$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer File: 6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer (raw, json) Hash identifier: DTOXawikig8so7sobi2iyFp2LcilWAswMtJbWdtOuWA= Subject key identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EAD14C3D557B5476DB2366800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Jul 2026 00:45:12 +0000 Certificate not after: Thu 02 Nov 2028 00:45:12 +0000 Subordinate resources: AS: 18649 AS: 22242 AS: 36371 AS: 54508 AS: 54563 AS: 395279 IP: 66.11.192.0/19 IP: 192.190.8.0/24 IP: 199.101.104.0/22 IP: 208.86.72.0/21 IP: 208.95.192.0/21 IP: 208.103.80.0/20 IP: 2620:10f:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:14:c3:d5:57:b5:47:6d:b2:36:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 31 00:45:12 2026 GMT Not After : Nov 2 00:45:12 2028 GMT Subject: CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:f5:1b:22:5a:2d:3a:e1:ab:62:c1:62:d7: f4:12:52:de:cf:03:d8:13:11:fa:f3:44:0b:a3:c6: 14:bd:a5:94:83:a3:18:1f:8e:9d:94:0d:8b:92:b8: d5:34:7c:8c:e3:f4:dd:08:f6:2c:dc:ec:65:1a:73: 62:6a:ff:a2:a1:1a:29:c4:2e:b6:54:fe:75:56:71: 90:4a:9d:9c:8a:b6:2f:71:48:c1:e1:b1:16:87:d5: 1d:61:ce:19:9a:af:7a:f7:de:fc:0b:a9:56:7a:bd: 92:d2:dd:8b:c3:8e:98:40:46:9b:f6:07:89:d3:83: b0:ab:f3:32:da:09:78:4d:bb:11:0e:c2:47:39:76: 01:6c:73:77:1d:41:f4:94:b6:00:bc:9e:f7:17:99: 6d:98:d4:02:db:d9:7e:62:5e:25:45:4b:71:74:e8: 33:20:19:81:77:ed:77:74:24:28:dc:48:ff:bd:a9: 3a:0e:c1:7a:f4:11:5b:51:e9:44:9a:99:a0:21:af: ae:25:be:7e:12:30:1c:a5:4d:9e:2c:7b:97:5c:1e: 69:7b:b6:5d:f1:4d:f7:7a:8d:1f:90:b8:61:64:01: 64:87:1b:35:cf:3d:09:d0:4b:85:3b:0b:c0:8b:6d: 99:05:40:df:d9:13:27:dd:15:fd:b7:82:f1:f5:f7: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.11.192.0/19 192.190.8.0/24 199.101.104.0/22 208.86.72.0/21 208.95.192.0/21 208.103.80.0/20 IPv6: 2620:10f:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18649 22242 36371 54508 54563 395279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d6:ac:28:32:b2:43:e5:3f:e3:dc:75:52:5a:23:cc:6f:23: 24:d8:21:13:66:0c:65:c3:f5:b0:e8:e7:4e:36:19:5e:cb:53: b1:cc:30:83:88:4b:96:42:ed:17:98:65:80:f1:a1:6e:c2:89: e7:a2:55:30:80:fd:39:9d:b8:20:d4:1a:19:06:a0:e0:02:82: cc:43:c9:0d:78:e2:08:7c:8f:d9:aa:67:e1:00:88:7d:9a:88: bb:42:0d:12:75:da:e4:92:54:0f:69:d0:4f:e5:c8:6b:fb:d6: 23:1d:6c:35:26:3f:c8:85:43:27:2e:5c:3c:40:f4:06:e1:01: 8b:59:66:6c:8f:ae:b7:43:1d:9e:2a:f5:3a:c7:d8:67:e5:fc: c7:a0:cf:d8:5c:4a:7b:66:f9:32:21:6d:b5:cc:70:b9:05:0f: fe:7d:c6:9a:c6:3d:7e:26:91:43:94:ac:34:6d:3f:a4:f2:2f: c0:77:a3:83:a2:df:50:1a:92:d1:16:cb:77:69:6a:64:6e:57: 86:45:b2:79:4a:2c:f8:e1:76:50:5d:98:71:7b:71:bd:23:5f: 18:00:c2:15:a0:20:53:77:8c:bd:9f:8a:15:13:20:9f:c4:41: 6d:c3:cf:ee:44:03:47:46:cb:e1:b9:3f:e3:fa:bd:c6:3c:ae: 7b:6a:ff:ef -----BEGIN CERTIFICATE----- MIIHTjCCBjagAwIBAgIUAQ0Mn0MoWE6tFMPVV7VHbbI2aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDczMTAwNDUxMloXDTI4MTEwMjAwNDUxMlowLzEtMCsGA1UEAxMk NmY0ZDhlNmItZTY2ZS00NmY5LThlZjItZjJkYTE5ODFjYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyT1GyJaLTrhq2LBYtf0ElLezwPYExH680QL o8YUvaWUg6MYH46dlA2LkrjVNHyM4/TdCPYs3OxlGnNiav+ioRopxC62VP51VnGQ Sp2cirYvcUjB4bEWh9UdYc4Zmq969978C6lWer2S0t2Lw46YQEab9geJ04Owq/My 2gl4TbsRDsJHOXYBbHN3HUH0lLYAvJ73F5ltmNQC29l+Yl4lRUtxdOgzIBmBd+13 dCQo3Ej/vak6DsF69BFbUelEmpmgIa+uJb5+EjAcpU2eLHuXXB5pe7Zd8U33eo0f kLhhZAFkhxs1zz0J0EuFOwvAi22ZBUDf2RMn3RX9t4Lx9fdw2QIDAQABo4IEYDCC BFwwHQYDVR0OBBYEFLkf3BeioRdWVudQJ5YWnz+62hsoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4MWNiY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzZmNGQ4ZTZiLWU2NmUtNDZmOS04 ZWYyLWYyZGExOTgxY2JjYS82ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4 MWNiY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAVCC8ADBADAvggDBALHZWgDBAPQVkgDBAPQX8AD BATQZ1AwDgQCAAIwCAMGACYgAQ/gMDEGCCsGAQUFBwEIAQH/BCIwIKAeMBwCAkjZ AgJW4gIDAI4TAgMA1OwCAwDVIwIDBggPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACHWrCgyskPlP+PcdVJa I8xvIyTYIRNmDGXD9bDo5042GV7LU7HMMIOIS5ZC7ReYZYDxoW7CieeiVTCA/Tmd uCDUGhkGoOACgsxDyQ144gh8j9mqZ+EAiH2aiLtCDRJ12uSSVA9p0E/lyGv71iMd bDUmP8iFQycuXDxA9AbhAYtZZmyPrrdDHZ4q9TrH2Gfl/Megz9hcSntm+TIhbbXM cLkFD/59xprGPX4mkUOUrDRtP6TyL8B3o4Oi31AaktEWy3dpamRuV4ZFsnlKLPjh dlBdmHF7cb0jXxgAwhWgIFN3jL2fihUTIJ/EQW3Dz+5EA0dGy+G5P+P6vcY8rntq /+8= -----END CERTIFICATE-----Generated at Sat Aug 1 09:10:03 2026 by rpki-client