$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer File: 481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer (raw, json) Hash identifier: nQ8/okzOQX9ff+GryCBb7PDYNV8knFLLiosEAwfnurA= Subject key identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584ECA64F208E267BC56412E2900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Aug 2026 12:45:11 +0000 Certificate not after: Sun 12 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 393668 IP: 131.143.235.0/24 IP: 192.65.0.0/24 IP: 2620:12f:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:64:f2:08:e2:67:bc:56:41:2e:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 10 12:45:11 2026 GMT Not After : Nov 12 13:45:11 2028 GMT Subject: CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:67:19:1f:a7:6a:b7:97:36:55:14:2a:23: 2b:3d:8f:ba:19:98:4b:6a:5b:91:b7:98:76:fa:cd: 97:d5:6c:a9:f8:42:6c:d5:40:60:4f:16:b1:4c:a8: 0e:45:35:df:19:d1:51:51:85:ea:c6:8d:d5:21:a7: cc:5b:5c:b0:39:9f:45:72:a7:04:1a:51:a5:3e:fd: a8:af:23:53:cb:56:bc:4f:2a:8f:33:b3:18:de:dd: 2e:07:55:b3:d2:83:00:71:d8:16:e0:86:07:52:d7: 57:e5:32:d7:1e:a3:ac:16:7d:b7:6b:a3:38:b4:37: de:42:a0:87:b1:b3:e9:8d:0b:0d:3c:70:b8:0a:98: d2:11:40:e7:be:14:e5:d1:c6:4f:05:8f:78:af:fd: 01:73:a4:31:34:d0:a0:1a:55:68:00:37:58:4c:8d: 7a:2f:02:2b:4e:ba:c2:ef:36:f9:d8:9b:56:ec:34: 4f:c8:b1:02:44:79:df:88:ea:80:2c:40:66:3f:53: 55:ea:c2:63:15:3e:97:c5:d0:44:75:7b:fe:3d:db: c2:b9:64:a8:d9:fa:d9:16:28:73:c1:2b:06:73:37: be:fc:38:f5:f1:1a:04:c7:e6:16:df:7d:73:6b:5f: 5d:98:20:f9:2a:a5:e5:d0:48:90:5d:4f:6a:d2:ee: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 131.143.235.0/24 192.65.0.0/24 IPv6: 2620:12f:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393668 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f7:28:e2:e1:e4:d9:f9:50:06:e1:f4:79:1a:6c:fa:91:1d: f4:b9:77:59:f2:2a:69:44:21:66:43:ac:37:09:c8:50:9a:ce: 61:34:55:37:55:60:76:2d:c6:2f:01:e6:30:ca:48:b4:ce:08: e6:97:bc:4a:a6:ab:0a:57:d5:6b:79:00:ac:51:35:f0:46:ea: cf:02:cc:26:75:f1:3b:96:5b:8b:e3:4f:81:ca:b5:ab:d6:10: 58:75:e7:07:ea:9d:c9:59:4b:78:0c:9d:ed:45:e7:75:f1:87: f0:a8:30:42:91:c2:7a:7e:72:82:f5:c7:1e:7b:85:e4:f2:b1: 34:32:20:e1:18:8c:ee:65:4f:4c:fc:8f:3f:a6:02:ec:c4:6a: 4d:00:96:62:fe:73:77:55:bb:e4:4a:c3:6d:f6:89:46:31:16: c2:2d:a8:9e:c7:72:e1:40:74:72:10:51:70:07:4e:14:1b:bd: db:4e:19:84:7a:ca:57:5b:2b:85:c0:67:45:be:47:c9:b0:95: 8c:c9:86:8f:01:45:04:82:6d:78:63:6f:e2:1d:15:f1:41:eb: a9:f8:b1:ef:8e:ba:6d:81:04:05:8b:6c:51:ee:83:2b:c8:b5: 27:1a:83:f4:48:48:97:52:89:12:22:4c:ca:29:4f:8d:c6:5f: 3c:dc:be:09 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE7KZPII4me8VkEuKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDgxMDEyNDUxMVoXDTI4MTExMjEzNDUxMVowLzEtMCsGA1UEAxMk NDgxZWZmOWEtYzhiOS00ZWVkLWFmOGUtYzM4NTljMjJiNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujhnGR+nareXNlUUKiMrPY+6GZhLaluRt5h2 +s2X1Wyp+EJs1UBgTxaxTKgORTXfGdFRUYXqxo3VIafMW1ywOZ9FcqcEGlGlPv2o ryNTy1a8TyqPM7MY3t0uB1Wz0oMAcdgW4IYHUtdX5TLXHqOsFn23a6M4tDfeQqCH sbPpjQsNPHC4CpjSEUDnvhTl0cZPBY94r/0Bc6QxNNCgGlVoADdYTI16LwIrTrrC 7zb52JtW7DRPyLECRHnfiOqALEBmP1NV6sJjFT6XxdBEdXv+PdvCuWSo2frZFihz wSsGcze+/Dj18RoEx+YW331za19dmCD5KqXl0EiQXU9q0u5a6QIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFBouBN7IkTgluxguJuLAmHjnOrp5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ODFlZmY5YS1jOGI5LTRlZWQtYWY4ZS1jMzg1OWMyMmI1YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQ4MWVmZjlhLWM4YjktNGVlZC1h ZjhlLWMzODU5YzIyYjVjOC80ODFlZmY5YS1jOGI5LTRlZWQtYWY4ZS1jMzg1OWMy MmI1YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBACDj+sDBADAQQAwDwQCAAIwCQMHBCYgAS9gADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGAcQwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZPco4uHk2flQBuH0 eRps+pEd9Ll3WfIqaUQhZkOsNwnIUJrOYTRVN1Vgdi3GLwHmMMpItM4I5pe8Sqar ClfVa3kArFE18EbqzwLMJnXxO5Zbi+NPgcq1q9YQWHXnB+qdyVlLeAyd7UXndfGH 8KgwQpHCen5ygvXHHnuF5PKxNDIg4RiM7mVPTPyPP6YC7MRqTQCWYv5zd1W75ErD bfaJRjEWwi2onsdy4UB0chBRcAdOFBu9204ZhHrKV1srhcBnRb5HybCVjMmGjwFF BIJteGNv4h0V8UHrqfix7466bYEEBYtsUe6DK8i1JxqD9EhIl1KJEiJMyilPjcZf PNy+CQ== -----END CERTIFICATE-----Generated at Fri Aug 21 19:33:19 2026 by rpki-client