$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer File: 9ae61efc-a402-4975-bfe7-f7ddda75a628.cer (raw, json) Hash identifier: maRaWhAefCGHbmz9GTZorVTLOcc1oD3r5WdmG0ySDOQ= Subject key identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F761604938CE2728E77F3D6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 00:45:12 +0000 Certificate not after: Sat 13 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 400809 IP: 209.135.176.0/22 IP: 2606:fe40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:16:04:93:8c:e2:72:8e:77:f3:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 11 00:45:12 2026 GMT Not After : Jan 13 01:45:12 2029 GMT Subject: CN=9ae61efc-a402-4975-bfe7-f7ddda75a628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:73:9d:70:0f:6f:d3:e6:92:02:85:3a:0c: b8:4a:d6:96:b7:e3:6b:a6:c0:83:22:4a:d2:63:fd: a8:13:26:23:6d:22:cb:54:05:b4:24:61:b1:50:35: d8:98:e3:7f:25:35:fe:22:bb:3d:d9:c6:61:00:0e: f6:80:8e:77:15:fa:7e:0b:cf:b3:d5:df:29:e5:dc: 7f:80:ba:6b:fd:9f:e8:d8:bf:a6:b4:cb:e7:9d:38: 01:8a:36:08:1a:b9:94:ee:f0:bd:9b:4e:af:f1:97: 9c:5a:95:9e:bf:80:65:e2:68:50:4f:2f:41:5f:1a: 5d:ee:31:03:ea:c5:ef:25:15:17:20:be:5c:05:2c: 70:d8:54:ba:56:58:80:3e:8c:11:af:e9:16:75:8c: 24:0a:b3:4f:8a:1b:10:7e:25:73:25:e5:14:2b:fe: fd:67:52:b4:b9:a7:5b:45:c6:78:90:af:af:a1:74: 44:0e:af:df:2e:18:77:dc:d6:34:88:4f:df:08:53: bb:b6:74:07:76:95:13:af:de:bc:69:b2:3e:ad:82: 5a:12:ce:fb:e4:c5:f8:67:4f:91:f5:38:ad:fd:89: f8:04:06:32:c1:63:cd:b4:06:91:4d:f6:0e:68:32: c1:76:4d:8b:2a:b1:ab:a8:cb:ec:bb:ea:b5:07:86: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 209.135.176.0/22 IPv6: 2606:fe40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400809 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:61:bf:30:88:08:b9:89:10:be:88:19:ad:20:ef:10:10:95: df:08:54:42:92:d6:fa:bd:4f:56:0a:b4:e0:8d:4a:d7:6c:5c: f0:7b:15:20:57:99:1d:81:62:9b:1b:0b:3f:74:2f:7a:1f:c5: 94:a9:fe:75:98:c0:f8:0d:20:21:b5:49:11:d7:0c:c1:c5:af: 26:08:b9:41:60:7d:0f:70:c5:93:8a:5f:22:62:fd:db:f8:c3: 59:48:64:22:84:02:65:b2:2b:84:6d:62:a6:0a:76:9c:63:3d: 52:72:04:8e:cf:f6:73:d4:87:f1:e8:48:9c:7d:2c:f1:74:30: 5c:89:91:31:cb:59:82:bf:2b:49:c5:c4:18:58:a2:ac:95:ca: 11:32:2b:be:b7:86:72:31:fe:4d:26:18:85:39:31:62:68:bc: 15:33:e1:64:e5:b7:62:f5:af:9f:cb:99:02:f8:5e:2b:32:cb: 22:75:e4:47:8c:4d:02:e9:fd:5d:9b:2b:f0:17:22:86:a6:4f: de:a8:a9:34:be:21:6a:1b:ee:a0:69:fc:80:bc:93:60:5c:39: c4:8d:8e:d0:8a:87:5b:4b:03:27:8a:ad:dc:47:5a:f8:29:33: 58:98:b0:06:d7:78:dc:ca:9e:eb:a0:9f:d6:7a:9f:53:51:05: a1:77:26:7d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE92FgSTjOJyjnfz1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAxMTAwNDUxMloXDTI5MDExMzAxNDUxMlowLzEtMCsGA1UEAxMk OWFlNjFlZmMtYTQwMi00OTc1LWJmZTctZjdkZGRhNzVhNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RNznXAPb9PmkgKFOgy4StaWt+NrpsCDIkrS Y/2oEyYjbSLLVAW0JGGxUDXYmON/JTX+Irs92cZhAA72gI53Ffp+C8+z1d8p5dx/ gLpr/Z/o2L+mtMvnnTgBijYIGrmU7vC9m06v8ZecWpWev4Bl4mhQTy9BXxpd7jED 6sXvJRUXIL5cBSxw2FS6VliAPowRr+kWdYwkCrNPihsQfiVzJeUUK/79Z1K0uadb RcZ4kK+voXREDq/fLhh33NY0iE/fCFO7tnQHdpUTr968abI+rYJaEs775MX4Z0+R 9Tit/Yn4BAYywWPNtAaRTfYOaDLBdk2LKrGrqMvsu+q1B4bHIQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFf8dtI2L8qpkM3a+7e/7nu2gJrkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3NWE2MjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzlhZTYxZWZjLWE0MDItNDk3NS1i ZmU3LWY3ZGRkYTc1YTYyOC85YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3 NWE2MjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALRh7AwDQQCAAIwBwMFACYG/kAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh2pMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB9hvzCICLmJEL6IGa0g7xAQld8I VEKS1vq9T1YKtOCNStdsXPB7FSBXmR2BYpsbCz90L3ofxZSp/nWYwPgNICG1SRHX DMHFryYIuUFgfQ9wxZOKXyJi/dv4w1lIZCKEAmWyK4RtYqYKdpxjPVJyBI7P9nPU h/HoSJx9LPF0MFyJkTHLWYK/K0nFxBhYoqyVyhEyK763hnIx/k0mGIU5MWJovBUz 4WTlt2L1r5/LmQL4XisyyyJ15EeMTQLp/V2bK/AXIoamT96oqTS+IWob7qBp/IC8 k2BcOcSNjtCKh1tLAyeKrdxHWvgpM1iYsAbXeNzKnuugn9Z6n1NRBaF3Jn0= -----END CERTIFICATE-----Generated at Sun Nov 15 22:06:58 2026 by rpki-client