$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer File: b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer (raw, json) Hash identifier: vepf13mbERgYJUOC1jGfOOrTlvCUokCBEsBZ13/hzBk= Subject key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE0BA6B20E0ED4DA8AA416E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 12:45:11 +0000 Certificate not after: Mon 20 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 13743 AS: 21521 AS: 25813 AS: 36277 IP: 192.252.0.0/21 IP: 207.231.176.0/20 IP: 208.65.4.0/22 IP: 216.9.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:ba:6b:20:e0:ed:4d:a8:aa:41:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 18 12:45:11 2026 GMT Not After : Nov 20 13:45:11 2028 GMT Subject: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:8d:23:1c:45:8c:b3:39:44:1c:29:a8:ed: 55:8b:f3:8f:6b:d4:08:67:c0:84:7d:60:35:3d:16: 64:aa:1b:a7:01:70:b1:20:e8:e5:ae:4c:bd:51:fe: 14:b7:03:bc:f9:cd:97:01:c9:7c:39:1c:4f:47:ae: 27:d2:84:05:f7:5d:7f:88:2d:19:8e:94:ea:5d:96: 74:4b:0f:60:84:7a:73:59:d5:84:1f:c8:b7:f2:48: 41:b5:2b:29:4c:fa:1f:b8:4b:ea:de:c4:83:46:85: 13:31:67:db:2b:32:27:5a:98:b0:9d:80:ce:fb:4c: 33:74:07:9a:e7:be:08:0c:29:ab:02:e4:d7:54:81: 44:6f:77:63:72:2c:e9:e2:8e:e5:a3:9f:6e:f7:45: 32:92:44:9a:9c:0d:61:8a:9e:15:bb:b0:33:0e:a0: f2:ed:3e:e6:1f:df:b4:3a:86:9f:8a:78:2d:47:6e: a1:52:6a:45:8b:53:75:6f:6a:13:29:ba:d0:bc:4b: fc:13:70:c9:4e:c1:26:8c:03:73:62:54:47:70:d4: bf:d6:b0:70:1f:bf:4c:3a:ab:4d:80:87:85:05:cf: af:ce:3a:72:c4:10:8f:bc:59:c5:e6:e6:12:a0:96: 09:8b:c5:83:39:89:ee:97:35:0f:66:44:4b:97:78: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.252.0.0/21 207.231.176.0/20 208.65.4.0/22 216.9.112.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13743 21521 25813 36277 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b2:2d:c0:cb:ad:1d:27:97:26:68:7c:d4:97:33:a3:27:ce: a0:22:00:05:26:56:ec:8e:fd:13:51:a1:5c:10:f8:9f:d3:ac: f1:02:3b:94:b0:86:25:8a:31:2c:6b:16:7f:8a:b6:9f:4e:a1: 40:27:3e:f1:c3:9b:6e:38:a4:e6:fd:82:79:19:e6:87:85:aa: 01:3f:b1:9b:94:70:bc:a3:2c:00:c8:f3:40:3c:c7:70:b0:ee: 7c:0a:95:a4:28:25:63:d4:54:c2:0e:22:1c:58:b7:fe:69:1e: 35:43:d8:8a:74:e7:85:98:cb:d7:be:33:f7:fc:55:af:d1:9b: b5:2c:86:9a:b8:38:9b:68:3d:c0:fa:d2:2a:22:83:2e:7e:7d: e7:17:35:c9:bf:fc:78:25:5b:54:16:d3:68:a6:e6:6a:cf:47: fc:7f:a2:39:ca:aa:1d:4b:32:41:64:92:40:87:51:ab:53:8c: b3:83:6e:07:d0:58:e8:c3:6e:2f:1a:98:09:94:5c:99:36:98: 6b:5d:c6:bc:fb:d6:96:ac:4c:9d:ff:d7:c3:b2:2b:b1:30:62: 28:a1:36:f5:8e:18:da:59:8d:b5:e0:4f:17:a9:43:2a:c6:8e: 46:20:a2:a9:e3:07:8c:ea:c5:8b:33:45:33:58:c9:c4:c6:6b: 36:d7:d0:98 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE7gumsg4O1NqKpBbiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxODEyNDUxMVoXDTI4MTEyMDEzNDUxMVowLzEtMCsGA1UEAxMk YjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2VlN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiCNIxxFjLM5RBwpqO1Vi/OPa9QIZ8CEfWA1 PRZkqhunAXCxIOjlrky9Uf4UtwO8+c2XAcl8ORxPR64n0oQF911/iC0ZjpTqXZZ0 Sw9ghHpzWdWEH8i38khBtSspTPofuEvq3sSDRoUTMWfbKzInWpiwnYDO+0wzdAea 574IDCmrAuTXVIFEb3djcizp4o7lo59u90UykkSanA1hip4Vu7AzDqDy7T7mH9+0 OoafingtR26hUmpFi1N1b2oTKbrQvEv8E3DJTsEmjANzYlRHcNS/1rBwH79MOqtN gIeFBc+vzjpyxBCPvFnF5uYSoJYJi8WDOYnulzUPZkRLl3g3wQIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFItYs5uEJvB17DmLwPE9QB79d08ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i MmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2IyYzk0NTkyLTczZTktNDUyZS1h ZDg4LWFhZmM4ZTNlZTdhNS9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUz ZWU3YTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAPA/AADBATP57ADBALQQQQDBATYCXAwJgYIKwYB BQUHAQgBAf8EFzAVoBMwEQICNa8CAlQRAgJk1QIDAI21MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGKyLcDL rR0nlyZofNSXM6MnzqAiAAUmVuyO/RNRoVwQ+J/TrPECO5SwhiWKMSxrFn+Ktp9O oUAnPvHDm244pOb9gnkZ5oeFqgE/sZuUcLyjLADI80A8x3Cw7nwKlaQoJWPUVMIO IhxYt/5pHjVD2Ip054WYy9e+M/f8Va/Rm7Ushpq4OJtoPcD60ioigy5+fecXNcm/ /HglW1QW02im5mrPR/x/ojnKqh1LMkFkkkCHUatTjLODbgfQWOjDbi8amAmUXJk2 mGtdxrz71pasTJ3/18OyK7EwYiihNvWOGNpZjbXgTxepQyrGjkYgoqnjB4zqxYsz RTNYycTGazbX0Jg= -----END CERTIFICATE-----Generated at Thu Sep 10 11:50:35 2026 by rpki-client