$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer File: 3d9879da-145f-4f21-a7c3-da6b59a01625.cer (raw, json) Hash identifier: uGG/T53fvM2IgJwUWjnBPPVtU3syJ2e4BGanQL7AT54= Subject key identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584ECA64F1F2A5F98F0B827C4240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Aug 2026 12:45:11 +0000 Certificate not after: Sun 12 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 46766 IP: 23.170.72.0/24 IP: 199.241.60.0/23 IP: 2602:f9a2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:64:f1:f2:a5:f9:8f:0b:82:7c:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 10 12:45:11 2026 GMT Not After : Nov 12 13:45:11 2028 GMT Subject: CN=3d9879da-145f-4f21-a7c3-da6b59a01625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:05:4e:af:7d:fe:02:2d:1a:e4:a2:fa:52: e0:e9:e9:d5:ac:2f:59:44:ad:c6:de:e8:06:1d:17: 50:f2:84:79:b4:cc:5f:b0:d0:13:79:ff:fd:3b:d1: 9b:ad:59:ca:e5:8f:14:bd:d1:c1:73:16:2d:fa:33: 48:f6:f4:0d:91:2e:10:55:5c:b8:20:9a:28:b7:60: c9:8a:04:12:11:8c:42:17:81:35:66:10:7a:45:e3: ce:97:e2:d4:1b:df:2e:30:4e:9d:32:e5:25:9b:d2: 9e:09:d9:c9:42:9a:28:fc:c1:b6:2e:de:ab:b5:aa: 9d:10:b2:5d:02:e5:ee:39:3a:da:b0:22:d3:52:a2: 53:23:c4:80:3c:01:55:fb:9c:98:a0:de:78:cc:ba: 16:ef:29:cc:24:11:97:f5:cf:d1:f1:7d:32:ae:8f: 9a:1b:28:e8:6f:94:11:b6:98:40:5f:35:4e:d8:e3: bb:e0:07:41:52:fc:3c:1a:33:4e:d6:56:4d:a9:02: d7:a6:40:a3:bb:87:77:8c:9c:bb:78:00:c2:ce:12: ca:2d:45:54:9d:2f:d5:24:d8:ed:6b:43:85:72:4c: 8b:fa:df:14:0d:51:61:b5:de:f8:cb:ac:f3:4e:de: ec:15:0c:fa:9c:6d:d8:27:82:01:34:3c:01:1d:b6: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.72.0/24 199.241.60.0/23 IPv6: 2602:f9a2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:37:ae:60:ef:ac:00:ea:3d:b1:cb:b9:e2:c2:09:bc:c6:33: ea:8c:bd:df:77:87:cb:ca:02:ce:38:20:14:7b:22:8d:06:db: 8e:c3:43:83:bd:0a:94:de:0a:a0:87:b3:fd:d8:a7:45:06:9d: 09:18:47:4a:1a:be:d9:c8:d7:48:05:fe:aa:0a:17:2c:88:2d: 4a:62:78:4e:e6:98:e3:79:57:ad:7d:4f:3e:d0:f1:73:cb:b7: 0e:a5:b3:76:5a:a2:2c:ce:59:df:0a:13:ca:66:12:f5:5b:fe: fa:46:b0:69:9c:b2:73:82:b5:5c:57:fe:bb:56:64:bc:7d:91: e6:63:92:55:96:98:d5:fe:de:66:91:91:94:d6:89:97:fe:03: b3:aa:76:8d:ae:5e:32:53:57:82:fb:4b:3b:51:45:fa:b3:ee: 4a:da:84:d8:87:35:97:0c:9c:0f:d2:52:65:6d:28:91:50:a7: e2:ed:0b:b4:8f:62:c4:1b:e5:b8:ea:9c:4c:9f:e0:b1:f2:f3: 9e:8f:d9:0e:99:53:9f:8a:b3:72:5c:ae:18:e0:ad:45:5e:4e: d0:13:86:2f:69:da:56:c1:18:a6:4b:77:23:15:54:3d:1f:58: 79:d4:ea:fa:cf:cf:7b:e8:5f:50:ec:53:f8:c7:b5:1c:16:df: f9:2c:63:60 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE7KZPHypfmPC4J8QkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxMDEyNDUxMVoXDTI4MTExMjEzNDUxMVowLzEtMCsGA1UEAxMk M2Q5ODc5ZGEtMTQ1Zi00ZjIxLWE3YzMtZGE2YjU5YTAxNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9cFTq99/gItGuSi+lLg6enVrC9ZRK3G3ugG HRdQ8oR5tMxfsNATef/9O9GbrVnK5Y8UvdHBcxYt+jNI9vQNkS4QVVy4IJoot2DJ igQSEYxCF4E1ZhB6RePOl+LUG98uME6dMuUlm9KeCdnJQpoo/MG2Lt6rtaqdELJd AuXuOTrasCLTUqJTI8SAPAFV+5yYoN54zLoW7ynMJBGX9c/R8X0yro+aGyjob5QR tphAXzVO2OO74AdBUvw8GjNO1lZNqQLXpkCju4d3jJy7eADCzhLKLUVUnS/VJNjt a0OFckyL+t8UDVFhtd74y6zzTt7sFQz6nG3YJ4IBNDwBHbabJwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCDmWdT5QlIKbr62y3iDbSbs+k3kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlhMDE2MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNkOTg3OWRhLTE0NWYtNGYyMS1h N2MzLWRhNmI1OWEwMTYyNS8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlh MDE2MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXqkgDBAHH8TwwDgQCAAIwCAMGACYC+aIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC2rjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcN65g76wA6j2xy7ni wgm8xjPqjL3fd4fLygLOOCAUeyKNBtuOw0ODvQqU3gqgh7P92KdFBp0JGEdKGr7Z yNdIBf6qChcsiC1KYnhO5pjjeVetfU8+0PFzy7cOpbN2WqIszlnfChPKZhL1W/76 RrBpnLJzgrVcV/67VmS8fZHmY5JVlpjV/t5mkZGU1omX/gOzqnaNrl4yU1eC+0s7 UUX6s+5K2oTYhzWXDJwP0lJlbSiRUKfi7Qu0j2LEG+W46pxMn+Cx8vOej9kOmVOf irNyXK4Y4K1FXk7QE4YvadpWwRimS3cjFVQ9H1h51Or6z8976F9Q7FP4x7UcFt/5 LGNg -----END CERTIFICATE-----Generated at Thu Aug 27 20:03:33 2026 by rpki-client