$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer File: badf1586-901d-41a7-b0f3-521998d53931.cer (raw, json) Hash identifier: gN/lyNuJ7smsYgMz5ZWS+rfHuafNFb5O7Xb7k60QzAM= Subject key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E8C82C88BBDC6FFD363666E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jul 2026 08:45:11 +0000 Certificate not after: Sat 21 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 401661 IP: 2604:be0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:82:c8:8b:bd:c6:ff:d3:63:66:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 19 08:45:11 2026 GMT Not After : Oct 21 08:45:11 2028 GMT Subject: CN=badf1586-901d-41a7-b0f3-521998d53931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:6a:ad:ea:40:55:2b:a8:ca:67:6e:d7:e4: 3a:e3:7c:4d:b4:4f:2a:3d:ee:69:86:fb:7d:b8:b1: a3:cf:d3:e7:b9:ee:b5:1e:32:40:b1:1d:c6:5e:a6: 07:8c:96:4b:0c:69:b9:6e:28:a5:0c:d4:96:a0:aa: 4e:3a:74:f3:bd:ca:d3:b0:88:27:14:1b:1f:8b:09: b4:8f:4b:7d:45:63:17:16:1b:02:46:4f:44:ec:b4: 90:31:f0:03:61:55:d4:19:5f:e6:1a:1b:be:af:31: f0:21:6e:ea:c3:a2:49:fc:26:73:f4:6b:4d:9e:e1: 5e:6a:7a:16:30:31:3b:9c:81:b5:a3:ac:ea:c7:39: e9:2e:26:29:86:23:66:1e:2e:06:cd:ef:e7:55:d9: d9:4a:16:1f:ce:35:8d:c8:b7:3d:92:a7:f3:11:c5: 83:87:44:05:83:07:3a:2d:3d:d4:d9:c6:39:03:32: 91:b8:5a:2e:bc:5b:ee:5d:14:0b:ff:70:56:ff:3b: a2:cc:bc:13:27:2c:99:94:64:35:8f:11:1c:a7:37: e9:e2:e2:21:84:ef:5e:e9:dc:9c:b6:07:e4:a7:6e: 23:27:d2:4a:b1:d0:56:be:95:00:79:ed:69:e3:56: 6d:76:77:dd:7e:90:1a:d2:a5:12:90:69:a5:e9:62: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2604:be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401661 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a6:2b:31:d0:2c:64:b1:0d:c6:59:90:3d:b9:05:73:a7:bb: bf:39:38:ef:79:b8:b9:69:c4:e8:81:36:32:d1:79:4f:c9:e7: d3:fb:36:1f:65:56:98:33:f9:27:e5:91:b4:6f:8a:c1:ed:87: 08:fd:5c:d6:c0:2a:e8:b0:36:f3:db:e0:1f:b3:85:95:c4:ed: 10:8f:29:ce:1b:22:a2:38:8c:8a:9d:5e:e2:16:9f:ba:0c:f3: d9:f7:5a:02:bd:a4:f9:8b:a0:50:22:ec:01:db:b1:f3:55:99: 6e:eb:85:55:96:76:d1:82:fc:7b:2c:36:6b:03:0a:bb:4c:9d: e4:19:bc:a4:19:af:63:13:ee:92:8c:0b:a0:e5:dc:46:86:0a: 90:a6:4e:04:72:4e:57:98:ab:26:f5:33:fe:01:d0:2c:5b:66: 9f:03:e7:12:5d:35:49:b3:5d:52:b5:f5:48:6b:96:d6:d2:e0: 38:83:9a:04:73:54:99:1c:aa:d4:c8:87:77:a9:dc:67:62:60: 0a:c1:b3:ff:f5:db:31:45:a9:ee:8d:ab:5c:e0:fb:76:65:69: 05:33:6a:63:10:9b:8e:97:ae:e1:da:60:28:c8:de:00:86:d9: 64:ef:62:1f:47:61:ab:ae:42:3f:0d:d7:dd:db:31:4b:c3:6e: 2c:9a:78:0f -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE6MgsiLvcb/02NmboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxOTA4NDUxMVoXDTI4MTAyMTA4NDUxMVowLzEtMCsGA1UEAxMk YmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUzOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFxqrepAVSuoymdu1+Q643xNtE8qPe5phvt9 uLGjz9Pnue61HjJAsR3GXqYHjJZLDGm5biilDNSWoKpOOnTzvcrTsIgnFBsfiwm0 j0t9RWMXFhsCRk9E7LSQMfADYVXUGV/mGhu+rzHwIW7qw6JJ/CZz9GtNnuFeanoW MDE7nIG1o6zqxznpLiYphiNmHi4Gze/nVdnZShYfzjWNyLc9kqfzEcWDh0QFgwc6 LT3U2cY5AzKRuFouvFvuXRQL/3BW/zuizLwTJyyZlGQ1jxEcpzfp4uIhhO9e6dyc tgfkp24jJ9JKsdBWvpUAee1p41ZtdnfdfpAa0qUSkGml6WKcQwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFBfdvtUbJ5FWsEjHfj0O2U/6N6ueMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i YWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JhZGYxNTg2LTkwMWQtNDFhNy1i MGYzLTUyMTk5OGQ1MzkzMS9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThk NTM5MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBAvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYg/TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA2pisx0CxksQ3GWZA9uQVzp7u/OTjvebi5acTogTYy0XlP yefT+zYfZVaYM/kn5ZG0b4rB7YcI/VzWwCrosDbz2+Afs4WVxO0QjynOGyKiOIyK nV7iFp+6DPPZ91oCvaT5i6BQIuwB27HzVZlu64VVlnbRgvx7LDZrAwq7TJ3kGbyk Ga9jE+6SjAug5dxGhgqQpk4Eck5XmKsm9TP+AdAsW2afA+cSXTVJs11StfVIa5bW 0uA4g5oEc1SZHKrUyId3qdxnYmAKwbP/9dsxRanujatc4Pt2ZWkFM2pjEJuOl67h 2mAoyN4Ahtlk72IfR2GrrkI/Ddfd2zFLw24smngP -----END CERTIFICATE-----Generated at Thu Jul 23 21:52:48 2026 by rpki-client