$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer File: ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer (raw, json) Hash identifier: Mv55y5fO7Op4WRqqiRGzOEpF+3LdzfnKYwWO7ZY0Juk= Subject key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C Authority key identifier: 21:F9:3C:DA:50:12:16:AE:25:42:AD:22:DF:88:FF:D4:CE:20:64:E0 Certificate issuer: /CN=fd789de6-3f6d-456e-8870-c04ed6990c13 Certificate serial: 010D0C9F4328584F66BB40C045E5ADB1111FC080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer Manifest: rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft caRepository: rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 12:45:11 +0000 Certificate not after: Sun 07 Jan 2029 13:45:11 +0000 Subordinate resources: IP: 64.57.176.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:bb:40:c0:45:e5:ad:b1:11:1f:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd789de6-3f6d-456e-8870-c04ed6990c13 Validity Not Before: Oct 5 12:45:11 2026 GMT Not After : Jan 7 13:45:11 2029 GMT Subject: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:2d:cd:d6:e0:62:84:91:ac:36:62:19:31: 3a:e3:bb:84:04:df:26:85:5f:2e:6c:c1:a0:ab:a1: 94:ad:ee:e6:a7:b2:ae:06:58:d0:30:e6:a6:00:11: bb:37:41:37:6f:fe:a2:cf:98:69:68:29:4a:16:c4: de:e0:c0:8c:4b:35:93:e5:09:5f:f3:b5:1f:44:15: 78:f7:d6:30:49:a8:98:b0:27:e4:b8:03:bf:c8:38: 3a:41:cf:fc:51:24:d6:fe:b4:c1:55:d4:d6:e7:a7: 8f:b1:38:8e:90:d4:3e:33:0b:a7:2a:39:90:e4:fc: f6:68:e9:59:7b:e7:13:9b:13:c0:dc:38:78:c2:87: c1:a9:65:55:f2:21:31:49:26:8a:2c:93:d9:e8:d5: 34:37:f6:21:4a:64:84:64:4e:d1:8c:bd:01:bb:20: 9d:80:53:db:72:f8:14:0f:f0:dc:b9:72:63:1c:d5: 2a:35:3a:20:02:60:f8:a7:87:e4:0d:74:71:b2:a3: 53:e2:21:fe:06:16:cf:66:5c:91:f0:09:6e:48:68: 86:a4:3c:7e:87:ef:06:74:cb:52:c9:ff:ce:c9:a4: 66:0d:56:aa:f2:3b:d6:af:79:ff:74:db:4f:a5:71: 8e:4c:c5:8b:ee:06:09:5e:c9:10:59:0b:3a:36:73: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl X509v3 Authority Key Identifier: keyid:21:F9:3C:DA:50:12:16:AE:25:42:AD:22:DF:88:FF:D4:CE:20:64:E0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer sbgp-ipAddrBlock: critical IPv4: 64.57.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:65:93:49:9c:60:52:88:15:5e:5c:f2:fc:bd:6c:03:99:b0: 3c:63:c7:0f:cf:43:1c:af:2c:52:9f:95:1d:93:ce:6b:4f:b4: 6b:bc:03:c8:51:4e:a1:3c:20:81:45:81:6a:4f:4a:17:a1:d1: 33:52:48:01:b7:b0:93:65:76:f0:e6:32:a9:81:30:9c:3e:cc: 3d:75:28:c9:44:8f:95:40:40:20:61:6b:c6:29:f9:72:52:9c: 11:f8:c9:ce:62:20:69:ff:3f:dc:0d:0d:53:ff:87:e5:ba:75: 2f:bf:54:2e:b7:4c:07:f9:5f:15:0d:d6:50:35:4a:01:09:6c: e8:7b:a0:8b:14:e1:59:4e:5e:fa:ee:32:3a:3e:b5:03:de:d1: 4a:1f:aa:06:61:d2:fd:ef:85:8d:29:17:64:cb:db:14:c0:a3: 7e:de:f5:55:48:0b:28:c8:8b:21:ff:12:12:35:55:3d:9e:80: 63:f1:20:51:25:1f:94:68:2c:98:cb:5e:c9:d4:17:3e:01:f1: 93:18:50:f0:f1:1d:05:e7:fb:86:8e:d7:13:e3:fb:75:ac:df: 05:29:9f:54:11:11:e9:ca:5a:0d:a8:02:9e:43:6b:ab:db:db: 75:73:bf:46:ca:b0:2b:3d:6e:32:69:5f:29:55:9e:58:c8:8f: 94:f4:c1:9b -----BEGIN CERTIFICATE----- MIIGoTCCBYmgAwIBAgIUAQ0Mn0MoWE9mu0DAReWtsREfwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3ODlkZTYtM2Y2ZC00NTZlLTg4NzAtYzA0ZWQ2OTkw YzEzMB4XDTI2MTAwNTEyNDUxMVoXDTI5MDEwNzEzNDUxMVowPTE7MDkGA1UEAxMy ZWJkMWRjNDM3ODI4NDQwOTViZmZlZGU2ZGNiNDQyNGVlNjZhNzZkOGI3YTY4ZTAw NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfyC3N1uBihJGsNmIZ MTrju4QE3yaFXy5swaCroZSt7uansq4GWNAw5qYAEbs3QTdv/qLPmGloKUoWxN7g wIxLNZPlCV/ztR9EFXj31jBJqJiwJ+S4A7/IODpBz/xRJNb+tMFV1Nbnp4+xOI6Q 1D4zC6cqOZDk/PZo6Vl75xObE8DcOHjCh8GpZVXyITFJJoosk9no1TQ39iFKZIRk TtGMvQG7IJ2AU9ty+BQP8Ny5cmMc1So1OiACYPinh+QNdHGyo1PiIf4GFs9mXJHw CW5IaIakPH6H7wZ0y1LJ/87JpGYNVqryO9avef9020+lcY5MxYvuBgleyRBZCzo2 c1ZzAgMBAAGjggOlMIIDoTAdBgNVHQ4EFgQUfiyTW3VMALHoBDu7cSHMO1qtJIww ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvYTkyYWQyNmRkZGQ2NDE5Yjk3M2UwNTZm ODc5NDUzMDIvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvYTkyYWQyNmRkZGQ2NDE5Yjk3M2UwNTZmODc5NDUzMDIv MC83RTJDOTM1Qjc1NEMwMEIxRTgwNDNCQkI3MTIxQ0MzQjVBQUQyNDhDLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNi Yy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZkNzg5ZGU2LTNmNmQtNDU2ZS04ODcw LWMwNGVkNjk5MGMxMy9mZDc4OWRlNi0zZjZkLTQ1NmUtODg3MC1jMDRlZDY5OTBj MTMuY3JsMB8GA1UdIwQYMBaAFCH5PNpQEhauJUKtIt+I/9TOIGTgMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0xY2JjLTQ3YWIt OTA0ZS00NTM2MWE1NDg3YzMvZmQ3ODlkZTYtM2Y2ZC00NTZlLTg4NzAtYzA0ZWQ2 OTkwYzEzLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBEA5sDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQA0ZZNJnGBSiBVeXPL8vWwDmbA8Y8cPz0McryxSn5Udk85rT7RrvAPIUU6h PCCBRYFqT0oXodEzUkgBt7CTZXbw5jKpgTCcPsw9dSjJRI+VQEAgYWvGKflyUpwR +MnOYiBp/z/cDQ1T/4flunUvv1Qut0wH+V8VDdZQNUoBCWzoe6CLFOFZTl767jI6 PrUD3tFKH6oGYdL974WNKRdky9sUwKN+3vVVSAsoyIsh/xISNVU9noBj8SBRJR+U aCyYy17J1Bc+AfGTGFDw8R0F5/uGjtcT4/t1rN8FKZ9UERHpyloNqAKeQ2ur29t1 c79GyrArPW4yaV8pVZ5YyI+U9MGb -----END CERTIFICATE-----Generated at Sat Oct 10 16:29:38 2026 by rpki-client