$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer File: 3a86f711-5e97-4a68-9b21-940a312b854a.cer (raw, json) Hash identifier: w0Jp+YriTi0E2YvO/uDu8TCqvl9XXveXPoa+5bBPYcM= Subject key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E8DE8205F8420692437A91080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jul 2026 20:45:12 +0000 Certificate not after: Sat 21 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 401343 IP: 204.130.200.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:e8:20:5f:84:20:69:24:37:a9:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 19 20:45:12 2026 GMT Not After : Oct 21 20:45:12 2028 GMT Subject: CN=3a86f711-5e97-4a68-9b21-940a312b854a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:8c:2c:f5:dc:0c:fd:61:01:d5:e9:40:2a: 49:0c:f7:e7:20:77:b7:8c:bf:06:bf:45:b7:32:85: 6c:6e:0b:9f:86:c9:f1:a8:be:cd:79:9f:66:ea:b8: 81:3d:95:40:e8:7c:96:cd:61:60:2f:b7:73:1a:cc: 99:45:a7:ad:b4:cf:8f:53:c7:e9:8f:16:e7:80:51: c9:bb:6e:8a:4e:21:31:00:4c:cc:40:63:bd:93:83: 2c:dc:73:33:c8:ce:b6:79:6e:cf:fe:6d:0c:41:44: 31:ab:d3:7c:34:86:bf:93:32:67:ff:38:90:87:76: ba:41:99:1c:f5:0d:b5:4b:1b:0f:b0:57:57:eb:9f: 02:26:5b:e5:71:82:c0:e8:a0:03:b4:5f:3a:92:49: 84:41:02:df:88:f2:7a:64:07:9a:08:d3:a2:15:2d: 8f:03:11:55:78:3c:12:22:77:71:a6:d5:ee:d6:d6: 4b:dd:f3:a4:70:95:08:82:c6:36:5e:f4:1f:51:c5: 3f:05:68:3a:4c:5a:e2:f5:23:45:c2:02:48:39:11: 73:d3:55:72:2d:87:e5:21:7a:96:10:05:4d:40:98: 7b:7c:30:b8:06:75:05:05:01:79:c6:10:83:03:6d: 15:2a:40:15:03:10:c9:65:74:dc:56:d7:2f:cd:ce: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.130.200.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:62:ac:ea:cf:ff:fd:2f:74:91:49:fa:19:80:a9:fb:e7:78: ef:33:d0:e3:2f:3c:a3:2d:0d:c3:e6:ec:51:73:e7:5a:cc:d2: 75:50:62:5e:e8:2f:88:96:d5:a5:12:ae:5a:d4:5d:a6:24:70: a2:48:8d:20:8c:b8:fe:82:e1:73:bf:e0:cc:ff:52:93:3a:25: a8:09:06:b0:01:ac:be:60:ad:52:03:84:80:30:77:ad:07:39: 4f:b4:86:d6:36:41:30:fa:3d:0f:d4:e4:40:b2:ae:ee:0c:c7: c5:81:b8:b6:aa:c0:98:e8:dd:3b:10:ff:31:67:ff:c6:33:7a: 29:1e:07:f0:7c:8c:b9:89:77:ef:f6:01:b5:43:7d:5a:5b:f2: 02:8a:1b:eb:4f:24:6e:6e:54:80:31:17:ac:ae:25:c7:5b:fd: 2f:bf:d2:67:be:1a:db:64:f6:7a:b6:e2:4d:97:0a:02:7e:e4: be:34:42:6e:bf:38:08:f9:1a:d6:46:4b:c1:ea:ea:5c:3c:44: b6:0d:eb:d7:11:63:f0:2e:29:6f:84:b1:0c:9b:e2:d5:b2:28: 3c:3a:e2:67:2b:a8:f0:9b:ab:a9:18:6a:6b:09:9b:28:af:1c: 98:ef:f2:36:e8:e2:e3:6d:24:cc:60:89:c7:b1:f6:8e:41:ce: 50:d5:e0:18 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE6N6CBfhCBpJDepEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxOTIwNDUxMloXDTI4MTAyMTIwNDUxMlowLzEtMCsGA1UEAxMk M2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KCMLPXcDP1hAdXpQCpJDPfnIHe3jL8Gv0W3 MoVsbgufhsnxqL7NeZ9m6riBPZVA6HyWzWFgL7dzGsyZRaettM+PU8fpjxbngFHJ u26KTiExAEzMQGO9k4Ms3HMzyM62eW7P/m0MQUQxq9N8NIa/kzJn/ziQh3a6QZkc 9Q21SxsPsFdX658CJlvlcYLA6KADtF86kkmEQQLfiPJ6ZAeaCNOiFS2PAxFVeDwS IndxptXu1tZL3fOkcJUIgsY2XvQfUcU/BWg6TFri9SNFwgJIORFz01VyLYflIXqW EAVNQJh7fDC4BnUFBQF5xhCDA20VKkAVAxDJZXTcVtcvzc5TUQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNP298fVyy9A6t5IJ5o1xaoREfhVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z YTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNhODZmNzExLTVlOTctNGE2OC05 YjIxLTk0MGEzMTJiODU0YS8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEy Yjg1NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMgsgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh+/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACBirOrP//0vdJFJ+hmAqfvneO8z0OMvPKMtDcPm7FFz51rM 0nVQYl7oL4iW1aUSrlrUXaYkcKJIjSCMuP6C4XO/4Mz/UpM6JagJBrABrL5grVID hIAwd60HOU+0htY2QTD6PQ/U5ECyru4Mx8WBuLaqwJjo3TsQ/zFn/8YzeikeB/B8 jLmJd+/2AbVDfVpb8gKKG+tPJG5uVIAxF6yuJcdb/S+/0me+Gttk9nq24k2XCgJ+ 5L40Qm6/OAj5GtZGS8Hq6lw8RLYN69cRY/AuKW+EsQyb4tWyKDw64mcrqPCbq6kY amsJmyivHJjv8jbo4uNtJMxgicex9o5BzlDV4Bg= -----END CERTIFICATE-----Generated at Fri Jul 24 00:41:47 2026 by rpki-client