$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer File: 3e08da12-c2b8-4581-b1af-e8322645d15e.cer (raw, json) Hash identifier: tA9P1EgSTxAqvWWK4SawaVW+lv2h+YmM5uTu9nHbE5I= Subject key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F4F006FBDB485461338319C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Sep 2026 00:45:11 +0000 Certificate not after: Sat 30 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 398448 IP: 208.93.120.0/22 IP: 2607:a340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:00:6f:bd:b4:85:46:13:38:31:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 27 00:45:11 2026 GMT Not After : Dec 30 01:45:11 2028 GMT Subject: CN=3e08da12-c2b8-4581-b1af-e8322645d15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:5f:62:19:3e:c2:26:a6:f2:33:95:97:b7: 72:96:3f:52:d4:90:de:59:13:38:4b:1a:b6:ae:60: 30:25:d9:4e:54:8e:f0:d1:77:32:af:8e:72:2d:83: e2:af:78:d9:9b:96:0b:73:35:00:08:0f:66:c0:00: 17:01:22:6d:f3:d7:dc:6e:f8:bd:6f:8b:e6:94:df: d0:ca:1f:44:24:c4:83:ff:44:80:6e:81:7f:96:93: b6:fc:da:29:42:e3:c4:bd:c2:b3:bf:bf:c9:8b:7f: d1:62:c7:41:47:76:27:29:42:7c:f9:95:40:43:32: e4:82:93:d1:79:2d:2a:62:9b:21:13:d5:12:77:38: 1c:93:e1:39:ff:97:cc:3b:94:16:5d:cd:fd:07:54: 17:57:b4:40:87:46:4b:7c:7f:9e:fa:77:84:4c:16: 2f:bb:16:1c:db:55:9a:b7:89:23:b7:5e:36:62:22: 22:95:01:9b:ac:d3:3a:a7:85:af:4b:36:81:8d:f0: 25:25:d3:64:3f:a1:55:86:1d:17:21:94:bb:7d:60: 69:49:75:06:b7:52:68:cb:b8:c0:87:37:48:1c:01: a4:03:d7:3e:3c:5a:d2:39:39:32:6c:5b:83:61:3c: fc:e8:e5:cc:42:c4:54:73:89:03:a0:cf:15:8f:25: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.93.120.0/22 IPv6: 2607:a340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398448 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d2:6e:32:28:13:33:6a:74:59:b5:d1:8e:9d:b3:e7:ed:dc: ac:2f:5a:1c:ed:f5:8c:79:ff:7c:bc:e6:7b:e6:45:7c:6d:0b: 55:c7:5f:66:06:b0:27:fb:66:28:ea:83:26:08:0a:76:ce:fb: f7:4c:e5:01:04:7b:2d:34:ab:ca:6b:04:13:6e:4b:51:28:db: 94:86:c3:4b:a3:a7:1c:45:50:83:e3:53:70:64:ec:49:bb:9e: 57:e8:e1:e1:6e:f9:d7:66:53:f8:78:9d:74:5a:9c:59:ae:0a: 80:b4:98:a6:62:3f:d4:ee:63:61:f3:96:fb:b7:25:ba:7b:29: 12:2b:da:b1:66:ad:9e:0d:86:ef:a2:d9:1b:fc:7d:6d:a7:40: de:32:7f:b1:ff:49:1a:65:fc:4b:e0:5d:ab:6e:33:35:4e:44: f4:43:92:56:45:ce:0f:14:ea:db:4b:86:75:6d:e2:85:f5:2c: d2:5f:67:09:46:13:e6:42:c0:b6:07:f4:39:8d:64:3a:f0:5c: 13:85:0d:24:43:77:56:d9:f1:57:bd:a0:3e:1c:eb:0a:e7:e8: 45:ce:ad:d1:79:14:4a:e1:d7:47:59:ea:46:62:fa:51:27:66: 3b:79:cc:6b:f7:03:20:56:2c:8f:84:d7:97:50:96:a9:fd:89: 38:e8:b9:99 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE9PAG+9tIVGEzgxnGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyNzAwNDUxMVoXDTI4MTIzMDAxNDUxMVowLzEtMCsGA1UEAxMk M2UwOGRhMTItYzJiOC00NTgxLWIxYWYtZTgzMjI2NDVkMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuFfYhk+wiam8jOVl7dylj9S1JDeWRM4Sxq2 rmAwJdlOVI7w0Xcyr45yLYPir3jZm5YLczUACA9mwAAXASJt89fcbvi9b4vmlN/Q yh9EJMSD/0SAboF/lpO2/NopQuPEvcKzv7/Ji3/RYsdBR3YnKUJ8+ZVAQzLkgpPR eS0qYpshE9USdzgck+E5/5fMO5QWXc39B1QXV7RAh0ZLfH+e+neETBYvuxYc21Wa t4kjt142YiIilQGbrNM6p4WvSzaBjfAlJdNkP6FVhh0XIZS7fWBpSXUGt1Joy7jA hzdIHAGkA9c+PFrSOTkybFuDYTz86OXMQsRUc4kDoM8VjyXuTwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFI9PK1jaXlcyViv3lzMYMjwXKQ1GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0NWQxNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNlMDhkYTEyLWMyYjgtNDU4MS1i MWFmLWU4MzIyNjQ1ZDE1ZS8zZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0 NWQxNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALQXXgwDQQCAAIwBwMFACYHo0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhRwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJPSbjIoEzNqdFm10Y6ds+ft3Kwv Whzt9Yx5/3y85nvmRXxtC1XHX2YGsCf7ZijqgyYICnbO+/dM5QEEey00q8prBBNu S1Eo25SGw0ujpxxFUIPjU3Bk7Em7nlfo4eFu+ddmU/h4nXRanFmuCoC0mKZiP9Tu Y2Hzlvu3Jbp7KRIr2rFmrZ4Nhu+i2Rv8fW2nQN4yf7H/SRpl/EvgXatuMzVORPRD klZFzg8U6ttLhnVt4oX1LNJfZwlGE+ZCwLYH9DmNZDrwXBOFDSRDd1bZ8Ve9oD4c 6wrn6EXOrdF5FErh10dZ6kZi+lEnZjt5zGv3AyBWLI+E15dQlqn9iTjouZk= -----END CERTIFICATE-----Generated at Sun Oct 4 18:01:06 2026 by rpki-client