$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer File: 3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer (raw, json) Hash identifier: cGncAmBCZZ56IKgLVAiS4pMoj/dGCYEvGGoQwx06iWY= Subject key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E9A783389C0DED223E2528C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jul 2026 08:45:11 +0000 Certificate not after: Thu 26 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 66.209.128.0/20 IP: 68.65.96.0/20 IP: 74.126.64.0/20 IP: 96.45.240.0/20 IP: 209.173.160.0/19 IP: 216.201.0.0/18 IP: 216.255.0.0/18 IP: 2607:fa10::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:78:33:89:c0:de:d2:23:e2:52:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 24 08:45:11 2026 GMT Not After : Oct 26 08:45:11 2028 GMT Subject: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:2f:86:fb:17:a5:23:b1:20:b0:b7:6b:5d: 9a:00:93:da:2f:d9:97:e2:da:0c:bc:ce:b1:d8:f5: ad:4c:85:a5:78:26:13:0d:33:07:70:89:9b:fe:b9: 89:80:31:b3:e2:51:40:67:d6:9a:41:fb:52:d0:a1: 3d:6a:83:cf:03:8e:6b:50:da:3a:40:a8:95:8b:18: ee:04:ec:46:cd:80:06:ad:43:de:f0:3d:60:06:79: 8d:2c:91:d4:00:69:00:4c:71:32:6e:1d:0d:7d:85: f8:61:b1:fd:b0:16:a9:01:30:de:b4:ef:cd:1d:1d: 3a:40:5c:f5:93:2e:0e:63:ac:f8:d7:b2:c9:48:aa: 2b:1c:a7:29:16:12:7b:c5:76:2b:d8:1e:e2:70:ce: 38:84:71:8e:12:4f:4b:22:b1:21:11:03:18:a2:07: 27:57:30:b0:57:21:d0:30:63:e2:e3:66:9f:f2:35: 7e:9a:e9:8f:cf:25:32:b7:fb:f9:8e:fa:a1:8e:33: 5e:4b:57:da:4b:8d:c0:1b:ff:09:f0:24:d4:23:cf: 2f:9b:38:f1:e5:69:c8:f5:5e:e2:f8:99:85:e6:a6: 3a:57:25:2f:12:bc:84:d8:4d:82:d8:75:99:17:e5: 56:b4:77:7a:9f:dc:16:08:0c:3e:dc:6a:83:18:81: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.209.128.0/20 68.65.96.0/20 74.126.64.0/20 96.45.240.0/20 209.173.160.0/19 216.201.0.0/18 216.255.0.0/18 IPv6: 2607:fa10::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2b:87:ef:54:15:6c:88:5b:48:e6:72:98:d7:8e:67:69:ce: 75:45:9b:09:ec:4e:a0:4f:7c:37:e1:72:4b:dd:5b:75:a9:a9: 8e:e4:ae:c9:72:a3:65:cf:94:03:97:bb:3e:07:8f:dc:50:8a: 4a:de:ed:7b:ae:b1:8f:52:34:42:18:8d:d6:a9:7c:89:0e:bf: 2e:06:9a:5e:f2:4a:3a:b6:7a:0c:91:6b:1b:3c:28:99:5e:d1: 6f:51:3c:90:aa:39:84:9f:4b:e0:4f:88:4e:eb:44:65:6b:ad: 4b:ba:08:36:70:05:91:17:ac:b8:81:7d:aa:8e:0c:21:ff:ee: f9:ea:6d:2b:fe:f5:d1:09:82:6a:7f:71:3b:58:20:61:58:44: 35:6d:02:f9:fa:e5:9b:c4:b9:35:23:07:22:d1:51:e5:57:ea: f4:bd:c1:7d:7c:48:c9:ac:0d:2e:c7:06:14:46:85:88:de:33: f0:45:7c:40:4a:22:54:e9:47:8d:e9:39:e0:1d:c7:f3:2a:36: 03:73:00:d6:41:53:af:f1:03:5d:4d:a0:14:38:58:6f:1f:7a: af:89:61:11:ca:ef:1d:c9:28:8c:e7:60:89:33:b8:d2:83:40: 1e:75:99:ef:98:b4:3c:cb:08:de:2a:bf:4d:e1:31:d7:b7:c3: 8e:9f:73:19 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE6aeDOJwN7SI+JSjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcyNDA4NDUxMVoXDTI4MTAyNjA4NDUxMVowLzEtMCsGA1UEAxMk M2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVkN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTcvhvsXpSOxILC3a12aAJPaL9mX4toMvM6x 2PWtTIWleCYTDTMHcImb/rmJgDGz4lFAZ9aaQftS0KE9aoPPA45rUNo6QKiVixju BOxGzYAGrUPe8D1gBnmNLJHUAGkATHEybh0NfYX4YbH9sBapATDetO/NHR06QFz1 ky4OY6z417LJSKorHKcpFhJ7xXYr2B7icM44hHGOEk9LIrEhEQMYogcnVzCwVyHQ MGPi42af8jV+mumPzyUyt/v5jvqhjjNeS1faS43AG/8J8CTUI88vmzjx5WnI9V7i +JmF5qY6VyUvEryE2E2C2HWZF+VWtHd6n9wWCAw+3GqDGIFIXwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFM90qo8cxYiDcn4atDj/pSd2+JZFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z YWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNhYjZlMzhlLTQ4ZTQtNDM5MC04 ZWVjLTIxMzVhYzM1ZDdmYi8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMz NWQ3ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARC0YADBAREQWADBARKfkADBARgLfADBAXRraAD BAbYyQADBAbY/wAwDQQCAAIwBwMFACYH+hAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXCuH71QVbIhbSOZy mNeOZ2nOdUWbCexOoE98N+FyS91bdampjuSuyXKjZc+UA5e7PgeP3FCKSt7te66x j1I0QhiN1ql8iQ6/LgaaXvJKOrZ6DJFrGzwomV7Rb1E8kKo5hJ9L4E+ITutEZWut S7oINnAFkResuIF9qo4MIf/u+eptK/710QmCan9xO1ggYVhENW0C+frlm8S5NSMH ItFR5Vfq9L3BfXxIyawNLscGFEaFiN4z8EV8QEoiVOlHjek54B3H8yo2A3MA1kFT r/EDXU2gFDhYbx96r4lhEcrvHckojOdgiTO40oNAHnWZ75i0PMsI3iq/TeEx17fD jp9zGQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:13:20 2026 by rpki-client