$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer File: 2522458f-db94-4ba6-8127-005675e4eea9.cer (raw, json) Hash identifier: cSM8ulxQQo0JDQkjLyDgxF/PeX4+G7HdIrMf5ZGlQ1w= Subject key identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EEBE526671B5FEDF76B6A2C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Aug 2026 12:45:11 +0000 Certificate not after: Fri 24 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 36000 IP: 208.73.76.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:e5:26:67:1b:5f:ed:f7:6b:6a:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 22 12:45:11 2026 GMT Not After : Nov 24 13:45:11 2028 GMT Subject: CN=2522458f-db94-4ba6-8127-005675e4eea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:5a:5a:ea:b9:d4:d5:15:be:49:9e:e6:c0: 8a:86:e0:90:51:2f:4e:1d:4b:fc:26:5a:bf:7f:f2: d6:a0:b7:73:36:46:ef:11:88:95:29:a4:1e:ed:38: 99:a0:45:96:e1:cc:bb:93:28:36:57:32:f7:d4:d3: 92:e7:1f:4c:93:4c:d3:02:5d:21:3c:b4:c6:df:fa: 63:62:f4:f3:32:b9:d6:e0:f1:19:4b:23:55:1b:a3: ec:db:bf:62:14:d4:86:9e:82:23:d3:22:75:54:7e: 34:41:c2:6b:66:6d:7d:e4:f3:51:2e:69:2a:0e:1c: f7:ee:f1:bf:b2:8f:c5:cc:47:26:5d:d9:ef:b2:40: 5f:58:e3:2f:3b:06:c4:57:d4:2a:50:08:ea:b8:79: f4:c1:8a:82:90:ba:16:49:a4:14:6f:6c:5e:3e:82: ff:32:1b:07:e9:d9:6f:06:bc:2e:8b:29:eb:ff:cd: 7b:ab:c8:ef:05:52:d5:0c:b9:1b:a9:09:8c:51:34: 71:72:5d:5c:83:4e:bf:23:3d:33:34:f7:03:90:55: 0c:29:7c:d3:de:49:02:67:7c:08:b8:6d:39:24:38: eb:81:ab:bc:a3:85:33:b2:0c:42:36:0f:2a:09:a9: 22:ba:ed:3f:c1:9b:2d:f7:38:08:04:e1:2d:d8:d6: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.73.76.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36000 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:75:fb:78:f2:f9:55:14:8b:d8:de:72:25:7b:53:a7:e2:f0: 20:ff:3a:a4:7f:18:21:b9:87:03:9f:ec:b5:d5:b8:77:c4:4f: e6:9c:03:4c:8d:6b:fd:3f:83:4d:ad:2f:0a:ed:34:fa:c6:07: 60:1b:28:b0:19:b8:ba:06:50:e9:7d:2e:0b:4a:d9:0c:6b:37: 3c:52:cf:e6:98:fe:75:8a:32:2b:d6:4b:6b:b2:25:ec:2b:df: e0:ae:07:81:b0:5a:76:45:c5:e9:6b:be:44:12:db:8a:a1:03: 4f:23:b4:b2:e2:47:90:1a:04:be:48:98:a3:ec:f2:6d:0c:56: ea:41:97:e1:e8:33:b9:cf:4b:24:3d:a8:59:02:89:6e:9a:c0: 65:bc:ef:ee:4a:63:6c:5f:01:af:6b:c5:67:bb:e7:f5:1e:0c: db:17:b0:69:85:ad:cc:b7:94:37:e0:af:62:61:7e:91:43:e4: e4:2f:0d:17:f9:08:f7:39:03:ee:65:9d:f7:90:b3:88:d7:ef: ea:2d:2d:a2:8c:d0:89:49:31:b5:cf:95:76:6c:06:0c:f1:9b: 95:2d:ab:29:d5:20:74:78:6a:27:a1:67:9a:48:f2:16:52:91: 06:f0:eb:46:89:4a:0d:50:5a:49:99:60:7a:f1:21:0e:b3:b3: b2:52:be:c8 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE7r5SZnG1/t92tqLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyMjEyNDUxMVoXDTI4MTEyNDEzNDUxMVowLzEtMCsGA1UEAxMk MjUyMjQ1OGYtZGI5NC00YmE2LTgxMjctMDA1Njc1ZTRlZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7daWuq51NUVvkme5sCKhuCQUS9OHUv8Jlq/ f/LWoLdzNkbvEYiVKaQe7TiZoEWW4cy7kyg2VzL31NOS5x9Mk0zTAl0hPLTG3/pj YvTzMrnW4PEZSyNVG6Ps279iFNSGnoIj0yJ1VH40QcJrZm195PNRLmkqDhz37vG/ so/FzEcmXdnvskBfWOMvOwbEV9QqUAjquHn0wYqCkLoWSaQUb2xePoL/MhsH6dlv Brwuiynr/817q8jvBVLVDLkbqQmMUTRxcl1cg06/Iz0zNPcDkFUMKXzT3kkCZ3wI uG05JDjrgau8o4UzsgxCNg8qCakiuu0/wZst9zgIBOEt2NZSHwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFnB3CteHpeiVco+Q0RJmSPoJuUBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y NTIyNDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2NzVlNGVlYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI1MjI0NThmLWRiOTQtNGJhNi04 MTI3LTAwNTY3NWU0ZWVhOS8yNTIyNDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2NzVl NGVlYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQSUwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEh1+3jy+VUUi9jeciV7U6fi8CD/OqR/GCG5hwOf7LXVuHfE T+acA0yNa/0/g02tLwrtNPrGB2AbKLAZuLoGUOl9LgtK2QxrNzxSz+aY/nWKMivW S2uyJewr3+CuB4GwWnZFxelrvkQS24qhA08jtLLiR5AaBL5ImKPs8m0MVupBl+Ho M7nPSyQ9qFkCiW6awGW87+5KY2xfAa9rxWe75/UeDNsXsGmFrcy3lDfgr2JhfpFD 5OQvDRf5CPc5A+5lnfeQs4jX7+otLaKM0IlJMbXPlXZsBgzxm5UtqynVIHR4aieh Z5pI8hZSkQbw60aJSg1QWkmZYHrxIQ6zs7JSvsg= -----END CERTIFICATE-----Generated at Mon Aug 31 08:38:09 2026 by rpki-client