$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer File: de84b539-8408-4f2c-8e81-05f7a1b73686.cer (raw, json) Hash identifier: HAMq5ngp7bCxOwMv7glQYNlAdyNXKZvIz0KufZ3XKMU= Subject key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F9A60E8E283FB8B7BCD03B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 24 Oct 2026 00:45:12 +0000 Certificate not after: Fri 26 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 30092 IP: 66.154.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:60:e8:e2:83:fb:8b:7b:cd:03:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 24 00:45:12 2026 GMT Not After : Jan 26 01:45:12 2029 GMT Subject: CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:74:85:a4:14:a9:bf:0f:c7:e5:1f:54:eb: 3c:af:7b:1f:84:9d:04:73:86:97:f9:d4:fb:13:3f: 8c:8d:ef:ca:a4:e6:28:cc:33:54:31:81:56:0b:64: 28:47:c5:eb:ec:a1:59:db:79:74:77:dd:d4:d7:78: 68:7e:ae:aa:32:32:73:24:56:cd:bb:18:cf:02:0a: fa:a4:1d:15:03:68:87:f8:5c:c0:6c:5b:d2:71:2e: f9:cf:99:b5:d6:80:88:c9:3e:89:e3:eb:da:ab:d9: 5f:9d:23:f7:2a:12:3c:91:b4:5d:27:6b:fd:eb:4f: 54:1f:6f:a2:7d:9a:f6:0d:06:2b:36:e6:55:d1:fa: ea:8f:92:42:4c:f7:ae:71:e7:8a:41:d6:c8:4b:6c: 0c:b9:90:66:24:3c:ab:bd:de:fd:c8:ab:6f:c5:e7: 34:73:09:a1:b8:d8:ab:2a:3a:29:22:ee:2f:8d:f8: 56:65:59:cd:05:40:f4:e5:bd:2e:55:80:09:ba:41: 92:33:b0:8d:d1:d0:f4:72:7c:8d:cd:9c:8a:42:63: 96:c0:a6:e7:6e:b4:5c:b3:e9:f3:c9:f2:ad:8e:c7: c6:40:25:2e:f0:a9:b1:42:b8:c1:8f:19:0c:b2:49: 19:32:1f:ae:65:7c:48:bb:47:4b:ee:c5:fd:a6:1c: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.154.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30092 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a0:36:7c:28:9c:dc:67:92:31:3e:1a:9b:d9:a3:90:f7:de: 3d:7a:df:28:60:1a:8f:c2:61:1d:61:f9:46:b6:4a:7b:94:e7: 99:4b:18:ba:0e:2f:e1:4f:21:39:81:94:22:10:69:3d:63:46: 40:f9:8c:40:b6:24:62:34:ec:97:1c:a9:3c:df:f1:e8:b8:98: a5:3f:fe:7a:5b:c3:91:6f:82:af:f8:e6:b7:60:74:0a:58:80: 7b:0f:d7:c7:35:06:9b:1e:81:7c:23:d2:c4:91:ec:af:0e:b4: 05:5c:e0:47:1e:84:5e:15:73:9e:f9:f3:1e:aa:4a:f1:79:81: ea:a5:a3:e2:09:73:89:4b:36:1a:04:e9:d0:97:e4:c8:b5:d5: 31:0e:f5:d7:ad:b3:e4:8d:4a:9b:77:a5:a8:d8:c5:24:92:e8: f7:0b:d1:ff:da:34:71:4f:26:40:a2:3c:07:be:0b:21:2b:16: b7:8b:6e:b4:87:e4:84:a1:47:37:99:60:9f:d3:ec:83:b2:b5: 5d:44:52:28:e2:96:28:37:08:97:b9:8f:b9:f5:37:fa:b3:67: ae:84:13:55:22:77:f5:0a:5e:04:d3:cb:ac:cf:65:3b:dc:73: 07:cd:d5:cb:02:82:a8:20:89:a0:5b:2a:ed:71:4f:c6:94:df: ff:31:e4:ed -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE+aYOjig/uLe80DtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAyNDAwNDUxMloXDTI5MDEyNjAxNDUxMlowLzEtMCsGA1UEAxMk ZGU4NGI1MzktODQwOC00ZjJjLThlODEtMDVmN2ExYjczNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+V0haQUqb8Px+UfVOs8r3sfhJ0Ec4aX+dT7 Ez+Mje/KpOYozDNUMYFWC2QoR8Xr7KFZ23l0d93U13hofq6qMjJzJFbNuxjPAgr6 pB0VA2iH+FzAbFvScS75z5m11oCIyT6J4+vaq9lfnSP3KhI8kbRdJ2v9609UH2+i fZr2DQYrNuZV0frqj5JCTPeuceeKQdbIS2wMuZBmJDyrvd79yKtvxec0cwmhuNir KjopIu4vjfhWZVnNBUD05b0uVYAJukGSM7CN0dD0cnyNzZyKQmOWwKbnbrRcs+nz yfKtjsfGQCUu8KmxQrjBjxkMskkZMh+uZXxIu0dL7sX9phzp8QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFODZH1m/UDHhlnfCeIwgk4UF6x8WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k ZTg0YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3YTFiNzM2ODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2RlODRiNTM5LTg0MDgtNGYyYy04 ZTgxLTA1ZjdhMWI3MzY4Ni9kZTg0YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3YTFi NzM2ODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVCmmAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALqA2fCic3GeSMT4am9mjkPfePXrfKGAaj8JhHWH5RrZKe5Tn mUsYug4v4U8hOYGUIhBpPWNGQPmMQLYkYjTslxypPN/x6LiYpT/+elvDkW+Cr/jm t2B0CliAew/XxzUGmx6BfCPSxJHsrw60BVzgRx6EXhVznvnzHqpK8XmB6qWj4glz iUs2GgTp0JfkyLXVMQ71162z5I1Km3elqNjFJJLo9wvR/9o0cU8mQKI8B74LISsW t4tutIfkhKFHN5lgn9Psg7K1XURSKOKWKDcIl7mPufU3+rNnroQTVSJ39QpeBNPL rM9lO9xzB83VywKCqCCJoFsq7XFPxpTf/zHk7Q== -----END CERTIFICATE-----Generated at Thu Nov 5 04:34:59 2026 by rpki-client