$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer File: 5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer (raw, json) Hash identifier: HtpPzNm6VsUKgqZ9TV6MMaPj8B3phEHdhN48tMiQPRE= Subject key identifier: DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E74C7F87589C9DE5C876CBE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jul 2026 20:45:12 +0000 Certificate not after: Thu 12 Oct 2028 20:45:12 +0000 Subordinate resources: IP: 23.179.152.0/24 IP: 2602:f8d8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:c7:f8:75:89:c9:de:5c:87:6c:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 10 20:45:12 2026 GMT Not After : Oct 12 20:45:12 2028 GMT Subject: CN=5f20811b-fdcf-49f5-81f7-9d8385a53aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:d4:38:f0:99:3a:c6:56:9a:9b:0f:e3:5d: 8c:cf:bb:4b:39:60:1a:4a:31:0f:c7:60:56:de:11: 84:24:0f:d7:4b:d6:62:c5:bc:6a:97:6e:69:fe:9e: f8:16:2d:90:fb:50:c2:ce:47:ef:2f:ec:68:96:90: a3:fc:07:42:a9:fe:d3:6c:0a:c4:99:0b:d8:1c:94: da:a3:79:37:08:75:c8:42:dc:78:3b:b4:a5:b0:67: 8b:06:70:4c:0f:67:08:05:b8:bb:68:58:52:75:4e: 3b:8e:78:51:7d:c2:7a:bc:6c:1f:2e:ab:83:fa:69: 01:c2:47:60:5e:b5:47:98:82:6e:3d:5e:57:74:8e: f0:00:26:cc:62:e3:ec:7a:29:6d:25:8c:f8:6e:c1: f6:3d:fd:3a:32:24:69:1d:1e:b4:b8:49:65:bb:04: 24:91:74:78:9a:72:62:18:07:fe:9f:36:ce:56:f3: 1a:31:ff:ff:be:23:fa:93:eb:29:23:40:12:05:cf: 6d:93:5d:dd:a7:b2:f4:4e:58:4e:5b:f7:ed:0e:5c: d4:dd:04:f7:b9:5d:0c:38:a5:7d:1a:ee:56:8e:ab: e5:97:08:38:c6:f7:22:32:21:89:ec:c4:db:35:0c: cf:9b:17:cc:ef:f3:9e:61:bc:58:7f:37:2e:2c:e8: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.179.152.0/24 IPv6: 2602:f8d8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c6:09:ee:67:f4:87:13:b1:70:a5:51:3f:98:2c:31:57:5b: 3f:4d:0c:19:31:8a:a7:b0:0c:26:9d:57:50:ca:93:1c:ff:cf: b9:91:16:94:85:d3:bc:cd:b7:f3:7e:53:59:c9:f4:ac:33:dc: f4:67:af:ad:82:e4:cf:2d:cc:51:c7:c7:ae:21:f0:45:7f:22: f7:08:39:ca:a9:99:2b:91:2d:5b:9b:76:49:9f:a6:cb:6d:ae: 3e:f5:1f:4c:51:e1:03:17:b2:9a:cc:9d:28:ad:86:5e:d2:ac: 55:87:75:aa:82:cb:46:1f:09:32:0f:4d:f6:62:50:87:29:93: 44:c6:55:a1:89:66:b3:da:68:01:57:19:5a:5e:75:80:74:62: 6d:95:60:e3:10:91:16:aa:86:25:c1:04:eb:ef:03:5e:7a:0d: 80:41:87:c4:59:63:03:d0:a6:1b:c5:f2:ee:83:af:63:71:37: d7:92:17:fd:8c:e5:2e:8e:0f:69:b1:e3:c1:8c:ba:8b:29:f9: 44:50:a7:8d:a0:96:5c:b9:fe:3b:92:6c:36:94:42:0a:1c:85: 15:87:6c:55:5d:0c:15:8d:65:a4:39:8b:93:80:c6:4b:79:1b: ee:ff:be:7a:3f:43:48:07:99:6b:42:46:95:96:63:fa:0a:5f: ab:36:88:85 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE50x/h1icneXIdsvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxMDIwNDUxMloXDTI4MTAxMjIwNDUxMlowLzEtMCsGA1UEAxMk NWYyMDgxMWItZmRjZi00OWY1LTgxZjctOWQ4Mzg1YTUzYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9bUOPCZOsZWmpsP412Mz7tLOWAaSjEPx2BW 3hGEJA/XS9Zixbxql25p/p74Fi2Q+1DCzkfvL+xolpCj/AdCqf7TbArEmQvYHJTa o3k3CHXIQtx4O7SlsGeLBnBMD2cIBbi7aFhSdU47jnhRfcJ6vGwfLquD+mkBwkdg XrVHmIJuPV5XdI7wACbMYuPseiltJYz4bsH2Pf06MiRpHR60uElluwQkkXR4mnJi GAf+nzbOVvMaMf//viP6k+spI0ASBc9tk13dp7L0TlhOW/ftDlzU3QT3uV0MOKV9 Gu5Wjqvllwg4xvciMiGJ7MTbNQzPmxfM7/OeYbxYfzcuLOh0kQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNsFEpmorL8qJPNjbvVofZVLYYVpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 ZjIwODExYi1mZGNmLTQ5ZjUtODFmNy05ZDgzODVhNTNhZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzVmMjA4MTFiLWZkY2YtNDlmNS04 MWY3LTlkODM4NWE1M2FlYy81ZjIwODExYi1mZGNmLTQ5ZjUtODFmNy05ZDgzODVh NTNhZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXs5gwDgQCAAIwCAMGACYC+NgAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE7GCe5n9IcTsXClUT+YLDFXWz9NDBkxiqewDCadV1DKkxz/z7mRFpSF07zNt/N+ U1nJ9Kwz3PRnr62C5M8tzFHHx64h8EV/IvcIOcqpmSuRLVubdkmfpsttrj71H0xR 4QMXsprMnSithl7SrFWHdaqCy0YfCTIPTfZiUIcpk0TGVaGJZrPaaAFXGVpedYB0 Ym2VYOMQkRaqhiXBBOvvA156DYBBh8RZYwPQphvF8u6Dr2NxN9eSF/2M5S6OD2mx 48GMuosp+URQp42glly5/juSbDaUQgochRWHbFVdDBWNZaQ5i5OAxkt5G+7/vno/ Q0gHmWtCRpWWY/oKX6s2iIU= -----END CERTIFICATE-----Generated at Fri Jul 24 00:26:12 2026 by rpki-client