$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9.cer File: 39785d42-deab-45fc-836f-b97c88036ed9.cer (raw, json) Hash identifier: wpYOTsWQRzsiNtai9G+bYxmhbN/foRBnW7ql/1w7WSs= Subject key identifier: 38:E5:F5:9A:7D:C5:20:BA:6A:A8:AD:B5:5B:59:45:CA:8B:D1:C8:02 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE0BA6AFB7899FD39BCFE92C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/39785d42-deab-45fc-836f-b97c88036ed9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 12:45:11 +0000 Certificate not after: Mon 20 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 23.173.184.0/24 IP: 2602:f97a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:ba:6a:fb:78:99:fd:39:bc:fe:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 18 12:45:11 2026 GMT Not After : Nov 20 13:45:11 2028 GMT Subject: CN=39785d42-deab-45fc-836f-b97c88036ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:43:2b:83:ee:42:e0:a6:7b:32:77:8f:8f: 8a:6e:13:b3:1c:df:ce:64:8a:20:f6:c4:9a:87:78: e5:54:41:e4:39:1e:e9:05:b1:b8:88:23:c1:4c:85: cf:f6:37:65:87:94:9e:c9:e5:0f:28:da:e2:a6:cf: d8:3d:a9:1c:07:b6:ea:26:04:4b:7c:00:bc:fc:67: 6e:d6:bd:b0:24:1e:5c:0c:ed:bf:18:47:ab:2e:86: bd:1e:fa:53:6b:87:d2:8f:11:f0:a6:45:cb:2b:ea: 1c:7b:bd:cd:6f:24:68:f8:e9:5a:c3:f1:75:6f:58: b3:bb:30:0f:5c:73:d0:82:1d:6b:98:af:2f:07:c5: 14:22:42:26:c2:5a:4e:3d:19:51:2e:ac:58:8c:23: c4:f8:5f:65:96:ae:27:7e:e9:66:cf:f5:34:b6:78: e0:11:8a:f2:2f:8a:4b:b7:78:06:e2:66:b5:25:25: cc:14:14:2e:93:9d:d8:87:e6:38:48:be:b7:12:f9: ba:15:d4:19:38:ac:4f:76:26:88:33:9f:e7:0b:83: 82:21:d7:24:91:1d:33:a5:e0:d3:f6:1a:78:d1:89: 4c:1b:18:ac:13:f8:88:59:77:d3:db:11:1c:b7:2e: 88:5d:24:90:c7:57:57:1c:6e:73:fb:d1:01:d2:0a: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E5:F5:9A:7D:C5:20:BA:6A:A8:AD:B5:5B:59:45:CA:8B:D1:C8:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/39785d42-deab-45fc-836f-b97c88036ed9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.184.0/24 IPv6: 2602:f97a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:89:d5:c9:86:83:a7:d0:53:1a:52:76:58:ca:31:d5:a0:f0: 9e:a1:22:f4:aa:de:0c:56:61:99:b4:c6:34:1b:29:b0:61:45: 8d:f5:7a:15:70:0a:f8:45:41:11:e3:1e:c3:7b:eb:87:19:d1: d1:16:5d:3b:d2:56:11:0d:14:70:fd:b3:e1:94:af:15:e7:81: 65:53:bb:08:f8:4d:fd:be:cd:f9:ba:82:1d:99:b6:f1:02:ae: 45:49:80:79:98:62:0d:7a:43:66:40:10:74:86:fb:eb:f9:d6: 0a:81:a3:71:83:16:28:fd:b9:15:32:27:ec:12:24:52:4f:dd: cd:1f:c4:6b:93:2d:9b:67:96:0d:90:3d:6b:a3:22:52:be:d0: aa:01:ce:62:a9:4f:27:28:7c:0e:ed:55:d7:04:72:32:7d:11: e0:88:20:5a:a4:64:70:75:b9:ab:77:f6:19:7b:64:25:0e:c3: 0e:6a:ba:30:37:0e:9b:05:37:2a:f8:e7:59:9f:7a:42:01:29: 33:05:68:8a:41:cf:0f:30:bb:15:63:77:8f:c1:8f:7c:2d:40: ff:34:8e:0d:0d:68:fc:62:00:f4:a8:12:2a:40:bd:d9:ff:00: a5:62:bf:86:e2:21:f0:90:69:4e:8d:f6:9c:ef:0d:9d:cf:c3: cb:1d:61:3d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE7gumr7eJn9Obz+ksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxODEyNDUxMVoXDTI4MTEyMDEzNDUxMVowLzEtMCsGA1UEAxMk Mzk3ODVkNDItZGVhYi00NWZjLTgzNmYtYjk3Yzg4MDM2ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdhDK4PuQuCmezJ3j4+KbhOzHN/OZIog9sSa h3jlVEHkOR7pBbG4iCPBTIXP9jdlh5SeyeUPKNrips/YPakcB7bqJgRLfAC8/Gdu 1r2wJB5cDO2/GEerLoa9HvpTa4fSjxHwpkXLK+oce73NbyRo+Olaw/F1b1izuzAP XHPQgh1rmK8vB8UUIkImwlpOPRlRLqxYjCPE+F9llq4nfulmz/U0tnjgEYryL4pL t3gG4ma1JSXMFBQuk53Yh+Y4SL63Evm6FdQZOKxPdiaIM5/nC4OCIdckkR0zpeDT 9hp40YlMGxisE/iIWXfT2xEcty6IXSSQx1dXHG5z+9EB0gqruwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDjl9Zp9xSC6aqittVtZRcqL0cgCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z OTc4NWQ0Mi1kZWFiLTQ1ZmMtODM2Zi1iOTdjODgwMzZlZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM5Nzg1ZDQyLWRlYWItNDVmYy04 MzZmLWI5N2M4ODAzNmVkOS8zOTc4NWQ0Mi1kZWFiLTQ1ZmMtODM2Zi1iOTdjODgw MzZlZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrbgwDgQCAAIwCAMGACYC+XoAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADiJ1cmGg6fQUxpSdljKMdWg8J6hIvSq3gxWYZm0xjQbKbBhRY31ehVwCvhFQRHj HsN764cZ0dEWXTvSVhENFHD9s+GUrxXngWVTuwj4Tf2+zfm6gh2ZtvECrkVJgHmY Yg16Q2ZAEHSG++v51gqBo3GDFij9uRUyJ+wSJFJP3c0fxGuTLZtnlg2QPWujIlK+ 0KoBzmKpTycofA7tVdcEcjJ9EeCIIFqkZHB1uat39hl7ZCUOww5qujA3DpsFNyr4 51mfekIBKTMFaIpBzw8wuxVjd4/Bj3wtQP80jg0NaPxiAPSoEipAvdn/AKViv4bi IfCQaU6N9pzvDZ3Pw8sdYT0= -----END CERTIFICATE-----Generated at Mon Sep 21 16:10:03 2026 by rpki-client