$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.cer File: 071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.cer (raw, json) Hash identifier: xA1GR6eanE8jyCBQ0rQT7lS8tJfoKgdPnzIHTmRdwZA= Subject key identifier: 2B:C3:C9:A1:10:E8:95:34:4F:73:C9:8A:0C:F9:D4:A5:ED:FD:0E:AE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E71FD47CAE12905A5FC460880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jul 2026 20:45:11 +0000 Certificate not after: Wed 11 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 23.181.152.0/24 IP: 2602:f8af::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:71:fd:47:ca:e1:29:05:a5:fc:46:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 9 20:45:11 2026 GMT Not After : Oct 11 20:45:11 2028 GMT Subject: CN=071c82a2-4589-4ecd-a0dd-b0f45bfff7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:3e:81:49:d0:fa:17:86:88:f7:2f:be:90: 6b:c8:ac:30:46:96:a8:11:54:5d:9b:90:2b:75:5e: dd:1b:fe:2e:78:59:7a:f1:cc:b3:3b:cf:4b:0d:6b: e4:15:d5:96:ff:4b:ff:62:87:c1:ec:63:30:18:a2: f8:e3:85:ef:77:56:0b:4f:31:58:1f:c3:6a:69:cc: ec:a7:03:89:36:a6:18:6a:49:8d:be:eb:25:e9:80: d7:64:19:58:c5:3f:52:e0:e5:ed:b2:30:7f:8d:12: bd:e3:a5:74:b5:6c:80:1e:ab:00:27:b8:a8:7c:71: df:a9:8e:6c:99:52:cc:48:37:51:84:65:cb:f2:8f: 6a:77:57:7d:67:f1:73:0c:0c:af:72:a0:51:e7:03: bc:f2:6d:92:24:91:31:1d:39:69:05:e8:36:88:b3: 06:83:3d:d9:3f:e9:99:39:a5:b7:f8:35:4a:18:5b: 12:17:cb:9e:c2:43:e2:c1:c6:ef:e9:c2:d4:64:6c: 36:c1:45:69:b9:b1:ae:a9:89:c2:a8:7f:34:7e:b8: 49:8d:e5:15:f7:19:dc:ff:03:3e:d6:5d:0b:f3:c3: 54:57:91:ba:00:c1:ff:a2:b9:02:2b:94:c1:ea:06: 12:cb:c2:14:8f:c7:ec:36:ad:d1:56:02:30:5f:3b: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C3:C9:A1:10:E8:95:34:4F:73:C9:8A:0C:F9:D4:A5:ED:FD:0E:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.181.152.0/24 IPv6: 2602:f8af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9f:a6:3c:95:84:f9:48:07:a6:52:f9:01:e4:87:bb:30:b0: f4:88:f0:96:5d:a7:36:5a:cb:b0:b2:db:c9:0b:dd:f6:35:50: b8:27:98:ce:f3:db:a7:4e:26:d7:df:d8:47:c0:36:2f:37:7d: 0d:67:76:19:a6:68:16:8b:b5:59:1e:a1:33:cc:bd:44:b7:f7: fd:c5:36:54:09:ee:30:0d:d8:52:49:d6:2e:dd:3b:ee:db:e2: 3b:a7:92:37:be:4e:d8:b7:e1:dc:22:7a:73:44:c1:90:52:78: 24:60:5d:19:4b:c5:ea:84:25:36:9c:0f:a3:a8:d6:bb:f5:e2: f5:f5:86:5b:c9:ce:1d:ed:6b:3c:12:d0:2f:e8:e1:d0:4c:1f: 48:be:a2:bf:10:d1:ff:2b:8a:ec:91:a9:ac:f9:e5:71:20:d9: e6:dd:3d:27:d9:4a:19:3a:b4:98:8e:02:e6:2e:eb:0c:ba:1d: d0:d6:bf:e1:d3:bb:65:14:11:84:f6:d6:52:88:54:ed:5a:c7: 00:a4:b4:2b:40:af:56:00:be:04:81:3a:79:1e:f6:38:15:bd: 93:55:0c:d7:e8:d4:e7:84:3f:c8:27:b4:43:b0:b9:03:16:f2: 72:22:a4:f5:ca:07:0d:bb:ff:cc:9e:bc:f3:de:f2:8a:bf:f5: 2b:1b:c7:0c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE5x/UfK4SkFpfxGCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwOTIwNDUxMVoXDTI4MTAxMTIwNDUxMVowLzEtMCsGA1UEAxMk MDcxYzgyYTItNDU4OS00ZWNkLWEwZGQtYjBmNDViZmZmN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApck+gUnQ+heGiPcvvpBryKwwRpaoEVRdm5Ar dV7dG/4ueFl68cyzO89LDWvkFdWW/0v/YofB7GMwGKL444Xvd1YLTzFYH8Nqaczs pwOJNqYYakmNvusl6YDXZBlYxT9S4OXtsjB/jRK946V0tWyAHqsAJ7iofHHfqY5s mVLMSDdRhGXL8o9qd1d9Z/FzDAyvcqBR5wO88m2SJJExHTlpBeg2iLMGgz3ZP+mZ OaW3+DVKGFsSF8uewkPiwcbv6cLUZGw2wUVpubGuqYnCqH80frhJjeUV9xnc/wM+ 1l0L88NUV5G6AMH/orkCK5TB6gYSy8IUj8fsNq3RVgIwXztpBwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCvDyaEQ6JU0T3PJigz51KXt/Q6uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NzFjODJhMi00NTg5LTRlY2QtYTBkZC1iMGY0NWJmZmY3ZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA3MWM4MmEyLTQ1ODktNGVjZC1h MGRkLWIwZjQ1YmZmZjdlMS8wNzFjODJhMi00NTg5LTRlY2QtYTBkZC1iMGY0NWJm ZmY3ZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtZgwDgQCAAIwCAMGACYC+K8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AC6fpjyVhPlIB6ZS+QHkh7swsPSI8JZdpzZay7Cy28kL3fY1ULgnmM7z26dOJtff 2EfANi83fQ1ndhmmaBaLtVkeoTPMvUS39/3FNlQJ7jAN2FJJ1i7dO+7b4junkje+ Tti34dwienNEwZBSeCRgXRlLxeqEJTacD6Oo1rv14vX1hlvJzh3tazwS0C/o4dBM H0i+or8Q0f8riuyRqaz55XEg2ebdPSfZShk6tJiOAuYu6wy6HdDWv+HTu2UUEYT2 1lKIVO1axwCktCtAr1YAvgSBOnke9jgVvZNVDNfo1OeEP8gntEOwuQMW8nIipPXK Bw27/8yevPPe8oq/9Ssbxww= -----END CERTIFICATE-----Generated at Fri Jul 24 05:43:48 2026 by rpki-client