$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17.cer File: f4d47f86-b52a-4157-b7b3-b5d446726e17.cer (raw, json) Hash identifier: OUP3cSKznT9KCEEIFgWdvXiVlEED+ZDPiwuqIuZo2HM= Subject key identifier: 6B:85:DE:9B:62:D2:AE:60:9E:AF:80:03:58:06:AA:CA:2B:C3:69:E0 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F66901CA684B35E6945E9C1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/f4d47f86-b52a-4157-b7b3-b5d446726e17.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 11:18:16 +0000 Certificate not after: Tue 15 Aug 2028 07:42:53 +0000 Subordinate resources: IP: 23.149.56.0/24 IP: 140.235.249.0/24 IP: 205.207.212.0/23 IP: 2602:fa98::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:90:1c:a6:84:b3:5e:69:45:e9:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 5 11:18:16 2026 GMT Not After : Aug 15 07:42:53 2028 GMT Subject: CN=f4d47f86-b52a-4157-b7b3-b5d446726e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:11:1a:1e:af:ea:c0:c0:80:2d:30:c0:69: 36:d3:0a:7a:2e:49:38:85:c9:71:85:90:eb:79:b0: 00:0f:12:61:86:c0:df:48:a9:9c:8a:4f:81:93:bc: a1:ee:47:49:1b:a5:fa:1a:b1:02:74:af:4d:9b:3a: ec:a6:00:17:02:d3:f4:6e:a1:e5:87:37:39:2d:2d: 7b:55:81:6b:ef:de:b8:13:e1:6b:0b:71:60:8f:b7: b7:61:7b:cd:00:ca:71:fe:99:70:92:bd:a3:bf:05: 61:e2:3e:35:11:ea:a0:4f:be:52:58:d0:b4:28:61: ac:86:df:39:f2:05:7b:c7:74:3e:61:75:23:19:b9: 68:60:61:b2:a2:cb:e1:3d:7b:5e:b3:5b:74:b6:aa: 3b:83:64:d3:6f:9a:cf:c3:8d:59:d0:80:94:f0:dc: a6:3a:26:1b:13:eb:f5:43:29:ed:34:e4:45:25:63: 83:08:d6:ea:41:ef:b6:7d:9c:a3:77:43:fc:dd:c7: 57:94:19:20:ae:91:9f:f0:a6:e9:67:d0:35:a2:35: 61:69:c0:21:9c:2d:47:ac:22:92:a0:8b:cc:7c:d7: 0d:ce:69:42:ef:e0:11:9f:af:d0:65:f8:67:80:70: df:15:1b:39:b5:79:21:c4:8b:e6:9a:11:6e:8b:6d: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:85:DE:9B:62:D2:AE:60:9E:AF:80:03:58:06:AA:CA:2B:C3:69:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4d47f86-b52a-4157-b7b3-b5d446726e17/f4d47f86-b52a-4157-b7b3-b5d446726e17.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.149.56.0/24 140.235.249.0/24 205.207.212.0/23 IPv6: 2602:fa98::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a6:16:f3:a4:1d:71:21:8f:fe:4b:cb:05:dc:72:af:0a:ee: 79:dc:9e:f2:f4:49:20:53:96:11:2d:cf:b3:4b:e7:f3:4e:2f: 99:5e:14:f9:5f:2f:41:6e:3b:08:52:af:00:cd:45:20:04:8f: 10:83:e0:d0:c9:50:d5:00:f8:ab:bc:86:8d:fb:cd:e7:b7:20: f8:fe:aa:7b:17:ae:bb:5e:c2:b8:f4:80:79:77:c2:a2:ec:24: 83:be:90:a1:93:41:4b:77:61:f3:fd:09:4f:31:80:bd:49:05: 48:f7:f5:96:3c:dd:e7:ee:f5:04:15:11:eb:f3:36:e2:eb:97: 15:81:df:62:b8:d4:cd:bc:fa:1c:64:c1:42:9b:cd:76:da:eb: c9:47:0e:90:08:be:02:9e:ef:0e:cb:21:83:f0:71:2e:12:f0: 53:0e:3f:12:95:cb:6e:f2:12:df:77:66:b6:ac:4f:7b:d7:c9: f2:dc:aa:30:d0:7d:dd:11:6a:4a:14:f0:43:1e:79:a4:3e:cc: bd:42:d4:9b:36:1f:96:c1:02:9b:e9:1d:b6:fe:a4:5c:c4:5d: cc:2c:63:3d:dd:fb:1b:5f:c2:ee:af:a1:7f:7b:66:b1:a1:a3: 1e:89:65:3b:62:b4:dd:c0:9a:0d:74:7b:9f:b5:2e:39:2f:80: a5:f1:8e:61 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9mkBymhLNeaUXpwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwNTExMTgxNloXDTI4MDgxNTA3NDI1M1owLzEtMCsGA1UEAxMk ZjRkNDdmODYtYjUyYS00MTU3LWI3YjMtYjVkNDQ2NzI2ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLARGh6v6sDAgC0wwGk20wp6Lkk4hclxhZDr ebAADxJhhsDfSKmcik+Bk7yh7kdJG6X6GrECdK9NmzrspgAXAtP0bqHlhzc5LS17 VYFr7964E+FrC3Fgj7e3YXvNAMpx/plwkr2jvwVh4j41EeqgT75SWNC0KGGsht85 8gV7x3Q+YXUjGbloYGGyosvhPXtes1t0tqo7g2TTb5rPw41Z0ICU8NymOiYbE+v1 QyntNORFJWODCNbqQe+2fZyjd0P83cdXlBkgrpGf8KbpZ9A1ojVhacAhnC1HrCKS oIvMfNcNzmlC7+ARn6/QZfhngHDfFRs5tXkhxIvmmhFui214DQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGuF3pti0q5gnq+AA1gGqsorw2ngMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m NGQ0N2Y4Ni1iNTJhLTQxNTctYjdiMy1iNWQ0NDY3MjZlMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y0ZDQ3Zjg2LWI1MmEtNDE1Ny1i N2IzLWI1ZDQ0NjcyNmUxNy9mNGQ0N2Y4Ni1iNTJhLTQxNTctYjdiMy1iNWQ0NDY3 MjZlMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXlTgDBACM6/kDBAHNz9QwDgQCAAIwCAMGBCYC +pgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACOmFvOkHXEhj/5LywXccq8K7nncnvL0SSBTlhEtz7NL5/NO L5leFPlfL0FuOwhSrwDNRSAEjxCD4NDJUNUA+Ku8ho37zee3IPj+qnsXrrtewrj0 gHl3wqLsJIO+kKGTQUt3YfP9CU8xgL1JBUj39ZY83efu9QQVEevzNuLrlxWB32K4 1M28+hxkwUKbzXba68lHDpAIvgKe7w7LIYPwcS4S8FMOPxKVy27yEt93ZrasT3vX yfLcqjDQfd0RakoU8EMeeaQ+zL1C1Js2H5bBApvpHbb+pFzEXcwsYz3d+xtfwu6v oX97ZrGhox6JZTtitN3Amg10e5+1LjkvgKXxjmE= -----END CERTIFICATE-----Generated at Sat Oct 31 05:30:13 2026 by rpki-client