$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer File: 47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer (raw, json) Hash identifier: FZRXC5apKB5MJg4Ryq3FMPsANYXgcghTlRsm0PFP8k0= Subject key identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EAA4A1422EF71964C192F2E70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jul 2026 00:45:11 +0000 Certificate not after: Wed 01 Nov 2028 00:45:11 +0000 Subordinate resources: IP: 199.20.14.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:4a:14:22:ef:71:96:4c:19:2f:2e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 30 00:45:11 2026 GMT Not After : Nov 1 00:45:11 2028 GMT Subject: CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f3:d3:e9:5b:57:14:76:c4:4c:45:58:be:ef: e4:aa:f8:42:55:ef:4a:a4:79:18:72:c7:e9:4f:be: e6:40:61:99:0e:fc:05:b0:c1:48:45:f7:4b:69:74: cd:57:15:8a:8f:09:21:87:9a:80:e0:c1:d6:a1:ed: b4:3f:68:ef:dd:ba:98:28:3c:13:88:6e:6c:fd:f7: 89:82:25:be:3b:ca:a5:e3:cd:88:3b:ab:33:de:52: ff:1f:ec:2f:91:0e:fe:15:1c:5f:02:22:97:47:75: 3d:d7:87:9b:de:42:5e:73:32:30:0c:bc:21:ce:c0: ca:7a:ea:63:bc:9f:06:89:1f:d1:b9:8c:a8:69:12: 48:35:eb:4c:21:71:a3:23:57:ec:24:a1:2a:90:dd: 4c:bf:93:3a:d4:78:94:01:9e:eb:10:56:50:6a:82: 20:dd:27:77:1c:80:d9:72:41:1c:e0:c7:da:e8:10: fa:1d:2a:46:62:da:e5:21:05:01:95:76:96:4a:ab: 5c:da:0f:46:3a:04:84:a6:fb:d6:a3:01:f2:dc:92: 27:bb:30:8d:36:8f:a1:bf:2c:c8:e1:62:1a:6e:ed: 9a:2a:62:47:c4:36:c4:9d:8e:68:30:d4:56:90:f5: 4c:88:25:d3:a0:be:39:f4:69:f2:bb:8d:88:ed:e5: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.20.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:af:82:7e:46:4a:47:65:8d:91:aa:e8:ec:96:44:d7:0e:0a: 2b:53:39:15:64:1b:2c:bf:93:d4:b6:6e:18:7c:60:dd:1b:07: 08:a3:13:58:1b:2c:b1:ac:d9:1d:af:d3:d5:0e:a4:3b:89:56: e9:f0:1d:2d:0b:4c:86:c2:bc:dc:c5:35:5c:1c:ae:88:47:59: 3e:da:36:62:ab:be:bf:1c:83:58:6d:f1:8a:fd:90:e0:7c:63: 10:51:66:6f:7a:0d:9d:72:a5:77:ed:ce:d3:5a:72:e1:bf:2e: b7:bd:31:fb:c6:f8:82:8c:78:24:93:f4:22:6c:3e:ff:72:76: 5b:c5:22:a2:fb:e9:36:9e:68:07:3f:8d:d1:cb:a6:1b:f7:2b: 4e:89:2c:81:83:ea:83:af:60:21:3c:e5:05:0a:e1:73:dd:31: 73:e4:5f:eb:a4:02:25:36:29:c9:c2:8c:6b:82:a0:d7:ef:04: 15:10:f7:21:14:5e:3d:db:e2:71:50:b7:9a:84:1e:f4:81:a1: 55:5d:e3:7d:e2:c8:2f:6d:00:f8:6e:8d:13:3f:c6:14:4b:b6: 67:56:af:4f:16:e9:ff:51:d6:80:48:87:f7:e6:46:01:76:4b: ee:b3:16:46:0c:70:0d:db:19:00:3d:a2:c5:8d:8d:6b:a3:81: f0:1a:5c:ae -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE6qShQi73GWTBkvLnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDczMDAwNDUxMVoXDTI4MTEwMTAwNDUxMVowLzEtMCsGA1UEAxMk NDdiOTIyZDUtZWI4ZS00MDI4LWFiYTgtMmUyODJjMGI1ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/PT6VtXFHbETEVYvu/kqvhCVe9KpHkYcsfp T77mQGGZDvwFsMFIRfdLaXTNVxWKjwkhh5qA4MHWoe20P2jv3bqYKDwTiG5s/feJ giW+O8ql482IO6sz3lL/H+wvkQ7+FRxfAiKXR3U914eb3kJeczIwDLwhzsDKeupj vJ8GiR/RuYyoaRJINetMIXGjI1fsJKEqkN1Mv5M61HiUAZ7rEFZQaoIg3Sd3HIDZ ckEc4Mfa6BD6HSpGYtrlIQUBlXaWSqtc2g9GOgSEpvvWowHy3JInuzCNNo+hvyzI 4WIabu2aKmJHxDbEnY5oMNRWkPVMiCXToL459Gnyu42I7eVE3wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFI6q52QC3bWKSa2dg48oqaXWt9ydMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 N2I5MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4MmMwYjVlNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ3YjkyMmQ1LWViOGUtNDAyOC1h YmE4LTJlMjgyYzBiNWU3Ni80N2I5MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4MmMw YjVlNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHFA4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEK+CfkZKR2WNkaro7JZE 1w4KK1M5FWQbLL+T1LZuGHxg3RsHCKMTWBsssazZHa/T1Q6kO4lW6fAdLQtMhsK8 3MU1XByuiEdZPto2Yqu+vxyDWG3xiv2Q4HxjEFFmb3oNnXKld+3O01py4b8ut70x +8b4gox4JJP0Imw+/3J2W8UiovvpNp5oBz+N0cumG/crToksgYPqg69gITzlBQrh c90xc+Rf66QCJTYpycKMa4Kg1+8EFRD3IRRePdvicVC3moQe9IGhVV3jfeLIL20A +G6NEz/GFEu2Z1avTxbp/1HWgEiH9+ZGAXZL7rMWRgxwDdsZAD2ixY2Na6OB8Bpc rg== -----END CERTIFICATE-----Generated at Wed Aug 26 08:07:39 2026 by rpki-client