$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.cer File: eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.cer (raw, json) Hash identifier: 6dW5QKFxsbHFLp9RgBAPj9gP15AoiA0b6fzA9HqKsE4= Subject key identifier: DC:53:D8:4C:71:47:8F:7C:DA:13:E2:54:FA:1E:C0:5F:B9:E6:75:0C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E86ED69EA1EADCD8AB5F09C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jul 2026 08:45:11 +0000 Certificate not after: Thu 19 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 16866 IP: 162.250.12.0/22 IP: 2607:f990::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:ed:69:ea:1e:ad:cd:8a:b5:f0:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 17 08:45:11 2026 GMT Not After : Oct 19 08:45:11 2028 GMT Subject: CN=eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:f4:94:99:d3:20:17:94:cb:23:27:4e:0a: 76:cf:ba:7c:84:47:6b:70:eb:0b:4c:ec:30:82:ca: 79:8f:3f:e8:b4:91:d6:5f:0f:d2:16:f3:7d:1e:c6: 52:6f:ef:64:a2:a1:d6:6c:a5:5a:b3:04:7c:99:42: ae:79:1e:77:61:2a:c1:b7:5e:e8:61:75:6d:e8:4c: 96:7a:6c:25:ce:f4:5c:b5:4c:54:a4:f7:23:55:c2: 89:d8:c6:ad:9b:c0:9c:ea:6d:48:53:5d:26:03:74: 03:0a:1b:85:d7:98:49:84:8a:12:9f:e6:ca:da:12: 18:a4:5d:aa:8a:13:37:9e:af:34:c9:7d:fa:56:8f: 89:84:13:e2:0a:c4:e1:04:b7:f7:14:85:34:0a:a2: 57:4a:7f:e0:58:16:06:6a:3f:e8:cc:94:92:44:f5: 4b:53:cd:ad:31:fd:b9:d3:35:d1:a0:dc:7d:d4:e8: 49:60:52:b0:cd:e2:eb:31:d1:74:f3:3c:75:21:49: a8:14:1b:fc:dc:4e:ce:d1:ca:7a:4f:a8:9a:76:6d: a0:4f:0b:85:34:a6:4a:75:c9:0e:a2:d7:24:02:5a: 25:26:96:72:25:96:94:0f:6b:b2:9a:f6:f8:b2:05: cc:f7:fb:5b:92:82:87:46:bb:2c:4e:e8:79:c3:10: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:D8:4C:71:47:8F:7C:DA:13:E2:54:FA:1E:C0:5F:B9:E6:75:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.250.12.0/22 IPv6: 2607:f990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16866 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ee:41:a0:f0:be:91:c8:53:e1:2a:71:ca:7d:55:2a:0c:89: e2:6a:7c:c2:83:5d:69:c9:a8:4f:df:88:5a:5a:49:cb:4e:71: 77:be:fc:aa:3b:b2:ee:05:19:72:4e:b2:7a:bf:f9:60:16:e9: c5:0d:b1:1b:4f:c1:ea:0e:b8:ca:68:78:bb:b8:91:31:df:f2: 5f:57:3e:53:24:bd:32:18:04:14:ad:36:82:94:9e:5f:72:b0: 51:79:44:fd:59:03:7d:cb:d7:6b:ab:57:8b:cb:e7:30:78:4d: da:ec:ae:2a:84:35:51:57:04:55:bc:67:7d:49:88:00:0b:25: d3:13:a5:cc:de:48:5a:f3:64:6d:40:6b:a8:eb:86:ad:a2:16: 17:ec:1a:74:9c:55:01:70:a2:93:a5:4a:39:8f:eb:34:ba:39: 55:9f:5c:cd:a1:2c:8d:bb:df:f1:66:2b:06:4b:41:6b:da:02: 13:da:63:31:47:00:71:91:8a:8a:a7:13:e5:d9:a0:77:be:a3: 6d:1e:68:c0:42:a8:e3:8d:4b:1c:46:15:e5:1b:51:d1:ee:93: 82:87:42:2c:d9:12:86:eb:b7:d2:e6:5b:0e:35:26:ff:04:31: 76:9b:29:f5:4c:0f:03:85:10:89:fc:47:07:54:92:3e:2a:66: e7:7d:71:fb -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE6G7WnqHq3NirXwnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcxNzA4NDUxMVoXDTI4MTAxOTA4NDUxMVowLzEtMCsGA1UEAxMk ZWI1NzkyYjktM2M2MS00YjBhLWFjMmEtYzVhNzdlMTRlN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT/0lJnTIBeUyyMnTgp2z7p8hEdrcOsLTOww gsp5jz/otJHWXw/SFvN9HsZSb+9koqHWbKVaswR8mUKueR53YSrBt17oYXVt6EyW emwlzvRctUxUpPcjVcKJ2Matm8Cc6m1IU10mA3QDChuF15hJhIoSn+bK2hIYpF2q ihM3nq80yX36Vo+JhBPiCsThBLf3FIU0CqJXSn/gWBYGaj/ozJSSRPVLU82tMf25 0zXRoNx91OhJYFKwzeLrMdF08zx1IUmoFBv83E7O0cp6T6iadm2gTwuFNKZKdckO otckAlolJpZyJZaUD2uymvb4sgXM9/tbkoKHRrssTuh5wxB0IQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFNxT2ExxR4982hPiVPoewF+55nUMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l YjU3OTJiOS0zYzYxLTRiMGEtYWMyYS1jNWE3N2UxNGU3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ViNTc5MmI5LTNjNjEtNGIwYS1h YzJhLWM1YTc3ZTE0ZTdhMy9lYjU3OTJiOS0zYzYxLTRiMGEtYWMyYS1jNWE3N2Ux NGU3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKi+gwwDQQCAAIwBwMFACYH+ZAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQeIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUO5BoPC+kchT4Spxyn1VKgyJ4mp8 woNdacmoT9+IWlpJy05xd778qjuy7gUZck6yer/5YBbpxQ2xG0/B6g64ymh4u7iR Md/yX1c+UyS9MhgEFK02gpSeX3KwUXlE/VkDfcvXa6tXi8vnMHhN2uyuKoQ1UVcE VbxnfUmIAAsl0xOlzN5IWvNkbUBrqOuGraIWF+wadJxVAXCik6VKOY/rNLo5VZ9c zaEsjbvf8WYrBktBa9oCE9pjMUcAcZGKiqcT5dmgd76jbR5owEKo441LHEYV5RtR 0e6TgodCLNkShuu30uZbDjUm/wQxdpsp9UwPA4UQifxHB1SSPipm531x+w== -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:08 2026 by rpki-client