$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer File: b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer (raw, json) Hash identifier: a9SyO6jHKidYXtzmNxbeYyYWvzIdsECtYqMmEGad3GQ= Subject key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F98FB92021CE5CAD4D9E3C080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Oct 2026 12:45:12 +0000 Certificate not after: Thu 25 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 400928 IP: 23.173.24.0/24 IP: 76.164.204.0/24 IP: 104.128.68.0/23 IP: 204.89.181.0/24 IP: 216.52.218.0/24 IP: 2602:f961::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:98:fb:92:02:1c:e5:ca:d4:d9:e3:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 23 12:45:12 2026 GMT Not After : Jan 25 13:45:12 2029 GMT Subject: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:40:1c:70:48:51:18:36:d0:a2:81:f7:7c: 7c:74:22:63:62:19:a0:d4:a8:0c:3d:1f:a6:ae:2e: cc:3a:66:2d:bd:e5:1e:8b:f8:97:cf:be:ac:fc:47: 0b:82:a6:38:a5:45:da:49:ac:33:bb:a9:58:14:7c: 5e:5d:05:f4:b8:d1:a0:88:0a:16:01:c0:4e:c9:3d: 1d:9d:be:9a:02:e6:ed:ee:d7:cf:bf:cb:03:cb:61: f4:2d:73:3f:3b:25:dc:d6:2c:dc:28:d5:01:8a:23: 61:ed:04:bb:cb:47:71:ed:97:8f:f0:5e:36:16:fd: 6f:88:09:11:35:0e:bd:ee:d3:6d:a8:9e:23:a1:03: 2c:27:ae:e2:96:95:0e:c5:1f:31:c2:49:66:a4:f9: 6a:cc:3c:1a:83:dc:95:22:1d:26:aa:4b:89:33:61: 0b:13:dc:df:96:92:92:cb:6a:d3:56:4a:91:51:25: 76:7c:ec:5f:df:cf:ee:96:d7:8a:0b:57:73:79:b8: d6:af:29:39:d5:56:c1:d7:3d:3c:19:2e:5c:1e:75: 20:c2:fd:f4:6a:89:7d:41:f2:0a:41:88:a6:53:0a: 85:24:d3:48:3f:46:3d:23:cb:45:3f:2e:27:9a:d6: 57:fe:45:f8:11:28:1b:b7:44:c8:02:6c:4f:4f:eb: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 76.164.204.0/24 104.128.68.0/23 204.89.181.0/24 216.52.218.0/24 IPv6: 2602:f961::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400928 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:13:5a:a4:d8:3c:f6:5b:5f:9a:9b:d0:52:5b:b5:dc:a2:5e: 6c:d4:03:0c:11:11:8e:84:bd:4b:26:23:fa:b1:44:6c:46:c2: 49:8a:f4:67:c9:b1:4c:8e:c4:a3:3b:79:62:0c:d0:49:9b:75: 53:9a:82:68:f7:4e:d5:df:31:8b:43:a2:3f:58:4f:fd:ef:6f: ec:04:aa:20:bd:8a:57:65:33:16:93:1a:8e:fe:4a:4b:02:85: 05:f6:9f:96:76:f5:f2:d1:a8:0c:73:44:a5:a1:44:0e:d9:cf: 0c:cf:7e:f7:72:f2:04:f4:db:1f:bb:8a:7f:ea:ce:e3:a7:34: 4f:dd:ea:e0:bf:8c:bb:7a:99:44:98:3a:18:e4:da:e8:ac:9d: f4:a6:54:ba:b3:ac:84:02:04:9f:eb:5c:bc:1c:e8:a2:62:de: 89:e0:b6:fe:90:db:ba:c0:82:4b:98:30:da:13:44:de:07:3d: 3f:bd:b7:32:fe:a4:79:97:c1:2a:04:91:a1:74:de:1d:0a:9f: b5:05:b3:e2:c6:7d:5b:0e:22:05:8d:e4:31:40:2e:cf:cc:07: 4f:e0:96:24:27:af:c8:b0:a2:ee:9e:9f:38:4b:e6:8e:d6:7c: 69:3a:26:03:b4:ef:8f:e6:17:c7:98:6a:ce:38:60:ab:20:bd: af:d6:ee:f5 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWE+Y+5ICHOXK1NnjwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAyMzEyNDUxMloXDTI5MDEyNTEzNDUxMlowLzEtMCsGA1UEAxMk YjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNiZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIpAHHBIURg20KKB93x8dCJjYhmg1KgMPR+m ri7MOmYtveUei/iXz76s/EcLgqY4pUXaSawzu6lYFHxeXQX0uNGgiAoWAcBOyT0d nb6aAubt7tfPv8sDy2H0LXM/OyXc1izcKNUBiiNh7QS7y0dx7ZeP8F42Fv1viAkR NQ697tNtqJ4joQMsJ67ilpUOxR8xwklmpPlqzDwag9yVIh0mqkuJM2ELE9zflpKS y2rTVkqRUSV2fOxf38/ulteKC1dzebjWryk51VbB1z08GS5cHnUgwv30aol9QfIK QYimUwqFJNNIP0Y9I8tFPy4nmtZX/kX4ESgbt0TIAmxPT+tz7QIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFJJ913AftPrufmZdZo8MCYuyk6RgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i NWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I1ZGI0NWRiLThjOTItNGI2MS1h M2Q1LWY1YmJiOTkzYmRjMy9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5 M2JkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAAXrRgDBABMpMwDBAFogEQDBADMWbUDBADYNNow DgQCAAIwCAMGACYC+WEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYeIDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCHE1qk2Dz2W1+am9BSW7Xcol5s1AMMERGOhL1LJiP6sURsRsJJivRnybFM jsSjO3liDNBJm3VTmoJo907V3zGLQ6I/WE/972/sBKogvYpXZTMWkxqO/kpLAoUF 9p+WdvXy0agMc0SloUQO2c8Mz373cvIE9Nsfu4p/6s7jpzRP3ergv4y7eplEmDoY 5NrorJ30plS6s6yEAgSf61y8HOiiYt6J4Lb+kNu6wIJLmDDaE0TeBz0/vbcy/qR5 l8EqBJGhdN4dCp+1BbPixn1bDiIFjeQxQC7PzAdP4JYkJ6/IsKLunp84S+aO1nxp OiYDtO+P5hfHmGrOOGCrIL2v1u71 -----END CERTIFICATE-----Generated at Thu Nov 5 04:34:55 2026 by rpki-client