$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer File: ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer (raw, json) Hash identifier: c3yTM0xXPvYk5/U4czXZU83pDZpovqMJeYrDo6Ls+Lk= Subject key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FC2F99B265522FD2D0F06A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Nov 2026 13:45:11 +0000 Certificate not after: Fri 09 Feb 2029 13:45:11 +0000 Subordinate resources: AS: 398020 IP: 23.133.48.0/23 IP: 66.205.243.0/24 IP: 174.136.212.0/22 IP: 209.142.76.0/23 IP: 2602:fde8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c2:f9:9b:26:55:22:fd:2d:0f:06:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 7 13:45:11 2026 GMT Not After : Feb 9 13:45:11 2029 GMT Subject: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:d1:6b:d4:2c:b5:76:4c:a1:a7:e4:ba:c7: 8f:82:41:78:21:a7:45:3e:98:7a:c1:8e:9b:4c:d2: 60:fc:85:0a:36:16:5c:45:74:ed:e1:c7:20:d1:ab: 30:33:db:44:1d:10:6c:19:0f:35:f2:a8:7a:1e:7c: d7:7e:65:83:b1:fe:88:e3:b2:99:3d:2a:b9:c7:e6: 69:ea:54:8a:c3:85:02:00:5a:6d:fa:fc:ef:24:b5: 2b:2f:45:51:ab:89:3c:fa:fc:39:da:b5:27:31:60: 44:22:f4:91:a5:2b:6b:c4:9c:b5:a4:2d:12:79:f5: 06:7d:48:bc:fd:6d:80:ab:7d:f8:26:95:6c:88:1d: 79:27:2c:d4:69:c1:eb:a3:ad:43:be:91:c1:f5:9c: d4:11:a3:1f:4c:b1:85:b7:4e:81:58:4d:94:f2:ee: 29:cc:a7:3b:0d:a1:1e:3d:ac:29:0a:cd:a1:75:c6: e8:7a:88:fc:f4:1a:15:76:2b:8c:ee:84:1f:53:d1: 20:6b:a2:9a:c0:d6:46:85:0d:2e:8e:a8:0a:b6:67: 9b:a4:86:96:ba:04:a4:da:dc:11:c7:46:0c:d2:fc: 95:d7:5d:df:95:39:50:fb:02:e2:89:4b:f7:8c:bf: 1b:c8:66:cf:6d:82:8d:f9:f7:ff:59:c1:3e:5a:91: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.133.48.0/23 66.205.243.0/24 174.136.212.0/22 209.142.76.0/23 IPv6: 2602:fde8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398020 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a7:3b:a4:4d:8f:fc:31:47:5b:be:aa:6f:eb:02:a7:72:03: b1:8b:be:52:c8:af:d8:bb:da:4c:84:49:e7:86:b2:c9:1a:4d: ff:8d:28:90:21:38:ec:62:22:a8:8b:a7:50:fa:3a:e0:d0:17: b8:4d:cf:93:b0:8e:14:0b:fb:91:45:ab:02:14:9b:12:05:59: 2b:e3:05:99:88:d6:3b:33:5c:ce:56:bc:25:1c:88:71:4c:13: 71:5d:85:44:47:8f:4f:85:5b:51:dd:42:d0:c9:9c:f0:90:c3: 82:77:89:a2:e0:95:a0:ff:7b:d3:a7:24:31:88:12:33:65:49: bb:bb:e3:b1:38:fa:6d:4f:d2:b6:f8:c7:55:be:b5:50:6d:2a: cf:e2:a2:a2:df:47:93:0f:d4:e9:3f:78:f8:90:ac:80:dc:f9: 2c:b7:83:7d:0f:4a:69:d6:86:b5:e0:3e:d2:2a:64:9e:45:2c: f3:e3:0e:a2:6e:ce:7b:ab:31:27:c2:c6:08:82:90:5c:0c:24: ef:b6:c2:a7:fe:30:dd:d0:fb:b5:f5:a2:3b:b9:9e:7e:e7:ed: 8e:fc:a9:1a:1e:fe:73:b2:d9:f7:30:b4:93:d4:74:7a:5b:5f: d7:fc:f5:50:4a:60:78:55:59:63:f8:64:ae:47:2d:d7:e4:51: 75:f1:27:5a -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE/C+ZsmVSL9LQ8GoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwNzEzNDUxMVoXDTI5MDIwOTEzNDUxMVowLzEtMCsGA1UEAxMk YWI0YTFjOGEtZDQwYi00Mzc4LWE5YzYtZjNiNGQwOTE5ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KnRa9QstXZMoafkusePgkF4IadFPph6wY6b TNJg/IUKNhZcRXTt4ccg0aswM9tEHRBsGQ818qh6HnzXfmWDsf6I47KZPSq5x+Zp 6lSKw4UCAFpt+vzvJLUrL0VRq4k8+vw52rUnMWBEIvSRpStrxJy1pC0SefUGfUi8 /W2Aq334JpVsiB15JyzUacHro61DvpHB9ZzUEaMfTLGFt06BWE2U8u4pzKc7DaEe PawpCs2hdcboeoj89BoVdiuM7oQfU9Ega6KawNZGhQ0ujqgKtmebpIaWugSk2twR x0YM0vyV113flTlQ+wLiiUv3jL8byGbPbYKN+ff/WcE+WpGCmQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFGCR5Ef+Rb8QfEFBfs/rlidOTawPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h YjRhMWM4YS1kNDBiLTQzNzgtYTljNi1mM2I0ZDA5MTlkZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2FiNGExYzhhLWQ0MGItNDM3OC1h OWM2LWYzYjRkMDkxOWRmMC9hYjRhMWM4YS1kNDBiLTQzNzgtYTljNi1mM2I0ZDA5 MTlkZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAEXhTADBABCzfMDBAKuiNQDBAHRjkwwDQQCAAIw BwMFACYC/egwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhLEMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIKn O6RNj/wxR1u+qm/rAqdyA7GLvlLIr9i72kyESeeGsskaTf+NKJAhOOxiIqiLp1D6 OuDQF7hNz5OwjhQL+5FFqwIUmxIFWSvjBZmI1jszXM5WvCUciHFME3FdhURHj0+F W1HdQtDJnPCQw4J3iaLglaD/e9OnJDGIEjNlSbu747E4+m1P0rb4x1W+tVBtKs/i oqLfR5MP1Ok/ePiQrIDc+Sy3g30PSmnWhrXgPtIqZJ5FLPPjDqJuznurMSfCxgiC kFwMJO+2wqf+MN3Q+7X1oju5nn7n7Y78qRoe/nOy2fcwtJPUdHpbX9f89VBKYHhV WWP4ZK5HLdfkUXXxJ1o= -----END CERTIFICATE-----Generated at Sun Nov 15 20:50:01 2026 by rpki-client