$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer File: 1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer (raw, json) Hash identifier: JN/mVkU00mNkY6foJFrbKd3D62t1CAwGMOwpBZxxUhE= Subject key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority key identifier: 55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7 Certificate issuer: /CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f Certificate serial: 010D0C9F4328584D975E1DF71C38A4B969281400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 15.189.0.0/16 IP: 15.203.0.0/16 IP: 161.188.200.0/22 IP: 161.188.206.0 -- 161.188.209.255 IP: 161.188.213.0 -- 161.188.215.255 IP: 161.188.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:5e:1d:f7:1c:38:a4:b9:69:28:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:15:8b:f1:ff:ea:2c:57:66:37:19:2c:44: 72:de:25:21:cb:6d:61:1a:47:00:67:ee:29:50:77: ac:ab:37:38:94:66:63:8d:86:1a:2e:fb:39:29:83: c6:e1:5e:ab:0e:89:78:aa:5e:d6:df:c4:6c:26:27: cb:5b:e9:f1:84:27:4f:e8:63:3b:0e:32:7e:5d:b5: b0:18:5e:31:8f:25:e5:03:84:d5:ce:15:c9:1e:5d: a6:70:02:7a:6d:58:18:9e:3f:b7:e5:59:98:5a:fe: 4e:12:1e:78:41:dc:87:ca:9c:45:18:4a:6e:f6:02: 2d:52:d6:86:b4:8f:c6:8a:8a:0c:93:24:c1:1c:c7: b8:8f:e7:80:c1:1f:fb:d3:96:a5:fa:45:2e:a5:0e: 14:0c:0d:4a:99:89:81:d3:2f:e2:6d:a5:4b:ea:b8: 15:34:eb:6f:d9:da:aa:d9:47:49:59:40:78:25:df: 80:6f:16:0a:84:73:66:c2:80:d0:15:73:2a:07:92: d4:7c:7a:b0:65:ad:ce:80:1b:0a:6a:32:10:48:06: ee:74:85:e4:2e:48:86:a5:a5:62:8c:c0:c5:29:f1: e7:20:fa:ca:57:aa:56:03:55:b4:9d:ee:28:b1:d6: e7:dd:0d:c3:55:70:d5:34:05:cf:a1:c4:0e:5f:26: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl X509v3 Authority Key Identifier: keyid:55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer sbgp-ipAddrBlock: critical IPv4: 15.189.0.0/16 15.203.0.0/16 161.188.200.0/22 161.188.206.0-161.188.209.255 161.188.213.0-161.188.215.255 161.188.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a0:67:13:c9:b3:b1:7c:e1:dc:d3:73:05:52:bf:4c:84:08: 16:8b:59:b7:16:9a:b9:65:26:c0:f6:cf:94:75:b1:48:e8:c8: e5:cd:ec:40:0a:e6:44:92:3c:c3:fc:41:23:f5:f5:2a:67:ce: 83:a8:e4:2e:97:ae:77:1a:76:79:2c:b4:45:5f:75:33:ee:b4: ef:98:f4:44:de:b0:ac:67:80:3a:77:ea:d2:ce:9d:b6:c3:1a: 1e:96:06:52:a8:67:b4:e0:d1:56:e1:3e:f9:71:bc:bf:20:de: 3a:be:22:0e:1e:5c:99:ae:55:81:b5:96:cb:8a:e1:df:04:42: 79:03:a0:0c:e4:59:19:77:55:88:89:69:0b:19:6a:1c:e6:19: d5:c8:38:ea:17:2b:1d:fc:6f:25:b3:03:7b:85:75:aa:2b:7c: 1f:8f:d1:61:20:bc:b2:ea:19:01:da:5e:87:58:be:ff:46:2d: 1f:58:7e:8d:41:36:b0:92:0b:ee:df:73:19:51:44:16:1b:be: 16:37:14:d2:5e:00:05:4a:1f:2a:7d:ca:23:72:78:b2:ef:4e: 59:ff:c9:9b:7b:14:fa:73:df:d5:0b:bf:f3:e3:d5:73:b6:55: f4:15:39:fe:33:7c:dc:d0:93:c2:ca:c3:bc:b2:9e:7e:13:4b: 09:94:e4:a7 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2XXh33HDikuWkoFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFhNzYzOTQtNDhmYy00ZmYzLWI2YWEtMDY5M2M1NWQ3 NThmMB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowPTE7MDkGA1UEAxMy MWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAx MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptRWL8f/qLFdmNxks RHLeJSHLbWEaRwBn7ilQd6yrNziUZmONhhou+zkpg8bhXqsOiXiqXtbfxGwmJ8tb 6fGEJ0/oYzsOMn5dtbAYXjGPJeUDhNXOFckeXaZwAnptWBieP7flWZha/k4SHnhB 3IfKnEUYSm72Ai1S1oa0j8aKigyTJMEcx7iP54DBH/vTlqX6RS6lDhQMDUqZiYHT L+JtpUvquBU062/Z2qrZR0lZQHgl34BvFgqEc2bCgNAVcyoHktR8erBlrc6AGwpq MhBIBu50heQuSIalpWKMwMUp8ecg+spXqlYDVbSd7iix1ufdDcNVcNU0Bc+hxA5f JsgZAgMBAAGjggQcMIIEGDAdBgNVHQ4EFgQUFfTvBPWvI5bJXxZC43kHi0iMFgsw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3 ODMtNGEwYi1hNThkLTZkYzhlMjQzM2QzMy8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZh ODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9N Rmp4WXNkUXRBUWMubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2ZmOWZhODRlLTk3ODMtNGEwYi1h NThkLTZkYzhlMjQzM2QzMy9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiL2FhYTc2Mzk0LTQ4ZmMtNGZmMy1iNmFhLTA2OTNjNTVkNzU4Zi9hYWE3NjM5 NC00OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYuY3JsMB8GA1UdIwQYMBaAFFXs SqswF0uTQHTib6ibzsfA41XXMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy81YjdmYjEyMi1kZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFh NzYzOTQtNDhmYy00ZmYzLWI2YWEtMDY5M2M1NWQ3NThmLmNlcjBLBggrBgEFBQcB BwEB/wQ8MDowOAQCAAEwMgMDAA+9AwMAD8sDBAKhvMgwDAMEAaG8zgMEAaG80DAM AwQAobzVAwQDobzQAwQEobzgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH+gZxPJs7F84dzTcwVSv0yECBaL WbcWmrllJsD2z5R1sUjoyOXN7EAK5kSSPMP8QSP19SpnzoOo5C6XrncadnkstEVf dTPutO+Y9ETesKxngDp36tLOnbbDGh6WBlKoZ7Tg0VbhPvlxvL8g3jq+Ig4eXJmu VYG1lsuK4d8EQnkDoAzkWRl3VYiJaQsZahzmGdXIOOoXKx38byWzA3uFdaorfB+P 0WEgvLLqGQHaXodYvv9GLR9Yfo1BNrCSC+7fcxlRRBYbvhY3FNJeAAVKHyp9yiNy eLLvTln/yZt7FPpz39ULv/Pj1XO2VfQVOf4zfNzQk8LKw7yynn4TSwmU5Kc= -----END CERTIFICATE-----Generated at Fri May 1 16:51:39 2026 by rpki-client