$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer File: a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer (raw, json) Hash identifier: S64IBHnt4Oc3sgGhswyicqEE153Hu2QGAgbYiZr+uvc= Subject key identifier: D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584DF639041264A55FECCAD25E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 12:45:18 +0000 Certificate not after: Mon 28 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 36353 IP: 208.80.88.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:39:04:12:64:a5:5f:ec:ca:d2:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 26 12:45:18 2026 GMT Not After : Aug 28 12:45:18 2028 GMT Subject: CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:a3:bf:69:50:d5:fb:b2:36:70:d2:81:95: 4b:f1:1f:4f:e7:f0:73:26:f8:bc:79:04:5b:e4:1b: 6d:70:86:4e:6b:1b:4a:b4:ad:f8:7f:da:72:67:4b: ce:0f:70:37:15:7e:1f:24:b4:b5:5a:4b:8e:b6:82: 3c:5e:04:d9:e1:78:4f:9a:38:90:0f:f9:ba:ed:7e: 5e:b2:ee:e3:a4:51:2a:31:e0:93:27:8d:11:fb:c2: 33:d6:d8:34:4c:c9:8d:31:b2:59:23:65:0f:81:ab: ca:77:65:43:58:0f:a5:74:d2:5e:c1:2b:13:78:a2: 7e:50:87:f4:32:3e:e9:f4:88:ee:db:13:7d:b6:6b: 81:b5:14:ad:fc:15:41:cc:7f:3a:5d:3f:85:ee:1b: 94:54:21:1b:67:e8:88:18:fe:2a:37:f1:3e:9f:ba: fd:72:05:d8:48:b9:b8:ab:88:87:79:23:76:cd:c4: ea:6a:55:4e:ee:7d:c2:72:80:54:a3:6d:6c:02:0f: 68:85:9a:48:4e:b7:95:b9:33:c9:dc:de:b3:2f:33: 28:ea:cb:e5:33:17:8f:c2:b9:fd:75:60:01:2e:7c: fc:5d:e8:64:0d:a4:cd:eb:bc:91:99:cc:47:d2:85: 70:ed:97:2a:3b:bd:a0:55:69:07:97:6f:a5:c2:c2: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 208.80.88.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36353 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6b:d2:74:5e:c3:6e:a6:82:26:fd:47:bc:08:04:ee:ab:f8: bf:e4:1e:dc:1c:63:c5:dd:20:27:89:0a:f6:31:52:77:a6:94: 1d:5b:4b:0e:db:de:15:e5:d9:94:cb:bf:1f:60:c8:2a:db:eb: 2f:08:bd:5a:2f:37:f2:77:b3:dd:d0:93:5a:9c:81:9e:24:d3: 09:b7:cc:51:56:ec:b5:40:65:72:ff:49:c2:1e:df:f9:e6:29: 3a:f0:40:ef:76:98:30:9d:5b:fb:dc:9f:3d:52:33:3d:a0:61: 1b:ba:99:28:37:13:2b:45:9c:66:27:3b:4f:68:65:9a:bc:53: 8a:cd:5a:ba:e8:81:c4:f6:3c:87:2d:7d:27:9f:73:3b:04:9c: 5f:b3:49:c1:34:eb:f4:72:70:4c:bd:3a:09:d2:3f:6a:b7:53: 4b:95:7b:bf:53:2c:33:03:9d:06:1f:37:34:76:f5:a2:0f:c6: 6d:0e:f4:84:b8:b7:75:86:d0:d9:5d:16:8a:0c:16:e8:69:c4: cc:f5:73:03:b0:3a:97:e2:45:5a:fb:fd:8a:57:ef:83:b0:48: ac:0d:3d:29:57:7b:ce:cc:9c:2c:b6:19:d5:83:5c:6b:cb:e5: b3:81:8c:a0:68:ff:6a:f4:94:29:b8:9e:c8:f1:6f:3d:dc:77: 01:08:20:7f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE32OQQSZKVf7MrSXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDUyNjEyNDUxOFoXDTI4MDgyODEyNDUxOFowLzEtMCsGA1UEAxMk YTFiN2M1YjUtM2Q4Yi00ZDZkLWFjZjEtNGI3Mjk5ZmJlNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAqjv2lQ1fuyNnDSgZVL8R9P5/BzJvi8eQRb 5BttcIZOaxtKtK34f9pyZ0vOD3A3FX4fJLS1WkuOtoI8XgTZ4XhPmjiQD/m67X5e su7jpFEqMeCTJ40R+8Iz1tg0TMmNMbJZI2UPgavKd2VDWA+ldNJewSsTeKJ+UIf0 Mj7p9Iju2xN9tmuBtRSt/BVBzH86XT+F7huUVCEbZ+iIGP4qN/E+n7r9cgXYSLm4 q4iHeSN2zcTqalVO7n3CcoBUo21sAg9ohZpITreVuTPJ3N6zLzMo6svlMxePwrn9 dWABLnz8XehkDaTN67yRmcxH0oVw7ZcqO72gVWkHl2+lwsKtGQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNU5FfnfBEDhH28gBDvSTmCxEgOrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h MWI3YzViNS0zZDhiLTRkNmQtYWNmMS00YjcyOTlmYmU0Y2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2ExYjdjNWI1LTNkOGItNGQ2ZC1h Y2YxLTRiNzI5OWZiZTRjZC9hMWI3YzViNS0zZDhiLTRkNmQtYWNmMS00YjcyOTlm YmU0Y2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQUFgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI4BMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGdr0nRew26mgib9R7wIBO6r+L/kHtwcY8XdICeJCvYxUnem lB1bSw7b3hXl2ZTLvx9gyCrb6y8IvVovN/J3s93Qk1qcgZ4k0wm3zFFW7LVAZXL/ ScIe3/nmKTrwQO92mDCdW/vcnz1SMz2gYRu6mSg3EytFnGYnO09oZZq8U4rNWrro gcT2PIctfSefczsEnF+zScE06/RycEy9OgnSP2q3U0uVe79TLDMDnQYfNzR29aIP xm0O9IS4t3WG0NldFooMFuhpxMz1cwOwOpfiRVr7/YpX74OwSKwNPSlXe87MnCy2 GdWDXGvL5bOBjKBo/2r0lCm4nsjxbz3cdwEIIH8= -----END CERTIFICATE-----Generated at Sat Jun 13 07:22:19 2026 by rpki-client