$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer File: 5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer (raw, json) Hash identifier: fC6lt5FTBYVsZlrd2mTFzJn3Z4oADM6SSptpJG2birk= Subject key identifier: F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E96482DBDEBABBCA8177372F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jul 2026 20:45:12 +0000 Certificate not after: Tue 24 Oct 2028 20:45:12 +0000 Subordinate resources: IP: 23.137.212.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:96:48:2d:bd:eb:ab:bc:a8:17:73:72:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 22 20:45:12 2026 GMT Not After : Oct 24 20:45:12 2028 GMT Subject: CN=5aa08268-5ec4-4fb1-b2a8-05d6a90ac091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:e2:c2:bd:7f:d8:83:c2:33:d9:82:7f:18: 27:b5:5d:3a:48:7a:96:11:70:47:f3:f2:22:7a:38: c8:81:35:46:45:80:a7:9b:d3:2f:80:86:ae:ca:f6: 63:28:e2:16:04:80:36:87:50:41:8a:94:0f:76:17: 02:3e:e9:77:0c:23:fc:68:3c:27:08:c7:c3:6c:8a: d0:7b:a6:89:75:e5:19:f6:ca:71:72:9d:de:ec:30: 0e:55:58:7a:47:cc:2f:f8:23:da:f6:b9:75:60:0b: 33:97:1b:a3:4a:ec:15:ce:22:ef:ae:80:dc:ec:74: e1:05:a5:95:40:8f:01:dd:fc:30:7c:53:42:cf:0c: 8e:7c:b7:f4:2f:41:3f:6d:e0:78:97:71:1f:3a:51: 0e:1b:eb:d6:cb:f6:b4:c1:99:cc:33:ff:c5:3c:65: 1c:86:75:bb:4a:2b:85:30:cf:d9:a1:5e:cc:fc:d0: 7d:82:a1:78:07:e2:26:e0:bf:ac:49:e0:22:80:91: 2d:99:88:6b:1a:18:56:d3:17:ca:bc:05:ad:7f:a0: 3f:5a:fc:96:32:c6:21:ff:d8:61:60:61:49:ca:9e: 07:22:eb:58:28:67:20:a8:36:a1:04:62:cf:7e:74: 6b:54:b5:81:d1:f8:98:a8:2a:23:de:51:fa:81:1d: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:53:39:8c:e3:aa:2f:37:7f:3d:58:50:23:74:4f:33:85:f4: c3:8a:08:74:ac:92:b1:ff:43:41:07:6c:4b:72:1f:6d:b7:8a: 67:81:da:6c:65:78:5b:5b:b7:28:a0:ce:ce:95:3f:fd:08:32: 61:de:71:1a:12:ce:38:7d:25:ca:5e:5a:f4:7f:87:5f:b0:9e: 43:cf:c6:45:a3:68:aa:87:82:51:01:76:73:eb:2a:46:22:d6: 25:39:07:c7:ac:40:c3:27:90:51:2e:33:0b:03:d4:68:37:9d: 06:10:e9:61:a5:56:cb:98:d2:ce:95:e0:14:e2:d9:7d:28:8d: 3a:76:86:6e:56:a7:f1:6b:f6:67:a8:7c:fa:96:c2:4e:46:ab: eb:e0:9b:32:f1:49:b8:a8:99:ca:e6:e6:1c:02:22:7c:ef:d1: b9:01:d4:cd:72:0c:39:50:ae:d5:44:63:84:9e:e5:4c:47:ad: 30:15:a5:0a:cb:77:ec:b8:48:0e:a7:f0:0b:8c:f6:0e:d5:d8: 07:29:b8:f3:b8:dc:9e:56:bd:27:f5:91:df:f4:d5:a9:c9:8b: 5a:75:d6:ac:f8:4a:5b:8c:8f:4c:b8:ce:8f:4d:e2:d5:ec:40: 46:4f:11:69:1d:53:94:2e:ac:09:98:b6:5d:02:2c:4a:85:0b: bd:07:be:9b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE6WSC2966u8qBdzcvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyMjIwNDUxMloXDTI4MTAyNDIwNDUxMlowLzEtMCsGA1UEAxMk NWFhMDgyNjgtNWVjNC00ZmIxLWIyYTgtMDVkNmE5MGFjMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvefiwr1/2IPCM9mCfxgntV06SHqWEXBH8/Ii ejjIgTVGRYCnm9MvgIauyvZjKOIWBIA2h1BBipQPdhcCPul3DCP8aDwnCMfDbIrQ e6aJdeUZ9spxcp3e7DAOVVh6R8wv+CPa9rl1YAszlxujSuwVziLvroDc7HThBaWV QI8B3fwwfFNCzwyOfLf0L0E/beB4l3EfOlEOG+vWy/a0wZnMM//FPGUchnW7SiuF MM/ZoV7M/NB9gqF4B+Im4L+sSeAigJEtmYhrGhhW0xfKvAWtf6A/WvyWMsYh/9hh YGFJyp4HIutYKGcgqDahBGLPfnRrVLWB0fiYqCoj3lH6gR0hGwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPPNvH8DMK+4RpZpVCIdk4ExsDwJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 YWEwODI2OC01ZWM0LTRmYjEtYjJhOC0wNWQ2YTkwYWMwOTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzVhYTA4MjY4LTVlYzQtNGZiMS1i MmE4LTA1ZDZhOTBhYzA5MS81YWEwODI2OC01ZWM0LTRmYjEtYjJhOC0wNWQ2YTkw YWMwOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXidQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABVM5jOOqLzd/PVhQI3RP M4X0w4oIdKySsf9DQQdsS3IfbbeKZ4HabGV4W1u3KKDOzpU//QgyYd5xGhLOOH0l yl5a9H+HX7CeQ8/GRaNoqoeCUQF2c+sqRiLWJTkHx6xAwyeQUS4zCwPUaDedBhDp YaVWy5jSzpXgFOLZfSiNOnaGblan8Wv2Z6h8+pbCTkar6+CbMvFJuKiZyubmHAIi fO/RuQHUzXIMOVCu1URjhJ7lTEetMBWlCst37LhIDqfwC4z2DtXYBym487jcnla9 J/WR3/TVqcmLWnXWrPhKW4yPTLjOj03i1exARk8RaR1TlC6sCZi2XQIsSoULvQe+ mw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:18:48 2026 by rpki-client