$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer File: 4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer (raw, json) Hash identifier: L0bPigVolusI2MXcf7lWuruvq17jsgoLtcozL2tf/18= Subject key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FC02EEE4E2549D8D54B0C9F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Nov 2026 13:45:13 +0000 Certificate not after: Thu 08 Feb 2029 13:45:13 +0000 Subordinate resources: IP: 167.253.16.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c0:2e:ee:4e:25:49:d8:d5:4b:0c:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 6 13:45:13 2026 GMT Not After : Feb 8 13:45:13 2029 GMT Subject: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:82:7e:73:62:d4:b6:7f:71:d5:ca:17:89: f6:90:83:0a:1e:85:df:66:5d:50:84:9f:8d:3e:e2: 66:48:fc:60:60:6c:4e:1c:c1:e0:80:6b:9f:d7:c3: df:e7:f6:9f:7c:ee:79:d0:5d:e3:ae:a4:2f:6e:ef: 87:c9:1c:31:53:f6:56:44:71:0a:9a:7e:54:6b:60: f0:0b:2c:8b:ae:50:7c:61:32:3f:15:06:42:7e:83: 38:ac:b2:9c:40:05:a0:1d:77:c2:05:fd:74:0f:9c: 83:f1:fc:88:4d:a7:3e:73:f6:44:f1:d9:72:9c:ea: 99:5b:45:fd:78:a2:b0:11:1d:dd:e2:02:08:96:74: c8:46:d8:36:b9:ce:be:d0:67:5a:0a:fd:ea:70:a9: 29:3a:a9:fa:0e:8e:b5:73:c3:4a:fd:82:dd:f8:da: df:68:34:5c:57:40:bd:96:c3:ae:a8:33:50:96:da: bc:fe:af:7b:b9:06:54:32:e2:7f:03:b1:07:6d:b0: 17:0b:70:68:1a:a8:32:68:95:27:45:44:af:f8:61: d5:f0:c7:19:81:74:c6:51:28:92:4b:18:52:38:c6: 03:4a:09:91:4d:68:0a:ba:0d:87:2b:44:95:b3:79: b7:83:b3:6b:70:07:98:a1:c2:9d:2e:c6:97:88:2c: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:da:70:4e:63:ec:29:cb:7b:71:7d:ae:03:36:c9:8d:af:3c: 7c:50:fb:78:94:7c:c1:24:96:9d:da:78:e1:89:6a:51:b1:9d: 3d:8f:19:d0:ba:b4:60:ae:1c:10:78:ba:9b:11:60:05:e9:80: 57:b3:e5:cb:c0:fe:91:7a:ca:67:33:f3:e9:00:16:03:a5:bc: e8:29:8d:2e:3f:81:78:0c:7e:68:60:4f:df:73:58:11:f1:9e: c3:6d:5b:92:48:7c:6e:b7:99:08:81:6c:56:7a:4f:83:c0:8e: b6:b3:3d:8d:ed:76:be:b4:0d:9a:b5:e8:a6:b0:cf:ca:ca:00: cb:c5:f9:cd:7f:ba:21:e0:67:4e:32:43:0c:37:a3:52:1a:40: 50:84:16:65:d1:9f:6c:ff:00:3e:48:7e:79:89:81:ca:0b:55: c1:88:13:1a:cc:07:cb:5c:aa:cf:96:24:e0:5c:41:98:7f:cb: 4e:de:5f:df:03:e5:b8:eb:79:de:59:c4:46:87:46:21:a5:a2: 5c:f4:18:9f:2f:17:77:c8:7d:51:fe:d8:03:ed:cd:97:17:b8: fd:96:00:dc:f2:06:48:aa:4a:67:88:b8:62:5b:13:ee:04:5b: b6:1b:92:72:a4:c2:bd:85:f3:c8:6b:01:b9:6d:2a:74:b8:9e: 55:14:d7:c1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE/ALu5OJUnY1UsMn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwNjEzNDUxM1oXDTI5MDIwODEzNDUxM1owLzEtMCsGA1UEAxMk NGRmYzUxZDYtN2UxZS00OGM0LWFjOWItZGJjMDAyNTIwM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkmCfnNi1LZ/cdXKF4n2kIMKHoXfZl1QhJ+N PuJmSPxgYGxOHMHggGuf18Pf5/affO550F3jrqQvbu+HyRwxU/ZWRHEKmn5Ua2Dw CyyLrlB8YTI/FQZCfoM4rLKcQAWgHXfCBf10D5yD8fyITac+c/ZE8dlynOqZW0X9 eKKwER3d4gIIlnTIRtg2uc6+0GdaCv3qcKkpOqn6Do61c8NK/YLd+NrfaDRcV0C9 lsOuqDNQltq8/q97uQZUMuJ/A7EHbbAXC3BoGqgyaJUnRUSv+GHV8McZgXTGUSiS SxhSOMYDSgmRTWgKug2HK0SVs3m3g7NrcAeYocKdLsaXiCzdLwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFD3Mku2qiN4aZEQV9uxBrg7/XYRpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 ZGZjNTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMwMDI1MjAzYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRkZmM1MWQ2LTdlMWUtNDhjNC1h YzliLWRiYzAwMjUyMDNiNS80ZGZjNTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMwMDI1 MjAzYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/RAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO9pwTmPsKct7cX2uAzbJ ja88fFD7eJR8wSSWndp44YlqUbGdPY8Z0Lq0YK4cEHi6mxFgBemAV7Ply8D+kXrK ZzPz6QAWA6W86CmNLj+BeAx+aGBP33NYEfGew21bkkh8breZCIFsVnpPg8COtrM9 je12vrQNmrXoprDPysoAy8X5zX+6IeBnTjJDDDejUhpAUIQWZdGfbP8APkh+eYmB ygtVwYgTGswHy1yqz5Yk4FxBmH/LTt5f3wPluOt53lnERodGIaWiXPQYny8Xd8h9 Uf7YA+3Nlxe4/ZYA3PIGSKpKZ4i4YlsT7gRbthuScqTCvYXzyGsBuW0qdLieVRTX wQ== -----END CERTIFICATE-----Generated at Sun Nov 15 16:44:56 2026 by rpki-client