$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer File: ac448c7f-05bb-4802-8533-0aad8a69acb1.cer (raw, json) Hash identifier: KH8bS3RRxocNtlRenHidoQ3fCsg0cER757XiVLXDJpI= Subject key identifier: 68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EDF5512F2917260AB8C18B8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 00:45:11 +0000 Certificate not after: Mon 20 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 400189 IP: 161.199.144.0/24 IP: 2602:fb16::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:55:12:f2:91:72:60:ab:8c:18:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 18 00:45:11 2026 GMT Not After : Nov 20 01:45:11 2028 GMT Subject: CN=ac448c7f-05bb-4802-8533-0aad8a69acb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:ad:f0:f2:97:6d:a9:52:f0:cf:25:75:5e: 03:9f:b5:69:fc:5b:fe:fa:f9:bb:eb:6b:37:5c:f5: 6d:54:53:94:34:31:9e:08:81:ff:9c:12:2f:c6:74: 00:2b:df:b2:1f:f7:51:ac:fb:f2:0c:eb:df:ba:f4: 26:e3:23:2b:cf:a2:0f:84:76:3d:47:20:7f:47:21: 03:61:5e:30:ca:12:46:81:55:ea:3d:59:91:cb:14: c1:f6:49:8b:e8:09:1b:e6:26:e8:d4:eb:b0:fe:64: 8e:2f:54:2f:03:9c:93:bd:d7:4d:9b:ff:c8:4b:11: 63:e5:0e:ec:db:9e:12:e0:6c:02:76:33:00:5d:43: 85:1b:90:84:b4:2b:98:f8:88:b7:6d:f8:4b:31:65: 86:0e:32:59:0b:b0:05:07:2d:fb:69:e0:4f:8c:55: 02:51:81:3f:2e:df:02:4f:d1:24:52:9e:7b:f2:da: 7c:c3:2c:90:1a:ef:a3:81:d5:92:dc:38:52:00:b8: 0f:a0:10:fc:3c:d4:fd:86:e9:aa:94:18:75:92:44: a0:bd:fd:71:64:99:6d:0a:cd:01:a8:f9:b1:d6:2f: 06:53:2e:a1:8e:2e:cf:d7:5b:a8:50:ae:d9:56:eb: a0:28:66:49:ae:6d:a3:10:b0:1b:4d:d2:f3:9d:43: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 161.199.144.0/24 IPv6: 2602:fb16::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400189 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:79:e6:28:ac:2a:33:2e:83:f0:a5:2c:e7:85:40:ec:e8:c8: 61:45:e3:45:f8:c2:13:00:73:8c:91:6c:bc:1c:28:c9:a5:2d: 1c:c7:a3:35:16:6d:94:11:4b:aa:72:a9:dd:64:2a:50:c4:1a: 49:90:d9:dd:b1:bb:2d:f2:bb:4b:23:1a:b1:e4:10:36:50:93: 65:c5:a7:a8:a4:99:33:94:36:83:e6:bf:92:41:db:9c:3b:cb: f0:01:fd:9e:db:b2:0a:bf:b6:7a:d1:a2:72:df:cb:18:27:b3: 29:52:2b:10:00:f8:8f:41:31:ae:98:ae:4f:1c:c9:32:e8:21: ca:47:bd:bf:e0:36:8d:a8:0e:85:16:d3:04:c8:9d:1c:44:e7: ec:cb:f7:ef:9f:24:e2:52:79:db:1f:e9:90:46:5a:8e:63:16: 1c:89:93:51:de:23:73:73:b1:df:1e:1f:01:cc:42:09:11:46: 51:2d:37:50:af:5d:e8:aa:42:66:fe:7b:dd:37:98:5c:82:44: 38:18:6d:96:af:21:4f:ca:8f:a8:26:5f:54:39:6a:a9:4d:5d: 0c:23:ad:1e:e5:59:65:f2:c8:f2:02:0b:ce:e7:6d:2f:fc:da: 23:60:92:e8:7c:8b:0d:f0:a4:66:c2:9b:cc:41:44:1a:72:d1: 6c:fe:ce:5b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE7fVRLykXJgq4wYuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxODAwNDUxMVoXDTI4MTEyMDAxNDUxMVowLzEtMCsGA1UEAxMk YWM0NDhjN2YtMDViYi00ODAyLTg1MzMtMGFhZDhhNjlhY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNOt8PKXbalS8M8ldV4Dn7Vp/Fv++vm762s3 XPVtVFOUNDGeCIH/nBIvxnQAK9+yH/dRrPvyDOvfuvQm4yMrz6IPhHY9RyB/RyED YV4wyhJGgVXqPVmRyxTB9kmL6Akb5ibo1Ouw/mSOL1QvA5yTvddNm//ISxFj5Q7s 254S4GwCdjMAXUOFG5CEtCuY+Ii3bfhLMWWGDjJZC7AFBy37aeBPjFUCUYE/Lt8C T9EkUp578tp8wyyQGu+jgdWS3DhSALgPoBD8PNT9humqlBh1kkSgvf1xZJltCs0B qPmx1i8GUy6hji7P11uoUK7ZVuugKGZJrm2jELAbTdLznUOpJwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGgbbL9ogNZw/RRIbumLOAE6qEtEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h YzQ0OGM3Zi0wNWJiLTQ4MDItODUzMy0wYWFkOGE2OWFjYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2FjNDQ4YzdmLTA1YmItNDgwMi04 NTMzLTBhYWQ4YTY5YWNiMS9hYzQ0OGM3Zi0wNWJiLTQ4MDItODUzMy0wYWFkOGE2 OWFjYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAChx5AwDgQCAAIwCAMGBCYC+xYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYbPTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEeeYorCozLoPwpSznhUDs6Mhh ReNF+MITAHOMkWy8HCjJpS0cx6M1Fm2UEUuqcqndZCpQxBpJkNndsbst8rtLIxqx 5BA2UJNlxaeopJkzlDaD5r+SQducO8vwAf2e27IKv7Z60aJy38sYJ7MpUisQAPiP QTGumK5PHMky6CHKR72/4DaNqA6FFtMEyJ0cROfsy/fvnyTiUnnbH+mQRlqOYxYc iZNR3iNzc7HfHh8BzEIJEUZRLTdQr13oqkJm/nvdN5hcgkQ4GG2WryFPyo+oJl9U OWqpTV0MI60e5Vll8sjyAgvO520v/NojYJLofIsN8KRmwpvMQUQactFs/s5b -----END CERTIFICATE-----Generated at Wed Sep 9 15:37:37 2026 by rpki-client