$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer File: 1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer (raw, json) Hash identifier: t2lKb+/hwwnEu6fPFW+4By++HtUq/7HEG/tGzUCd8Rs= Subject key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Authority key identifier: 85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 Certificate issuer: /CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Certificate serial: 010D0C9F4328584E4F17BC3C9E0F0FDBCD908C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 27 Jun 2026 08:45:12 +0000 Certificate not after: Fri 29 Sep 2028 08:45:12 +0000 Subordinate resources: IP: 23.145.56.0/23 IP: 170.39.49.0/24 IP: 2602:fab8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:17:bc:3c:9e:0f:0f:db:cd:90:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Validity Not Before: Jun 27 08:45:12 2026 GMT Not After : Sep 29 08:45:12 2028 GMT Subject: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:97:4b:de:42:a3:c4:f6:7e:fd:cf:ba:14: ab:26:2c:7e:ae:a1:ca:bb:80:0f:bf:25:7d:2b:25: 2b:bf:8c:c0:79:97:6b:5a:58:8e:62:06:21:fe:f0: 9e:59:86:70:28:5e:bc:c6:95:66:0e:61:55:49:c9: 2e:46:b7:6d:9d:22:b0:61:e5:fa:bd:51:39:50:d4: 3f:91:a0:ee:12:2a:36:71:11:40:0e:d2:d7:26:f9: ef:cd:f8:da:15:21:9e:36:8e:5a:6e:30:e0:95:80: 39:9c:20:6b:bc:3c:94:b4:97:e2:88:b7:b3:be:a3: 43:93:16:2f:43:6e:68:6d:5a:7d:7e:8c:a6:fd:02: 8f:52:a4:da:22:7d:a4:0e:15:37:c1:0c:75:bf:b6: 6b:68:a8:3c:b3:69:d9:20:82:19:cb:28:5c:1e:e6: 7c:e9:3f:7e:20:2b:39:bd:5a:6a:29:0b:f4:f1:16: ab:66:e5:cd:0b:5e:81:43:ca:8a:df:bd:54:44:2e: cc:e8:c7:b1:95:62:25:09:c1:65:01:a9:bd:9c:56: b4:a3:d5:cc:cf:5b:d0:bb:dc:c8:71:9c:e3:f9:98: 72:69:ba:57:f0:14:48:bd:d8:e2:42:0d:de:f7:ea: b9:c4:ee:0c:e5:2e:fd:72:12:d3:83:bb:ec:c1:79: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl X509v3 Authority Key Identifier: keyid:85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer sbgp-ipAddrBlock: critical IPv4: 23.145.56.0/23 170.39.49.0/24 IPv6: 2602:fab8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e1:b1:89:b1:4d:cc:e4:fd:ef:dc:51:d0:02:9b:75:88:35: a8:e0:04:22:62:e1:6a:19:8d:22:59:39:79:02:4d:3c:d5:93: bc:d8:d5:67:dd:1b:1e:58:e4:0b:a6:c7:38:7f:56:69:bb:b3: 12:da:27:0b:f0:53:70:ae:d7:4a:89:7b:36:7c:9e:97:ed:3c: 0d:59:fd:3a:4a:ec:15:7a:51:ac:4d:09:e8:ad:81:b1:4b:9c: 74:3f:03:89:8b:17:9f:7c:f4:32:e3:db:70:0b:37:74:9c:57: c4:20:12:53:bc:ab:6d:32:50:bf:86:f3:c7:03:6e:41:2f:c8: a4:a3:b1:0b:a8:6c:58:7e:84:aa:21:5a:7f:3b:94:5c:ee:9c: 43:cb:8f:57:6c:60:ad:f8:fd:cc:5b:46:0a:1a:a4:75:2a:b3: 92:c7:6c:6c:7a:a9:ab:e5:8e:ff:40:86:d9:13:83:f4:58:c7: 9b:58:8f:5e:3e:03:a4:e6:52:4f:b6:80:76:1f:a9:96:35:2a: 6a:bf:dc:cd:64:c4:ef:19:49:e2:ff:ce:66:cf:9d:56:df:20: 5e:d1:4b:41:51:91:a6:90:24:12:d9:a5:18:3e:c5:1a:61:aa: b6:8a:01:7e:dc:cc:21:21:89:1b:69:69:46:63:58:f2:1a:06: 6f:0d:fa:62 -----BEGIN CERTIFICATE----- MIIG0zCCBbugAwIBAgIUAQ0Mn0MoWE5PF7w8ng8P282QjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2M2UyZjktNGQ5Yi00MGMzLWFmYTItY2U3MDQ1ZmZk MjNhMB4XDTI2MDYyNzA4NDUxMloXDTI4MDkyOTA4NDUxMlowPTE7MDkGA1UEAxMy MTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5NGRmMzJiZmU5ZWQw NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lJdL3kKjxPZ+/c+6 FKsmLH6uocq7gA+/JX0rJSu/jMB5l2taWI5iBiH+8J5ZhnAoXrzGlWYOYVVJyS5G t22dIrBh5fq9UTlQ1D+RoO4SKjZxEUAO0tcm+e/N+NoVIZ42jlpuMOCVgDmcIGu8 PJS0l+KIt7O+o0OTFi9DbmhtWn1+jKb9Ao9SpNoifaQOFTfBDHW/tmtoqDyzadkg ghnLKFwe5nzpP34gKzm9WmopC/TxFqtm5c0LXoFDyorfvVRELszox7GVYiUJwWUB qb2cVrSj1czPW9C73MhxnOP5mHJpulfwFEi92OJCDd736rnE7gzlLv1yEtODu+zB eXr/AgMBAAGjggPXMIID0zAdBgNVHQ4EFgQUk7ApbDF4d4D+hBMxj9DScIODTMUw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2 NS04YTE2LWRiZmM0NTkzYzFhOC84LzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00 NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzgvOTNCMDI5NkMzMTc4Nzc4MEZFODQxMzMx OEZEMEQyNzA4MzgzNENDNS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkz M2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1jZTcwNDVmZmQyM2EvNTU2M2Uy ZjktNGQ5Yi00MGMzLWFmYTItY2U3MDQ1ZmZkMjNhLmNybDAfBgNVHSMEGDAWgBSF t4gi8sjghNUB5gDhLXlBKDalaTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU1 NjNlMmY5LTRkOWItNDBjMy1hZmEyLWNlNzA0NWZmZDIzYS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXkTgDBACqJzEwDgQCAAIwCAMGBCYC+rgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFThsYmxTczk/e/cUdACm3WINajgBCJi4WoZjSJZOXkCTTzVk7zY1Wfd Gx5Y5Aumxzh/Vmm7sxLaJwvwU3Cu10qJezZ8npftPA1Z/TpK7BV6UaxNCeitgbFL nHQ/A4mLF5989DLj23ALN3ScV8QgElO8q20yUL+G88cDbkEvyKSjsQuobFh+hKoh Wn87lFzunEPLj1dsYK34/cxbRgoapHUqs5LHbGx6qavljv9AhtkTg/RYx5tYj14+ A6TmUk+2gHYfqZY1Kmq/3M1kxO8ZSeL/zmbPnVbfIF7RS0FRkaaQJBLZpRg+xRph qraKAX7czCEhiRtpaUZjWPIaBm8N+mI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:13:41 2026 by rpki-client