$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer File: b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer (raw, json) Hash identifier: MnrDQadnWBj88/ROQTsEEO+qWGFjCkue9gRK3UZ/UTk= Subject key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EC3185E28F4D9D27F1E645380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Aug 2026 22:00:14 +0000 Certificate not after: Sat 23 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 400928 IP: 23.173.24.0/24 IP: 76.164.204.0/24 IP: 104.128.68.0/23 IP: 204.89.181.0/24 IP: 216.52.218.0/24 IP: 2602:f961::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:18:5e:28:f4:d9:d2:7f:1e:64:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 7 22:00:14 2026 GMT Not After : Oct 23 00:45:35 2027 GMT Subject: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:40:1c:70:48:51:18:36:d0:a2:81:f7:7c: 7c:74:22:63:62:19:a0:d4:a8:0c:3d:1f:a6:ae:2e: cc:3a:66:2d:bd:e5:1e:8b:f8:97:cf:be:ac:fc:47: 0b:82:a6:38:a5:45:da:49:ac:33:bb:a9:58:14:7c: 5e:5d:05:f4:b8:d1:a0:88:0a:16:01:c0:4e:c9:3d: 1d:9d:be:9a:02:e6:ed:ee:d7:cf:bf:cb:03:cb:61: f4:2d:73:3f:3b:25:dc:d6:2c:dc:28:d5:01:8a:23: 61:ed:04:bb:cb:47:71:ed:97:8f:f0:5e:36:16:fd: 6f:88:09:11:35:0e:bd:ee:d3:6d:a8:9e:23:a1:03: 2c:27:ae:e2:96:95:0e:c5:1f:31:c2:49:66:a4:f9: 6a:cc:3c:1a:83:dc:95:22:1d:26:aa:4b:89:33:61: 0b:13:dc:df:96:92:92:cb:6a:d3:56:4a:91:51:25: 76:7c:ec:5f:df:cf:ee:96:d7:8a:0b:57:73:79:b8: d6:af:29:39:d5:56:c1:d7:3d:3c:19:2e:5c:1e:75: 20:c2:fd:f4:6a:89:7d:41:f2:0a:41:88:a6:53:0a: 85:24:d3:48:3f:46:3d:23:cb:45:3f:2e:27:9a:d6: 57:fe:45:f8:11:28:1b:b7:44:c8:02:6c:4f:4f:eb: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 76.164.204.0/24 104.128.68.0/23 204.89.181.0/24 216.52.218.0/24 IPv6: 2602:f961::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400928 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:74:2f:76:1e:af:28:c0:59:6a:d0:ff:40:14:87:85:78:de: 6f:a7:f0:ae:9f:fc:a9:10:5a:79:6e:ad:82:ed:0b:d9:58:d4: 37:d1:56:73:e4:bb:bf:7a:ac:ef:aa:13:2f:4c:de:83:ea:b6: bf:48:a0:19:42:3f:f7:8f:00:57:54:65:c3:d2:21:17:9d:78: 24:4c:4a:f6:b7:d4:cf:4c:9c:82:9c:a1:c8:ff:5a:c2:45:83: 89:d6:85:8c:ab:92:16:33:20:2d:df:97:ae:f8:c4:91:78:95: 45:9d:b7:ad:ea:2e:8c:f6:53:fd:95:3e:f9:04:cc:75:89:9b: 00:d2:9f:c7:c4:a3:fc:5e:26:dc:a8:2f:67:b3:79:07:4e:36: 5d:f2:32:b3:52:de:4a:e6:74:bc:90:12:c1:54:b0:11:48:b8: f9:5f:39:79:9d:db:b3:39:90:3f:83:ad:e6:c1:d0:4b:13:9f: 8c:9f:34:13:b0:fe:87:fa:d0:69:9b:51:cd:91:26:90:55:e2: 27:09:ba:af:66:f4:e6:b6:69:65:c7:67:9a:b3:fa:b0:0d:34: 29:65:09:22:ce:8b:98:54:91:2d:a1:ca:af:da:1b:5f:66:01: d5:19:8b:d8:86:ca:88:e3:88:0f:56:56:d5:fa:56:6f:7c:04: 4b:70:6d:df -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWE7DGF4o9NnSfx5kU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgwNzIyMDAxNFoXDTI3MTAyMzAwNDUzNVowLzEtMCsGA1UEAxMk YjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNiZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIpAHHBIURg20KKB93x8dCJjYhmg1KgMPR+m ri7MOmYtveUei/iXz76s/EcLgqY4pUXaSawzu6lYFHxeXQX0uNGgiAoWAcBOyT0d nb6aAubt7tfPv8sDy2H0LXM/OyXc1izcKNUBiiNh7QS7y0dx7ZeP8F42Fv1viAkR NQ697tNtqJ4joQMsJ67ilpUOxR8xwklmpPlqzDwag9yVIh0mqkuJM2ELE9zflpKS y2rTVkqRUSV2fOxf38/ulteKC1dzebjWryk51VbB1z08GS5cHnUgwv30aol9QfIK QYimUwqFJNNIP0Y9I8tFPy4nmtZX/kX4ESgbt0TIAmxPT+tz7QIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFJJ913AftPrufmZdZo8MCYuyk6RgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i NWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I1ZGI0NWRiLThjOTItNGI2MS1h M2Q1LWY1YmJiOTkzYmRjMy9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5 M2JkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAAXrRgDBABMpMwDBAFogEQDBADMWbUDBADYNNow DgQCAAIwCAMGACYC+WEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYeIDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCOdC92Hq8owFlq0P9AFIeFeN5vp/Cun/ypEFp5bq2C7QvZWNQ30VZz5Lu/ eqzvqhMvTN6D6ra/SKAZQj/3jwBXVGXD0iEXnXgkTEr2t9TPTJyCnKHI/1rCRYOJ 1oWMq5IWMyAt35eu+MSReJVFnbet6i6M9lP9lT75BMx1iZsA0p/HxKP8XibcqC9n s3kHTjZd8jKzUt5K5nS8kBLBVLARSLj5Xzl5nduzOZA/g63mwdBLE5+MnzQTsP6H +tBpm1HNkSaQVeInCbqvZvTmtmllx2eas/qwDTQpZQkizouYVJEtocqv2htfZgHV GYvYhsqI44gPVlbV+lZvfARLcG3f -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:08 2026 by rpki-client