$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer File: 28301e07-2824-4e0b-9659-f5da81f88222.cer (raw, json) Hash identifier: ejm4tBZyWD/UqVx8TOr5qpMGrtiYBoAmmgiiRnFhVug= Subject key identifier: FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584E5DE51430B7A3C0292F221A90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 16:00:15 +0000 Certificate not after: Sun 02 Apr 2028 00:45:23 +0000 Subordinate resources: AS: 18936 IP: 192.195.212.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:e5:14:30:b7:a3:c0:29:2f:22:1a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 2 16:00:15 2026 GMT Not After : Apr 2 00:45:23 2028 GMT Subject: CN=28301e07-2824-4e0b-9659-f5da81f88222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:68:92:5c:a1:35:be:65:13:0b:33:75:30:e9: 1c:eb:98:30:42:d7:46:91:b5:a1:30:81:fc:63:de: a2:83:66:90:3f:42:51:73:7f:f9:d3:1f:26:0e:19: 25:ee:06:6a:ef:58:4e:07:79:11:77:d3:6f:45:a0: f7:74:c1:44:47:de:12:c9:b5:c7:9f:71:11:b7:e1: 76:02:ae:75:d4:7b:7d:0e:0b:79:24:ea:39:a1:55: 59:62:3f:4c:a6:92:bc:52:4d:d6:5e:70:c2:8b:e8: 12:91:66:27:32:c6:7a:1e:53:dd:90:22:7c:fd:94: 40:cc:47:32:6a:1a:1b:84:cf:30:f8:30:5e:b7:b7: 71:02:47:99:50:3b:24:e0:0b:84:4f:44:53:dc:90: 09:ed:e5:15:15:56:70:fd:f0:6d:3e:4a:bc:9d:61: f0:3a:cd:9a:94:1a:ba:38:25:0d:5f:80:f9:70:86: 82:cd:ac:de:de:7d:22:98:5e:31:08:a2:1f:48:f9: 17:6f:55:a7:7d:50:c2:37:4e:a9:15:93:81:27:59: 4c:ba:67:2b:59:50:70:90:5a:46:dd:2a:f6:9f:02: c9:de:21:a1:e5:5c:28:b9:ed:bd:64:d9:b9:ce:f1: e3:fd:11:2d:25:14:8f:fa:d4:8b:b2:a3:1f:23:a6: d3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.195.212.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18936 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:bc:aa:73:7d:63:b7:b4:0e:03:53:dc:94:37:93:65:fb:df: b0:78:2e:b0:82:61:f7:f6:56:55:12:04:cd:2a:89:5a:47:63: 72:be:a7:35:f4:4e:22:90:bd:f1:2b:46:ea:73:56:29:e7:9a: 5c:0d:1d:8e:32:7c:6e:a0:1e:be:09:ba:0c:cd:bf:45:8f:70: 46:b7:73:de:ab:3a:6f:ec:95:c9:ca:a9:ad:8e:e6:a5:3f:b1: c8:63:7e:8b:95:f7:2c:34:6b:6e:c5:3f:60:cf:0f:9b:e4:e3: 58:b5:39:c3:02:c9:b1:88:b2:84:a0:7e:37:7c:be:d1:e4:31: ee:b1:13:a2:59:eb:6d:a3:76:a1:0d:cf:bb:c9:70:6a:ce:83: 10:c3:0f:1e:07:8f:07:a7:d2:fa:50:46:1e:21:d7:e8:7e:4f: 70:f0:0d:f0:91:eb:b4:ab:21:25:02:36:cb:9c:4d:94:5a:e4: 36:60:84:a7:91:91:14:30:cf:e3:95:26:de:bd:1a:64:0a:71: 1f:aa:f9:fa:18:75:81:47:c1:99:81:24:0c:48:0e:98:a8:c1: 2d:05:07:cb:81:e7:2a:6a:d8:f1:77:9b:b6:b5:86:49:03:94: 52:c5:68:cc:f8:2b:3a:cf:87:a5:cc:66:94:11:c7:31:5f:62: 17:43:14:5b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE5d5RQwt6PAKS8iGpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDcwMjE2MDAxNVoXDTI4MDQwMjAwNDUyM1owLzEtMCsGA1UEAxMk MjgzMDFlMDctMjgyNC00ZTBiLTk2NTktZjVkYTgxZjg4MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGiSXKE1vmUTCzN1MOkc65gwQtdGkbWhMIH8 Y96ig2aQP0JRc3/50x8mDhkl7gZq71hOB3kRd9NvRaD3dMFER94SybXHn3ERt+F2 Aq511Ht9Dgt5JOo5oVVZYj9MppK8Uk3WXnDCi+gSkWYnMsZ6HlPdkCJ8/ZRAzEcy ahobhM8w+DBet7dxAkeZUDsk4AuET0RT3JAJ7eUVFVZw/fBtPkq8nWHwOs2alBq6 OCUNX4D5cIaCzaze3n0imF4xCKIfSPkXb1WnfVDCN06pFZOBJ1lMumcrWVBwkFpG 3Sr2nwLJ3iGh5Vwoue29ZNm5zvHj/REtJRSP+tSLsqMfI6bTpQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPtKjOPzgQWTsdgWCUPCjKUmoUlmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y ODMwMWUwNy0yODI0LTRlMGItOTY1OS1mNWRhODFmODgyMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzI4MzAxZTA3LTI4MjQtNGUwYi05 NjU5LWY1ZGE4MWY4ODIyMi8yODMwMWUwNy0yODI0LTRlMGItOTY1OS1mNWRhODFm ODgyMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAw9QwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SfgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAp7yqc31jt7QOA1PclDeTZfvfsHgusIJh9/ZWVRIEzSqJWkdj cr6nNfROIpC98StG6nNWKeeaXA0djjJ8bqAevgm6DM2/RY9wRrdz3qs6b+yVycqp rY7mpT+xyGN+i5X3LDRrbsU/YM8Pm+TjWLU5wwLJsYiyhKB+N3y+0eQx7rETolnr baN2oQ3Pu8lwas6DEMMPHgePB6fS+lBGHiHX6H5PcPAN8JHrtKshJQI2y5xNlFrk NmCEp5GRFDDP45Um3r0aZApxH6r5+hh1gUfBmYEkDEgOmKjBLQUHy4HnKmrY8Xeb trWGSQOUUsVozPgrOs+HpcxmlBHHMV9iF0MUWw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:38:19 2026 by rpki-client