$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer File: 9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer (raw, json) Hash identifier: DMVGKsdpckZXaOLuWjXCa0p/UvXqqd1ItbLP5ZwbL9c= Subject key identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E58DD2084A00002F57C2C7D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jun 2026 20:45:11 +0000 Certificate not after: Mon 02 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 402135 IP: 136.242.64.0/20 IP: 208.90.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:58:dd:20:84:a0:00:02:f5:7c:2c:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 30 20:45:11 2026 GMT Not After : Oct 2 20:45:11 2028 GMT Subject: CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:3a:aa:bb:12:5e:29:df:34:be:00:f6:39: 80:84:96:31:71:82:e1:ea:fb:8b:f8:07:0f:49:71: 35:98:eb:ef:ca:59:bf:70:5a:2f:75:30:d6:b2:23: 9a:21:53:82:fa:2c:e1:ae:90:08:57:25:c1:44:aa: 67:f5:29:63:aa:71:7e:a4:4e:c4:d9:13:e7:f0:83: 43:75:0d:76:1c:2d:57:2a:f8:0d:0c:c5:d5:21:dc: e2:1e:c1:51:a6:d3:ee:97:96:61:b2:96:d4:a8:64: 0b:c4:c9:1f:27:f7:26:b1:ab:03:45:d6:94:3b:1d: 93:82:70:50:2b:eb:b5:76:e0:9a:cb:40:3a:48:56: 4d:d4:e2:fa:5f:f6:88:07:19:f1:23:4c:dc:7d:f2: 80:d0:f4:20:55:79:0c:3f:51:f5:7b:50:eb:68:65: 69:dc:fd:94:13:8f:72:25:b6:88:1b:4b:e7:88:9d: e6:d4:ec:d7:74:c9:0b:13:47:da:56:4d:67:0d:72: 2f:4e:51:5c:c4:65:bd:4c:4b:14:6b:50:67:23:b9: ac:49:e3:1a:f1:f8:de:b1:ac:91:31:15:8b:2e:c0: 1d:5a:0c:00:6b:b9:52:b9:eb:d0:ea:37:2f:37:03: 65:fa:90:27:8e:1b:3d:e8:d5:46:d8:e0:e7:4b:dd: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 136.242.64.0/20 208.90.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402135 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d6:8c:bc:98:b5:72:2d:5b:8c:7e:7b:2b:87:a3:65:5f:ec: be:dd:6c:d0:79:a5:1c:b9:71:dc:a0:c8:32:97:00:ed:14:e8: aa:eb:76:a6:84:d3:8f:d1:18:b8:61:12:af:d7:ca:3b:86:ae: 8b:dc:6e:0c:d4:1c:aa:d9:2a:02:59:76:5c:4a:fd:fb:c6:c4: 0a:d7:54:d1:8a:1a:da:fd:b5:9d:ff:4c:2c:c3:ba:90:00:3e: b1:f0:c6:eb:2b:83:0f:14:62:96:6d:9f:d2:86:9e:0a:87:19: 59:ac:48:9d:07:f9:90:02:a0:2c:c9:d5:3e:fa:dc:b1:80:96: 9a:cb:19:b0:33:de:c4:47:51:2b:96:ff:a5:63:96:9d:14:7a: 32:e8:5e:3f:0a:0c:de:26:fd:d1:ec:ba:07:2d:60:ba:d9:61: 7d:b6:c3:67:0a:1e:6e:56:7c:aa:17:7a:4a:46:b7:d8:44:7f: a5:be:d1:b2:17:3e:a7:95:4a:66:99:26:ef:69:2e:f2:72:67: ce:0b:e7:f1:d1:f2:ea:40:8c:e1:1d:22:cf:99:fb:95:e1:d3: 17:c1:06:f0:ba:3c:37:74:b3:a1:a5:ea:c7:28:f5:1b:03:15: eb:6d:4c:58:4d:52:a7:a2:7e:53:2d:6b:f3:3d:e9:34:29:8b: 7a:f5:71:8e -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE5Y3SCEoAAC9XwsfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYzMDIwNDUxMVoXDTI4MTAwMjIwNDUxMVowLzEtMCsGA1UEAxMk OTk0MGE1ZTctZGZiYi00YmMwLWFmZDktNjBiZjBjMDc5ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJM6qrsSXinfNL4A9jmAhJYxcYLh6vuL+AcP SXE1mOvvylm/cFovdTDWsiOaIVOC+izhrpAIVyXBRKpn9SljqnF+pE7E2RPn8IND dQ12HC1XKvgNDMXVIdziHsFRptPul5ZhspbUqGQLxMkfJ/cmsasDRdaUOx2TgnBQ K+u1duCay0A6SFZN1OL6X/aIBxnxI0zcffKA0PQgVXkMP1H1e1DraGVp3P2UE49y JbaIG0vniJ3m1OzXdMkLE0faVk1nDXIvTlFcxGW9TEsUa1BnI7msSeMa8fjesayR MRWLLsAdWgwAa7lSuevQ6jcvNwNl+pAnjhs96NVG2ODnS931CQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFO374aUqG5HvyPalzg3MYrwlXRTqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 OTQwYTVlNy1kZmJiLTRiYzAtYWZkOS02MGJmMGMwNzllYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzk5NDBhNWU3LWRmYmItNGJjMC1h ZmQ5LTYwYmYwYzA3OWViMC85OTQwYTVlNy1kZmJiLTRiYzAtYWZkOS02MGJmMGMw NzllYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBASI8kADBALQWuQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiLXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADzWjLyYtXItW4x+eyuHo2Vf7L7dbNB5pRy5cdyg yDKXAO0U6KrrdqaE04/RGLhhEq/XyjuGrovcbgzUHKrZKgJZdlxK/fvGxArXVNGK Gtr9tZ3/TCzDupAAPrHwxusrgw8UYpZtn9KGngqHGVmsSJ0H+ZACoCzJ1T763LGA lprLGbAz3sRHUSuW/6Vjlp0UejLoXj8KDN4m/dHsugctYLrZYX22w2cKHm5WfKoX ekpGt9hEf6W+0bIXPqeVSmaZJu9pLvJyZ84L5/HR8upAjOEdIs+Z+5Xh0xfBBvC6 PDd0s6Gl6sco9RsDFettTFhNUqeiflMta/M96TQpi3r1cY4= -----END CERTIFICATE-----Generated at Thu Jul 23 21:41:11 2026 by rpki-client