$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer File: 39cfcd95-1931-4846-b938-e8a3b993f2a8.cer (raw, json) Hash identifier: 7dr3h+BOI7w4B/tX5ULXiYLL7mP7JAxm0mpL3seD8pU= Subject key identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E7A5D540D37389EDE07621FDC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jul 2026 20:45:10 +0000 Certificate not after: Sat 14 Oct 2028 20:45:10 +0000 Subordinate resources: IP: 23.137.4.0/24 IP: 2602:f695::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:5d:54:0d:37:38:9e:de:07:62:1f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 12 20:45:10 2026 GMT Not After : Oct 14 20:45:10 2028 GMT Subject: CN=39cfcd95-1931-4846-b938-e8a3b993f2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:81:bd:2e:0a:ab:d7:43:97:5b:8f:47:f9: 2f:ba:51:a6:b4:df:d5:4f:63:a2:4a:78:9e:d6:0e: 68:73:55:87:44:48:df:a0:39:77:9b:b3:a5:97:75: 66:29:ae:52:9f:bc:ef:43:71:5c:7b:b8:4c:d4:31: c6:ed:7d:ef:d3:3a:98:98:10:42:20:0d:9f:1f:e2: ef:75:4d:7d:c1:94:62:1e:dd:a9:7f:50:e3:bf:b2: 00:02:49:66:cc:2b:d2:b9:77:bd:cb:ac:ec:f9:b5: fc:39:fe:4a:8f:0c:58:c6:dc:1b:88:bc:d3:9b:d9: 93:47:e9:dc:9c:31:01:7d:ec:b6:a2:cd:f5:a0:06: 72:fc:f8:e8:2e:7a:ea:50:cc:df:56:e0:a6:8e:e9: a1:60:00:9f:c8:ef:91:1c:e1:cb:ed:d5:07:f7:ad: f5:e0:d0:d9:0f:de:19:76:1b:23:cf:b4:29:6e:3d: 64:79:1f:82:ff:aa:5c:b1:ba:cf:cd:3d:a4:c5:1c: 7b:cf:4f:55:44:4f:87:57:66:44:ff:2a:bb:6a:82: a8:a9:fb:4c:f4:82:25:13:de:bb:75:49:75:8e:16: a5:a1:d5:6d:62:05:81:69:78:b1:9d:be:06:f8:ab: 6c:50:fa:c9:a9:62:58:83:72:af:22:b1:c2:62:26: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.137.4.0/24 IPv6: 2602:f695::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:13:b9:8e:33:2c:df:42:93:82:8a:c0:86:ce:37:15:5f:f5: e2:a3:26:67:bd:63:db:36:01:3f:c8:37:99:89:90:e4:e9:e2: 23:91:2f:fd:cb:d1:0f:9f:17:59:72:c4:46:60:9e:84:35:92: 53:a8:da:b1:e1:1e:38:e9:c2:a2:ea:f6:32:01:e4:ee:c0:e8: 8c:8f:0e:7c:54:d1:12:4b:47:19:b1:2e:22:6e:59:3b:c5:e6: 1b:a7:81:34:ca:ac:20:0a:78:1b:3e:d8:29:64:e1:88:59:1b: 17:4f:c8:e8:34:23:ad:c8:ad:5b:24:d9:9d:85:f9:d2:dd:19: ea:bc:eb:7b:b2:ea:04:7a:a8:70:cc:92:7f:f7:84:f3:20:1a: 18:b0:70:3b:60:65:09:87:39:c8:c7:e9:a9:ee:b5:a4:33:9b: 4c:b8:c0:e4:dc:fd:1f:6d:9f:73:71:a4:1d:a1:57:6a:f2:c0: 88:62:58:a0:ce:c6:16:ff:58:4e:5c:94:bf:8c:86:90:4d:59: 2c:0e:9d:a8:e4:0f:35:d2:c5:93:ae:61:90:4a:72:43:1a:0e: f4:c1:c1:47:9d:cb:aa:01:3f:af:9b:cb:f6:0a:0c:ed:56:da: a4:2e:62:85:6a:10:59:b9:50:52:1e:a4:5e:2f:01:f3:f4:c2: 19:a5:89:15 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE56XVQNNzie3gdiH9wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcxMjIwNDUxMFoXDTI4MTAxNDIwNDUxMFowLzEtMCsGA1UEAxMk MzljZmNkOTUtMTkzMS00ODQ2LWI5MzgtZThhM2I5OTNmMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg6BvS4Kq9dDl1uPR/kvulGmtN/VT2OiSnie 1g5oc1WHREjfoDl3m7Oll3VmKa5Sn7zvQ3Fce7hM1DHG7X3v0zqYmBBCIA2fH+Lv dU19wZRiHt2pf1Djv7IAAklmzCvSuXe9y6zs+bX8Of5KjwxYxtwbiLzTm9mTR+nc nDEBfey2os31oAZy/PjoLnrqUMzfVuCmjumhYACfyO+RHOHL7dUH96314NDZD94Z dhsjz7Qpbj1keR+C/6pcsbrPzT2kxRx7z09VRE+HV2ZE/yq7aoKoqftM9IIlE967 dUl1jhalodVtYgWBaXixnb4G+KtsUPrJqWJYg3KvIrHCYiYIWQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKYb+YU6Hlyz7ROFOKoZRx8RQOg5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z OWNmY2Q5NS0xOTMxLTQ4NDYtYjkzOC1lOGEzYjk5M2YyYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM5Y2ZjZDk1LTE5MzEtNDg0Ni1i OTM4LWU4YTNiOTkzZjJhOC8zOWNmY2Q5NS0xOTMxLTQ4NDYtYjkzOC1lOGEzYjk5 M2YyYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiQQwDgQCAAIwCAMGACYC9pUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGITuY4zLN9Ck4KKwIbONxVf9eKjJme9Y9s2AT/IN5mJkOTp4iORL/3L0Q+fF1ly xEZgnoQ1klOo2rHhHjjpwqLq9jIB5O7A6IyPDnxU0RJLRxmxLiJuWTvF5hungTTK rCAKeBs+2Clk4YhZGxdPyOg0I63IrVsk2Z2F+dLdGeq863uy6gR6qHDMkn/3hPMg GhiwcDtgZQmHOcjH6anutaQzm0y4wOTc/R9tn3NxpB2hV2rywIhiWKDOxhb/WE5c lL+MhpBNWSwOnajkDzXSxZOuYZBKckMaDvTBwUedy6oBP6+by/YKDO1W2qQuYoVq EFm5UFIepF4vAfP0whmliRU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:06 2026 by rpki-client