$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361.cer File: 3551cc95-27a3-4fce-b6e6-c75933be1361.cer (raw, json) Hash identifier: fkUA14/kU1ZwWyraiidsJTm0bndLbrc87I+6UuxvgFI= Subject key identifier: 61:84:45:19:1A:5E:99:C3:14:8A:BD:D5:F8:7B:D6:C4:4C:75:A1:B9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F6985F0237E9AB765DB8C6040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/3551cc95-27a3-4fce-b6e6-c75933be1361.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 12:45:11 +0000 Certificate not after: Mon 08 Jan 2029 13:45:11 +0000 Subordinate resources: AS: 32828 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:85:f0:23:7e:9a:b7:65:db:8c:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 6 12:45:11 2026 GMT Not After : Jan 8 13:45:11 2029 GMT Subject: CN=3551cc95-27a3-4fce-b6e6-c75933be1361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:f0:ae:8c:94:26:7b:f5:76:bc:d0:73:d6: cc:13:ac:16:6e:45:52:6f:83:36:0a:e1:b6:29:40: 05:06:35:f5:a6:58:c2:8d:0e:38:78:a5:f2:68:a8: 3a:09:76:79:27:ae:c7:76:7f:f1:49:20:fb:ac:d9: 20:4f:c1:df:e5:12:be:18:c2:9f:52:20:b3:5c:ea: c3:66:ab:6b:36:af:38:26:ee:ff:c3:8d:12:99:13: 80:6a:6e:9b:aa:22:ac:a5:87:c1:be:3b:56:2d:38: fc:71:ff:8e:94:79:c7:3d:8a:9e:c0:91:5b:2e:36: 46:88:8b:b5:31:7e:c1:bb:71:f8:09:de:a3:e5:fd: 65:fc:f0:7c:a7:fd:f4:48:28:75:11:b7:35:a9:e8: 56:a5:4a:34:a4:3f:e9:b1:6a:1d:50:a9:23:61:0b: 13:02:8d:60:a8:dd:15:a5:d4:21:89:3a:7f:a7:18: 9b:d1:f9:ef:1e:ee:c3:3c:5a:5d:e5:02:1b:1b:2e: 99:64:6c:08:e4:ec:42:6a:f5:64:7e:3b:f4:ed:10: e1:b7:2c:48:78:d0:ae:e7:3b:3e:d9:94:01:22:9f: 08:11:4b:ef:9c:58:56:af:88:65:1a:f3:53:43:49: 48:0f:48:e2:7b:76:24:7a:b5:fc:ef:9a:e6:81:d9: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:45:19:1A:5E:99:C3:14:8A:BD:D5:F8:7B:D6:C4:4C:75:A1:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/3551cc95-27a3-4fce-b6e6-c75933be1361.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32828 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d1:a9:3c:40:72:eb:48:ef:b7:fa:2d:41:18:c8:7c:fe:fe: f7:2a:b1:04:20:15:5c:19:a5:19:6c:4a:b2:c0:a3:dc:dd:d8: 37:94:0b:bf:55:3f:96:64:06:b8:19:fc:b1:1b:29:34:3c:68: 5a:19:08:41:b3:ca:36:09:b5:5c:46:ad:ee:be:85:c3:35:b2: 2e:4d:5c:d4:40:9b:1c:a0:bf:63:e3:e3:13:61:60:37:3c:54: f7:1e:91:1f:10:2a:36:22:18:d1:7f:19:cd:f1:42:19:ba:7e: 83:49:23:1e:68:cc:9e:13:60:b2:c7:bd:f3:0b:03:c8:47:1a: 52:96:80:c0:16:fc:ec:4d:60:85:e0:51:b3:09:62:84:3c:49: d3:7e:db:ea:c9:90:29:cc:59:7e:98:bf:68:73:ae:bd:d1:9b: b2:a5:6e:b4:1a:43:f4:88:9d:15:10:2f:17:28:d1:19:30:e5: 7c:94:7c:fa:65:a5:75:54:20:6f:5d:58:e0:22:05:6c:b3:0b: c4:7d:f0:e0:54:96:41:b6:30:b2:40:8d:e1:5b:50:28:d4:58: c6:e4:7f:ed:42:03:25:8c:04:d2:8a:52:39:9b:f6:6a:8d:03: 2a:74:c0:62:c4:76:cd:1e:0c:ce:4e:61:84:7b:ad:09:f2:34: eb:a1:03:cb -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE9phfAjfpq3ZduMYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwNjEyNDUxMVoXDTI5MDEwODEzNDUxMVowLzEtMCsGA1UEAxMk MzU1MWNjOTUtMjdhMy00ZmNlLWI2ZTYtYzc1OTMzYmUxMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2XwroyUJnv1drzQc9bME6wWbkVSb4M2CuG2 KUAFBjX1pljCjQ44eKXyaKg6CXZ5J67Hdn/xSSD7rNkgT8Hf5RK+GMKfUiCzXOrD ZqtrNq84Ju7/w40SmROAam6bqiKspYfBvjtWLTj8cf+OlHnHPYqewJFbLjZGiIu1 MX7Bu3H4Cd6j5f1l/PB8p/30SCh1Ebc1qehWpUo0pD/psWodUKkjYQsTAo1gqN0V pdQhiTp/pxib0fnvHu7DPFpd5QIbGy6ZZGwI5OxCavVkfjv07RDhtyxIeNCu5zs+ 2ZQBIp8IEUvvnFhWr4hlGvNTQ0lID0jie3YkerX875rmgdkBCwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFGGERRkaXpnDFIq91fh71sRMdaG5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NTUxY2M5NS0yN2EzLTRmY2UtYjZlNi1jNzU5MzNiZTEzNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM1NTFjYzk1LTI3YTMtNGZjZS1i NmU2LWM3NTkzM2JlMTM2MS8zNTUxY2M5NS0yN2EzLTRmY2UtYjZlNi1jNzU5MzNi ZTEzNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIA8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADHRqTxAcutI77f6LUEYyHz+/vcq sQQgFVwZpRlsSrLAo9zd2DeUC79VP5ZkBrgZ/LEbKTQ8aFoZCEGzyjYJtVxGre6+ hcM1si5NXNRAmxygv2Pj4xNhYDc8VPcekR8QKjYiGNF/Gc3xQhm6foNJIx5ozJ4T YLLHvfMLA8hHGlKWgMAW/OxNYIXgUbMJYoQ8SdN+2+rJkCnMWX6Yv2hzrr3Rm7Kl brQaQ/SInRUQLxco0Rkw5XyUfPplpXVUIG9dWOAiBWyzC8R98OBUlkG2MLJAjeFb UCjUWMbkf+1CAyWMBNKKUjmb9mqNAyp0wGLEds0eDM5OYYR7rQnyNOuhA8s= -----END CERTIFICATE-----Generated at Thu Nov 5 15:00:02 2026 by rpki-client