$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer File: 0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer (raw, json) Hash identifier: zXGrpLYwxW2HkPShzeopnG8MPNlpC4K5E2yfAJfqfLU= Subject key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F3CDAFD940E875C740E8209C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 12:45:11 +0000 Certificate not after: Sat 23 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 23.173.152.0/24 IP: 2602:f94c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:da:fd:94:0e:87:5c:74:0e:82:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 20 12:45:11 2026 GMT Not After : Dec 23 13:45:11 2028 GMT Subject: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:04:fe:9c:7e:e9:90:1c:d0:99:50:ff:2a: 59:64:17:7f:2a:1b:63:89:56:e9:e3:cb:3b:57:36: a0:8c:e4:7c:ba:58:1f:5d:f3:96:a8:64:db:78:63: ee:bd:ea:4c:33:80:a9:88:1e:78:f1:51:d5:2a:25: d0:42:60:cb:7b:0b:1e:4e:e4:d7:bc:df:1c:75:a0: 68:dd:82:57:77:2d:26:d9:f8:ff:eb:54:61:c4:de: 00:7e:25:c7:22:63:6b:12:00:14:f0:15:e2:09:f1: 94:0b:81:2b:e2:40:6e:3e:e5:49:b8:b0:75:fe:ae: e9:56:34:3c:1b:c2:3a:f5:ea:ad:5f:25:e8:17:59: 36:4d:4b:15:6e:1a:fc:24:75:3e:a2:15:66:44:53: 2e:b1:c9:42:d7:be:9f:d4:35:e5:19:2a:86:24:44: e3:59:41:eb:45:4e:0e:9b:8e:dc:e1:14:97:c5:88: 40:41:5d:bb:2e:3c:0e:2d:f3:7a:eb:14:da:9e:b8: 65:75:7b:cb:4a:77:57:f4:9b:2a:90:ee:2c:87:f9: 9f:d5:56:55:cf:bc:65:68:c8:87:98:5f:4c:82:94: 26:de:27:62:f8:fb:0c:f6:a8:6f:41:b7:d3:65:c1: c4:57:a6:fa:4d:47:06:57:7b:1f:be:2d:3d:99:46: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.152.0/24 IPv6: 2602:f94c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:df:a3:13:cd:38:cc:54:83:81:24:26:ac:b5:ec:6b:9c:7b: d6:b6:5b:34:e3:de:5f:d8:71:eb:cf:41:dd:84:d7:48:0e:aa: b5:9e:e6:2f:11:2d:2d:0e:de:d5:0b:e9:e4:67:b4:11:f9:c0: 12:14:9f:ec:2c:b4:06:c6:88:21:20:be:87:8d:a8:3f:2c:cf: 9d:66:da:58:78:be:9d:9a:48:88:a9:88:a6:03:00:4c:21:01: a5:ad:f4:9e:f3:c9:b2:69:4d:80:59:6b:b8:55:f2:06:b6:e7: 99:3b:aa:9a:07:7d:48:ea:a3:f4:15:6e:4d:cb:c6:1d:55:02: cf:63:35:9d:0f:85:18:46:b8:00:f9:5b:e0:6f:b0:59:7d:bc: 59:55:66:2a:40:f9:42:1c:43:a1:90:f0:76:fc:a2:c1:57:43: 44:82:ec:fb:4a:23:ad:43:f4:ae:d1:52:70:50:fa:a1:69:75: 26:09:df:30:7d:4f:08:07:9d:dd:bd:73:d3:d4:73:3b:a4:40: f3:47:aa:14:3f:76:d3:06:1b:2a:24:37:96:ac:00:c6:1f:8b: 14:a8:19:b5:eb:0f:8c:66:ec:95:80:e4:4e:e6:32:20:74:62: 9e:ef:50:8d:7d:a6:2e:b1:77:2b:29:e6:7e:60:fa:b9:8e:97: 23:3b:cd:16 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE882v2UDodcdA6CCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyMDEyNDUxMVoXDTI4MTIyMzEzNDUxMVowLzEtMCsGA1UEAxMk MDg0NWJhM2ItOWZjMi00MGZiLWI3NGMtNDQ1YWNlOGI0MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fYE/px+6ZAc0JlQ/ypZZBd/KhtjiVbp48s7 VzagjOR8ulgfXfOWqGTbeGPuvepMM4CpiB548VHVKiXQQmDLewseTuTXvN8cdaBo 3YJXdy0m2fj/61RhxN4AfiXHImNrEgAU8BXiCfGUC4Er4kBuPuVJuLB1/q7pVjQ8 G8I69eqtXyXoF1k2TUsVbhr8JHU+ohVmRFMusclC176f1DXlGSqGJETjWUHrRU4O m47c4RSXxYhAQV27LjwOLfN66xTanrhldXvLSndX9JsqkO4sh/mf1VZVz7xlaMiH mF9MgpQm3idi+PsM9qhvQbfTZcHEV6b6TUcGV3sfvi09mUbtFwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGuEQmnXcN0mivezUxb0rhYcY/C9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ODQ1YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVhY2U4YjQxODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA4NDViYTNiLTlmYzItNDBmYi1i NzRjLTQ0NWFjZThiNDE4Mi8wODQ1YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVhY2U4 YjQxODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrZgwDgQCAAIwCAMGACYC+UwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEffoxPNOMxUg4EkJqy17Guce9a2WzTj3l/YcevPQd2E10gOqrWe5i8RLS0O3tUL 6eRntBH5wBIUn+wstAbGiCEgvoeNqD8sz51m2lh4vp2aSIipiKYDAEwhAaWt9J7z ybJpTYBZa7hV8ga255k7qpoHfUjqo/QVbk3Lxh1VAs9jNZ0PhRhGuAD5W+BvsFl9 vFlVZipA+UIcQ6GQ8Hb8osFXQ0SC7PtKI61D9K7RUnBQ+qFpdSYJ3zB9TwgHnd29 c9PUczukQPNHqhQ/dtMGGyokN5asAMYfixSoGbXrD4xm7JWA5E7mMiB0Yp7vUI19 pi6xdysp5n5g+rmOlyM7zRY= -----END CERTIFICATE-----Generated at Thu Sep 24 06:06:44 2026 by rpki-client