$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer File: 2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer (raw, json) Hash identifier: GQR0AcVMlagGd4yzoxjarX+PfkyjO1/6qkndKrHDfHo= Subject key identifier: 1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E5FD7D70673403BEA1E9EB554 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Jul 2026 08:45:11 +0000 Certificate not after: Thu 05 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 23.180.56.0/24 IP: 2602:f8cc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:d7:d7:06:73:40:3b:ea:1e:9e:b5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 3 08:45:11 2026 GMT Not After : Oct 5 08:45:11 2028 GMT Subject: CN=2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:28:91:d9:59:9a:0e:68:e1:9b:17:5c:48: b5:f7:5e:a7:e3:79:25:07:cb:37:67:05:d5:64:b7: 70:b2:db:58:14:df:0e:b3:c1:0e:d0:4b:9c:be:84: 76:b5:20:d9:9e:97:4d:96:bb:09:ba:02:0f:c0:15: c2:2f:f5:bf:87:1a:e3:cf:8e:ca:00:72:b6:d4:0e: f5:ed:80:59:fe:9d:f5:7f:82:a8:0f:06:37:8e:8d: b4:f3:9b:0d:f7:70:f4:f4:f4:e9:d3:6a:b5:95:1f: 42:e9:ac:87:cf:ae:be:59:96:2c:d4:92:eb:3c:bb: 07:ce:2c:d0:c7:07:61:06:a9:c2:e6:c0:a8:f1:21: fb:6d:19:73:c9:20:73:17:7e:70:7b:b7:7c:ea:48: 34:63:f0:96:8d:e1:f6:f2:c3:e3:f4:98:ae:72:aa: 9f:8b:9f:96:a4:7e:fc:70:b4:0d:c7:66:50:8f:bc: e0:9e:94:b4:bf:38:ca:8b:3e:59:05:73:90:67:ff: 95:79:5c:cb:88:ab:98:6e:49:ea:7e:4e:0d:37:fb: 3b:ab:99:38:81:99:1e:ef:69:4c:26:f0:4c:7f:a0: ba:29:65:8c:59:57:8d:8b:84:8d:59:f3:c5:f5:55: cf:7c:95:9e:eb:c5:36:95:6d:49:7b:60:ab:dd:e7: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.180.56.0/24 IPv6: 2602:f8cc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fd:2a:8f:ac:cf:b6:09:93:a1:39:12:98:89:c8:17:83:71: 25:e6:45:26:1b:77:5a:bc:07:18:a1:e2:f9:c8:97:c5:ca:4f: e2:14:61:26:f8:ea:f6:fd:eb:c1:ea:65:ce:78:fc:4d:dd:06: e9:bd:6a:4a:c6:c8:64:60:d5:25:84:70:67:8e:b3:99:c0:a8: 6c:06:59:0b:2a:e9:2e:0c:04:0e:d1:93:6d:32:53:c9:42:a3: 04:b6:27:3a:01:db:9e:75:dd:27:77:ba:fc:9e:c8:76:62:a9: 97:59:2a:71:a9:bd:d8:68:e7:17:c5:19:5d:57:c1:14:ad:46: c4:61:12:4e:70:75:0e:cd:d2:be:a8:63:28:97:93:e8:63:95: fd:5e:67:ca:24:94:95:65:96:20:3c:d4:40:4c:9c:2e:a8:1e: 98:28:56:46:8f:2b:e9:b2:63:db:30:91:c3:f3:41:94:34:fb: 37:a2:1c:b0:54:95:ea:08:55:8e:83:64:a7:b4:f7:fd:30:8b: 57:73:58:e0:9f:1b:fc:73:18:3f:07:9a:85:1c:ab:f5:e2:00: 66:ad:17:f3:71:df:35:f6:e8:63:b3:a2:e1:0b:0a:12:38:e5: f8:e4:1b:cc:d0:17:a9:71:6c:4a:84:30:9e:66:67:4d:d9:df: 97:8f:4e:2d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE5f19cGc0A76h6etVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwMzA4NDUxMVoXDTI4MTAwNTA4NDUxMVowLzEtMCsGA1UEAxMk MmQ1MzZkMWYtM2RhYy00YmQ1LWIxYjgtYzhjNmY4YWFkNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4IokdlZmg5o4ZsXXEi1916n43klB8s3ZwXV ZLdwsttYFN8Os8EO0EucvoR2tSDZnpdNlrsJugIPwBXCL/W/hxrjz47KAHK21A71 7YBZ/p31f4KoDwY3jo2085sN93D09PTp02q1lR9C6ayHz66+WZYs1JLrPLsHzizQ xwdhBqnC5sCo8SH7bRlzySBzF35we7d86kg0Y/CWjeH28sPj9Jiucqqfi5+WpH78 cLQNx2ZQj7zgnpS0vzjKiz5ZBXOQZ/+VeVzLiKuYbknqfk4NN/s7q5k4gZke72lM JvBMf6C6KWWMWVeNi4SNWfPF9VXPfJWe68U2lW1Je2Cr3edV6QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBuakLKzYjfbELU9k27VA1l6nSrsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y ZDUzNmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2ZjhhYWQ2NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJkNTM2ZDFmLTNkYWMtNGJkNS1i MWI4LWM4YzZmOGFhZDY0Ni8yZDUzNmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2Zjhh YWQ2NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtDgwDgQCAAIwCAMGACYC+MwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABb9Ko+sz7YJk6E5EpiJyBeDcSXmRSYbd1q8Bxih4vnIl8XKT+IUYSb46vb968Hq Zc54/E3dBum9akrGyGRg1SWEcGeOs5nAqGwGWQsq6S4MBA7Rk20yU8lCowS2JzoB 25513Sd3uvyeyHZiqZdZKnGpvdho5xfFGV1XwRStRsRhEk5wdQ7N0r6oYyiXk+hj lf1eZ8oklJVlliA81EBMnC6oHpgoVkaPK+myY9swkcPzQZQ0+zeiHLBUleoIVY6D ZKe09/0wi1dzWOCfG/xzGD8HmoUcq/XiAGatF/Nx3zX26GOzouELChI45fjkG8zQ F6lxbEqEMJ5mZ03Z35ePTi0= -----END CERTIFICATE-----Generated at Fri Jul 24 01:31:16 2026 by rpki-client