$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer File: 5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer (raw, json) Hash identifier: WqrwKARGPF2DhDL4nKgeo6L7tDMLN9gyr75rOyskHnA= Subject key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EC4CF945CD9672591DC3B0900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Aug 2026 12:45:11 +0000 Certificate not after: Fri 10 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 22135 IP: 173.242.0.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:cf:94:5c:d9:67:25:91:dc:3b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 8 12:45:11 2026 GMT Not After : Nov 10 13:45:11 2028 GMT Subject: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:a3:9c:54:7a:e5:55:91:84:5d:0b:1a:08: ba:11:c8:ee:db:26:25:be:de:5e:c8:7b:5d:67:2a: f8:82:5d:d3:fa:0e:05:c8:d8:b2:9f:11:83:59:08: ef:73:cf:a7:2f:1f:47:3a:1e:94:5c:20:a0:98:94: 8b:81:54:2c:1b:21:3c:63:ac:2f:f1:e4:36:4b:b7: e3:63:2c:e4:e0:61:e0:83:84:67:01:1a:23:4f:4d: d7:6a:e7:9c:d9:0a:3c:73:f7:75:e9:da:af:46:61: 5f:11:7f:38:61:8e:ea:ca:9d:e6:15:e2:40:db:12: 8e:3f:f7:cb:88:e7:cb:12:d8:63:18:62:65:22:68: 67:d2:4a:14:bd:59:d2:7b:c0:31:bd:e9:26:29:1d: 07:d1:56:4c:90:d0:be:14:b6:a0:cf:8d:01:01:e0: 0f:96:ad:99:bb:af:6f:68:6c:b1:d9:66:70:b3:33: 82:a5:69:93:89:e7:d9:28:4f:fa:e3:69:f6:d9:94: 0f:69:d1:31:4c:e4:64:24:da:68:fc:09:35:89:64: 71:28:48:a6:f2:3a:e0:0d:37:80:41:94:a6:e8:9e: 91:bc:40:26:cf:18:68:cf:ee:06:9f:e7:94:1d:1b: a0:78:38:f1:f7:0a:eb:3d:19:10:4b:55:a2:ca:eb: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 173.242.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22135 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b7:bd:43:4b:30:85:81:ce:61:82:c5:9a:a4:87:d2:0f:7c: ed:9d:b1:fa:4a:37:66:af:dd:14:15:67:10:93:a3:0f:ea:7f: 2f:6f:2a:11:1f:d4:17:ce:78:2f:10:2a:d6:29:86:f2:6d:aa: cf:4c:fa:31:35:41:98:61:8b:f2:a1:6a:bc:84:d5:56:a3:f2: 5b:9e:73:9c:c3:3d:49:2f:e5:c4:26:0b:7e:5a:4c:35:94:58: c8:aa:1c:2a:ca:58:0c:d9:db:25:d9:cd:02:42:67:dc:1c:2a: c7:90:03:96:40:8b:0e:e3:94:9d:e0:14:8c:86:55:3c:1f:5c: 29:64:29:06:47:42:85:37:e5:a4:ba:ef:e4:fe:09:4e:15:c7: 5e:fe:88:89:8f:ac:b6:31:86:5b:a7:31:20:a7:4e:4d:07:1d: b9:c1:58:a5:8a:19:c0:c2:03:ef:0b:91:44:cc:11:cd:83:0e: 76:17:0e:65:dd:a0:2d:43:f3:3c:b9:3b:63:ba:1d:7c:ec:aa: 42:cc:01:c1:5e:8d:ba:fd:b9:3d:9d:a9:4b:37:be:4b:73:f9: 49:ec:e5:23:31:28:93:98:f2:6f:ae:be:a8:35:fa:a4:78:4d: 8e:db:e2:99:a0:5d:c3:a7:20:88:3d:9f:a5:8b:c1:06:a7:38: d1:23:b5:86 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE7Ez5Rc2Wclkdw7CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgwODEyNDUxMVoXDTI4MTExMDEzNDUxMVowLzEtMCsGA1UEAxMk NWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIxYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvijnFR65VWRhF0LGgi6Ecju2yYlvt5eyHtd Zyr4gl3T+g4FyNiynxGDWQjvc8+nLx9HOh6UXCCgmJSLgVQsGyE8Y6wv8eQ2S7fj Yyzk4GHgg4RnARojT03Xauec2Qo8c/d16dqvRmFfEX84YY7qyp3mFeJA2xKOP/fL iOfLEthjGGJlImhn0koUvVnSe8AxvekmKR0H0VZMkNC+FLagz40BAeAPlq2Zu69v aGyx2WZwszOCpWmTiefZKE/642n22ZQPadExTORkJNpo/Ak1iWRxKEim8jrgDTeA QZSm6J6RvEAmzxhoz+4Gn+eUHRugeDjx9wrrPRkQS1WiyuusWwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAbrQUDVECzbfA2M4nsHFlrbMJKpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkOTQ5OWE3LWRkNzMtNGQyOC1i M2FkLTI4MTNlMTQyMWM2NC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0 MjFjNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASt8gAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAT7e9Q0swhYHOYYLFmqSH0g987Z2x+ko3Zq/dFBVnEJOjD+p/ L28qER/UF854LxAq1imG8m2qz0z6MTVBmGGL8qFqvITVVqPyW55znMM9SS/lxCYL flpMNZRYyKocKspYDNnbJdnNAkJn3Bwqx5ADlkCLDuOUneAUjIZVPB9cKWQpBkdC hTflpLrv5P4JThXHXv6IiY+stjGGW6cxIKdOTQcducFYpYoZwMID7wuRRMwRzYMO dhcOZd2gLUPzPLk7Y7odfOyqQswBwV6Nuv25PZ2pSze+S3P5SezlIzEok5jyb66+ qDX6pHhNjtvimaBdw6cgiD2fpYvBBqc40SO1hg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:28:35 2026 by rpki-client