$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer File: 99df77a9-4870-495f-bbda-89f8e0ae31d2.cer (raw, json) Hash identifier: thughpw9kqlp0BclOWT+2hxsxZCwYqOHXBaXbGsgSs0= Subject key identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE385191B18028963F0C28080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Aug 2026 12:45:11 +0000 Certificate not after: Tue 21 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 13725 IP: 209.205.238.0/23 IP: 2602:f9a5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:85:19:1b:18:02:89:63:f0:c2:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 19 12:45:11 2026 GMT Not After : Nov 21 13:45:11 2028 GMT Subject: CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:44:eb:6c:7f:a4:a7:51:9e:07:1b:a7:8d:55: d9:08:77:fb:b9:bb:3b:97:47:78:54:5e:19:66:4b: bc:47:d4:3d:83:d8:59:39:23:ea:12:87:58:1b:b4: 49:e4:89:8f:f5:fb:3a:04:91:59:da:16:ae:f8:16: 21:f0:20:bf:c0:ff:3b:40:0f:e2:fa:09:a5:83:88: 3d:38:b8:4d:35:86:a5:b1:3d:ea:ac:50:de:fd:1c: c7:64:ef:28:3e:d0:03:f1:38:7e:d8:e3:ef:7b:73: 0d:0a:15:f3:3f:dd:f8:e5:5f:17:e2:a6:00:79:b0: fb:8d:8f:7e:ae:35:b1:8c:e4:9b:dc:b4:8d:79:58: 43:8e:83:6b:68:fe:2a:6e:23:69:3c:6d:bd:f6:01: 37:df:ee:59:69:ce:57:73:63:da:ea:0f:97:35:ec: d8:bf:2d:80:be:e9:e0:13:82:b5:9e:9b:86:f6:47: ca:5f:27:7c:65:64:5b:ab:6e:7b:62:32:c2:f8:4f: 7c:cf:31:76:23:94:cf:9a:36:2b:83:27:bd:1c:a3: 66:fb:0d:0f:50:c7:fa:db:9c:fb:fd:cc:ed:19:f8: 62:55:98:6f:8f:fa:51:60:9f:e4:0f:af:ae:de:ee: 7c:8f:22:e8:66:03:2f:57:71:ab:1c:55:a1:40:04: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 209.205.238.0/23 IPv6: 2602:f9a5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ad:8d:44:38:b1:dd:52:94:88:8d:5c:0f:0c:99:81:88:f1: b5:af:22:16:76:af:8e:b6:14:22:7a:43:90:80:b8:a8:81:9e: de:99:48:30:52:10:26:cb:80:31:80:25:b4:63:f9:5f:d2:4a: a9:32:cf:b1:78:0f:50:79:96:6f:1f:72:65:03:09:2c:65:64: b6:b7:f8:61:5a:d1:f4:c8:29:1f:b8:c5:6e:9b:f3:f1:31:b4: c8:b9:f1:94:c4:57:7c:e5:55:cb:dd:13:20:53:77:de:19:e4: 98:a3:2a:d0:f9:f6:18:30:ac:68:73:2e:86:10:4b:e7:50:81: ac:b1:3c:af:c1:6a:0c:d4:52:ef:d8:05:4e:33:53:cd:1e:78: da:bf:26:0b:f1:4f:94:ad:0b:80:df:e2:3f:fd:5c:48:6b:bd: 99:14:98:ed:d3:ea:e2:92:37:f1:01:4d:6d:01:c3:b5:f9:02: 62:f3:36:62:c6:30:3d:70:d5:a7:ed:bb:b8:4a:57:b9:6b:98: a9:ef:a4:64:d7:d5:f0:fc:77:52:f1:00:d7:d4:a4:d1:78:37: e6:59:56:9a:06:3b:8d:31:58:d9:fb:e4:a2:ce:75:bb:63:54: ba:80:9e:de:58:18:64:ff:21:75:86:b9:2a:61:7b:66:8a:60: b0:95:76:4e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE7jhRkbGAKJY/DCgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxOTEyNDUxMVoXDTI4MTEyMTEzNDUxMVowLzEtMCsGA1UEAxMk OTlkZjc3YTktNDg3MC00OTVmLWJiZGEtODlmOGUwYWUzMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUTrbH+kp1GeBxunjVXZCHf7ubs7l0d4VF4Z Zku8R9Q9g9hZOSPqEodYG7RJ5ImP9fs6BJFZ2hau+BYh8CC/wP87QA/i+gmlg4g9 OLhNNYalsT3qrFDe/RzHZO8oPtAD8Th+2OPve3MNChXzP9345V8X4qYAebD7jY9+ rjWxjOSb3LSNeVhDjoNraP4qbiNpPG299gE33+5Zac5Xc2Pa6g+XNezYvy2Avung E4K1npuG9kfKXyd8ZWRbq257YjLC+E98zzF2I5TPmjYrgye9HKNm+w0PUMf625z7 /cztGfhiVZhvj/pRYJ/kD6+u3u58jyLoZgMvV3GrHFWhQAQZowIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBaO/kgMG1gbUMFqvuHd1rOd65d9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 OWRmNzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4ZTBhZTMxZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzk5ZGY3N2E5LTQ4NzAtNDk1Zi1i YmRhLTg5ZjhlMGFlMzFkMi85OWRmNzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4ZTBh ZTMxZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHRze4wDgQCAAIwCAMGACYC+aUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjWdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHytjUQ4sd1SlIiNXA8MmYGI8bWv IhZ2r462FCJ6Q5CAuKiBnt6ZSDBSECbLgDGAJbRj+V/SSqkyz7F4D1B5lm8fcmUD CSxlZLa3+GFa0fTIKR+4xW6b8/ExtMi58ZTEV3zlVcvdEyBTd94Z5JijKtD59hgw rGhzLoYQS+dQgayxPK/BagzUUu/YBU4zU80eeNq/JgvxT5StC4Df4j/9XEhrvZkU mO3T6uKSN/EBTW0Bw7X5AmLzNmLGMD1w1aftu7hKV7lrmKnvpGTX1fD8d1LxANfU pNF4N+ZZVpoGO40xWNn75KLOdbtjVLqAnt5YGGT/IXWGuSphe2aKYLCVdk4= -----END CERTIFICATE-----Generated at Sun Sep 20 10:59:30 2026 by rpki-client