$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer File: 4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer (raw, json) Hash identifier: AXl3VFXfOfZWSJTtCF9iu5ccb+jHilHpWbKAdEqzcZw= Subject key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F5BD20C754C180BE097021CA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 14:57:14 +0000 Certificate not after: Tue 22 Feb 2028 18:22:31 +0000 Subordinate resources: AS: 394457 IP: 23.149.228.0/24 IP: 199.193.0.0/22 IP: 2604:2960::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:d2:0c:75:4c:18:0b:e0:97:02:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 1 14:57:14 2026 GMT Not After : Feb 22 18:22:31 2028 GMT Subject: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d4:53:ab:7b:ee:ad:26:91:08:d2:bb:b4:d2: 5d:46:3c:e0:79:96:cf:1e:65:18:0d:c0:14:55:c2: 32:55:27:b4:81:b4:05:82:1d:14:eb:62:4b:a8:fe: 20:97:b4:ed:14:83:1c:79:c9:a3:16:3c:eb:1c:9e: 15:e5:f1:a1:9e:38:7a:91:12:68:8d:2f:be:86:6e: d9:f6:5f:53:f0:fc:84:22:05:9f:3c:ab:db:08:6c: 07:d3:38:aa:af:f7:0b:01:70:82:33:f8:19:8d:83: b4:03:84:2a:e9:39:f2:01:74:68:58:ca:48:72:4b: 7e:45:3f:8b:8d:43:b9:f9:b4:72:a0:22:9b:67:f3: 5a:ba:aa:67:37:2f:6c:3b:a5:52:38:0a:d0:8e:6e: 59:8f:d9:be:82:9d:c2:1d:cf:e7:52:42:78:21:a3: 38:74:cc:49:d5:a6:59:b3:b0:57:02:82:91:b0:1e: 89:c1:92:71:b5:fc:3f:ac:6b:65:4d:ae:04:5b:f7: a8:ab:9e:58:3a:91:47:71:7e:6b:be:18:ec:4e:14: 7d:49:f7:be:55:06:93:9e:03:79:96:c2:1f:96:ac: fb:31:0f:63:55:d3:af:b6:ab:7a:64:6c:31:3a:e2: 7a:b4:10:10:d4:ee:b5:3b:14:9d:05:07:6d:1b:2d: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.149.228.0/24 199.193.0.0/22 IPv6: 2604:2960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394457 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:92:5b:75:c6:6b:04:e7:61:0e:31:83:4e:b4:d6:a3:53:d9: aa:5f:f0:d9:f2:a5:21:0b:cb:78:17:7c:63:eb:bc:ac:3b:7e: f2:24:7c:c0:5c:1f:e2:fb:bd:fc:e9:68:f0:d4:0e:58:c4:ae: 36:9e:ef:63:89:b7:28:b3:4b:6c:f1:06:f1:5e:13:d1:20:de: 6f:09:a4:b8:ab:89:5b:6c:a4:c3:7c:90:61:5a:77:16:b1:d8: 65:19:87:7a:24:28:d8:dd:32:7b:8b:50:e8:e4:58:72:43:0d: 12:c4:15:6d:11:57:91:b0:07:62:c3:e7:f8:95:38:df:a4:bc: ea:f0:df:a3:52:bc:86:ed:4a:ce:a5:52:9c:a4:39:c2:99:82: 97:b9:25:59:5c:e9:46:cf:10:f3:2c:e2:d0:85:48:99:35:a0: 99:a7:b5:b5:02:b4:6d:26:7f:56:fe:bb:54:41:c7:15:ca:76: 2e:a7:b8:d2:6c:7b:f9:a2:e9:52:b0:9b:df:5d:4b:f2:61:82: 4c:6d:3b:b7:be:7d:ad:31:ae:35:cb:5a:16:0f:41:bc:ba:61: b4:db:39:48:02:dc:1a:b4:a6:66:ce:af:9e:54:11:09:67:b8: ef:bd:46:eb:88:14:73:b3:f5:9e:8f:ab:18:a4:bc:21:59:aa: e1:41:ce:cc -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9b0gx1TBgL4JcCHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwMTE0NTcxNFoXDTI4MDIyMjE4MjIzMVowLzEtMCsGA1UEAxMk NGE0MGU5ZTYtMzU3Zi00NTNkLWIzODYtZDcxZmQ5ZDI0Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NRTq3vurSaRCNK7tNJdRjzgeZbPHmUYDcAU VcIyVSe0gbQFgh0U62JLqP4gl7TtFIMcecmjFjzrHJ4V5fGhnjh6kRJojS++hm7Z 9l9T8PyEIgWfPKvbCGwH0ziqr/cLAXCCM/gZjYO0A4Qq6TnyAXRoWMpIckt+RT+L jUO5+bRyoCKbZ/NauqpnNy9sO6VSOArQjm5Zj9m+gp3CHc/nUkJ4IaM4dMxJ1aZZ s7BXAoKRsB6JwZJxtfw/rGtlTa4EW/eoq55YOpFHcX5rvhjsThR9Sfe+VQaTngN5 lsIflqz7MQ9jVdOvtqt6ZGwxOuJ6tBAQ1O61OxSdBQdtGy0U3wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFLJPAvSsXL1AgknOnDDQcyaMlH/KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 YTQwZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFmZDlkMjRjZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRhNDBlOWU2LTM1N2YtNDUzZC1i Mzg2LWQ3MWZkOWQyNGNmOC80YTQwZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFmZDlk MjRjZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXleQDBALHwQAwDQQCAAIwBwMFACYEKWAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgTZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAeSW3XGawTnYQ4xg060 1qNT2apf8NnypSELy3gXfGPrvKw7fvIkfMBcH+L7vfzpaPDUDljErjae72OJtyiz S2zxBvFeE9Eg3m8JpLiriVtspMN8kGFadxax2GUZh3okKNjdMnuLUOjkWHJDDRLE FW0RV5GwB2LD5/iVON+kvOrw36NSvIbtSs6lUpykOcKZgpe5JVlc6UbPEPMs4tCF SJk1oJmntbUCtG0mf1b+u1RBxxXKdi6nuNJse/mi6VKwm99dS/JhgkxtO7e+fa0x rjXLWhYPQby6YbTbOUgC3Bq0pmbOr55UEQlnuO+9RuuIFHOz9Z6PqxikvCFZquFB zsw= -----END CERTIFICATE-----Generated at Mon Oct 26 01:42:45 2026 by rpki-client