$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer File: cef8d320-c2b4-4718-be9c-ec3f801c0818.cer (raw, json) Hash identifier: quLKsfEAVrMVtvLN7gTJVWtIzmm32oLqoTx8SinV+mg= Subject key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584EEEAFD6DDBB842CE1175BDF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Aug 2026 12:45:12 +0000 Certificate not after: Sat 25 Nov 2028 13:45:12 +0000 Subordinate resources: AS: 63452 IP: 66.187.244.0/22 IP: 173.243.238.0/23 IP: 192.171.18.0/23 IP: 192.189.171.0/24 IP: 2602:ff50::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:af:d6:dd:bb:84:2c:e1:17:5b:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 23 12:45:12 2026 GMT Not After : Nov 25 13:45:12 2028 GMT Subject: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:8e:83:93:91:a4:bc:89:fc:7f:3b:69:7b: 0c:62:f2:e7:27:d4:5e:a7:99:e8:4e:72:cf:77:7e: 85:1f:2c:d7:29:32:cf:41:d5:28:8e:5f:e5:0c:a4: 0b:27:a7:19:4e:b5:22:90:32:b3:84:f0:c9:18:ec: d9:e1:d3:42:16:65:3c:cb:b2:63:a3:06:cb:b0:82: 5d:69:68:76:86:59:53:c8:9c:25:ae:f0:d6:60:10: 60:0b:44:a5:34:b3:fe:7a:74:63:00:95:03:b1:df: 2a:11:cd:2c:e8:fc:05:ce:31:e0:4f:bc:51:e8:5c: 50:60:e3:e3:c9:9b:14:a9:32:bb:ee:48:02:a8:f2: f7:d2:50:b7:70:1f:d5:04:41:89:eb:53:4f:e0:91: aa:27:fd:83:8f:f3:f8:dc:b6:a3:6b:96:85:55:f4: 26:8f:f7:7c:b4:d4:a6:db:ff:e9:54:46:0f:54:3a: 4c:66:33:32:43:ed:5e:15:b5:ac:94:c6:b6:a5:7d: de:bb:3d:57:4c:58:0f:48:47:b9:51:0b:8c:c2:7b: 32:a1:b9:eb:32:97:44:8f:3e:40:5f:4a:ed:f8:05: ab:eb:ad:27:9d:a8:13:d1:1e:8d:ae:ab:f0:87:a6: aa:0a:67:cc:d5:0c:89:5c:09:ba:f6:9e:eb:fc:0e: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.187.244.0/22 173.243.238.0/23 192.171.18.0/23 192.189.171.0/24 IPv6: 2602:ff50::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b3:33:17:3a:1b:f1:01:ce:2b:8c:ba:f8:c3:5e:05:23:11: 29:62:50:6b:ec:01:d8:2f:78:aa:13:6c:85:cc:3a:b5:95:45: c4:6d:08:54:fd:21:25:f8:28:b8:2e:07:43:c7:fe:2a:65:a1: e4:78:b7:d7:9b:06:c9:98:76:c0:3b:14:39:e9:ba:02:40:ee: 69:e1:e2:5b:12:df:f9:e0:29:1b:db:a6:dc:06:95:ff:30:46: 8a:0c:41:3d:e2:2c:b1:0a:b7:ef:72:a8:6b:8a:f8:d9:7d:7a: d3:5b:7a:ab:b9:cf:bf:f1:e1:73:2e:d9:95:ca:42:3f:8e:1b: 37:a8:35:ec:5f:dd:6f:7d:ec:7a:d8:c8:0b:49:58:01:e7:dc: b8:c5:47:b2:b5:b2:39:32:43:b2:3f:95:22:4a:43:90:0a:63: f1:1e:b7:f6:ed:7d:84:25:34:9e:cc:b6:6b:f6:11:eb:f8:d1: a8:0a:db:2a:b8:37:d2:e7:55:b2:39:15:77:fa:a0:5f:1a:f2: 4f:7b:15:90:ac:52:7c:12:df:d0:57:a9:ab:60:cc:7b:d8:6f: 68:4c:21:39:9d:25:3b:ea:29:fb:5d:90:17:7d:a5:fc:7f:20: 5e:4e:e3:72:a0:2a:f6:95:b2:af:7f:53:8e:5f:ca:b9:11:a7: 62:04:5d:4a -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWE7ur9bdu4Qs4Rdb34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDgyMzEyNDUxMloXDTI4MTEyNTEzNDUxMlowLzEtMCsGA1UEAxMk Y2VmOGQzMjAtYzJiNC00NzE4LWJlOWMtZWMzZjgwMWMwODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsayOg5ORpLyJ/H87aXsMYvLnJ9Rep5noTnLP d36FHyzXKTLPQdUojl/lDKQLJ6cZTrUikDKzhPDJGOzZ4dNCFmU8y7JjowbLsIJd aWh2hllTyJwlrvDWYBBgC0SlNLP+enRjAJUDsd8qEc0s6PwFzjHgT7xR6FxQYOPj yZsUqTK77kgCqPL30lC3cB/VBEGJ61NP4JGqJ/2Dj/P43Laja5aFVfQmj/d8tNSm 2//pVEYPVDpMZjMyQ+1eFbWslMa2pX3euz1XTFgPSEe5UQuMwnsyobnrMpdEjz5A X0rt+AWr660nnagT0R6Nrqvwh6aqCmfM1QyJXAm69p7r/A71rwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFE4l24axLxKmGdSkAdVf8pKWUkPnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAxYzA4MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NlZjhkMzIwLWMyYjQtNDcxOC1i ZTljLWVjM2Y4MDFjMDgxOC9jZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAx YzA4MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAJCu/QDBAGt8+4DBAHAqxIDBADAvaswDgQCAAIw CAMGBCYC/1AAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD33DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCi szMXOhvxAc4rjLr4w14FIxEpYlBr7AHYL3iqE2yFzDq1lUXEbQhU/SEl+Ci4LgdD x/4qZaHkeLfXmwbJmHbAOxQ56boCQO5p4eJbEt/54Ckb26bcBpX/MEaKDEE94iyx CrfvcqhrivjZfXrTW3qruc+/8eFzLtmVykI/jhs3qDXsX91vfex62MgLSVgB59y4 xUeytbI5MkOyP5UiSkOQCmPxHrf27X2EJTSezLZr9hHr+NGoCtsquDfS51WyORV3 +qBfGvJPexWQrFJ8Et/QV6mrYMx72G9oTCE5nSU76in7XZAXfaX8fyBeTuNyoCr2 lbKvf1OOX8q5EadiBF1K -----END CERTIFICATE-----Generated at Wed Sep 23 03:40:51 2026 by rpki-client