$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.cer File: ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.cer (raw, json) Hash identifier: JeNeUSLO25ZwTMddNfrKnRfiti3X1HlTpcXVll5+AVU= Subject key identifier: CF:3C:DB:07:CE:D5:8F:61:44:B1:ED:7D:83:47:62:A2:81:BE:F1:6C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F66B6D3DC81C95E1E1103F860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 12:36:17 +0000 Certificate not after: Sun 31 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 40368 IP: 198.134.196.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:b6:d3:dc:81:c9:5e:1e:11:03:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 5 12:36:17 2026 GMT Not After : Dec 31 13:45:11 2028 GMT Subject: CN=ec4fbd7f-bcba-4531-913e-7ecb3b470c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:75:12:7a:80:40:fa:76:80:82:07:ac:5a: 68:ad:36:13:bf:e1:5f:f5:8c:8b:4c:8f:36:16:11: 33:7b:57:16:70:34:3c:82:e7:0e:1c:84:18:be:dc: f9:a5:7b:e2:34:00:53:57:8c:c9:d4:43:35:9d:6e: 80:de:91:98:98:38:a8:7a:14:6b:be:6b:41:e7:fc: c4:06:54:14:a2:df:bf:2c:ab:9d:a0:48:c6:cb:30: 91:0b:1c:6f:72:5a:2b:4c:d8:39:86:93:63:3a:18: 89:fc:ba:b2:4a:5c:bf:67:2d:4f:30:6b:bf:8e:b5: 37:79:84:28:9f:fa:6b:53:98:18:76:fd:90:95:e2: f8:c4:9b:da:fd:3e:ae:6b:4c:c1:3b:b3:d6:e9:9b: e2:ea:90:66:13:0a:bf:99:9e:57:5b:4f:14:fc:f4: 55:be:d6:b5:4e:54:f7:84:03:4c:3a:f9:3c:27:2f: dc:67:b9:18:38:9f:b7:ab:c9:83:79:3b:de:bc:ba: 11:62:ae:a7:ab:4e:46:72:7f:fb:ca:a5:b1:aa:6c: d0:a3:eb:77:f0:00:d3:01:7c:96:38:3e:70:82:f6: 3c:a2:ce:9a:2d:e9:dc:69:0e:0e:6f:25:7f:59:7e: 97:d5:91:55:b4:8f:21:54:69:14:8b:3b:47:fb:8e: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:DB:07:CE:D5:8F:61:44:B1:ED:7D:83:47:62:A2:81:BE:F1:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.134.196.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:27:59:86:cb:cf:38:28:dd:f4:eb:9e:14:cc:1d:28:a9:0d: 41:f6:80:ba:8b:41:cc:ff:cd:b7:92:96:52:e0:b0:db:a3:75: 28:9d:54:c9:37:d7:2b:bf:83:62:a7:b7:00:7c:fe:2b:47:db: f7:41:ae:b6:e5:de:a2:60:4b:95:8a:6f:15:09:ea:bb:1a:3c: 07:43:75:f4:e0:3d:f5:a1:44:ed:cd:a9:81:c9:3b:77:9b:7a: 39:42:dc:04:a2:24:39:b6:5d:de:a7:bd:95:ea:e1:12:2e:c2: 37:ee:33:44:6a:c6:47:a7:f3:39:70:50:1b:a4:e2:65:3d:da: e7:13:a3:ad:48:64:ec:39:2d:f7:c2:d5:cc:49:c9:62:f5:19: dd:a8:62:fc:87:ac:05:2b:36:88:f3:1e:52:2a:c6:b7:d5:29: 42:dd:de:52:3b:9b:12:9a:36:d7:ce:38:7a:20:cb:df:d7:cc: 97:7a:ae:5e:7d:48:ff:65:09:ce:12:63:b4:d9:ad:c1:5d:6a: 27:c1:ab:85:25:f2:92:12:08:de:18:49:c4:b2:14:74:23:6f: 84:cd:dd:18:a0:14:5f:ef:32:de:c5:d7:1a:57:69:53:4e:6d: 2f:f7:56:74:7e:a1:d0:ea:1d:56:01:1d:d6:2c:30:3a:0e:a4: 34:96:e5:37 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9mttPcgcleHhED+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwNTEyMzYxN1oXDTI4MTIzMTEzNDUxMVowLzEtMCsGA1UEAxMk ZWM0ZmJkN2YtYmNiYS00NTMxLTkxM2UtN2VjYjNiNDcwYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSp1EnqAQPp2gIIHrFporTYTv+Ff9YyLTI82 FhEze1cWcDQ8gucOHIQYvtz5pXviNABTV4zJ1EM1nW6A3pGYmDioehRrvmtB5/zE BlQUot+/LKudoEjGyzCRCxxvclorTNg5hpNjOhiJ/LqySly/Zy1PMGu/jrU3eYQo n/prU5gYdv2QleL4xJva/T6ua0zBO7PW6Zvi6pBmEwq/mZ5XW08U/PRVvta1TlT3 hANMOvk8Jy/cZ7kYOJ+3q8mDeTvevLoRYq6nq05Gcn/7yqWxqmzQo+t38ADTAXyW OD5wgvY8os6aLencaQ4ObyV/WX6X1ZFVtI8hVGkUiztH+472dQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFM882wfO1Y9hRLHtfYNHYqKBvvFsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YzRmYmQ3Zi1iY2JhLTQ1MzEtOTEzZS03ZWNiM2I0NzBjNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VjNGZiZDdmLWJjYmEtNDUzMS05 MTNlLTdlY2IzYjQ3MGM1YS9lYzRmYmQ3Zi1iY2JhLTQ1MzEtOTEzZS03ZWNiM2I0 NzBjNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGhsQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ2wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABcnWYbLzzgo3fTrnhTMHSipDUH2gLqLQcz/zbeSllLgsNuj dSidVMk31yu/g2KntwB8/itH2/dBrrbl3qJgS5WKbxUJ6rsaPAdDdfTgPfWhRO3N qYHJO3ebejlC3ASiJDm2Xd6nvZXq4RIuwjfuM0Rqxken8zlwUBuk4mU92ucTo61I ZOw5LffC1cxJyWL1Gd2oYvyHrAUrNojzHlIqxrfVKULd3lI7mxKaNtfOOHogy9/X zJd6rl59SP9lCc4SY7TZrcFdaifBq4Ul8pISCN4YScSyFHQjb4TN3RigFF/vMt7F 1xpXaVNObS/3VnR+odDqHVYBHdYsMDoOpDSW5Tc= -----END CERTIFICATE-----Generated at Thu Nov 5 05:22:15 2026 by rpki-client