$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer File: 4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer (raw, json) Hash identifier: sEJDFEPMK3CPpljcSTDTSV5rMqtqgFL7NHGamLqFGNI= Subject key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F1B5AC87BEC61D3F3B30FB040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 12:45:11 +0000 Certificate not after: Mon 11 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 11051 AS: 11691 AS: 13704 AS: 18672 AS: 26803 AS: 32940 AS: 64262 IP: 64.118.160.0/20 IP: 66.172.0.0/18 IP: 66.180.192.0/20 IP: 66.201.32.0/19 IP: 66.211.96.0/20 IP: 69.194.0.0/22 IP: 72.172.85.0/24 IP: 72.172.88.0/24 IP: 74.116.54.0/24 IP: 76.8.16.0/20 IP: 97.64.96.0/22 IP: 209.151.224.0/19 IP: 216.176.192.0/20 IP: 2604:4040::/32 IP: 2605:bb00::/32 IP: 2607:dc80::/32 IP: 2607:f048::/32 IP: 2607:f820::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:5a:c8:7b:ec:61:d3:f3:b3:0f:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 8 12:45:11 2026 GMT Not After : Dec 11 13:45:11 2028 GMT Subject: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:07:76:f3:a7:ba:ee:55:7b:e0:72:1b:38: 0d:e4:00:a9:33:e1:05:8e:1a:c2:00:57:f0:97:0c: 99:ea:57:3b:ba:bc:f1:ee:7e:19:d5:78:f4:bb:81: f0:3b:1a:5e:74:9c:0d:28:94:71:86:f8:cc:bf:05: c8:23:8b:c8:93:ef:b0:95:56:58:a0:9d:42:44:77: a6:52:e9:bc:87:5a:c9:c1:1a:ed:ec:c1:44:12:d9: 74:52:4c:72:9b:b9:c1:8a:54:6a:4b:e0:76:e6:61: 3e:a3:1a:16:e0:62:61:b1:34:de:1a:67:06:dc:58: 40:72:92:43:88:81:87:7c:06:cf:87:12:30:bf:8d: 6b:d1:4f:8f:f4:c1:65:69:73:78:ef:2c:67:da:95: 60:69:23:e0:9b:ce:c7:3d:75:12:98:a1:fc:30:3d: 10:80:b3:5e:d1:22:c8:17:18:4a:f2:a8:58:a5:97: 5e:cb:25:24:04:f0:b2:55:ca:42:f0:50:4f:67:a4: 6e:33:67:80:59:20:11:5c:8a:f2:c4:2e:58:fb:c8: 5a:de:bd:57:1d:2b:8c:c9:ba:2d:75:cf:15:40:24: b4:35:d7:ef:f5:c7:7e:ca:2e:27:06:48:4b:fe:d1: f3:7b:81:d8:81:5e:02:cc:51:8c:66:d7:b5:bb:de: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.118.160.0/20 66.172.0.0/18 66.180.192.0/20 66.201.32.0/19 66.211.96.0/20 69.194.0.0/22 72.172.85.0/24 72.172.88.0/24 74.116.54.0/24 76.8.16.0/20 97.64.96.0/22 209.151.224.0/19 216.176.192.0/20 IPv6: 2604:4040::/32 2605:bb00::/32 2607:dc80::/32 2607:f048::/32 2607:f820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11051 11691 13704 18672 26803 32940 64262 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:df:d1:f0:a0:40:1e:59:e6:3d:6e:0b:76:27:79:26:ee:a6: 85:e3:43:da:86:a7:37:98:17:6a:64:a9:99:bc:9c:8e:b7:1b: 95:54:9f:84:5f:29:14:23:53:bc:45:53:7f:7f:92:ef:f4:89: 2d:65:f3:d2:67:e6:b0:9e:39:20:4e:43:97:fa:17:29:f3:00: 20:49:cf:5e:d9:68:be:28:00:2a:15:a7:03:99:7f:6c:a7:6f: 50:d7:c1:fd:6b:68:b8:08:c1:ba:25:f4:96:ed:33:a6:95:27: 30:2b:a7:44:d1:da:79:ff:51:8b:f3:d0:68:68:f2:d5:6c:36: 6c:21:c4:be:fb:4f:99:34:42:6e:64:3c:8e:4a:f3:d2:43:ee: 9f:8e:f0:25:ee:d5:a6:33:9f:76:1f:1d:70:e6:00:31:22:3e: 79:32:32:68:90:f6:8f:89:4a:1a:72:53:be:fc:79:13:e1:34: e1:ae:e8:ed:c9:71:d0:a0:6c:9f:52:e9:ac:f6:50:49:7f:00: f9:5f:97:f0:7d:b0:8a:8b:9e:83:95:93:c9:11:ee:49:18:3f: b3:7e:b0:71:6a:c6:ca:5c:72:e9:6d:62:75:2d:33:12:10:8a: ec:7a:6e:0d:37:2f:d2:1b:a1:44:28:20:28:c5:66:62:37:82: a6:96:3b:44 -----BEGIN CERTIFICATE----- MIIHmDCCBoCgAwIBAgIUAQ0Mn0MoWE8bWsh77GHT87MPsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkwODEyNDUxMVoXDTI4MTIxMTEzNDUxMVowLzEtMCsGA1UEAxMk NGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYzZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKEHdvOnuu5Ve+ByGzgN5ACpM+EFjhrCAFfw lwyZ6lc7urzx7n4Z1Xj0u4HwOxpedJwNKJRxhvjMvwXII4vIk++wlVZYoJ1CRHem Uum8h1rJwRrt7MFEEtl0Ukxym7nBilRqS+B25mE+oxoW4GJhsTTeGmcG3FhAcpJD iIGHfAbPhxIwv41r0U+P9MFlaXN47yxn2pVgaSPgm87HPXUSmKH8MD0QgLNe0SLI FxhK8qhYpZdeyyUkBPCyVcpC8FBPZ6RuM2eAWSARXIryxC5Y+8ha3r1XHSuMybot dc8VQCS0Ndfv9cd+yi4nBkhL/tHze4HYgV4CzFGMZte1u96EdwIDAQABo4IEqjCC BKYwHQYDVR0OBBYEFNgrls3COOQOF/p69RTCVmCd0nHcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRjMWU1NjUwLTU5YjctNGFjYi1i MGRlLTBiNGZiYWFmM2ViZi80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFh ZjNlYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwgZQGCCsGAQUF BwEHAQH/BIGEMIGBMFQEAgABME4DBARAdqADBAZCrAADBARCtMADBAVCySADBARC 02ADBAJFwgADBABIrFUDBABIrFgDBABKdDYDBARMCBADBAJhQGADBAXRl+ADBATY sMAwKQQCAAIwIwMFACYEQEADBQAmBbsAAwUAJgfcgAMFACYH8EgDBQAmB/ggMDMG CCsGAQUFBwEIAQH/BCQwIqAgMB4CAisrAgItqwICNYgCAkjwAgJoswIDAICsAgMA +wYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAGN/R8KBAHlnmPW4Ldid5Ju6mheND2oanN5gXamSpmbycjrcb lVSfhF8pFCNTvEVTf3+S7/SJLWXz0mfmsJ45IE5Dl/oXKfMAIEnPXtlovigAKhWn A5l/bKdvUNfB/WtouAjBuiX0lu0zppUnMCunRNHaef9Ri/PQaGjy1Ww2bCHEvvtP mTRCbmQ8jkrz0kPun47wJe7VpjOfdh8dcOYAMSI+eTIyaJD2j4lKGnJTvvx5E+E0 4a7o7clx0KBsn1LprPZQSX8A+V+X8H2wioueg5WTyRHuSRg/s36wcWrGylxy6W1i dS0zEhCK7HpuDTcv0huhRCggKMVmYjeCppY7RA== -----END CERTIFICATE-----Generated at Sun Sep 20 11:50:14 2026 by rpki-client