$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer File: 4113c935-d29d-41b5-bec0-a7395bdeac99.cer (raw, json) Hash identifier: rJ2Erbt97TNw4dIpDEZTPwKIFOjZ0Nu1wPwv3uDmrSI= Subject key identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F4805BA930881B2C2F68A4600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 12:45:11 +0000 Certificate not after: Wed 27 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 192.241.8.0/22 IP: 199.195.156.0/22 IP: 2604:3440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:05:ba:93:08:81:b2:c2:f6:8a:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 24 12:45:11 2026 GMT Not After : Dec 27 13:45:11 2028 GMT Subject: CN=4113c935-d29d-41b5-bec0-a7395bdeac99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:47:59:f2:f6:db:ae:c2:a8:2e:d9:f9:0c: 0c:0f:dc:4b:10:97:84:2e:58:99:62:60:d7:04:6b: 51:a0:48:c0:2a:d7:af:f3:f5:a2:f2:b3:b5:3d:57: 7b:3c:26:25:d4:16:61:c7:ee:cb:f1:6c:6b:0b:fd: 26:24:a3:45:4a:ed:27:ee:b0:7a:ca:d5:45:07:24: d9:96:83:fe:e9:00:50:9d:81:68:28:86:58:c8:8e: f3:d1:c1:9d:05:5f:2b:31:42:f4:2d:fe:f4:9c:5b: f0:ab:8d:cc:42:bd:ac:d1:c1:8c:60:e2:f5:21:1f: 53:0c:f8:03:d8:ac:29:62:a2:70:c0:8d:6e:c0:f6: 6f:b1:3b:f4:1d:1b:a3:01:d3:c3:fc:a2:e5:7f:4a: ab:12:4e:6f:fe:e0:e6:42:59:cb:c7:d1:1b:de:c8: fc:ad:dc:ff:e5:6a:a5:31:91:5f:15:96:64:11:b4: ba:0c:b4:c6:45:0d:e8:87:b3:0a:ff:7d:a9:ed:66: 05:4f:5a:f1:e4:b2:73:ef:dd:54:fe:86:0c:62:21: b5:78:0e:17:06:7c:46:44:9a:62:e4:c9:88:1e:2a: 9d:7b:b6:0c:64:11:ab:46:af:bc:d0:82:d0:c4:8a: 3b:f3:58:2e:c6:d3:71:58:dc:9e:d6:90:af:75:3b: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.241.8.0/22 199.195.156.0/22 IPv6: 2604:3440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:75:d7:f5:f8:da:ef:28:01:fd:93:3a:be:0e:3f:f6:54:ab: a7:15:f5:61:9d:51:a0:67:a8:d3:32:98:70:1d:c4:18:13:d9: 3d:f5:ac:8d:bb:e3:f4:fe:73:3f:92:e1:1d:ff:ed:3a:74:da: 50:7a:17:6b:35:54:f9:c8:3a:bb:96:7c:0e:05:d0:59:f2:70: 3d:1f:bb:31:aa:c9:3d:68:79:61:8a:fe:fd:e3:00:22:bd:84: b8:ab:73:00:05:d1:00:43:4d:f3:f9:6a:0a:c1:72:dc:48:42: 6c:e6:42:9e:41:4a:6f:83:c6:6c:b9:1d:e2:58:de:47:ba:a0: c6:b8:7d:b5:f7:7a:48:ed:fd:58:78:d2:70:c8:47:96:b3:c6: 99:54:61:d8:f3:b9:10:bf:b8:9e:e8:d1:0a:af:f8:dd:fa:27: c0:92:91:0f:f7:1d:48:48:53:70:3b:df:f7:22:b9:0c:b3:c5: 06:bb:14:fb:ee:49:2a:fc:54:89:c1:3c:67:eb:50:3c:77:b3: 5a:ed:43:b8:8f:81:0c:f1:25:61:a9:59:a0:4e:63:62:62:77: 54:d2:f6:70:07:37:76:47:24:5c:00:be:3b:25:02:ce:14:cd: b7:19:0a:b7:8f:7f:5b:34:e7:a8:79:fb:95:ef:ab:35:13:68: 78:f3:7b:a4 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWE9IBbqTCIGywvaKRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkyNDEyNDUxMVoXDTI4MTIyNzEzNDUxMVowLzEtMCsGA1UEAxMk NDExM2M5MzUtZDI5ZC00MWI1LWJlYzAtYTczOTViZGVhYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkRHWfL2267CqC7Z+QwMD9xLEJeELliZYmDX BGtRoEjAKtev8/Wi8rO1PVd7PCYl1BZhx+7L8WxrC/0mJKNFSu0n7rB6ytVFByTZ loP+6QBQnYFoKIZYyI7z0cGdBV8rMUL0Lf70nFvwq43MQr2s0cGMYOL1IR9TDPgD 2KwpYqJwwI1uwPZvsTv0HRujAdPD/KLlf0qrEk5v/uDmQlnLx9Eb3sj8rdz/5Wql MZFfFZZkEbS6DLTGRQ3oh7MK/32p7WYFT1rx5LJz791U/oYMYiG1eA4XBnxGRJpi 5MmIHiqde7YMZBGrRq+80ILQxIo781guxtNxWNye1pCvdTsZcwIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFBgw0Wqh+O+/tyFObA/xelBZmA7GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJkZWFjOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQxMTNjOTM1LWQyOWQtNDFiNS1i ZWMwLWE3Mzk1YmRlYWM5OS80MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJk ZWFjOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALA8QgDBALHw5wwDQQCAAIwBwMFACYENEAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACXXX9fja7ygB/ZM6vg4/9lSrpxX1YZ1RoGeo0zKYcB3EGBPZPfWsjbvj 9P5zP5LhHf/tOnTaUHoXazVU+cg6u5Z8DgXQWfJwPR+7MarJPWh5YYr+/eMAIr2E uKtzAAXRAENN8/lqCsFy3EhCbOZCnkFKb4PGbLkd4ljeR7qgxrh9tfd6SO39WHjS cMhHlrPGmVRh2PO5EL+4nujRCq/43fonwJKRD/cdSEhTcDvf9yK5DLPFBrsU++5J KvxUicE8Z+tQPHezWu1DuI+BDPElYalZoE5jYmJ3VNL2cAc3dkckXAC+OyUCzhTN txkKt49/WzTnqHn7le+rNRNoePN7pA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:47:53 2026 by rpki-client