$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer File: 8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer (raw, json) Hash identifier: yD5nKxyonk5DAox8mGAu9oKh5IxQdugjZbFqiV9xqQk= Subject key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E90B2CFFA08797ED7787FF300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Jul 2026 20:45:12 +0000 Certificate not after: Sun 22 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 33410 AS: 54125 IP: 198.200.141.0/24 IP: 205.233.0.0/24 IP: 216.71.112.0/22 IP: 2602:807:f000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:b2:cf:fa:08:79:7e:d7:78:7f:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 20 20:45:12 2026 GMT Not After : Oct 22 20:45:12 2028 GMT Subject: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:8f:ba:ff:39:e5:3b:bd:32:89:2c:13:d5: eb:38:c4:a5:71:25:15:f0:cb:62:f6:56:c1:e5:86: 60:4d:37:66:ed:d5:21:1f:69:fe:f2:a9:9e:3d:2e: 58:98:cd:bd:16:70:3d:94:bf:d8:35:fa:50:62:4c: 98:cc:64:88:73:39:28:a2:9a:a8:ee:e4:dc:32:be: 47:7a:0a:05:c3:92:88:c5:59:42:5e:98:c9:21:a5: 37:78:3a:34:6b:cb:f7:94:d6:19:2a:35:8e:41:45: 99:f1:dc:96:77:7e:d2:69:b0:7e:26:8a:98:f2:ee: bd:f9:7b:fc:b4:58:8e:9c:70:74:a3:1d:30:5f:9a: 03:02:18:6b:dd:37:7f:82:98:e2:36:40:7f:e8:6d: 41:93:d8:55:38:47:1a:75:03:e1:2f:b9:03:e0:e4: f3:dc:d7:09:b2:49:c1:20:b6:7a:0f:3d:f0:35:a9: 60:e6:d1:97:be:c3:fc:ba:ba:73:59:1a:22:ec:a8: 06:b9:98:64:3b:66:7d:ac:62:dd:c9:40:d6:4c:80: eb:66:77:5e:65:0c:8d:3a:c2:58:a8:3b:be:8d:e7: 69:57:48:bf:7c:e4:8e:02:85:98:dd:d0:96:6a:ff: 1b:8b:0a:c6:5b:7e:36:3f:8c:76:95:20:e5:86:20: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.200.141.0/24 205.233.0.0/24 216.71.112.0/22 IPv6: 2602:807:f000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33410 54125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a6:a8:97:f6:70:b0:3f:20:f6:fd:4d:04:1c:7d:51:f1:90: 82:a5:62:33:33:d1:c3:e7:2d:3b:f7:8e:c4:45:df:60:c1:72: 33:d7:27:c5:1a:67:13:1a:13:88:17:a2:15:3a:ea:0f:e2:9f: 5d:4f:38:5d:8d:ce:d2:c6:ed:0b:e9:75:82:4f:f4:a6:07:4c: 5a:ec:83:4f:c9:ef:fa:04:65:e1:55:d1:fc:90:30:3b:a2:95: 02:28:f2:e3:c2:1c:da:f9:17:00:f7:48:79:2a:46:10:58:a8: 70:58:ab:8f:11:93:5a:2d:c7:d0:91:54:ed:a7:72:8d:9d:ca: b9:ac:04:59:88:f9:58:41:64:7c:7d:08:9f:5c:fe:be:01:7c: 0c:89:5f:f3:ec:c7:7d:78:8a:6a:3f:a0:8d:61:bd:1a:89:19: bc:0e:9d:84:c1:2f:07:df:68:63:c5:9e:06:61:63:49:d4:ef: ab:6a:fe:28:b9:95:77:94:a4:8e:42:8c:d1:73:ce:ad:d7:28: d8:e7:72:0f:d7:6e:d9:8b:a5:41:45:dc:b0:a7:49:12:f5:60: 0c:5d:3e:a9:c6:8e:ed:09:36:c9:dc:48:ee:c0:f0:f1:cf:90: 95:63:ee:e9:bf:a4:30:41:fc:92:12:81:8c:7c:75:f4:d6:38: 8a:54:d7:91 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE6Qss/6CHl+13h/8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcyMDIwNDUxMloXDTI4MTAyMjIwNDUxMlowLzEtMCsGA1UEAxMk OGIzNTVhYTMtY2YyOC00YTUzLTk2YzUtZGRmM2JiODAwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nmPuv855Tu9MoksE9XrOMSlcSUV8Mti9lbB 5YZgTTdm7dUhH2n+8qmePS5YmM29FnA9lL/YNfpQYkyYzGSIczkoopqo7uTcMr5H egoFw5KIxVlCXpjJIaU3eDo0a8v3lNYZKjWOQUWZ8dyWd37SabB+JoqY8u69+Xv8 tFiOnHB0ox0wX5oDAhhr3Td/gpjiNkB/6G1Bk9hVOEcadQPhL7kD4OTz3NcJsknB ILZ6Dz3wNalg5tGXvsP8urpzWRoi7KgGuZhkO2Z9rGLdyUDWTIDrZndeZQyNOsJY qDu+jedpV0i/fOSOAoWY3dCWav8biwrGW342P4x2lSDlhiBzUQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFMtSqJHMdI+OMqVz7Q8ag89B9SR4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4MDA0MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzhiMzU1YWEzLWNmMjgtNGE1My05 NmM1LWRkZjNiYjgwMDQxOC84YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4 MDA0MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBADGyI0DBADN6QADBALYR3AwDgQCAAIwCAMGACYC CAfwMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCCggIDANNtMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADim qJf2cLA/IPb9TQQcfVHxkIKlYjMz0cPnLTv3jsRF32DBcjPXJ8UaZxMaE4gXohU6 6g/in11POF2NztLG7QvpdYJP9KYHTFrsg0/J7/oEZeFV0fyQMDuilQIo8uPCHNr5 FwD3SHkqRhBYqHBYq48Rk1otx9CRVO2nco2dyrmsBFmI+VhBZHx9CJ9c/r4BfAyJ X/Psx314imo/oI1hvRqJGbwOnYTBLwffaGPFngZhY0nU76tq/ii5lXeUpI5CjNFz zq3XKNjncg/XbtmLpUFF3LCnSRL1YAxdPqnGju0JNsncSO7A8PHPkJVj7um/pDBB /JISgYx8dfTWOIpU15E= -----END CERTIFICATE-----Generated at Thu Jul 23 21:33:49 2026 by rpki-client