$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.cer File: ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.cer (raw, json) Hash identifier: Pq6ctINpG8SdoXJhTZJGRYWaRx9kfVq9UdOFR1QRFOM= Subject key identifier: CF:3C:DB:07:CE:D5:8F:61:44:B1:ED:7D:83:47:62:A2:81:BE:F1:6C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F533075B9C1B7D650E48C7000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 12:45:11 +0000 Certificate not after: Sun 31 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 40368 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:30:75:b9:c1:b7:d6:50:e4:8c:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 28 12:45:11 2026 GMT Not After : Dec 31 13:45:11 2028 GMT Subject: CN=ec4fbd7f-bcba-4531-913e-7ecb3b470c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:75:12:7a:80:40:fa:76:80:82:07:ac:5a: 68:ad:36:13:bf:e1:5f:f5:8c:8b:4c:8f:36:16:11: 33:7b:57:16:70:34:3c:82:e7:0e:1c:84:18:be:dc: f9:a5:7b:e2:34:00:53:57:8c:c9:d4:43:35:9d:6e: 80:de:91:98:98:38:a8:7a:14:6b:be:6b:41:e7:fc: c4:06:54:14:a2:df:bf:2c:ab:9d:a0:48:c6:cb:30: 91:0b:1c:6f:72:5a:2b:4c:d8:39:86:93:63:3a:18: 89:fc:ba:b2:4a:5c:bf:67:2d:4f:30:6b:bf:8e:b5: 37:79:84:28:9f:fa:6b:53:98:18:76:fd:90:95:e2: f8:c4:9b:da:fd:3e:ae:6b:4c:c1:3b:b3:d6:e9:9b: e2:ea:90:66:13:0a:bf:99:9e:57:5b:4f:14:fc:f4: 55:be:d6:b5:4e:54:f7:84:03:4c:3a:f9:3c:27:2f: dc:67:b9:18:38:9f:b7:ab:c9:83:79:3b:de:bc:ba: 11:62:ae:a7:ab:4e:46:72:7f:fb:ca:a5:b1:aa:6c: d0:a3:eb:77:f0:00:d3:01:7c:96:38:3e:70:82:f6: 3c:a2:ce:9a:2d:e9:dc:69:0e:0e:6f:25:7f:59:7e: 97:d5:91:55:b4:8f:21:54:69:14:8b:3b:47:fb:8e: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:DB:07:CE:D5:8F:61:44:B1:ED:7D:83:47:62:A2:81:BE:F1:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 40368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:1c:7e:c0:77:ee:c0:1e:56:26:20:4c:26:2c:8c:5b:9d:70: 72:96:c0:ce:69:b1:ca:ba:9e:cd:02:28:7a:4a:71:9a:86:76: 22:3c:e9:b0:cb:65:99:37:42:81:15:ff:b2:36:24:79:6b:be: f2:19:13:6d:85:a2:97:7d:66:f7:3c:5a:93:bf:0a:20:1d:71: a8:6f:b9:96:ab:6c:ad:5e:f4:a3:f3:ca:47:34:c4:cb:00:9a: 2f:ac:04:a0:d2:37:10:0e:56:f1:26:89:c7:25:48:8c:20:75: 94:20:c1:2b:b1:80:f3:f0:ab:74:26:0f:08:ed:96:54:e6:33: c1:57:61:a6:58:b5:58:54:a2:bf:fa:28:5b:56:52:ed:64:77: 42:0d:f3:20:67:1c:34:6a:5d:4a:79:d8:07:52:86:51:1c:55: 00:0b:d6:a1:1e:43:fa:45:c2:62:3e:90:d9:3a:cf:9d:90:21: 69:c3:a2:2d:35:aa:29:23:40:e3:7a:7a:75:a8:a9:05:82:a9: d2:d7:84:c0:91:a6:e1:0e:96:3f:1b:ed:1b:33:06:7f:99:6d: b4:40:64:f9:93:4f:4a:8b:07:a8:a1:d1:41:91:44:30:3a:d0: 4c:0e:02:3c:ec:3d:7d:82:1b:d8:0c:68:f1:d3:b1:89:cb:21: 0a:63:2e:e9 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE9TMHW5wbfWUOSMcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyODEyNDUxMVoXDTI4MTIzMTEzNDUxMVowLzEtMCsGA1UEAxMk ZWM0ZmJkN2YtYmNiYS00NTMxLTkxM2UtN2VjYjNiNDcwYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSp1EnqAQPp2gIIHrFporTYTv+Ff9YyLTI82 FhEze1cWcDQ8gucOHIQYvtz5pXviNABTV4zJ1EM1nW6A3pGYmDioehRrvmtB5/zE BlQUot+/LKudoEjGyzCRCxxvclorTNg5hpNjOhiJ/LqySly/Zy1PMGu/jrU3eYQo n/prU5gYdv2QleL4xJva/T6ua0zBO7PW6Zvi6pBmEwq/mZ5XW08U/PRVvta1TlT3 hANMOvk8Jy/cZ7kYOJ+3q8mDeTvevLoRYq6nq05Gcn/7yqWxqmzQo+t38ADTAXyW OD5wgvY8os6aLencaQ4ObyV/WX6X1ZFVtI8hVGkUiztH+472dQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFM882wfO1Y9hRLHtfYNHYqKBvvFsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YzRmYmQ3Zi1iY2JhLTQ1MzEtOTEzZS03ZWNiM2I0NzBjNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VjNGZiZDdmLWJjYmEtNDUzMS05 MTNlLTdlY2IzYjQ3MGM1YS9lYzRmYmQ3Zi1iY2JhLTQ1MzEtOTEzZS03ZWNiM2I0 NzBjNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJ2wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAUcfsB37sAeViYgTCYsjFudcHKW wM5pscq6ns0CKHpKcZqGdiI86bDLZZk3QoEV/7I2JHlrvvIZE22Fopd9Zvc8WpO/ CiAdcahvuZarbK1e9KPzykc0xMsAmi+sBKDSNxAOVvEmicclSIwgdZQgwSuxgPPw q3QmDwjtllTmM8FXYaZYtVhUor/6KFtWUu1kd0IN8yBnHDRqXUp52AdShlEcVQAL 1qEeQ/pFwmI+kNk6z52QIWnDoi01qikjQON6enWoqQWCqdLXhMCRpuEOlj8b7Rsz Bn+ZbbRAZPmTT0qLB6ih0UGRRDA60EwOAjzsPX2CG9gMaPHTsYnLIQpjLuk= -----END CERTIFICATE-----Generated at Sun Oct 4 18:00:55 2026 by rpki-client