$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer File: 90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer (raw, json) Hash identifier: UTjps9f6p5r40juatdywMZQO3xDly+3vKqotRCUdAj8= Subject key identifier: 94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FD3B9B73095DF136648366180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Nov 2026 13:45:12 +0000 Certificate not after: Thu 15 Feb 2029 13:45:12 +0000 Subordinate resources: IP: 167.253.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:b9:b7:30:95:df:13:66:48:36:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 13 13:45:12 2026 GMT Not After : Feb 15 13:45:12 2029 GMT Subject: CN=90352753-4ed5-4805-a661-e3c0ff7bc8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:60:ca:10:28:48:3a:4d:3d:29:39:b9:05: d1:93:91:80:fc:ab:48:88:e7:e4:c4:38:c5:a1:ae: 30:42:36:52:f9:ac:0c:b7:58:bf:f9:7c:75:56:b4: 3a:43:f1:d4:b0:1f:eb:d8:f7:9a:96:fa:a1:6e:c0: 9c:31:7a:f0:25:27:48:74:bf:f6:c1:0e:67:19:7a: 35:0a:f4:39:7f:37:bd:3a:6e:04:00:7a:e3:6f:11: a5:4a:a2:49:93:07:c2:75:95:1e:11:74:ff:f1:3c: 93:cb:de:54:15:bb:57:91:bc:d5:be:7b:43:2e:25: 06:71:9a:bb:b0:b0:74:f4:c2:ca:02:da:42:76:af: 7a:ea:99:7c:41:cc:3f:03:67:7c:5c:12:9c:39:ca: 1e:fb:1d:ae:ba:91:fd:db:ba:8b:49:86:7f:ce:68: 6a:3c:58:6b:a4:0f:58:00:3f:ac:53:d4:c8:86:97: ac:0b:f0:5f:1a:1d:7b:4c:37:77:d4:97:77:c0:90: 93:9e:1b:ee:ad:39:76:53:05:03:b7:f2:0d:d8:99: 61:bc:7b:de:41:a8:41:9b:fd:35:9c:16:fe:84:79: 87:ed:23:fb:a4:ac:20:fd:02:1d:34:ad:94:48:10: 27:18:fb:95:f0:55:a6:fe:06:02:d2:bc:3c:64:5d: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a1:fe:b3:cf:1f:a3:b7:f3:c0:a4:f3:0e:9b:f5:43:98:7a: 72:9b:b8:89:da:af:24:00:0a:eb:88:7d:c7:77:78:2c:c0:53: 06:0f:fa:4a:16:d4:bd:da:d6:c4:f6:7f:47:3d:92:c3:d0:23: 0b:26:23:89:e4:9a:ac:68:da:4b:7c:5f:56:da:2b:3a:7b:fa: 83:4c:cb:93:c5:5b:4f:d0:a0:43:c2:2e:bc:ad:6e:ba:8c:50: cb:13:da:1f:42:78:2d:18:5f:70:67:77:d8:b6:4e:9a:ea:7c: 90:aa:dc:70:5b:bd:23:8e:a8:e1:6d:9a:7c:16:f5:58:27:8a: 93:ad:81:11:79:c9:c1:d8:2a:00:9a:fb:c1:9c:d4:28:63:8a: b8:7d:cc:59:48:ad:d3:9e:44:62:3e:a5:26:ea:6d:47:8c:64: 95:de:fe:92:f3:c0:e2:8c:e9:60:69:ef:a9:d8:38:22:91:9c: 89:80:6f:33:bd:96:a4:b7:6c:bf:9b:48:b6:4f:55:92:04:01: 3c:06:dc:45:4d:5c:f0:40:17:c4:63:11:99:cc:e1:78:df:89: 51:7a:8c:8e:fa:1f:25:ee:9b:f9:38:32:56:8e:61:04:e2:ae: cf:c7:84:b5:63:2a:ba:01:7d:0f:a3:93:04:91:1e:e6:d3:7d: fa:15:b8:89 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE/Tubcwld8TZkg2YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTExMzEzNDUxMloXDTI5MDIxNTEzNDUxMlowLzEtMCsGA1UEAxMk OTAzNTI3NTMtNGVkNS00ODA1LWE2NjEtZTNjMGZmN2JjOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC5gyhAoSDpNPSk5uQXRk5GA/KtIiOfkxDjF oa4wQjZS+awMt1i/+Xx1VrQ6Q/HUsB/r2PealvqhbsCcMXrwJSdIdL/2wQ5nGXo1 CvQ5fze9Om4EAHrjbxGlSqJJkwfCdZUeEXT/8TyTy95UFbtXkbzVvntDLiUGcZq7 sLB09MLKAtpCdq966pl8Qcw/A2d8XBKcOcoe+x2uupH927qLSYZ/zmhqPFhrpA9Y AD+sU9TIhpesC/BfGh17TDd31Jd3wJCTnhvurTl2UwUDt/IN2JlhvHveQahBm/01 nBb+hHmH7SP7pKwg/QIdNK2USBAnGPuV8FWm/gYC0rw8ZF0fGQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJRl5uIWVdkAUaVZtHxIJEfQesEcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 MDM1Mjc1My00ZWQ1LTQ4MDUtYTY2MS1lM2MwZmY3YmM4ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzkwMzUyNzUzLTRlZDUtNDgwNS1h NjYxLWUzYzBmZjdiYzhmOC85MDM1Mjc1My00ZWQ1LTQ4MDUtYTY2MS1lM2MwZmY3 YmM4ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/ZgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANKH+s88fo7fzwKTzDpv1 Q5h6cpu4idqvJAAK64h9x3d4LMBTBg/6ShbUvdrWxPZ/Rz2Sw9AjCyYjieSarGja S3xfVtorOnv6g0zLk8VbT9CgQ8IuvK1uuoxQyxPaH0J4LRhfcGd32LZOmup8kKrc cFu9I46o4W2afBb1WCeKk62BEXnJwdgqAJr7wZzUKGOKuH3MWUit055EYj6lJupt R4xkld7+kvPA4ozpYGnvqdg4IpGciYBvM72WpLdsv5tItk9VkgQBPAbcRU1c8EAX xGMRmczheN+JUXqMjvofJe6b+TgyVo5hBOKuz8eEtWMqugF9D6OTBJEe5tN9+hW4 iQ== -----END CERTIFICATE-----Generated at Sun Nov 15 16:43:56 2026 by rpki-client