: 65:06:c4:bb:28:9c:f3:7c:31:7d:78:d7:f5:02:57: 38:d6:e0:11:a6:e0:f1:66:e4:de:08:da:ec:79:25: f6:df:05:ff:2a:5f:cc:2e:cb:9c:1f:6a:ae:1e:d9: e1:db:4f:19:b7:c7:53:9e:89:5e:2b:1a:a6:2d:71: de:fe:ef:09:49:1a:83:95:77:5b:29:cf:79:a7:36: 0c:24:7a:f5:fd:b8:53:a9:62:80:77:6e:8a:89:a6: 65:09:76:54:b9:ea:43:51:a1:ac:04:f3:77:ae:71: dc:12:03:fd:30:23:63:3e:bd:e6:4c:3a:8f:cb:6a: 1c:0e:da:d2:73:c9:cd:b2:a0:08:80:d8:d0:f8:85: fc:e5:41:ac:2a:a8:8f:be:a6:96:0e:fe:31:61:a0: 00:01:70:c7:65:db:45:cf:1b:78:93:41:27:8c:90: b0:15:2c:b2:9c:a1:31:71:8e:a1:c0:c1:f3:e8:67: c8:e1:32:59:a2:3c:e1:30:2b:de:54:b3:4a:d7:fd: ae:4f:3b:73:02:4c:d4:ce:97:f4:8c:fe:d0:21:69: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 137.141.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cd:b5:71:c5:75:2b:6f:d6:e4:83:8b:2d:f4:d2:dc:94:88: 17:34:2a:28:c4:17:a5:ea:a7:03:a3:be:9f:ef:bf:b8:92:2c: ac:34:b1:11:e6:7e:fa:2f:c3:18:a0:33:a0:a4:6b:e9:d8:9f: 23:82:68:67:65:41:e1:7a:b5:2b:73:e4:ed:11:68:81:e5:08: 6a:30:24:fa:81:fe:ac:d3:14:59:fd:99:d6:8d:51:bb:4e:c2: d9:59:11:5d:86:13:ba:1f:23:4e:43:d5:8b:e4:cd:9a:5b:2e: e0:6e:49:9d:4f:98:a1:59:44:f9:ab:ff:bc:32:66:05:52:78: ed:24:cd:ff:22:b5:b9:44:38:57:76:e5:65:70:97:73:51:93: 90:55:39:00:a1:83:ce:18:96:42:9f:c8:fe:4e:30:7e:f1:1b: 58:41:84:4f:4b:29:bf:de:69:39:f2:54:77:5f:fd:0b:d0:1f: 3e:ac:22:0e:61:49:c9:e7:14:60:be:6d:6b:41:68:e2:6f:aa: 4a:e9:30:22:3b:a8:9a:e9:65:aa:98:ff:f5:57:cd:be:cd:b2: 28:c2:af:a3:da:7b:2a:38:93:29:55:be:93:af:7a:1c:29:3b: cf:69:c9:91:2d:c1:e0:1d:ee:43:65:d6:d7:fb:af:83:2d:30: df:93:e5:32 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE92FgTcMivj9FBwBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAxMTAwNDUxMloXDTI5MDExMzAxNDUxMlowLzEtMCsGA1UEAxMk ZThmYmZjODQtNWM2Zi00MDBjLWI3YTYtMWFlNGUxNjIzZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGf7NvAsXOWIO5V1ukkeCs1OZqKT4qgtGxza lv4AvAh7B1tFqpH0k1SIeQtlBsS7KJzzfDF9eNf1Alc41uARpuDxZuTeCNrseSX2 3wX/Kl/MLsucH2quHtnh208Zt8dTnoleKxqmLXHe/u8JSRqDlXdbKc95pzYMJHr1 /bhTqWKAd26KiaZlCXZUuepDUaGsBPN3rnHcEgP9MCNjPr3mTDqPy2ocDtrSc8nN sqAIgNjQ+IX85UGsKqiPvqaWDv4xYaAAAXDHZdtFzxt4k0EnjJCwFSyynKExcY6h wMHz6GfI4TJZojzhMCveVLNK1/2uTztzAkzUzpf0jP7QIWlWGQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHu5xjFobYxxUAFYqlJXF4wn8gsfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l OGZiZmM4NC01YzZmLTQwMGMtYjdhNi0xYWU0ZTE2MjNkMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U4ZmJmYzg0LTVjNmYtNDAwYy1i N2E2LTFhZTRlMTYyM2QxZS9lOGZiZmM4NC01YzZmLTQwMGMtYjdhNi0xYWU0ZTE2 MjNkMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJjTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAzbVxxXUrb9bkg4st9NLc lIgXNCooxBel6qcDo76f77+4kiysNLER5n76L8MYoDOgpGvp2J8jgmhnZUHherUr c+TtEWiB5QhqMCT6gf6s0xRZ/ZnWjVG7TsLZWRFdhhO6HyNOQ9WL5M2aWy7gbkmd T5ihWUT5q/+8MmYFUnjtJM3/IrW5RDhXduVlcJdzUZOQVTkAoYPOGJZCn8j+TjB+ 8RtYQYRPSym/3mk58lR3X/0L0B8+rCIOYUnJ5xRgvm1rQWjib6pK6TAiO6ia6WWq mP/1V82+zbIowq+j2nsqOJMpVb6Tr3ocKTvPacmRLcHgHe5DZdbX+6+DLTDfk+Uy -----END CERTIFICATE-----Generated at Tue Oct 13 02:20:31 2026 by rpki-client