$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer File: 1889ddcb-202e-4e86-8fb3-63c498cba935.cer (raw, json) Hash identifier: b0sksmq1SY+JF+1xWJhao+QoTseE/rkUVV8Xx0yTYjE= Subject key identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E699D3B83131FD2C34F648D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 20:45:11 +0000 Certificate not after: Sun 08 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 401550 IP: 199.36.25.0/24 IP: 2602:f755::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:9d:3b:83:13:1f:d2:c3:4f:64:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 6 20:45:11 2026 GMT Not After : Oct 8 20:45:11 2028 GMT Subject: CN=1889ddcb-202e-4e86-8fb3-63c498cba935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:20:8b:f7:6b:4c:a3:bb:a3:74:4f:13:50:80: 01:c5:dd:1b:81:ca:17:99:22:1e:f5:33:94:6d:ca: 8a:65:08:a8:1e:a4:68:36:6b:88:38:f8:11:a2:48: e6:3c:88:a0:51:53:10:4b:e9:10:ab:0e:8d:27:cb: aa:0b:3b:e3:e3:1a:66:cd:d6:cf:50:fe:a5:2f:87: 13:3d:93:47:21:72:64:22:39:a3:88:00:db:a0:1b: a8:52:16:df:de:60:9b:7b:8a:3c:d5:87:2e:a7:fd: 63:34:ea:a7:cb:b7:a7:4c:2b:76:d1:1d:b5:c6:7e: 71:42:dc:f6:90:10:25:21:cb:d2:81:91:05:5f:b6: 69:a9:15:b1:ae:63:02:cf:23:ec:1f:24:8e:7f:4b: 17:0f:9f:56:37:75:94:b5:91:5e:44:25:fb:12:a0: 47:cd:1d:a2:dd:0b:0d:a2:a8:17:e3:62:45:45:8a: 60:ff:93:c6:4a:60:8c:cf:e8:03:6b:c5:0c:3f:7d: 44:2f:d5:09:c3:6e:19:c1:f3:4c:39:a1:40:52:f9: a6:85:15:b1:36:ad:df:03:48:7d:dc:72:3b:6a:7d: 3b:c4:14:6f:e8:44:5b:19:f1:bb:9f:98:8c:55:d2: d5:d7:e8:50:35:fb:b0:09:b8:19:54:d4:7f:81:54: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.36.25.0/24 IPv6: 2602:f755::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401550 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c8:db:0f:2a:b0:a6:60:85:8d:99:10:ca:3d:bf:ee:66:8f: 78:89:ec:ed:dd:c5:d7:b4:40:f5:3f:b2:1b:14:69:e2:0d:22: 1b:d6:9a:b4:bf:f1:44:de:1b:5f:c4:1e:67:c3:9d:34:dc:7c: ac:5d:75:a4:55:e7:fc:ce:40:7f:eb:0f:b5:fb:ae:50:f5:dd: 28:51:26:1f:35:31:d8:c4:a0:6b:a3:52:76:68:45:66:46:c9: f5:e4:69:14:37:e2:67:ec:54:94:84:ad:e5:ea:2d:bc:d2:97: d4:e4:f3:db:4c:53:6a:b5:92:1d:71:07:e0:7a:7b:29:ed:24: 32:39:d3:6b:e7:ba:30:44:b8:0d:d5:39:a8:e7:b3:3f:3e:41: 20:2c:53:2b:ab:fb:e7:e9:0f:e7:c6:ba:12:93:9f:1e:a7:9d: 58:0a:bb:3c:d9:4c:f2:ec:9a:30:6c:3a:8b:ea:b9:7b:2c:0f: 8e:6f:1b:13:a2:a2:c7:20:c8:c5:13:be:56:84:aa:42:be:ad: cd:8a:54:40:3a:f3:80:7c:5d:05:99:43:d5:1c:f1:9d:aa:fc: 04:65:17:cf:55:83:d2:8f:fe:26:76:8b:96:01:c3:36:04:91: 73:c8:d9:37:66:4c:b4:f4:6c:24:d6:8f:e9:74:ca:77:89:3a: c8:8f:52:b0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5pnTuDEx/Sw09kjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwNjIwNDUxMVoXDTI4MTAwODIwNDUxMVowLzEtMCsGA1UEAxMk MTg4OWRkY2ItMjAyZS00ZTg2LThmYjMtNjNjNDk4Y2JhOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyCL92tMo7ujdE8TUIABxd0bgcoXmSIe9TOU bcqKZQioHqRoNmuIOPgRokjmPIigUVMQS+kQqw6NJ8uqCzvj4xpmzdbPUP6lL4cT PZNHIXJkIjmjiADboBuoUhbf3mCbe4o81Ycup/1jNOqny7enTCt20R21xn5xQtz2 kBAlIcvSgZEFX7ZpqRWxrmMCzyPsHySOf0sXD59WN3WUtZFeRCX7EqBHzR2i3QsN oqgX42JFRYpg/5PGSmCMz+gDa8UMP31EL9UJw24ZwfNMOaFAUvmmhRWxNq3fA0h9 3HI7an07xBRv6ERbGfG7n5iMVdLV1+hQNfuwCbgZVNR/gVTXPQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHu8bm0DUWaPsmXIlTlhIKh+ov7gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x ODg5ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0OThjYmE5MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzE4ODlkZGNiLTIwMmUtNGU4Ni04 ZmIzLTYzYzQ5OGNiYTkzNS8xODg5ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0OThj YmE5MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHJBkwDgQCAAIwCAMGACYC91UAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgjjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzyNsPKrCmYIWNmRDKPb/uZo94 iezt3cXXtED1P7IbFGniDSIb1pq0v/FE3htfxB5nw5003HysXXWkVef8zkB/6w+1 +65Q9d0oUSYfNTHYxKBro1J2aEVmRsn15GkUN+Jn7FSUhK3l6i280pfU5PPbTFNq tZIdcQfgensp7SQyOdNr57owRLgN1Tmo57M/PkEgLFMrq/vn6Q/nxroSk58ep51Y Crs82Uzy7JowbDqL6rl7LA+ObxsToqLHIMjFE75WhKpCvq3NilRAOvOAfF0FmUPV HPGdqvwEZRfPVYPSj/4mdouWAcM2BJFzyNk3Zky09Gwk1o/pdMp3iTrIj1Kw -----END CERTIFICATE-----Generated at Thu Jul 23 20:17:50 2026 by rpki-client