$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9.cer File: 6896b71f-993e-47d1-b0ee-f538a9dc89f9.cer (raw, json) Hash identifier: uBjVJqtil9ZQKZTico+2sfmqmp8MCNOzzeiGSWnZ+sY= Subject key identifier: D0:A9:A6:DB:40:AD:D7:A4:1B:C5:6E:DE:1B:B1:02:CC:F5:74:DE:8C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E96482DB315A8C7A2DFA3CDA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/6896b71f-993e-47d1-b0ee-f538a9dc89f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jul 2026 20:45:12 +0000 Certificate not after: Tue 24 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 401681 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:96:48:2d:b3:15:a8:c7:a2:df:a3:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 22 20:45:12 2026 GMT Not After : Oct 24 20:45:12 2028 GMT Subject: CN=6896b71f-993e-47d1-b0ee-f538a9dc89f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:85:2c:72:a6:be:1c:9d:80:0d:5f:8c:f9: c9:de:dd:24:7c:04:f6:00:87:b7:40:4d:a0:ae:12: e4:12:87:fe:b1:cd:c9:33:8b:0b:52:05:fd:df:e9: 7f:02:b6:1b:78:fe:6f:e9:40:0d:d8:03:4f:0d:dd: 5a:c8:63:12:fb:c4:f0:d9:3c:75:99:e4:ba:d0:c9: 18:05:39:3c:e7:00:bb:17:58:71:8a:3c:15:8f:66: 24:86:34:06:0c:c8:d0:61:d8:55:52:4e:a1:22:4a: 7d:0b:a9:fc:42:1a:06:21:ef:7d:bf:5b:fb:bf:2e: 59:0e:d2:56:aa:be:cf:03:a2:c3:00:ef:01:9a:1b: 29:ed:6e:94:6b:70:ee:c4:d6:2b:38:ac:02:6b:d1: 02:16:2c:f9:48:e3:68:2f:aa:40:7e:20:76:b5:8b: 39:60:81:a9:f4:53:c5:14:4a:82:b8:62:c1:a0:5c: b7:c4:7b:02:20:fb:0c:ea:80:32:04:4b:72:ab:7c: f8:e4:c6:ab:5c:13:a3:d7:99:ff:08:74:d0:b0:a8: c8:f1:9c:54:d7:34:b1:3d:dc:b1:e8:d3:2d:84:c8: a1:7a:ef:b9:7b:5a:54:c3:0a:26:df:3c:d7:aa:e9: 2e:aa:15:09:87:c2:c9:46:69:56:ad:76:5b:78:86: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:A6:DB:40:AD:D7:A4:1B:C5:6E:DE:1B:B1:02:CC:F5:74:DE:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/6896b71f-993e-47d1-b0ee-f538a9dc89f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401681 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ff:2c:15:6a:9b:6e:01:16:fb:05:54:dc:0f:50:7b:17:7a: 2a:e6:94:b4:d1:73:39:2e:3e:f7:42:58:88:48:be:39:4b:37: 8a:00:bf:20:7b:65:6b:6c:86:84:af:52:cd:8b:84:12:d6:5c: 39:38:0f:97:fe:9e:a1:39:28:31:a6:ec:73:c0:c2:46:7c:8f: e4:e9:ce:3c:04:cd:5a:d5:35:7b:d7:5d:d8:f9:1f:d8:db:f0: 1a:8a:48:8c:4f:80:da:28:b0:83:25:f1:4c:e5:d8:3d:21:2d: 6c:5f:79:25:0b:06:d3:31:9e:44:c6:d4:b9:7a:06:61:90:ce: 95:e5:e4:1e:8d:d1:4a:8b:c0:06:3a:2d:b9:bd:19:77:0a:da: 79:08:7c:e3:6f:60:89:99:7e:a9:48:3b:f6:60:ac:d9:16:23: e4:71:3b:0f:35:9c:eb:92:0b:98:55:82:2d:df:5f:aa:4b:76: d6:c5:08:71:1d:76:17:c9:af:d9:f1:df:53:35:74:3f:63:79: bc:25:68:8b:5d:a1:da:01:20:32:28:fd:cc:b7:8f:43:50:2a: 8e:b5:a2:be:6e:f1:47:32:6c:b0:aa:3e:56:03:0f:d1:88:11: c6:ac:52:67:b9:fd:37:61:81:23:e5:63:12:89:3b:6a:03:cf: 66:c0:af:ab -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE6WSC2zFajHot+jzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyMjIwNDUxMloXDTI4MTAyNDIwNDUxMlowLzEtMCsGA1UEAxMk Njg5NmI3MWYtOTkzZS00N2QxLWIwZWUtZjUzOGE5ZGM4OWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlGFLHKmvhydgA1fjPnJ3t0kfAT2AIe3QE2g rhLkEof+sc3JM4sLUgX93+l/ArYbeP5v6UAN2ANPDd1ayGMS+8Tw2Tx1meS60MkY BTk85wC7F1hxijwVj2YkhjQGDMjQYdhVUk6hIkp9C6n8QhoGIe99v1v7vy5ZDtJW qr7PA6LDAO8Bmhsp7W6Ua3DuxNYrOKwCa9ECFiz5SONoL6pAfiB2tYs5YIGp9FPF FEqCuGLBoFy3xHsCIPsM6oAyBEtyq3z45MarXBOj15n/CHTQsKjI8ZxU1zSxPdyx 6NMthMiheu+5e1pUwwom3zzXqukuqhUJh8LJRmlWrXZbeIZDvwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFNCppttArdekG8Vu3huxAsz1dN6MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 ODk2YjcxZi05OTNlLTQ3ZDEtYjBlZS1mNTM4YTlkYzg5ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY4OTZiNzFmLTk5M2UtNDdkMS1i MGVlLWY1MzhhOWRjODlmOS82ODk2YjcxZi05OTNlLTQ3ZDEtYjBlZS1mNTM4YTlk Yzg5ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiERMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAf/LBVqm24BFvsFVNwPUHsXeirm lLTRczkuPvdCWIhIvjlLN4oAvyB7ZWtshoSvUs2LhBLWXDk4D5f+nqE5KDGm7HPA wkZ8j+TpzjwEzVrVNXvXXdj5H9jb8BqKSIxPgNoosIMl8Uzl2D0hLWxfeSULBtMx nkTG1Ll6BmGQzpXl5B6N0UqLwAY6Lbm9GXcK2nkIfONvYImZfqlIO/ZgrNkWI+Rx Ow81nOuSC5hVgi3fX6pLdtbFCHEddhfJr9nx31M1dD9jebwlaItdodoBIDIo/cy3 j0NQKo61or5u8UcybLCqPlYDD9GIEcasUme5/TdhgSPlYxKJO2oDz2bAr6s= -----END CERTIFICATE-----Generated at Thu Jul 23 23:19:38 2026 by rpki-client