$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer File: 28e10489-29c5-4bd4-84bf-2e43c2f36422.cer (raw, json) Hash identifier: EokRWnl8k0rwSrxLbtBMcciUiuHvL9LDiqBJ/06Oxfs= Subject key identifier: 39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E97AD82721A41B53EBBFA7C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jul 2026 08:45:10 +0000 Certificate not after: Wed 25 Oct 2028 08:45:10 +0000 Subordinate resources: AS: 15347 IP: 192.173.11.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:ad:82:72:1a:41:b5:3e:bb:fa:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 23 08:45:10 2026 GMT Not After : Oct 25 08:45:10 2028 GMT Subject: CN=28e10489-29c5-4bd4-84bf-2e43c2f36422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d7:b4:b4:0f:28:80:a4:48:c5:41:5a:1c:fe: b8:b8:2e:ef:c8:c6:aa:f9:9a:fc:cd:ef:e1:3c:e8: 22:a9:c5:7d:fb:5a:03:55:80:6e:5f:ac:1f:1c:b4: 1b:e1:2a:7e:a3:0b:53:c5:57:e9:53:6f:1a:eb:0a: 63:80:bd:ed:23:77:f6:45:e2:7f:a9:84:cd:c3:41: b2:81:36:72:b4:0f:8e:ce:dd:9a:1a:e5:d2:3e:48: b3:71:d2:3f:25:76:9c:e9:fb:42:64:12:04:a2:58: 96:7a:3d:c5:43:0b:a1:28:11:af:2e:51:38:24:e6: e5:db:41:9e:d1:35:37:03:02:8a:22:00:50:88:25: d2:cc:12:ff:a4:65:3b:f4:0c:63:c8:ff:7b:14:19: 67:52:48:e2:00:57:6c:f5:ac:fa:c8:1d:de:8b:35: 49:b0:7b:c1:d3:06:aa:8e:45:f6:97:26:40:fc:66: f0:88:ee:88:9c:62:db:9a:49:0e:74:cd:62:65:3f: f7:5f:4b:5d:c9:24:30:f0:61:7b:23:fb:0e:07:06: ac:7f:26:f0:62:5a:de:91:4d:96:58:ef:d6:e0:0f: 89:c5:4f:f5:ff:c7:dc:c2:2c:e1:8b:65:1b:f0:47: e4:24:95:c6:3a:fc:eb:3e:f4:47:00:23:e5:ea:1c: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.173.11.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15347 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:22:b7:41:2f:f6:a8:c4:2e:f6:56:77:fe:bb:5c:02:19:e9: fb:e7:fe:5f:9d:8e:f4:3e:d6:2e:f9:79:a9:ff:33:ae:21:ce: 74:d8:77:75:b4:65:26:76:71:01:ba:47:80:a5:ab:8e:23:91: 81:63:ff:38:5b:43:78:e8:78:44:5b:91:42:b9:f5:5b:af:d9: a8:1f:d9:d4:56:bf:7d:d2:33:46:97:6a:a2:57:32:44:b8:7c: 9b:a6:7a:b2:c6:7a:a7:a1:28:cb:3d:a3:b1:2b:a3:69:d2:2e: 3d:4d:cd:aa:60:18:07:81:4e:33:aa:6a:ad:63:82:26:a7:3f: f6:dd:12:8f:2b:76:af:a3:1a:b1:c9:eb:1b:83:fd:50:4b:9f: 3b:2b:f8:37:88:f3:5f:42:7a:7c:e9:68:81:5f:ec:6d:9c:d0: 9e:a4:f7:47:9a:93:8b:0c:3c:28:29:03:04:17:45:14:71:b1: 37:3c:3d:5a:91:01:63:11:82:be:97:8b:40:cc:c3:cc:3c:52: 03:c1:71:e8:b9:7c:b5:16:0b:1c:a1:b0:57:7b:1b:c7:6e:62: 9b:f9:7d:44:fb:2b:23:9c:c4:18:e5:c6:a7:4f:82:41:51:93: dc:03:e2:e6:69:cf:d4:0e:3c:04:86:8b:ac:ca:2b:7c:3d:95: 49:61:e8:e2 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE6XrYJyGkG1Prv6fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyMzA4NDUxMFoXDTI4MTAyNTA4NDUxMFowLzEtMCsGA1UEAxMk MjhlMTA0ODktMjljNS00YmQ0LTg0YmYtMmU0M2MyZjM2NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAite0tA8ogKRIxUFaHP64uC7vyMaq+Zr8ze/h POgiqcV9+1oDVYBuX6wfHLQb4Sp+owtTxVfpU28a6wpjgL3tI3f2ReJ/qYTNw0Gy gTZytA+Ozt2aGuXSPkizcdI/JXac6ftCZBIEoliWej3FQwuhKBGvLlE4JObl20Ge 0TU3AwKKIgBQiCXSzBL/pGU79AxjyP97FBlnUkjiAFds9az6yB3eizVJsHvB0waq jkX2lyZA/GbwiO6InGLbmkkOdM1iZT/3X0tdySQw8GF7I/sOBwasfybwYlrekU2W WO/W4A+JxU/1/8fcwizhi2Ub8EfkJJXGOvzrPvRHACPl6hy25QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDneDRhNj44EoUFUlcZOAJLJc+DBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y OGUxMDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQzYzJmMzY0MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzI4ZTEwNDg5LTI5YzUtNGJkNC04 NGJmLTJlNDNjMmYzNjQyMi8yOGUxMDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQzYzJm MzY0MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADArQswGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC O/MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjiK3QS/2qMQu9lZ3/rtcAhnp++f+X52O9D7WLvl5qf8zriHO dNh3dbRlJnZxAbpHgKWrjiORgWP/OFtDeOh4RFuRQrn1W6/ZqB/Z1Fa/fdIzRpdq olcyRLh8m6Z6ssZ6p6Eoyz2jsSujadIuPU3NqmAYB4FOM6pqrWOCJqc/9t0Sjyt2 r6MascnrG4P9UEufOyv4N4jzX0J6fOlogV/sbZzQnqT3R5qTiww8KCkDBBdFFHGx Nzw9WpEBYxGCvpeLQMzDzDxSA8Fx6Ll8tRYLHKGwV3sbx25im/l9RPsrI5zEGOXG p0+CQVGT3APi5mnP1A48BIaLrMorfD2VSWHo4g== -----END CERTIFICATE-----Generated at Thu Jul 23 23:06:56 2026 by rpki-client