$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer File: 278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer (raw, json) Hash identifier: JSqH8qcfwDy32Tto2XL2taQ2x3euEEqZ1f6SwCGiBm8= Subject key identifier: DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB Authority key identifier: A7:E2:4F:2D:54:27:FB:BF:7A:9B:63:AD:1D:40:AB:88:98:47:0C:A7 Certificate issuer: /CN=1433ebff-dfd6-4c5c-b7ff-99c85139d4a8 Certificate serial: 010D0C9F4328584EB7A93CE3196C616456A4C7A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/98c1c974-4608-4b75-8781-dc145101a9bd/notification.xml Certificate not before: Mon 03 Aug 2026 19:42:26 +0000 Certificate not after: Sun 05 Nov 2028 20:42:26 +0000 Subordinate resources: AS: 400098 IP: 199.36.120.0/22 IP: 2605:c040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b7:a9:3c:e3:19:6c:61:64:56:a4:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1433ebff-dfd6-4c5c-b7ff-99c85139d4a8 Validity Not Before: Aug 3 19:42:26 2026 GMT Not After : Nov 5 20:42:26 2028 GMT Subject: CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:96:e3:95:b7:50:aa:22:4f:21:f0:51:ae: 9f:b4:d2:47:fd:3d:23:01:7a:10:0f:f8:4e:fe:d3: 28:63:28:e7:96:14:05:08:f9:18:8b:b2:5c:bd:2f: ff:61:c2:83:2b:40:77:ab:72:90:41:83:8e:33:d2: e0:cd:4d:31:36:ce:ef:a8:4d:e9:37:48:1c:06:93: 4b:40:97:dd:e5:63:6c:c5:53:d6:e9:5d:94:b4:0c: 89:ce:05:34:09:28:df:7d:c9:9d:1c:d0:b0:7c:f7: a6:ac:f9:8b:1a:07:26:e4:ea:3e:6e:9e:88:be:94: 7c:b3:33:d1:0f:1d:19:e3:e6:08:e7:4e:5c:c3:2b: ad:5d:1e:a0:b0:3e:11:62:c4:2d:45:99:4f:67:62: 20:e1:ca:d8:1c:e4:08:24:51:6e:1e:ad:82:d7:11: 64:f2:2a:da:83:08:b4:88:13:38:b4:19:fc:a1:9d: 31:7c:44:68:7d:2b:37:98:20:94:16:8d:6f:69:27: 65:c7:41:7e:70:37:93:fd:01:ba:3d:cc:74:de:4c: da:e9:32:32:91:a5:cf:04:df:74:c1:f8:f2:82:11: 0f:35:7f:b2:17:47:99:0c:0c:c5:b2:40:4f:b8:82: 47:98:21:49:20:4e:c1:3e:41:06:58:ff:86:bb:c7: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/98c1c974-4608-4b75-8781-dc145101a9bd/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl X509v3 Authority Key Identifier: keyid:A7:E2:4F:2D:54:27:FB:BF:7A:9B:63:AD:1D:40:AB:88:98:47:0C:A7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer sbgp-ipAddrBlock: critical IPv4: 199.36.120.0/22 IPv6: 2605:c040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400098 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:52:60:c3:03:e0:03:92:be:56:83:81:e6:1b:dc:55:d1:3b: 9a:08:4e:10:ed:3b:1f:2b:0e:16:35:fb:37:84:d7:ba:cf:13: 56:65:9c:d8:38:83:f9:29:a2:46:b2:7b:4c:4f:9b:07:34:cc: b5:8e:bf:d6:35:7c:ba:fe:47:79:c0:ce:6a:a2:bf:52:4e:f1: 6f:c3:65:3d:7d:4e:b0:7c:5d:bf:17:5e:df:72:42:d0:90:11: cc:8f:c2:b1:bf:80:dc:de:b0:42:b9:75:7f:d6:69:05:dc:2e: cb:8b:55:34:fd:c3:26:a2:f6:68:db:69:21:a9:23:2f:bb:89: 6a:49:ed:31:0e:41:26:c9:85:39:84:4b:ab:c3:33:09:72:02: a1:92:a5:fa:10:a4:1d:10:09:6f:6f:57:e7:42:b2:f6:10:c3: 6c:15:ad:87:17:89:23:cf:26:71:5a:29:22:a6:cf:45:fd:18: ea:23:2f:af:99:2b:75:85:89:1c:2e:d8:bf:a6:8e:4f:9d:dc: 81:fa:4d:fb:03:d6:19:d3:85:0e:15:b0:6a:44:a9:82:42:d8: 2e:62:b8:b6:9a:6f:04:f5:2e:d6:3e:06:35:4e:27:96:c2:47: 32:6a:70:8a:de:1f:06:ed:19:59:87:85:2d:8b:7d:86:a1:3e: b2:27:d3:ab -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE63qTzjGWxhZFakx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzM2ViZmYtZGZkNi00YzVjLWI3ZmYtOTljODUxMzlk NGE4MB4XDTI2MDgwMzE5NDIyNloXDTI4MTEwNTIwNDIyNlowPTE7MDkGA1UEAxMy Mjc4YWFiODc4ZjY0ZTUxNDllYWRjOTA5NzQ2NWJhMTM4ZjEyNDYxYjc4YzdkZDAy MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH5bjlbdQqiJPIfBR rp+00kf9PSMBehAP+E7+0yhjKOeWFAUI+RiLsly9L/9hwoMrQHercpBBg44z0uDN TTE2zu+oTek3SBwGk0tAl93lY2zFU9bpXZS0DInOBTQJKN99yZ0c0LB896as+Ysa Bybk6j5unoi+lHyzM9EPHRnj5gjnTlzDK61dHqCwPhFixC1FmU9nYiDhytgc5Agk UW4erYLXEWTyKtqDCLSIEzi0GfyhnTF8RGh9KzeYIJQWjW9pJ2XHQX5wN5P9Abo9 zHTeTNrpMjKRpc8E33TB+PKCEQ81f7IXR5kMDMWyQE+4gkeYIUkgTsE+QQZY/4a7 x/mrAgMBAAGjggQbMIIEFzAdBgNVHQ4EFgQU3S2LSJ7tZOOodwJbPRrbcYNDpssw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzk4YzFjOTc0LTQ2 MDgtNGI3NS04NzgxLWRjMTQ1MTAxYTliZC8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzk4YzFj OTc0LTQ2MDgtNGI3NS04NzgxLWRjMTQ1MTAxYTliZC9aT1VVbnEzSkNYUmx1aE9Q RWtZYmVNZmRBZ28ubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwLzk4YzFjOTc0LTQ2MDgtNGI3NS04 NzgxLWRjMTQ1MTAxYTliZC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzLzE0MzNlYmZmLWRmZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8xNDMzZWJm Zi1kZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTguY3JsMB8GA1UdIwQYMBaAFKfi Ty1UJ/u/eptjrR1Aq4iYRwynMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTQz M2ViZmYtZGZkNi00YzVjLWI3ZmYtOTljODUxMzlkNGE4LmNlcjAuBggrBgEFBQcB BwEB/wQfMB0wDAQCAAEwBgMEAsckeDANBAIAAjAHAwUAJgXAQDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMGGuIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADFJgwwPgA5K+VoOB5hvcVdE7mghO EO07HysOFjX7N4TXus8TVmWc2DiD+SmiRrJ7TE+bBzTMtY6/1jV8uv5HecDOaqK/ Uk7xb8NlPX1OsHxdvxde33JC0JARzI/Csb+A3N6wQrl1f9ZpBdwuy4tVNP3DJqL2 aNtpIakjL7uJakntMQ5BJsmFOYRLq8MzCXICoZKl+hCkHRAJb29X50Ky9hDDbBWt hxeJI88mcVopIqbPRf0Y6iMvr5krdYWJHC7Yv6aOT53cgfpN+wPWGdOFDhWwakSp gkLYLmK4tppvBPUu1j4GNU4nlsJHMmpwit4fBu0ZWYeFLYt9hqE+sifTqw== -----END CERTIFICATE-----Generated at Thu Aug 20 23:31:47 2026 by rpki-client