$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer File: 34b1000a-ddde-44a7-ad9c-12d049acde17.cer (raw, json) Hash identifier: fNJ5hjIAqrgVJ0xpaErAChTZ9TZs7r+EsK7jYAX5g+4= Subject key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EB144CA65F42F15930EFE7580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Aug 2026 12:45:11 +0000 Certificate not after: Fri 03 Nov 2028 12:45:11 +0000 Subordinate resources: AS: 17103 IP: 208.90.144.0/22 IP: 2620:1b::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b1:44:ca:65:f4:2f:15:93:0e:fe:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 1 12:45:11 2026 GMT Not After : Nov 3 12:45:11 2028 GMT Subject: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:77:df:e4:29:c5:f0:92:dc:87:6b:6a:60: d1:0e:e2:c3:1a:7c:c2:b1:27:78:25:c7:5d:d0:25: 2a:24:30:29:83:25:e2:04:e0:4d:b6:69:8e:83:f2: 2d:98:d6:18:eb:bd:de:6d:35:a6:a5:7d:3c:f9:16: eb:e6:3d:00:33:3f:12:5b:82:16:c2:b3:8c:2d:dd: 85:7a:27:07:cd:a8:db:36:71:18:0c:46:e1:86:c1: d6:30:d0:cf:a2:66:9b:d7:8e:b4:dc:fa:f6:22:9b: 46:b1:63:c6:af:a4:29:ac:be:8a:e8:6e:4c:67:38: 3f:90:3b:49:47:25:7a:e5:3f:bf:c2:59:7d:83:26: 34:02:44:41:14:fe:ab:9f:16:24:2b:bc:9a:be:d9: 9a:df:d8:50:fd:ac:6c:33:8f:8a:78:08:96:fc:24: 8f:9c:49:0f:17:4f:ce:c5:f5:28:9e:e7:cb:8a:20: f4:86:e3:f6:94:07:50:51:39:99:69:de:fb:78:25: c9:0d:9b:72:5c:a1:78:d8:fb:a8:b6:26:c1:94:2c: 50:ca:90:de:76:f2:55:50:2f:d5:d1:58:28:5c:44: 3e:a6:37:46:5f:fd:20:7a:78:58:0b:0d:4d:62:a6: 29:30:18:c8:72:eb:ea:cb:84:88:b4:cf:fb:0e:8c: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.144.0/22 IPv6: 2620:1b::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17103 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d2:3a:0f:d1:13:fb:64:85:a9:f8:b7:36:6a:2f:3d:7f:0c: f4:a0:cb:9d:b7:f5:ab:c8:d8:c8:32:63:ee:9b:40:ce:e9:cd: cf:d8:c6:ac:5d:48:c6:39:56:dd:16:c4:79:20:09:a4:ef:57: d5:16:ff:b3:fb:91:58:f2:37:d6:19:5d:af:ee:2c:16:b7:01: d0:d9:19:16:33:22:09:31:35:69:73:20:94:23:4b:9d:ac:6c: 6a:c2:02:c8:93:d7:29:1e:35:5a:ea:cb:67:b4:3d:11:98:90: 2f:92:2a:92:a7:22:4a:9a:ce:f2:86:f6:4f:65:b6:9b:5a:f3: 1b:df:5f:6a:cf:50:e7:71:50:10:1f:6f:eb:4f:6c:96:55:b1: f9:b7:cb:23:62:5b:1f:a4:42:92:bf:b9:17:75:8f:58:0a:0f: 24:00:42:22:aa:2e:24:08:67:19:5e:d8:66:f2:91:5d:14:66: 0c:5e:2c:b5:4c:b0:13:ca:ef:83:1b:3b:81:e1:2a:7f:e5:3f: 42:41:40:dc:00:6c:39:3f:3a:71:42:b8:10:41:b3:25:9b:61: c1:0d:11:dd:b3:21:56:7a:a7:97:4d:85:e1:9b:53:55:c2:58: 7c:ad:df:fd:3c:0f:15:3a:f8:55:17:92:bf:7c:86:3a:c8:05: 6e:81:4c:29 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6xRMpl9C8Vkw7+dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgwMTEyNDUxMVoXDTI4MTEwMzEyNDUxMVowLzEtMCsGA1UEAxMk MzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNkZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w133+QpxfCS3IdramDRDuLDGnzCsSd4Jcdd 0CUqJDApgyXiBOBNtmmOg/ItmNYY673ebTWmpX08+Rbr5j0AMz8SW4IWwrOMLd2F eicHzajbNnEYDEbhhsHWMNDPomab14603Pr2IptGsWPGr6QprL6K6G5MZzg/kDtJ RyV65T+/wll9gyY0AkRBFP6rnxYkK7yavtma39hQ/axsM4+KeAiW/CSPnEkPF0/O xfUonufLiiD0huP2lAdQUTmZad77eCXJDZtyXKF42PuotibBlCxQypDedvJVUC/V 0VgoXEQ+pjdGX/0genhYCw1NYqYpMBjIcuvqy4SItM/7DoyWRQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFB7sD/bxHYemE/Oh2yiTtYc+x7eJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM0YjEwMDBhLWRkZGUtNDRhNy1h ZDljLTEyZDA0OWFjZGUxNy8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlh Y2RlMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALQWpAwDwQCAAIwCQMHBCYgABsAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJCzzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+0joP0RP7ZIWp+Lc2ai89fwz0 oMudt/WryNjIMmPum0DO6c3P2MasXUjGOVbdFsR5IAmk71fVFv+z+5FY8jfWGV2v 7iwWtwHQ2RkWMyIJMTVpcyCUI0udrGxqwgLIk9cpHjVa6stntD0RmJAvkiqSpyJK ms7yhvZPZbabWvMb319qz1DncVAQH2/rT2yWVbH5t8sjYlsfpEKSv7kXdY9YCg8k AEIiqi4kCGcZXthm8pFdFGYMXiy1TLATyu+DGzuB4Sp/5T9CQUDcAGw5PzpxQrgQ QbMlm2HBDRHdsyFWeqeXTYXhm1NVwlh8rd/9PA8VOvhVF5K/fIY6yAVugUwp -----END CERTIFICATE-----Generated at Fri Sep 18 23:42:49 2026 by rpki-client