$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab.cer File: ae521790-9854-4d88-9898-5300ce9737ab.cer (raw, json) Hash identifier: LwajGjIvD4VbFZwBxHW3XZrHjQChsnXYR4hT0yvDNiY= Subject key identifier: A3:8C:D4:C0:9E:9E:65:0C:1A:21:D2:36:0D:54:63:3B:4B:5F:0E:63 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E84A1DEE9DBA2D6D3DA7E6A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/ae521790-9854-4d88-9898-5300ce9737ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Jul 2026 13:01:22 +0000 Certificate not after: Wed 18 Oct 2028 13:01:22 +0000 Subordinate resources: AS: 11262 IP: 198.163.157.0/24 IP: 2620:87:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:a1:de:e9:db:a2:d6:d3:da:7e:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 16 13:01:22 2026 GMT Not After : Oct 18 13:01:22 2028 GMT Subject: CN=ae521790-9854-4d88-9898-5300ce9737ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:06:8b:50:88:92:64:63:a9:15:fb:b7:50: 99:fe:fb:53:fe:7a:c9:6c:76:9f:b0:8b:78:cb:eb: 47:8a:75:cc:05:20:e8:35:92:c6:78:a1:1b:92:15: c3:af:f1:85:11:fd:fa:f5:15:a9:a0:40:cd:59:37: 94:4d:80:c0:c6:32:46:ea:85:7e:90:59:d3:f1:30: 73:6c:9b:ed:97:3f:75:6c:88:1e:88:50:2e:6f:c9: 73:1d:56:10:7a:c5:26:37:a6:7f:49:0f:03:e0:e3: 1e:1a:bf:6c:84:e2:bb:7e:b0:ab:18:fc:22:2e:39: b5:ba:9c:5a:18:af:90:da:a8:8a:54:cd:5a:a4:73: c8:42:44:77:e1:cd:50:68:98:f4:0f:0a:f2:5d:be: cf:c7:a4:00:04:14:b7:df:b4:15:bd:8b:a3:1b:0a: bf:30:a8:22:4a:fb:0a:d6:96:72:10:ac:7b:92:f2: ed:a7:b2:cf:54:ee:75:3a:64:64:45:ab:ca:56:fb: e2:16:ed:79:7e:6b:53:c6:e1:1e:34:97:c8:e9:d1: 57:7e:d2:61:49:ee:fe:55:df:05:ae:cd:6f:97:91: cc:61:45:50:a0:9f:62:18:3a:eb:1e:6c:17:82:86: 58:1d:4f:6d:fc:67:12:11:3b:5a:9c:e8:d4:45:08: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8C:D4:C0:9E:9E:65:0C:1A:21:D2:36:0D:54:63:3B:4B:5F:0E:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/ae521790-9854-4d88-9898-5300ce9737ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.163.157.0/24 IPv6: 2620:87:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11262 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9f:91:5b:4f:07:97:1b:54:d8:24:67:d9:88:ae:d4:fa:83: 3c:63:e9:52:ba:44:2d:07:e8:7c:6d:e8:c2:59:98:06:8a:75: b8:11:d6:37:2e:27:4f:8c:f2:48:e1:00:87:10:cf:c9:fa:d2: 3b:9e:9e:0d:64:20:68:8d:a5:b4:06:f7:cf:58:ae:3f:81:1b: e2:f1:99:76:d4:db:d4:64:4e:96:3f:a5:b0:21:77:03:68:af: 44:1b:ba:25:a9:24:c6:2a:f2:e9:64:71:69:83:6e:96:57:4a: e1:03:49:28:db:32:33:de:26:97:4b:3e:c3:2a:6f:ac:cf:ff: 18:b5:aa:63:8e:2e:c8:63:3f:1e:43:19:fe:ab:23:1f:21:f9: 21:6b:6a:56:47:d4:8e:ba:14:ae:b2:23:02:a6:85:e9:32:f3: a4:16:72:e5:03:08:1d:d6:9c:7e:bb:bc:fe:fa:31:c9:d4:18: d8:e7:22:dc:3c:23:b5:a4:e9:7a:32:d1:75:ce:e4:1a:c0:d7: a2:60:45:d2:73:63:3d:28:16:e3:4a:17:2b:c4:c9:fd:56:98: 21:54:65:96:f3:7f:51:9b:14:35:69:4c:1c:2a:01:41:ec:82: 32:7f:9e:6d:de:4b:74:5d:37:4f:37:70:61:fe:83:94:98:f8: fe:e0:c5:42 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6Eod7p26LW09p+aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxNjEzMDEyMloXDTI4MTAxODEzMDEyMlowLzEtMCsGA1UEAxMk YWU1MjE3OTAtOTg1NC00ZDg4LTk4OTgtNTMwMGNlOTczN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xEGi1CIkmRjqRX7t1CZ/vtT/nrJbHafsIt4 y+tHinXMBSDoNZLGeKEbkhXDr/GFEf369RWpoEDNWTeUTYDAxjJG6oV+kFnT8TBz bJvtlz91bIgeiFAub8lzHVYQesUmN6Z/SQ8D4OMeGr9shOK7frCrGPwiLjm1upxa GK+Q2qiKVM1apHPIQkR34c1QaJj0DwryXb7Px6QABBS337QVvYujGwq/MKgiSvsK 1pZyEKx7kvLtp7LPVO51OmRkRavKVvviFu15fmtTxuEeNJfI6dFXftJhSe7+Vd8F rs1vl5HMYUVQoJ9iGDrrHmwXgoZYHU9t/GcSETtanOjURQgykwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKOM1MCenmUMGiHSNg1UYztLXw5jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h ZTUyMTc5MC05ODU0LTRkODgtOTg5OC01MzAwY2U5NzM3YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FlNTIxNzkwLTk4NTQtNGQ4OC05 ODk4LTUzMDBjZTk3MzdhYi9hZTUyMTc5MC05ODU0LTRkODgtOTg5OC01MzAwY2U5 NzM3YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADGo50wDwQCAAIwCQMHACYgAIcgADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIr/jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJn5FbTweXG1TYJGfZiK7U+oM8 Y+lSukQtB+h8bejCWZgGinW4EdY3LidPjPJI4QCHEM/J+tI7np4NZCBojaW0BvfP WK4/gRvi8Zl21NvUZE6WP6WwIXcDaK9EG7olqSTGKvLpZHFpg26WV0rhA0ko2zIz 3iaXSz7DKm+sz/8Ytapjji7IYz8eQxn+qyMfIfkha2pWR9SOuhSusiMCpoXpMvOk FnLlAwgd1px+u7z++jHJ1BjY5yLcPCO1pOl6MtF1zuQawNeiYEXSc2M9KBbjShcr xMn9VpghVGWW839RmxQ1aUwcKgFB7IIyf55t3kt0XTdPN3Bh/oOUmPj+4MVC -----END CERTIFICATE-----Generated at Fri Jul 24 11:04:08 2026 by rpki-client