$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer File: 63fffcba-054d-4823-8758-62bf6dab2ffa.cer (raw, json) Hash identifier: mikPYV+1yt9P+ycSuszbeapCtbFHqvChHhvP2pgIEaM= Subject key identifier: 83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F3CDAFD76CF1B33B248482600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 12:45:11 +0000 Certificate not after: Sat 23 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 199.188.150.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:da:fd:76:cf:1b:33:b2:48:48:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 20 12:45:11 2026 GMT Not After : Dec 23 13:45:11 2028 GMT Subject: CN=63fffcba-054d-4823-8758-62bf6dab2ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:04:cd:b8:d6:62:08:17:e9:8c:0a:f2:41: 29:19:cb:50:70:c9:e9:2b:68:7d:50:0e:af:91:ac: 9d:0c:83:d9:ce:8b:30:d7:1b:f9:c4:6f:36:21:55: fa:e1:c8:93:56:11:05:3e:af:34:ce:49:e9:d4:15: b9:63:60:0d:88:55:42:ae:93:bd:b0:62:b4:10:73: 53:5a:01:31:29:90:97:51:51:b5:d8:75:62:38:68: f3:7f:e3:8c:fe:34:7a:70:dc:63:62:2e:64:42:ae: 21:7f:85:96:3a:5d:84:67:36:03:fb:8d:7d:f0:94: c7:00:dd:ba:d6:cc:70:64:0f:1a:21:b5:97:1f:a2: 21:31:e2:2a:0b:02:e5:9d:2b:63:11:23:73:39:b3: 51:8b:f2:7e:0c:3b:1b:07:86:e3:28:1a:ce:51:c0: a1:94:17:02:09:58:23:52:d5:14:dd:30:26:95:93: 25:57:a4:a9:59:39:e6:32:08:4b:59:5f:75:1d:43: 78:cc:4a:2f:b2:ce:37:f1:60:df:c9:69:65:7b:61: 93:4c:4d:48:ec:17:1f:19:54:de:2e:73:2c:83:62: 3c:62:d1:91:cc:c3:7b:94:ae:d8:d0:5a:04:48:53: f0:c9:d9:1b:47:1a:9d:c7:29:9a:37:01:1d:bd:8c: 30:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.188.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:30:cc:6c:6d:e8:09:72:e8:65:dc:6e:ec:d7:3d:08:68:8f: 75:e0:15:2f:c6:9c:20:9e:25:e1:6a:c1:ef:a9:c2:dd:58:88: 51:17:48:74:f8:16:47:1c:27:07:09:8d:a3:84:0b:e1:0f:af: 4e:09:cc:e1:5a:de:dc:36:53:07:c5:96:37:55:55:be:5b:20: e3:52:b3:20:78:c8:13:5b:b8:af:fb:71:25:ec:51:c6:9f:f4: 91:9f:e2:5a:6f:d2:81:ab:39:30:a9:45:05:ca:ae:9a:f9:6c: 2d:32:64:81:d5:4e:6a:af:4c:89:c0:20:cd:8b:04:59:c4:bb: 66:35:15:ae:54:5b:1b:b2:e5:5a:ea:1e:29:a8:de:0e:a6:2b: 2d:18:b8:32:3b:8b:f5:cd:c2:fb:4e:49:49:e4:a6:72:09:c8: e6:56:e5:d6:c6:68:f5:a4:ba:e0:ae:09:11:22:10:eb:52:bb: 17:fb:1c:7d:d9:27:ef:16:ca:24:c2:77:f4:fb:57:c3:24:ed: 5a:51:4b:e8:c9:0b:77:b2:6b:59:2d:07:67:d3:c5:e6:ce:91: 1d:9c:8d:cd:78:d4:08:b6:24:ed:3e:25:0b:e5:19:34:3e:45: 66:11:4d:de:23:19:d4:3c:2d:52:6c:ae:af:0a:13:3b:96:52: b2:54:6e:0e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE882v12zxszskhIJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyMDEyNDUxMVoXDTI4MTIyMzEzNDUxMVowLzEtMCsGA1UEAxMk NjNmZmZjYmEtMDU0ZC00ODIzLTg3NTgtNjJiZjZkYWIyZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIAEzbjWYggX6YwK8kEpGctQcMnpK2h9UA6v kaydDIPZzosw1xv5xG82IVX64ciTVhEFPq80zknp1BW5Y2ANiFVCrpO9sGK0EHNT WgExKZCXUVG12HViOGjzf+OM/jR6cNxjYi5kQq4hf4WWOl2EZzYD+4198JTHAN26 1sxwZA8aIbWXH6IhMeIqCwLlnStjESNzObNRi/J+DDsbB4bjKBrOUcChlBcCCVgj UtUU3TAmlZMlV6SpWTnmMghLWV91HUN4zEovss438WDfyWlle2GTTE1I7BcfGVTe LnMsg2I8YtGRzMN7lK7Y0FoESFPwydkbRxqdxymaNwEdvYwwgwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIP3cEV4W3RYJwT8Oga7fZn0Gt7zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 M2ZmZmNiYS0wNTRkLTQ4MjMtODc1OC02MmJmNmRhYjJmZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzYzZmZmY2JhLTA1NGQtNDgyMy04 NzU4LTYyYmY2ZGFiMmZmYS82M2ZmZmNiYS0wNTRkLTQ4MjMtODc1OC02MmJmNmRh YjJmZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHvJYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfTDMbG3oCXLoZdxu7Nc9 CGiPdeAVL8acIJ4l4WrB76nC3ViIURdIdPgWRxwnBwmNo4QL4Q+vTgnM4Vre3DZT B8WWN1VVvlsg41KzIHjIE1u4r/txJexRxp/0kZ/iWm/Sgas5MKlFBcqumvlsLTJk gdVOaq9MicAgzYsEWcS7ZjUVrlRbG7LlWuoeKajeDqYrLRi4MjuL9c3C+05JSeSm cgnI5lbl1sZo9aS64K4JESIQ61K7F/scfdkn7xbKJMJ39PtXwyTtWlFL6MkLd7Jr WS0HZ9PF5s6RHZyNzXjUCLYk7T4lC+UZND5FZhFN3iMZ1DwtUmyurwoTO5ZSslRu Dg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:04:16 2026 by rpki-client