$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5.cer File: 2f9d1f23-406d-4b24-98df-682f42315db5.cer (raw, json) Hash identifier: ZYQlBhgR62hA39yXwmUJvabcY4WkL5kEUrbI0xlZLRc= Subject key identifier: DB:BB:6E:8C:CB:55:F1:AE:A2:43:50:82:5B:8D:F8:28:3E:5B:41:1B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E66D28C9F41218A56BCE6C400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Jul 2026 20:45:12 +0000 Certificate not after: Sat 07 Oct 2028 20:45:12 +0000 Subordinate resources: IP: 23.136.188.0/24 IP: 2602:f69d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:d2:8c:9f:41:21:8a:56:bc:e6:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 5 20:45:12 2026 GMT Not After : Oct 7 20:45:12 2028 GMT Subject: CN=2f9d1f23-406d-4b24-98df-682f42315db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:48:32:a2:30:40:a5:e7:1e:c9:b4:47:8a: a3:56:44:e1:54:05:8e:13:94:ed:f7:f3:fc:a0:de: c5:95:58:a1:09:8e:6f:2d:1d:23:91:d3:97:40:e7: 32:1d:b8:6f:81:6c:18:e8:80:b3:0d:c0:5f:5f:14: a3:be:9f:69:7b:06:97:02:90:3a:27:a3:c4:b8:0d: a6:e2:c0:1b:be:62:e4:f8:c0:81:2e:1c:99:37:6c: 2a:52:6d:0b:53:23:75:83:85:34:f4:0a:68:7d:57: b0:69:30:04:68:e5:47:4c:c1:72:a9:02:a0:7e:53: 8d:47:74:b9:96:4b:85:d3:26:40:ba:0f:c2:a6:83: 91:e4:cf:0c:a6:24:b1:12:39:a9:11:1a:cd:62:c2: f6:ac:4d:97:9c:49:19:c7:f0:b8:11:54:65:7f:40: 55:8d:5c:ef:dc:e0:9b:50:12:fc:4b:10:a3:c8:17: 78:9a:a5:ef:5b:6a:a5:0e:b0:5d:f1:ee:e0:0c:24: 4a:9f:22:4a:6c:07:af:d0:9d:aa:99:46:c6:39:09: 37:32:17:32:9f:9c:a0:35:df:e9:a4:af:7c:35:d9: 4a:90:0c:da:3a:89:b6:95:4d:7a:e3:d3:f7:7e:df: 85:9d:31:0b:36:00:c8:87:44:03:2f:db:07:82:f4: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BB:6E:8C:CB:55:F1:AE:A2:43:50:82:5B:8D:F8:28:3E:5B:41:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.188.0/24 IPv6: 2602:f69d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:98:8f:9a:b0:57:1a:5d:28:cf:dc:54:fc:60:d7:ef:03:50: 5e:dc:73:e9:0e:08:71:8c:3f:58:14:7b:e8:b7:be:77:a7:28: 74:67:86:05:d1:16:54:d0:b3:2a:4e:db:0d:b6:60:18:9e:6a: 75:a0:c4:e6:b1:66:2c:d2:85:c5:57:e4:82:9a:6f:81:67:fc: a8:54:36:90:df:32:0f:64:38:71:89:46:ba:7a:23:fb:01:08: ec:b7:1d:68:76:38:2c:eb:97:7f:57:b0:8d:8d:9b:21:40:18: ad:e3:a1:16:be:5f:1f:dc:91:20:bf:53:ab:26:88:cf:e5:26: 4c:d9:96:8e:54:18:9c:f7:99:6a:a5:b9:48:c1:ec:fb:8d:3f: e7:0a:3b:b0:8f:5e:0a:03:42:bb:06:bc:49:ac:8f:0d:aa:17: ba:91:ab:49:0b:35:74:c9:e1:40:63:c2:39:f5:7e:40:ea:b8: cb:b5:86:9e:c1:d1:50:a1:38:d6:9d:83:0f:98:f6:cb:b8:a9: 8b:dd:a0:63:85:eb:d4:6b:3f:03:ab:8a:09:e6:54:f1:3a:f3: 1c:8e:12:00:d0:22:af:a6:b1:ee:7c:59:86:30:39:c6:68:0e: db:6a:4c:d3:c2:54:af:29:9f:ac:06:32:d6:f7:8d:2e:b0:44: 91:eb:cd:a2 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE5m0oyfQSGKVrzmxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwNTIwNDUxMloXDTI4MTAwNzIwNDUxMlowLzEtMCsGA1UEAxMk MmY5ZDFmMjMtNDA2ZC00YjI0LTk4ZGYtNjgyZjQyMzE1ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtxIMqIwQKXnHsm0R4qjVkThVAWOE5Tt9/P8 oN7FlVihCY5vLR0jkdOXQOcyHbhvgWwY6ICzDcBfXxSjvp9pewaXApA6J6PEuA2m 4sAbvmLk+MCBLhyZN2wqUm0LUyN1g4U09ApofVewaTAEaOVHTMFyqQKgflONR3S5 lkuF0yZAug/CpoOR5M8MpiSxEjmpERrNYsL2rE2XnEkZx/C4EVRlf0BVjVzv3OCb UBL8SxCjyBd4mqXvW2qlDrBd8e7gDCRKnyJKbAev0J2qmUbGOQk3Mhcyn5ygNd/p pK98NdlKkAzaOom2lU1649P3ft+FnTELNgDIh0QDL9sHgvREIQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNu7bozLVfGuokNQgluN+Cg+W0EbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y ZjlkMWYyMy00MDZkLTRiMjQtOThkZi02ODJmNDIzMTVkYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJmOWQxZjIzLTQwNmQtNGIyNC05 OGRmLTY4MmY0MjMxNWRiNS8yZjlkMWYyMy00MDZkLTRiMjQtOThkZi02ODJmNDIz MTVkYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiLwwDgQCAAIwCAMGACYC9p0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGaYj5qwVxpdKM/cVPxg1+8DUF7cc+kOCHGMP1gUe+i3vnenKHRnhgXRFlTQsypO 2w22YBieanWgxOaxZizShcVX5IKab4Fn/KhUNpDfMg9kOHGJRrp6I/sBCOy3HWh2 OCzrl39XsI2NmyFAGK3joRa+Xx/ckSC/U6smiM/lJkzZlo5UGJz3mWqluUjB7PuN P+cKO7CPXgoDQrsGvEmsjw2qF7qRq0kLNXTJ4UBjwjn1fkDquMu1hp7B0VChONad gw+Y9su4qYvdoGOF69RrPwOrignmVPE68xyOEgDQIq+mse58WYYwOcZoDttqTNPC VK8pn6wGMtb3jS6wRJHrzaI= -----END CERTIFICATE-----Generated at Fri Jul 24 09:01:44 2026 by rpki-client