$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer (raw, json) Hash identifier: 2HFZ/PTfh1qc1jVPu1RvYTieQDm+d40bFl57hs1CXQs= Subject key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE0BA6B2AA5BB9A05B69E2900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 12:45:11 +0000 Certificate not after: Mon 20 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 30691 IP: 65.111.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:ba:6b:2a:a5:bb:9a:05:b6:9e:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 18 12:45:11 2026 GMT Not After : Nov 20 13:45:11 2028 GMT Subject: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:9c:60:09:eb:32:3f:bf:87:dc:26:28:4d: f0:3a:10:a0:07:6f:d8:a7:fa:56:8b:d1:f5:8d:24: f9:2f:59:42:53:0e:62:a0:ae:97:92:11:e4:1f:50: 9a:19:2a:6d:cf:10:53:4b:da:e6:54:0e:de:bf:14: 10:e7:da:27:c0:67:eb:d4:01:e9:25:8e:8e:40:91: da:a5:7c:a8:25:38:4c:a9:a5:a0:47:c4:b9:fa:38: af:51:18:fc:52:24:1c:45:28:95:86:de:73:24:49: e1:04:04:6c:02:76:26:3b:a4:eb:39:ae:88:01:1d: f7:f1:47:4c:26:4a:24:39:6a:35:56:74:0e:13:9d: 7e:27:8b:e3:b4:45:de:16:1f:97:f3:c2:48:0e:a2: 5b:77:c5:e6:d3:d4:21:e7:61:3d:a0:9b:f1:e7:47: f2:a4:6a:c5:d1:10:63:23:ae:fb:c9:7d:fa:6b:38: c5:74:b8:ab:90:73:66:34:e6:3b:9e:05:4f:c5:c7: db:5d:da:fc:a8:e6:8d:29:7c:85:9d:a6:f8:96:f9: 2a:fb:8c:43:95:e4:b8:7f:1f:30:78:cb:78:45:81: d0:3c:58:27:6c:7b:85:ab:2c:8e:e4:55:a8:82:40: 09:0b:24:6d:44:2b:33:21:b8:1d:6d:fa:1f:28:7c: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30691 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b2:8f:af:a2:28:27:7b:50:e1:c4:0c:4c:0f:6c:6d:63:4e: b6:fe:2e:59:cb:7f:b5:86:a0:c4:34:3d:be:9a:45:9d:c5:15: 5a:5e:d3:ef:04:a6:ab:5f:b2:6c:da:16:0e:b7:f6:fb:fd:56: f2:2d:fa:cd:0c:3f:3f:1a:86:a9:ae:e3:8b:f8:3e:30:f7:c7: 64:16:22:8f:31:4f:4e:96:ce:09:f0:0b:5b:ab:17:b2:38:fc: bb:b9:c8:f8:6f:5b:55:95:e4:7a:68:01:e7:dc:89:74:22:9a: 7e:b8:2c:3a:1f:17:cc:86:b5:0d:91:03:e8:5a:41:80:d8:15: b8:5f:47:27:7f:2e:cd:ea:c4:a2:76:d3:7b:3b:68:6c:9a:b1: d1:80:35:64:79:70:22:0e:10:c9:48:68:cb:f8:04:4c:96:06: d3:15:4b:a9:2a:21:fc:95:9d:b6:60:65:c5:b1:13:48:ee:66: 7c:d0:a9:6c:64:db:81:9d:98:49:ce:fa:3a:d6:e1:37:26:69: 70:a5:69:b9:9b:04:ea:e2:31:75:ba:d6:84:e6:c8:21:54:63: 22:d8:79:68:87:57:b2:d6:12:39:51:da:71:9f:de:9a:6b:1d: 3e:76:6a:db:e7:cc:64:c1:f0:2c:ea:39:79:db:83:0e:55:21: 58:c2:ee:2b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE7gumsqpbuaBbaeKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxODEyNDUxMVoXDTI4MTEyMDEzNDUxMVowLzEtMCsGA1UEAxMk M2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVkNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJqcYAnrMj+/h9wmKE3wOhCgB2/Yp/pWi9H1 jST5L1lCUw5ioK6XkhHkH1CaGSptzxBTS9rmVA7evxQQ59onwGfr1AHpJY6OQJHa pXyoJThMqaWgR8S5+jivURj8UiQcRSiVht5zJEnhBARsAnYmO6TrOa6IAR338UdM JkokOWo1VnQOE51+J4vjtEXeFh+X88JIDqJbd8Xm09Qh52E9oJvx50fypGrF0RBj I677yX36azjFdLirkHNmNOY7ngVPxcfbXdr8qOaNKXyFnab4lvkq+4xDleS4fx8w eMt4RYHQPFgnbHuFqyyO5FWogkAJCyRtRCszIbgdbfofKHyuGQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAqqkggzDwrOyA45aX/hhWPRSUpQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNmMmQzNzhkLTIwZTEtNGI1Zi04 NWI5LWU4YzRjYmE1ZDVkNy8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2Jh NWQ1ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARBb/AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC d+MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEASLKPr6IoJ3tQ4cQMTA9sbWNOtv4uWct/tYagxDQ9vppFncUV Wl7T7wSmq1+ybNoWDrf2+/1W8i36zQw/PxqGqa7ji/g+MPfHZBYijzFPTpbOCfAL W6sXsjj8u7nI+G9bVZXkemgB59yJdCKafrgsOh8XzIa1DZED6FpBgNgVuF9HJ38u zerEonbTeztobJqx0YA1ZHlwIg4QyUhoy/gETJYG0xVLqSoh/JWdtmBlxbETSO5m fNCpbGTbgZ2YSc76OtbhNyZpcKVpuZsE6uIxdbrWhObIIVRjIth5aIdXstYSOVHa cZ/emmsdPnZq2+fMZMHwLOo5eduDDlUhWMLuKw== -----END CERTIFICATE-----Generated at Sun Sep 20 14:36:21 2026 by rpki-client