$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.cer File: c6cf724f-f412-40a8-bfd9-a52cf7dc1112.cer (raw, json) Hash identifier: TBYnEI4tvHfI/8aM7Fbuev5glc9UqQwAJRT0kzdxvvM= Subject key identifier: EA:6A:D0:DB:46:D3:97:B6:E6:D5:7B:38:2A:FC:C4:AC:96:A9:B5:BF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EF9DA92EF3BFD45C85ADA8880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Aug 2026 12:45:11 +0000 Certificate not after: Wed 29 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 1028 IP: 45.45.244.0/22 IP: 131.143.64.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:da:92:ef:3b:fd:45:c8:5a:da:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 27 12:45:11 2026 GMT Not After : Nov 29 13:45:11 2028 GMT Subject: CN=c6cf724f-f412-40a8-bfd9-a52cf7dc1112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:b2:b1:f1:9e:ed:73:de:31:f4:63:f2:3c: b9:4b:72:b7:8b:aa:2e:dc:bb:18:00:01:51:89:5b: 31:37:2b:db:92:17:83:61:83:21:47:bd:9e:7e:d9: 29:b5:51:77:72:57:8f:c0:f6:07:1d:d6:dc:69:22: 44:b9:5d:41:6b:0a:98:8d:79:8e:5a:78:6e:2d:d9: bb:85:00:4f:85:60:b1:8d:49:44:1b:6d:72:96:46: d7:4f:f2:7a:1d:13:e8:ec:8c:e8:46:1f:ec:be:1f: 45:0a:cf:7a:36:42:36:ae:f3:e2:c5:47:3d:31:b8: db:24:08:7d:4e:ec:6d:de:4e:52:f2:2b:53:e3:ac: 4a:c9:ea:77:b0:35:41:40:53:61:94:ef:b0:59:f2: 4a:31:45:2c:f0:b3:dd:9f:0f:8b:e8:36:b2:82:f7: 08:ff:c8:d2:bd:5f:96:c3:25:55:45:6e:db:4a:54: 1d:22:62:a5:6f:fa:90:2e:3e:8e:73:37:e0:b6:a7: d1:a4:8e:1c:87:7c:bf:85:7d:1a:a8:fb:fb:fe:58: d3:3c:06:32:38:db:60:a6:db:2d:56:15:ef:6b:e6: b9:d1:20:59:61:47:04:70:48:5c:14:b7:c1:69:d2: 8c:31:a5:ea:8d:b4:b0:39:f1:14:aa:4d:c9:1c:78: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6A:D0:DB:46:D3:97:B6:E6:D5:7B:38:2A:FC:C4:AC:96:A9:B5:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 45.45.244.0/22 131.143.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1028 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3d:67:ca:90:eb:fb:fa:21:6f:8b:b4:0f:11:6b:ca:9c:5e: 90:5f:63:2a:b9:c7:f7:61:10:46:2f:9f:f3:d3:37:43:61:e8: 4f:79:75:03:f6:4b:23:40:16:8d:5e:72:ad:45:83:6f:ff:1b: de:d6:76:2c:39:6f:de:15:6a:34:9a:f8:b8:04:1b:42:2e:2c: aa:5c:b1:92:c0:17:f2:b7:45:8e:55:10:b9:2d:f2:a6:89:0e: 10:c1:b6:1f:a0:bc:a6:8c:41:bb:3f:07:88:bb:fe:35:c6:6b: 6b:b8:24:92:bf:e2:66:9f:5f:46:80:45:d7:92:ef:bd:36:4c: 7c:37:d5:3a:b6:1c:ac:07:fc:1e:fd:7f:a7:74:88:14:1c:b9: d1:39:ee:50:35:a8:42:a3:4c:cc:0c:36:ee:a2:06:b5:5c:68: 87:40:7a:0f:08:68:7b:f7:49:38:a5:f8:a0:c8:22:18:97:67: df:c2:af:2c:f8:3f:3e:68:ee:8d:55:a0:29:63:a8:d2:d9:0a: 9b:f8:b1:30:80:33:02:8a:bf:c7:36:dc:72:24:37:93:29:90: 58:e9:9b:39:7f:24:7d:77:19:35:d3:44:f3:69:d5:92:29:fd: 70:4a:31:78:66:87:25:6f:8c:33:5a:8a:e0:9e:09:cf:fe:aa: ba:d7:66:23 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE752pLvO/1FyFraiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyNzEyNDUxMVoXDTI4MTEyOTEzNDUxMVowLzEtMCsGA1UEAxMk YzZjZjcyNGYtZjQxMi00MGE4LWJmZDktYTUyY2Y3ZGMxMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd2ysfGe7XPeMfRj8jy5S3K3i6ou3LsYAAFR iVsxNyvbkheDYYMhR72eftkptVF3clePwPYHHdbcaSJEuV1BawqYjXmOWnhuLdm7 hQBPhWCxjUlEG21ylkbXT/J6HRPo7IzoRh/svh9FCs96NkI2rvPixUc9MbjbJAh9 Tuxt3k5S8itT46xKyep3sDVBQFNhlO+wWfJKMUUs8LPdnw+L6DaygvcI/8jSvV+W wyVVRW7bSlQdImKlb/qQLj6OczfgtqfRpI4ch3y/hX0aqPv7/ljTPAYyONtgptst VhXva+a50SBZYUcEcEhcFLfBadKMMaXqjbSwOfEUqk3JHHiT0QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOpq0NtG05e25tV7OCr8xKyWqbW/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j NmNmNzI0Zi1mNDEyLTQwYTgtYmZkOS1hNTJjZjdkYzExMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2M2Y2Y3MjRmLWY0MTItNDBhOC1i ZmQ5LWE1MmNmN2RjMTExMi9jNmNmNzI0Zi1mNDEyLTQwYTgtYmZkOS1hNTJjZjdk YzExMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAItLfQDBAKDj0AwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICBAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAUT1nypDr+/ohb4u0DxFrypxekF9jKrnH92EQRi+f 89M3Q2HoT3l1A/ZLI0AWjV5yrUWDb/8b3tZ2LDlv3hVqNJr4uAQbQi4sqlyxksAX 8rdFjlUQuS3ypokOEMG2H6C8poxBuz8HiLv+NcZra7gkkr/iZp9fRoBF15LvvTZM fDfVOrYcrAf8Hv1/p3SIFBy50TnuUDWoQqNMzAw27qIGtVxoh0B6Dwhoe/dJOKX4 oMgiGJdn38KvLPg/PmjujVWgKWOo0tkKm/ixMIAzAoq/xzbcciQ3kymQWOmbOX8k fXcZNdNE82nVkin9cEoxeGaHJW+MM1qK4J4Jz/6qutdmIw== -----END CERTIFICATE-----Generated at Tue Sep 1 03:21:23 2026 by rpki-client