$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer File: a6ba0fd2-b526-4985-9314-bf6485056a64.cer (raw, json) Hash identifier: 9G44ixATDnJdqsdliXoSs88akIRLkz4cFlA700SsLb8= Subject key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E8422BB82649C80FC02AE7A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Jul 2026 08:45:12 +0000 Certificate not after: Wed 18 Oct 2028 08:45:12 +0000 Subordinate resources: AS: 2552 IP: 128.252.0.0/16 IP: 192.31.46.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:22:bb:82:64:9c:80:fc:02:ae:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 16 08:45:12 2026 GMT Not After : Oct 18 08:45:12 2028 GMT Subject: CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:54:df:45:7f:06:ba:2b:b5:ce:51:2f:7d: 76:57:c6:b6:1f:30:88:ad:d0:59:3c:96:b3:28:12: 1b:b7:f4:7b:e4:a7:be:de:e6:01:fe:36:36:26:ea: 61:f6:cd:df:86:f7:4a:b7:b9:16:25:b4:d0:9a:5f: 89:3e:e8:bb:48:ed:7a:39:5c:91:d8:1d:df:9b:fd: 6c:26:34:c5:2b:fa:c6:18:f1:28:f9:35:ec:0c:18: a8:37:80:9d:1f:b7:24:bb:b4:bd:26:c4:bc:93:b3: c9:b5:6c:1f:f7:56:ed:ea:72:72:af:4f:a8:9c:ee: 79:0b:4f:25:3c:46:ee:85:9b:65:74:77:5c:ae:e5: 5e:21:33:28:ae:0e:8e:98:c5:fd:38:f1:4a:31:80: da:97:26:db:a9:e1:0a:aa:93:1c:ad:30:3f:21:4b: 7e:ad:04:0e:6a:25:80:6d:04:14:5a:65:00:2e:95: d0:c6:0e:c5:97:78:fa:50:59:01:22:65:20:2e:a4: 74:5a:d5:db:c8:9a:35:b7:9e:d9:99:fb:ba:b0:f5: 26:ad:10:04:20:db:0c:08:21:0b:5a:54:d1:15:e7: 7a:ae:45:3e:6b:65:07:f4:54:24:63:a6:c7:2d:fd: 93:a8:13:e2:51:bb:46:e0:dc:69:ee:8a:23:d5:83: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 128.252.0.0/16 192.31.46.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2552 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:82:b1:95:c7:15:4a:79:e7:57:ba:89:87:a4:8a:1f:bf:f4: ae:f6:7b:19:4d:bd:93:d9:c6:e4:ee:8b:f5:5f:0d:0c:8e:5a: 97:b6:eb:b3:fe:4e:d4:51:da:ec:04:31:a2:c3:68:6b:60:a2: b6:2e:3f:f3:3e:08:cb:32:e3:e0:b5:af:36:c9:34:30:07:50: 49:03:22:c3:8e:ce:5b:41:83:c2:a0:77:fd:cc:50:ba:e1:a7: db:f1:4b:ed:bd:d6:20:86:d8:54:e3:e9:59:3c:83:5b:d1:be: 0e:66:b9:6b:07:2b:01:84:35:cf:fa:d5:7c:5c:e2:25:e8:7a: 27:c2:11:36:a4:67:fc:a3:ae:02:3d:bd:1a:b1:7a:07:1e:38: a3:39:98:9f:f2:96:6f:22:16:6f:24:ad:8d:e4:d9:4f:26:92: d7:f9:cf:c9:41:18:18:89:82:bc:41:d4:57:0f:02:0f:74:58: 73:1e:fa:54:b4:83:24:0c:81:fa:08:59:1b:4e:3f:df:ab:f4: 55:e0:1d:83:77:47:d1:c4:07:ba:90:d5:f4:7e:77:95:6e:af: 86:4a:24:f9:3f:8e:d7:67:e2:f9:1c:c1:f9:06:26:3c:91:2f: 11:bc:48:d5:28:6d:5e:1b:11:bf:bb:c7:01:c9:5c:34:00:82: 1e:bf:7f:53 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWE6EIruCZJyA/AKuegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcxNjA4NDUxMloXDTI4MTAxODA4NDUxMlowLzEtMCsGA1UEAxMk YTZiYTBmZDItYjUyNi00OTg1LTkzMTQtYmY2NDg1MDU2YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NFU30V/Brortc5RL312V8a2HzCIrdBZPJaz KBIbt/R75Ke+3uYB/jY2Juph9s3fhvdKt7kWJbTQml+JPui7SO16OVyR2B3fm/1s JjTFK/rGGPEo+TXsDBioN4CdH7cku7S9JsS8k7PJtWwf91bt6nJyr0+onO55C08l PEbuhZtldHdcruVeITMorg6OmMX9OPFKMYDalybbqeEKqpMcrTA/IUt+rQQOaiWA bQQUWmUALpXQxg7Fl3j6UFkBImUgLqR0WtXbyJo1t57Zmfu6sPUmrRAEINsMCCEL WlTRFed6rkU+a2UH9FQkY6bHLf2TqBPiUbtG4Nxp7ooj1YPpOwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFMwjlXiNArOxOTzYSQnQMWtPHKYSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h NmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUwNTZhNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E2YmEwZmQyLWI1MjYtNDk4NS05 MzE0LWJmNjQ4NTA1NmE2NC9hNmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUw NTZhNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCA/AMEAMAfLjAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgIJ+DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCXgrGVxxVKeedXuomHpIofv/Su9nsZTb2T2cbk7ov1 Xw0MjlqXtuuz/k7UUdrsBDGiw2hrYKK2Lj/zPgjLMuPgta82yTQwB1BJAyLDjs5b QYPCoHf9zFC64afb8UvtvdYghthU4+lZPINb0b4OZrlrBysBhDXP+tV8XOIl6Hon whE2pGf8o64CPb0asXoHHjijOZif8pZvIhZvJK2N5NlPJpLX+c/JQRgYiYK8QdRX DwIPdFhzHvpUtIMkDIH6CFkbTj/fq/RV4B2Dd0fRxAe6kNX0fneVbq+GSiT5P47X Z+L5HMH5BiY8kS8RvEjVKG1eGxG/u8cByVw0AIIev39T -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:24 2026 by rpki-client