$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587.cer File: 7e2cde89-a04e-4423-9844-bcbd0aa96587.cer (raw, json) Hash identifier: qFkP2rZXdUdCEMdtHWYLnOLNoaAbCqk4kDue5NF8tXQ= Subject key identifier: DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F7B4C20E2B33DB84A04955300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 21:33:16 +0000 Certificate not after: Sun 26 Nov 2028 13:45:12 +0000 Subordinate resources: AS: 20432 IP: 50.20.208.0/20 IP: 66.63.32.0/19 IP: 72.46.0.0/20 IP: 192.65.32.0/22 IP: 206.83.156.0/22 IP: 207.231.0.0/19 IP: 2605:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:4c:20:e2:b3:3d:b8:4a:04:95:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 12 21:33:16 2026 GMT Not After : Nov 26 13:45:12 2028 GMT Subject: CN=7e2cde89-a04e-4423-9844-bcbd0aa96587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:a0:12:f2:15:de:fa:e7:f6:69:06:cc:34: 92:e2:c2:e7:0d:7d:b6:6b:2a:0b:55:94:26:77:d9: 55:78:48:59:20:d8:58:43:a8:5a:09:e8:96:4d:a0: b7:3e:a0:3d:8f:94:16:76:7b:0e:c2:61:7f:08:10: c9:77:10:d1:8c:c4:e1:1d:bc:83:d8:92:5b:8a:0c: 38:31:f4:ba:5b:21:b1:d9:96:af:66:cf:76:bd:d4: 61:af:7a:d1:bb:63:7a:1f:cd:4c:ce:df:2b:a7:3f: f2:38:f7:08:7b:5f:66:60:e9:cb:05:57:8a:95:55: db:9a:26:82:fe:9e:84:4d:f0:34:97:bc:0f:04:b1: 0d:9f:9f:33:37:66:66:2d:bb:20:2c:8c:98:fb:49: 8f:ba:d5:a5:51:d2:56:d5:28:81:d1:be:d9:1e:5a: 9d:eb:a9:00:d5:39:9d:81:0f:6c:21:23:78:4d:8a: 0c:f3:95:d8:d7:04:91:67:b6:e9:98:89:65:ac:e1: e2:b9:31:1c:43:53:3c:3f:1d:01:b0:7b:c7:5c:c0: b4:5a:7c:36:6a:8e:da:7c:d1:8a:18:69:8d:93:6a: df:50:55:02:da:5d:8e:ea:17:28:e5:ec:d9:2b:45: 25:3a:64:4d:88:be:6f:44:46:05:b8:04:02:21:fb: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 50.20.208.0/20 66.63.32.0/19 72.46.0.0/20 192.65.32.0/22 206.83.156.0/22 207.231.0.0/19 IPv6: 2605:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8c:62:04:eb:4d:7b:e9:9d:02:d4:eb:f2:86:b1:bc:b0:4a: cb:43:a9:89:3b:cf:d9:28:76:d8:4f:36:ea:1b:4e:11:c3:7b: 61:a6:b4:00:20:a9:6c:00:99:fc:95:1a:ff:48:2b:fe:5b:ea: 5a:b5:8f:58:c2:a8:db:d9:6e:9a:b9:90:f8:4f:49:dc:ed:4b: d3:4f:82:95:4f:c4:1c:2c:3b:3d:c0:26:36:5e:ee:b4:3f:38: d7:1a:1b:73:26:4b:94:df:60:80:85:1e:43:a3:d6:63:fc:43: cd:fa:ac:d9:68:90:6c:35:64:0c:24:c6:cc:f5:4b:a4:57:07: 98:2d:be:93:c4:c3:98:f9:60:58:20:39:50:61:96:ea:fb:04: d2:03:b9:06:4c:be:95:85:18:f8:50:33:08:d3:16:de:78:98: 48:70:4e:8c:c9:b7:15:14:e4:ca:90:47:fc:94:b1:e0:e4:e1: 16:60:58:70:94:ff:a4:ff:00:58:c9:2d:9f:ca:f5:7c:c7:f8: c8:0c:72:7a:ad:0c:8e:52:f1:51:60:ae:fe:2a:11:ad:d6:9a: 1e:29:58:f2:f0:c8:2b:ba:b7:46:60:43:d1:73:03:74:1a:60: 1f:2b:06:f3:fe:9a:66:1f:ed:31:c9:60:70:13:03:52:75:9e: c3:eb:dc:a8 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWE97TCDisz24SgSVUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAxMjIxMzMxNloXDTI4MTEyNjEzNDUxMlowLzEtMCsGA1UEAxMk N2UyY2RlODktYTA0ZS00NDIzLTk4NDQtYmNiZDBhYTk2NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorCgEvIV3vrn9mkGzDSS4sLnDX22ayoLVZQm d9lVeEhZINhYQ6haCeiWTaC3PqA9j5QWdnsOwmF/CBDJdxDRjMThHbyD2JJbigw4 MfS6WyGx2ZavZs92vdRhr3rRu2N6H81Mzt8rpz/yOPcIe19mYOnLBVeKlVXbmiaC /p6ETfA0l7wPBLENn58zN2ZmLbsgLIyY+0mPutWlUdJW1SiB0b7ZHlqd66kA1Tmd gQ9sISN4TYoM85XY1wSRZ7bpmIllrOHiuTEcQ1M8Px0BsHvHXMC0Wnw2ao7afNGK GGmNk2rfUFUC2l2O6hco5ezZK0UlOmRNiL5vREYFuAQCIfvYlwIDAQABo4IERzCC BEMwHQYDVR0OBBYEFN4fWSPVEDfnxu6AZLnFPNl9ZfLOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 ZTJjZGU4OS1hMDRlLTQ0MjMtOTg0NC1iY2JkMGFhOTY1ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdlMmNkZTg5LWEwNGUtNDQyMy05 ODQ0LWJjYmQwYWE5NjU4Ny83ZTJjZGU4OS1hMDRlLTQ0MjMtOTg0NC1iY2JkMGFh OTY1ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAQyFNADBAVCPyADBARILgADBALAQSADBALOU5wD BAXP5wAwDQQCAAIwBwMFACYFrUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICT9Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAU4xiBOtNe+mdAtTr8oaxvLBKy0OpiTvP2Sh22E826htOEcN7Yaa0 ACCpbACZ/JUa/0gr/lvqWrWPWMKo29lumrmQ+E9J3O1L00+ClU/EHCw7PcAmNl7u tD841xobcyZLlN9ggIUeQ6PWY/xDzfqs2WiQbDVkDCTGzPVLpFcHmC2+k8TDmPlg WCA5UGGW6vsE0gO5Bky+lYUY+FAzCNMW3niYSHBOjMm3FRTkypBH/JSx4OThFmBY cJT/pP8AWMktn8r1fMf4yAxyeq0MjlLxUWCu/ioRrdaaHilY8vDIK7q3RmBD0XMD dBpgHysG8/6aZh/tMclgcBMDUnWew+vcqA== -----END CERTIFICATE-----Generated at Thu Nov 5 04:33:22 2026 by rpki-client