$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer File: ae6238c6-9389-4fbe-a6aa-24095966ea40.cer (raw, json) Hash identifier: Qq/ls1hANi1i9CCky4lfCDtly5GTvxfhYnz2hiRSfoo= Subject key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E8C82C817291C60484BA70DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jul 2026 08:45:11 +0000 Certificate not after: Sat 21 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 6340 AS: 10271 AS: 31868 IP: 69.7.0.0/20 IP: 204.107.252.0/24 IP: 209.213.64.0/19 IP: 216.129.128.0/20 IP: 216.237.96.0/20 IP: 2607:d980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:82:c8:17:29:1c:60:48:4b:a7:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 19 08:45:11 2026 GMT Not After : Oct 21 08:45:11 2028 GMT Subject: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:51:bf:67:40:ae:ac:88:f2:cc:b6:09:49: d6:97:db:3b:6f:6b:3f:91:c4:38:b2:6c:a8:08:41: 9e:1a:d0:4b:09:d2:2e:35:28:b7:2c:b8:9a:8f:d5: 65:bd:24:bf:f9:7d:5d:d1:c3:0d:b9:4f:d1:69:d2: 26:67:3b:47:25:ac:b9:5f:a9:a3:40:2d:6e:60:40: 22:41:59:8a:2d:63:8c:51:43:64:38:c1:4f:4c:98: 3c:47:d9:1b:00:2d:12:26:ec:f0:d2:00:9f:22:54: 33:44:2e:a3:b8:08:30:b0:43:86:88:49:2b:95:d7: 61:c5:34:14:2f:b8:4c:f6:d7:47:ff:9d:96:e1:99: c8:38:b4:6a:8d:88:92:95:24:15:b9:45:aa:1b:3c: 9a:ed:48:63:7e:92:1d:64:25:b0:e6:82:a4:32:ea: 7a:6a:28:fa:8d:ac:bf:67:0b:ef:f3:ee:85:ce:48: 37:ec:a7:e0:38:f5:12:a0:74:ba:4e:b6:40:7d:63: b5:29:f0:2b:17:00:2c:c8:b5:74:52:73:56:54:8d: 7e:b3:80:fa:9f:45:ba:9b:96:5d:09:d4:0a:ef:4e: 34:35:45:68:c3:2c:49:68:29:40:90:ef:50:95:fe: af:ca:ab:d2:66:23:0c:e7:9c:c3:c3:b1:f0:9c:a6: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 69.7.0.0/20 204.107.252.0/24 209.213.64.0/19 216.129.128.0/20 216.237.96.0/20 IPv6: 2607:d980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6340 10271 31868 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:34:b1:2b:6a:65:9f:1e:da:f6:eb:23:f8:93:cd:97:49:09: b9:d6:1d:61:ad:94:5d:54:49:14:58:43:d7:df:42:82:30:9d: 7e:bf:8b:8e:05:ef:31:cf:ff:16:43:72:11:01:14:73:50:b9: 7c:81:46:f1:c7:f2:4b:98:01:11:e9:5d:95:f3:91:d4:05:53: d0:fa:6c:2c:20:ce:15:3d:b9:c9:07:b5:34:d2:1b:0a:05:76: e6:6d:9b:56:c7:a5:bf:7c:a0:d1:6d:62:93:c1:04:56:ef:51: f1:f6:af:0f:b8:bc:71:35:38:e1:0b:18:8e:01:c0:33:ca:43: 9b:94:0d:01:c3:ef:7e:be:c8:80:58:04:0b:92:5f:44:a3:23: 6b:d0:49:9c:2d:bc:8b:74:06:cf:9e:69:2d:f3:c1:29:fe:79: b3:8c:4f:d2:30:ab:ea:83:fd:33:1a:69:5a:9e:da:76:d3:26: 8a:04:87:ed:4d:9c:8a:e2:d6:6b:2d:e5:7f:20:7b:59:96:f0: 0c:0c:b5:79:c2:70:ce:c0:71:40:61:f7:52:ca:36:43:cc:1a: 11:12:0b:4b:c7:21:44:1f:88:c9:ff:24:83:ec:da:64:a3:c3: 03:28:c3:67:12:c0:ca:0b:0f:d1:3d:b6:70:e8:0a:41:1b:99: a6:c4:15:9f -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWE6MgsgXKRxgSEunDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcxOTA4NDUxMVoXDTI4MTAyMTA4NDUxMVowLzEtMCsGA1UEAxMk YWU2MjM4YzYtOTM4OS00ZmJlLWE2YWEtMjQwOTU5NjZlYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqpRv2dArqyI8sy2CUnWl9s7b2s/kcQ4smyo CEGeGtBLCdIuNSi3LLiaj9VlvSS/+X1d0cMNuU/RadImZztHJay5X6mjQC1uYEAi QVmKLWOMUUNkOMFPTJg8R9kbAC0SJuzw0gCfIlQzRC6juAgwsEOGiEkrlddhxTQU L7hM9tdH/52W4ZnIOLRqjYiSlSQVuUWqGzya7UhjfpIdZCWw5oKkMup6aij6jay/ Zwvv8+6Fzkg37KfgOPUSoHS6TrZAfWO1KfArFwAsyLV0UnNWVI1+s4D6n0W6m5Zd CdQK7040NUVowyxJaClAkO9Qlf6vyqvSZiMM55zDw7HwnKaSGwIDAQABo4IESTCC BEUwHQYDVR0OBBYEFCL9Qm7Aq3dtPulzOgkufd5cgLdsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h ZTYyMzhjNi05Mzg5LTRmYmUtYTZhYS0yNDA5NTk2NmVhNDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2FlNjIzOGM2LTkzODktNGZiZS1h NmFhLTI0MDk1OTY2ZWE0MC9hZTYyMzhjNi05Mzg5LTRmYmUtYTZhYS0yNDA5NTk2 NmVhNDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARFBwADBADMa/wDBAXR1UADBATYgYADBATY7WAw DQQCAAIwBwMFACYH2YAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICGMQCAigfAgJ8 fDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB5NLEramWfHtr26yP4k82XSQm51h1hrZRdVEkUWEPX30KCMJ1+ v4uOBe8xz/8WQ3IRARRzULl8gUbxx/JLmAER6V2V85HUBVPQ+mwsIM4VPbnJB7U0 0hsKBXbmbZtWx6W/fKDRbWKTwQRW71Hx9q8PuLxxNTjhCxiOAcAzykOblA0Bw+9+ vsiAWAQLkl9EoyNr0EmcLbyLdAbPnmkt88Ep/nmzjE/SMKvqg/0zGmlantp20yaK BIftTZyK4tZrLeV/IHtZlvAMDLV5wnDOwHFAYfdSyjZDzBoREgtLxyFEH4jJ/ySD 7Npko8MDKMNnEsDKCw/RPbZw6ApBG5mmxBWf -----END CERTIFICATE-----Generated at Fri Jul 24 00:06:56 2026 by rpki-client