$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1.cer File: 4491747a-51aa-4b4e-b4e9-53474dd898f1.cer (raw, json) Hash identifier: k65x68mvnKmTKLZSXXj7CWKUrwS6wKkwxlvKUWSiMaI= Subject key identifier: 1C:4D:08:23:33:FD:89:61:22:F6:0F:EF:BB:2D:A7:2C:80:7C:46:57 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE91A78784EC784AC87072480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Aug 2026 12:45:11 +0000 Certificate not after: Thu 23 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 11046 IP: 205.149.8.0/21 IP: 2606:1180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:1a:78:78:4e:c7:84:ac:87:07:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 21 12:45:11 2026 GMT Not After : Nov 23 13:45:11 2028 GMT Subject: CN=4491747a-51aa-4b4e-b4e9-53474dd898f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:4d:2a:b4:01:23:cc:ba:9b:a5:91:6a:71: a9:5c:54:a1:71:1f:dc:57:a0:96:bf:58:74:19:83: b6:c0:83:62:15:cf:4a:bd:20:f4:9a:7d:a1:ec:4d: f8:99:9d:39:94:28:95:b6:3b:65:5a:6c:42:ed:15: 28:e2:08:c3:7a:3d:69:53:47:3f:16:dc:9c:3d:d7: 41:4c:99:38:9d:4b:1c:19:09:2a:d6:1c:64:f5:26: 4e:da:18:ed:09:76:71:d3:3c:21:17:7b:2a:4b:0d: b3:8c:d1:49:56:a8:5b:8a:9c:b7:e6:bc:e7:90:79: e3:86:ef:11:9d:41:6e:b2:a7:62:fa:ff:cc:30:66: 3f:b2:f3:a6:37:8b:0c:98:84:2b:4c:7b:4a:81:e6: 2c:39:e5:e3:1b:aa:38:11:5f:9f:76:97:fe:28:7d: 03:7b:37:b0:a3:cf:8e:59:4e:1a:f7:3f:a7:3b:72: 4c:0d:7f:3a:29:a2:8a:45:c9:fd:04:25:d9:8e:2e: 77:74:d0:c8:82:7e:a7:be:fd:c3:34:21:73:2a:0f: 70:d0:65:e8:e8:03:f7:a6:64:0c:89:c5:f8:87:82: 40:a7:6e:1b:05:64:92:ab:3b:e1:cb:9a:bd:5e:c6: 61:28:5c:fc:94:b1:09:b4:e6:63:c3:e7:76:c4:e7: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4D:08:23:33:FD:89:61:22:F6:0F:EF:BB:2D:A7:2C:80:7C:46:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 205.149.8.0/21 IPv6: 2606:1180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11046 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a0:c5:16:a5:ef:2d:46:3c:9f:31:12:74:32:48:5e:64:f2: bf:9a:08:34:32:7f:0c:74:e8:88:5a:c4:81:43:d8:41:75:5a: 35:c6:09:fd:bb:a5:4d:e6:be:68:09:cc:79:11:95:40:4c:06: c4:b8:0b:f8:01:9b:46:5a:61:a1:ec:f6:82:4c:03:c3:34:66: 7a:21:cb:2a:2a:4a:8b:41:7f:e3:0c:23:9e:14:fd:32:a9:49: b7:80:c2:88:a2:c3:d8:6f:fd:14:ac:25:a7:38:2a:29:9f:d3: 76:42:eb:81:c0:44:88:45:cc:8e:65:52:9d:fa:b1:30:31:6c: e8:67:48:d2:74:c1:f5:84:8c:9c:d8:96:7f:8d:6e:cc:c4:eb: 42:58:f8:82:40:6f:92:10:bf:8a:1d:60:2b:0a:32:47:6a:2a: f0:99:f7:25:2d:50:bb:b5:6e:49:62:19:37:a3:d1:ef:78:ad: a3:46:12:bd:a0:a7:f4:71:2b:66:86:f8:67:b8:6d:6f:06:6a: a4:ba:76:2e:25:fd:2f:2c:c9:7d:8d:20:29:a1:8a:45:b6:15: 13:d0:2c:28:55:39:e4:7c:11:b3:d3:e2:da:86:6c:5c:28:0f: 8e:02:cc:e2:9a:1d:d2:e6:cb:47:64:2a:4a:59:9f:0a:a6:41: 4f:81:13:10 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE7pGnh4TseErIcHJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyMTEyNDUxMVoXDTI4MTEyMzEzNDUxMVowLzEtMCsGA1UEAxMk NDQ5MTc0N2EtNTFhYS00YjRlLWI0ZTktNTM0NzRkZDg5OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+1NKrQBI8y6m6WRanGpXFShcR/cV6CWv1h0 GYO2wINiFc9KvSD0mn2h7E34mZ05lCiVtjtlWmxC7RUo4gjDej1pU0c/FtycPddB TJk4nUscGQkq1hxk9SZO2hjtCXZx0zwhF3sqSw2zjNFJVqhbipy35rznkHnjhu8R nUFusqdi+v/MMGY/svOmN4sMmIQrTHtKgeYsOeXjG6o4EV+fdpf+KH0Dezewo8+O WU4a9z+nO3JMDX86KaKKRcn9BCXZji53dNDIgn6nvv3DNCFzKg9w0GXo6AP3pmQM icX4h4JAp24bBWSSqzvhy5q9XsZhKFz8lLEJtOZjw+d2xOeO2wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBxNCCMz/YlhIvYP77stpyyAfEZXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 NDkxNzQ3YS01MWFhLTRiNGUtYjRlOS01MzQ3NGRkODk4ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQ0OTE3NDdhLTUxYWEtNGI0ZS1i NGU5LTUzNDc0ZGQ4OThmMS80NDkxNzQ3YS01MWFhLTRiNGUtYjRlOS01MzQ3NGRk ODk4ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPNlQgwDQQCAAIwBwMFACYGEYAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKyYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALaDFFqXvLUY8nzESdDJIXmTyv5oI NDJ/DHToiFrEgUPYQXVaNcYJ/bulTea+aAnMeRGVQEwGxLgL+AGbRlphoez2gkwD wzRmeiHLKipKi0F/4wwjnhT9MqlJt4DCiKLD2G/9FKwlpzgqKZ/TdkLrgcBEiEXM jmVSnfqxMDFs6GdI0nTB9YSMnNiWf41uzMTrQlj4gkBvkhC/ih1gKwoyR2oq8Jn3 JS1Qu7VuSWIZN6PR73ito0YSvaCn9HErZob4Z7htbwZqpLp2LiX9LyzJfY0gKaGK RbYVE9AsKFU55HwRs9Pi2oZsXCgPjgLM4pod0ubLR2QqSlmfCqZBT4ETEA== -----END CERTIFICATE-----Generated at Sun Sep 20 14:37:53 2026 by rpki-client