$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer File: 14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer (raw, json) Hash identifier: bTWk+RGk9HnVHtzMSzi/pG0ucVRT9LE31vlgdqdofZ4= Subject key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584ECD2FA036909B0EC37AEF8CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Aug 2026 12:45:11 +0000 Certificate not after: Mon 13 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 31876 IP: 199.124.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:2f:a0:36:90:9b:0e:c3:7a:ef:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 11 12:45:11 2026 GMT Not After : Nov 13 13:45:11 2028 GMT Subject: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:bd:de:86:18:1d:19:cb:d0:92:89:fa:33: 91:4e:e5:e6:37:04:98:f5:6c:94:e9:f1:04:98:47: d5:fe:1f:e0:f0:ed:51:75:b0:d8:67:bb:98:fb:71: dc:d6:da:2e:25:f9:d5:7d:71:59:d4:82:d5:a3:25: dd:01:cf:f6:a7:ff:09:82:ce:50:6c:a5:62:09:da: 35:3b:65:e9:70:24:9c:35:62:b1:b0:c6:8e:73:c2: 47:f7:1e:52:39:5f:c4:4a:8d:37:60:0c:2a:39:fb: 5c:5a:03:dc:44:0f:e5:b8:06:70:c2:56:a7:6a:1d: 65:f4:92:ec:36:0d:a7:51:55:73:78:cc:02:b9:e4: ea:ba:70:f9:15:47:2a:ad:0c:40:db:ea:c7:d6:d7: 40:23:51:6d:55:11:80:8c:c8:b9:c1:00:4d:39:9a: 91:4c:d2:a1:c7:fc:b4:49:d1:db:03:21:46:21:eb: 26:61:a1:37:19:6d:e8:62:68:08:01:f7:44:17:63: b7:11:7b:b3:ad:ef:aa:d4:92:d7:d5:4c:db:94:7b: 6f:5c:57:36:8b:b1:04:d0:66:8d:05:d7:58:da:60: 61:60:b4:16:e2:b6:99:c2:36:8d:73:62:bb:f2:70: 3c:18:07:8b:34:92:18:79:a5:14:3a:9b:0c:74:9b: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.124.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31876 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:72:69:18:d7:5b:70:16:50:e2:96:ce:a2:7b:a3:78:08:8a: 88:76:0a:87:6b:3f:36:d7:3b:68:45:f8:d4:6c:cb:2a:71:fa: ad:1b:b8:2d:3b:c2:55:d4:f2:7f:a4:a2:3d:b7:53:22:d5:ba: 1e:34:07:e7:55:25:c5:28:06:0b:2f:0b:40:d5:eb:66:c5:c4: 4b:25:69:06:94:be:89:fd:01:dc:ab:34:c4:72:92:0a:6d:01: 87:83:05:9d:e5:d3:8f:6a:a6:aa:85:68:46:60:dc:5d:f5:c7: 0b:66:b9:dd:47:70:d7:ad:93:35:8f:19:d4:ef:06:11:3c:fd: e0:a5:76:0e:d1:7b:31:2a:67:9c:46:2c:89:37:e3:9e:f9:9b: 08:4a:37:ba:cd:22:cc:9b:19:f0:a0:ff:94:56:0f:e5:31:0c: a7:3f:07:a1:42:88:71:91:e8:46:fe:d6:c5:ab:53:74:21:70: 5b:54:25:f4:6f:29:81:61:05:97:be:43:65:62:08:30:2c:c3: b6:f1:99:8c:08:e9:a0:1b:6d:e2:ba:df:c3:f1:b8:dc:46:95: ed:60:e0:40:06:08:0e:ed:b8:a4:39:86:a3:c1:3e:73:fa:3e: 14:9b:98:42:16:cc:69:21:95:16:bf:f8:9d:c2:a0:10:0c:93: 47:d5:8c:28 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE7NL6A2kJsOw3rvjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxMTEyNDUxMVoXDTI4MTExMzEzNDUxMVowLzEtMCsGA1UEAxMk MTRmMTk0OTQtZTZlYy00MmU3LWJjZTQtODkwM2RmMWY2ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK693oYYHRnL0JKJ+jORTuXmNwSY9WyU6fEE mEfV/h/g8O1RdbDYZ7uY+3Hc1touJfnVfXFZ1ILVoyXdAc/2p/8Jgs5QbKViCdo1 O2XpcCScNWKxsMaOc8JH9x5SOV/ESo03YAwqOftcWgPcRA/luAZwwlanah1l9JLs Ng2nUVVzeMwCueTqunD5FUcqrQxA2+rH1tdAI1FtVRGAjMi5wQBNOZqRTNKhx/y0 SdHbAyFGIesmYaE3GW3oYmgIAfdEF2O3EXuzre+q1JLX1UzblHtvXFc2i7EE0GaN BddY2mBhYLQW4raZwjaNc2K78nA8GAeLNJIYeaUUOpsMdJtdFQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNSMJHE/nWBvQQEsjupFg10tXXL7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x NGYxOTQ5NC1lNmVjLTQyZTctYmNlNC04OTAzZGYxZjZmOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE0ZjE5NDk0LWU2ZWMtNDJlNy1i Y2U0LTg5MDNkZjFmNmY5ZC8xNGYxOTQ5NC1lNmVjLTQyZTctYmNlNC04OTAzZGYx ZjZmOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHfBwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fIQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAi3JpGNdbcBZQ4pbOonujeAiKiHYKh2s/Ntc7aEX41GzLKnH6 rRu4LTvCVdTyf6SiPbdTItW6HjQH51UlxSgGCy8LQNXrZsXESyVpBpS+if0B3Ks0 xHKSCm0Bh4MFneXTj2qmqoVoRmDcXfXHC2a53Udw162TNY8Z1O8GETz94KV2DtF7 MSpnnEYsiTfjnvmbCEo3us0izJsZ8KD/lFYP5TEMpz8HoUKIcZHoRv7WxatTdCFw W1Ql9G8pgWEFl75DZWIIMCzDtvGZjAjpoBtt4rrfw/G43EaV7WDgQAYIDu24pDmG o8E+c/o+FJuYQhbMaSGVFr/4ncKgEAyTR9WMKA== -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:46 2026 by rpki-client