$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff24aa00-5e6c-4039-b42f-b0c73eac4cda.cer File: ff24aa00-5e6c-4039-b42f-b0c73eac4cda.cer (raw, json) Hash identifier: iB9vLLym4+/4wEnaMgnEesYPZSxIG+tx9gnSndB5Q4Q= Subject key identifier: 16:D9:27:F9:7C:1D:0A:AC:86:E1:9F:B0:37:67:0C:08:F2:0D:3F:23 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584D494F8F927409976FAEB7D3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff24aa00-5e6c-4039-b42f-b0c73eac4cda/ff24aa00-5e6c-4039-b42f-b0c73eac4cda.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff24aa00-5e6c-4039-b42f-b0c73eac4cda/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 14:15:53 +0000 Certificate not after: Tue 27 Jun 2028 14:15:53 +0000 Subordinate resources: AS: 54076 AS: 394068 IP: 140.235.112.0/23 IP: 2620:be:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:4f:8f:92:74:09:97:6f:ae:b7:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 25 14:15:53 2026 GMT Not After : Jun 27 14:15:53 2028 GMT Subject: CN=ff24aa00-5e6c-4039-b42f-b0c73eac4cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:00:b9:56:79:c5:08:6d:bc:1e:ad:84:2d: 65:81:41:06:5e:c2:a4:23:ae:35:66:f9:e4:ab:4f: 54:02:52:39:dc:09:1d:49:ff:29:a7:76:c4:ee:be: 3c:4d:52:af:21:07:67:f2:c1:e8:b2:33:74:1e:6b: 9d:39:71:40:50:2b:13:87:3b:d9:5b:86:51:f1:9c: d5:e5:12:a2:fc:9a:a6:91:f9:d4:87:b0:9d:36:a0: f2:89:66:81:f9:14:fb:27:ab:cc:fb:02:ab:c7:32: 03:af:08:99:23:a4:66:f4:f9:2d:99:f5:81:13:48: 1f:09:38:c9:e1:f2:42:ee:30:86:b6:bb:5a:67:9d: e3:40:2e:f7:ae:20:a3:de:df:fe:6c:8f:e1:41:1e: 65:83:b7:0f:a8:5c:3b:f3:99:a2:4f:00:19:34:bc: ee:95:17:ad:e8:6f:79:61:a1:b1:64:01:bd:64:11: fc:f4:6e:bb:9e:2b:8c:50:c4:d5:88:77:4b:1d:98: 47:21:d0:33:27:33:ce:fa:67:e5:22:44:99:73:c9: f4:b3:3b:46:54:c6:34:79:52:ba:f8:0d:9a:e3:a1: 06:25:1c:b7:2f:c7:c9:bf:03:74:b1:0a:26:28:80: 0b:87:90:c9:55:c2:07:26:6f:b5:cf:15:e5:5c:1e: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D9:27:F9:7C:1D:0A:AC:86:E1:9F:B0:37:67:0C:08:F2:0D:3F:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff24aa00-5e6c-4039-b42f-b0c73eac4cda/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff24aa00-5e6c-4039-b42f-b0c73eac4cda/ff24aa00-5e6c-4039-b42f-b0c73eac4cda.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 140.235.112.0/23 IPv6: 2620:be:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54076 394068 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e1:bd:06:4e:1d:59:a1:4c:a6:53:cc:02:01:7b:17:84:53: ea:a5:c3:7f:df:77:f3:59:c2:d2:96:67:31:9a:66:00:51:53: 81:53:2a:5f:e1:11:ab:de:40:66:d8:72:2e:81:f7:b8:f6:ea: 98:b3:5f:19:45:d0:4e:5b:83:01:41:a8:f3:26:57:9b:ba:b7: 6b:84:d6:3b:b9:f8:f0:05:0b:d3:b5:bc:5b:aa:57:64:15:61: 9c:b9:50:2c:ab:0a:92:03:19:a2:b2:06:85:1e:d8:ea:de:e3: a6:56:3f:b8:0c:08:6b:d6:5c:c9:ce:94:5a:c1:d9:27:fa:b4: df:70:f3:cc:0d:f4:0f:93:06:18:46:ec:4e:2c:53:fa:b6:01: e5:5c:12:1c:65:89:28:c9:63:31:16:1c:b1:fc:97:47:f1:8c: 88:8d:e7:8f:7c:70:b1:92:88:05:26:b9:a0:2e:fb:68:da:b2: 78:30:4e:2e:6d:2e:3b:1a:8f:dd:6f:02:7a:7f:fe:60:f0:0b: 3e:b6:65:a9:29:14:ec:c4:92:df:74:90:77:13:0a:56:d3:a1: bc:6f:47:2b:e2:2b:a2:e6:60:86:e3:e0:cd:d3:3d:2b:a6:5c: dc:6e:c2:69:1b:99:ea:fc:ec:0d:cd:c8:18:4a:1d:50:d5:dc: 86:94:16:5d -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE1JT4+SdAmXb66308AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDMyNTE0MTU1M1oXDTI4MDYyNzE0MTU1M1owLzEtMCsGA1UEAxMk ZmYyNGFhMDAtNWU2Yy00MDM5LWI0MmYtYjBjNzNlYWM0Y2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiUAuVZ5xQhtvB6thC1lgUEGXsKkI641Zvnk q09UAlI53AkdSf8pp3bE7r48TVKvIQdn8sHosjN0HmudOXFAUCsThzvZW4ZR8ZzV 5RKi/JqmkfnUh7CdNqDyiWaB+RT7J6vM+wKrxzIDrwiZI6Rm9PktmfWBE0gfCTjJ 4fJC7jCGtrtaZ53jQC73riCj3t/+bI/hQR5lg7cPqFw785miTwAZNLzulRet6G95 YaGxZAG9ZBH89G67niuMUMTViHdLHZhHIdAzJzPO+mflIkSZc8n0sztGVMY0eVK6 +A2a46EGJRy3L8fJvwN0sQomKIALh5DJVcIHJm+1zxXlXB46EwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBbZJ/l8HQqshuGfsDdnDAjyDT8jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m ZjI0YWEwMC01ZTZjLTQwMzktYjQyZi1iMGM3M2VhYzRjZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ZmMjRhYTAwLTVlNmMtNDAzOS1i NDJmLWIwYzczZWFjNGNkYS9mZjI0YWEwMC01ZTZjLTQwMzktYjQyZi1iMGM3M2Vh YzRjZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAGM63AwDwQCAAIwCQMHACYgAL5AADAfBggrBgEF BQcBCAEB/wQQMA6gDDAKAgMA0zwCAwYDVDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAA4b0GTh1ZoUymU8wC AXsXhFPqpcN/33fzWcLSlmcxmmYAUVOBUypf4RGr3kBm2HIugfe49uqYs18ZRdBO W4MBQajzJleburdrhNY7ufjwBQvTtbxbqldkFWGcuVAsqwqSAxmisgaFHtjq3uOm Vj+4DAhr1lzJzpRawdkn+rTfcPPMDfQPkwYYRuxOLFP6tgHlXBIcZYkoyWMxFhyx /JdH8YyIjeePfHCxkogFJrmgLvto2rJ4ME4ubS47Go/dbwJ6f/5g8As+tmWpKRTs xJLfdJB3EwpW06G8b0cr4iui5mCG4+DN0z0rplzcbsJpG5nq/OwNzcgYSh1Q1dyG lBZd -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:50 2026 by rpki-client