$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer File: a36c31cd-64fa-4048-853b-eaea17e56691.cer (raw, json) Hash identifier: cQzybCrYYn08cnkP35RJSf+ttzivedRIzYcLubPfu9Q= Subject key identifier: A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F5495CF44A56CCC16B331BEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Sep 2026 00:45:12 +0000 Certificate not after: Mon 01 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 23.139.244.0/24 IP: 2602:f620::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:95:cf:44:a5:6c:cc:16:b3:31:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 29 00:45:12 2026 GMT Not After : Jan 1 01:45:12 2029 GMT Subject: CN=a36c31cd-64fa-4048-853b-eaea17e56691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:12:68:b3:3c:52:6d:0a:9c:c7:ae:91:88: de:b0:0a:16:69:a0:61:02:79:d3:1d:0a:0d:1e:18: fe:44:86:e6:ad:ab:c2:83:2f:b3:a7:dd:36:9f:94: ab:49:5e:da:a2:cd:68:d1:23:14:6d:d7:04:99:df: 92:82:6c:c6:14:cd:29:9c:2a:e2:cb:79:5d:fb:57: 98:33:47:a3:9a:cc:6f:2c:4e:bd:0a:7e:31:a9:b9: 86:e3:33:02:92:ce:b6:e7:a6:bf:da:c0:97:76:a8: 07:8b:43:a8:62:3e:b2:02:70:e6:d6:74:e8:17:cc: 1c:00:95:21:36:06:72:9b:63:0a:70:e1:cb:c2:29: 79:7f:85:98:c1:10:54:b9:17:76:88:3d:be:ec:4b: ab:33:e8:50:9b:47:82:49:c9:65:39:69:97:cb:57: 93:1a:1d:cc:46:d8:f9:87:45:b6:1c:12:15:76:6b: 5f:8c:04:36:31:9a:ce:75:34:d4:c2:2d:6b:1c:e7: 00:0a:e2:64:ab:52:92:8e:c5:86:dc:ac:a6:c3:93: f0:fd:43:e1:70:16:b2:c1:48:0c:4d:0b:44:f9:03: a5:a8:a5:f0:8d:c0:0b:b4:9d:7e:85:33:66:72:b6: a2:01:da:22:c4:34:6c:37:11:c6:92:ba:ec:85:7c: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.139.244.0/24 IPv6: 2602:f620::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a9:04:52:38:47:95:9a:79:86:17:f1:bc:05:02:d9:d6:68: 84:b0:c4:22:78:5e:e3:bd:f9:38:d0:b9:5f:f9:d2:6e:15:ad: 8e:17:a6:44:c7:f9:8b:45:7f:7b:05:b1:92:2a:0f:12:a1:c9: fd:57:54:85:9e:eb:f2:cd:1a:e1:ed:6d:ec:d1:46:d8:b0:c4: fe:44:b1:8d:34:13:f8:d7:fe:9e:a5:49:0f:b3:87:a9:0e:60: 7d:59:cc:97:3e:f3:ec:38:f0:4f:e9:ae:3a:4d:3c:7e:cb:00: a2:35:d2:3c:95:bf:db:38:68:0f:64:44:c2:6b:ee:1e:06:2a: 8c:f0:fb:ce:76:86:cf:9b:d2:1b:ef:56:04:b6:26:76:3c:8f: 75:8e:9e:5f:fc:4d:95:aa:c7:86:73:c5:f7:9f:2a:09:f0:86: b3:be:d0:6c:cc:44:b2:e8:ce:4f:2a:4d:9d:03:58:ed:82:2b: 9e:95:4e:78:9a:fe:00:e1:f7:7e:ba:f2:ef:1e:a9:6f:ce:41: 58:ff:69:31:38:37:21:33:9d:0a:23:a4:d8:8e:00:61:ea:ce: 00:2e:64:47:94:7f:70:85:18:1d:21:e7:51:b8:46:5d:a9:3a: e1:ff:2e:a1:68:d9:13:61:b0:91:b8:c8:ee:e2:85:12:8b:a2: 3a:94:9e:93 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE9Ulc9EpWzMFrMxvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyOTAwNDUxMloXDTI5MDEwMTAxNDUxMlowLzEtMCsGA1UEAxMk YTM2YzMxY2QtNjRmYS00MDQ4LTg1M2ItZWFlYTE3ZTU2NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+4SaLM8Um0KnMeukYjesAoWaaBhAnnTHQoN Hhj+RIbmravCgy+zp902n5SrSV7aos1o0SMUbdcEmd+SgmzGFM0pnCriy3ld+1eY M0ejmsxvLE69Cn4xqbmG4zMCks6256a/2sCXdqgHi0OoYj6yAnDm1nToF8wcAJUh NgZym2MKcOHLwil5f4WYwRBUuRd2iD2+7EurM+hQm0eCScllOWmXy1eTGh3MRtj5 h0W2HBIVdmtfjAQ2MZrOdTTUwi1rHOcACuJkq1KSjsWG3Kymw5Pw/UPhcBaywUgM TQtE+QOlqKXwjcALtJ1+hTNmcraiAdoixDRsNxHGkrrshXykswIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKUTd015j+kQUntud0YtzZ/+QMD9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h MzZjMzFjZC02NGZhLTQwNDgtODUzYi1lYWVhMTdlNTY2OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2EzNmMzMWNkLTY0ZmEtNDA0OC04 NTNiLWVhZWExN2U1NjY5MS9hMzZjMzFjZC02NGZhLTQwNDgtODUzYi1lYWVhMTdl NTY2OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi/QwDgQCAAIwCAMGACYC9iAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHOpBFI4R5WaeYYX8bwFAtnWaISwxCJ4XuO9+TjQuV/50m4VrY4XpkTH+YtFf3sF sZIqDxKhyf1XVIWe6/LNGuHtbezRRtiwxP5EsY00E/jX/p6lSQ+zh6kOYH1ZzJc+ 8+w48E/prjpNPH7LAKI10jyVv9s4aA9kRMJr7h4GKozw+852hs+b0hvvVgS2JnY8 j3WOnl/8TZWqx4ZzxfefKgnwhrO+0GzMRLLozk8qTZ0DWO2CK56VTnia/gDh9366 8u8eqW/OQVj/aTE4NyEznQojpNiOAGHqzgAuZEeUf3CFGB0h51G4Rl2pOuH/LqFo 2RNhsJG4yO7ihRKLojqUnpM= -----END CERTIFICATE-----Generated at Fri Oct 30 10:23:22 2026 by rpki-client