$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af.cer File: c45d9c28-5e03-4cf6-8640-7b575dcd27af.cer (raw, json) Hash identifier: BPGyAQtg90ixxwpkuQTBQF9u9SWk1fu+rX1xRgPNUu4= Subject key identifier: 2F:F9:FE:C3:D8:D0:83:20:EB:14:A1:60:B9:6B:6A:64:89:C1:A5:2E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E8C82C8934D9E3FC0EFDDAE90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/c45d9c28-5e03-4cf6-8640-7b575dcd27af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jul 2026 08:45:11 +0000 Certificate not after: Sat 21 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 33601 IP: 216.234.130.0/23 IP: 2602:f675::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:82:c8:93:4d:9e:3f:c0:ef:dd:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 19 08:45:11 2026 GMT Not After : Oct 21 08:45:11 2028 GMT Subject: CN=c45d9c28-5e03-4cf6-8640-7b575dcd27af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:a5:9f:47:3b:ba:f6:b2:cd:98:f5:ba:b9: 67:8f:ad:ad:98:4f:3e:15:80:cf:30:56:64:9b:4c: 6c:60:f3:01:e7:c1:db:42:64:e0:a2:d5:fd:82:01: a6:34:a9:40:6c:d5:91:25:02:d4:21:79:2f:76:13: e5:47:0c:96:82:da:e3:ef:00:5d:24:68:10:92:9d: 4d:9d:39:b3:2e:d5:1f:b7:f3:5f:9f:7b:d3:c5:ef: ac:c5:70:35:57:c6:fc:a0:03:8c:4b:0e:b4:e0:98: 5d:ee:6b:0b:e8:7d:1d:6a:83:e4:dc:45:a5:64:a5: 59:ee:4b:02:c0:4d:2e:85:7e:83:b9:a2:3a:9d:d2: 61:91:21:77:8f:d6:db:68:fa:da:85:72:1e:7f:f7: d7:b5:da:30:01:3d:cc:36:c3:86:35:26:f1:59:ca: 38:4d:44:6b:db:da:25:bc:c5:54:c9:a9:14:46:65: a6:63:a4:c9:9a:81:7b:38:a3:b0:5f:dd:a4:fc:26: e6:d5:7b:3b:58:8a:d0:22:05:10:5c:f3:3d:bf:fc: a7:c2:30:ad:cc:7b:0c:6b:d0:69:ad:34:ad:65:e2: 31:8c:4e:e3:39:43:38:93:1e:22:b8:f8:f2:02:97: 47:8a:59:c5:20:89:94:77:1d:92:06:4d:31:88:83: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F9:FE:C3:D8:D0:83:20:EB:14:A1:60:B9:6B:6A:64:89:C1:A5:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/c45d9c28-5e03-4cf6-8640-7b575dcd27af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 216.234.130.0/23 IPv6: 2602:f675::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33601 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f3:a9:7f:45:24:32:6f:97:49:41:da:0c:c0:a5:4e:3e:8f: 31:b5:e1:15:b2:1a:ce:83:26:49:24:78:58:4d:80:ba:5a:53: 8e:6e:17:0e:54:48:fe:62:93:64:af:4d:a6:a8:34:8b:a6:53: 72:d2:d0:d5:ff:b9:25:97:a1:17:80:85:a8:72:c3:c0:ca:33: 2d:09:a6:71:1a:1a:b0:7c:03:8b:5b:98:15:8c:b1:2d:ec:48: db:5d:55:99:c5:0c:6d:c2:1a:d1:0f:0d:40:f3:98:40:c6:97: 3c:56:a7:0b:08:10:fe:91:03:2e:d4:28:90:11:f8:49:84:87: c7:0c:44:8d:6b:50:cb:14:38:81:44:2a:fb:6e:04:b7:bf:da: 22:bb:b0:ce:ef:e7:e8:25:a2:9d:e0:93:cc:e4:9c:6a:25:00: c5:d7:3c:02:e2:74:e0:be:ea:81:88:15:5d:e2:c1:dd:cf:3f: 4e:09:fe:1b:ff:b1:b4:96:8a:8a:c5:f5:88:47:dc:1a:5d:69: e0:f5:f5:8d:a2:b5:da:de:37:2b:80:c8:19:ef:b3:6a:fe:53: de:d7:06:cd:9a:82:c4:c8:45:8c:6d:cc:d7:d2:29:6d:97:f4: dd:5b:76:f7:f7:fb:80:e4:65:80:97:57:b1:09:a9:98:3d:0e: fd:e1:00:9c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6MgsiTTZ4/wO/drpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxOTA4NDUxMVoXDTI4MTAyMTA4NDUxMVowLzEtMCsGA1UEAxMk YzQ1ZDljMjgtNWUwMy00Y2Y2LTg2NDAtN2I1NzVkY2QyN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurWln0c7uvayzZj1urlnj62tmE8+FYDPMFZk m0xsYPMB58HbQmTgotX9ggGmNKlAbNWRJQLUIXkvdhPlRwyWgtrj7wBdJGgQkp1N nTmzLtUft/Nfn3vTxe+sxXA1V8b8oAOMSw604Jhd7msL6H0daoPk3EWlZKVZ7ksC wE0uhX6DuaI6ndJhkSF3j9bbaPrahXIef/fXtdowAT3MNsOGNSbxWco4TURr29ol vMVUyakURmWmY6TJmoF7OKOwX92k/Cbm1Xs7WIrQIgUQXPM9v/ynwjCtzHsMa9Bp rTStZeIxjE7jOUM4kx4iuPjyApdHilnFIImUdx2SBk0xiIO2AwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC/5/sPY0IMg6xShYLlramSJwaUuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j NDVkOWMyOC01ZTAzLTRjZjYtODY0MC03YjU3NWRjZDI3YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2M0NWQ5YzI4LTVlMDMtNGNmNi04 NjQwLTdiNTc1ZGNkMjdhZi9jNDVkOWMyOC01ZTAzLTRjZjYtODY0MC03YjU3NWRj ZDI3YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHY6oIwDgQCAAIwCAMGBCYC9nUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCDQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBo86l/RSQyb5dJQdoMwKVOPo8x teEVshrOgyZJJHhYTYC6WlOObhcOVEj+YpNkr02mqDSLplNy0tDV/7kll6EXgIWo csPAyjMtCaZxGhqwfAOLW5gVjLEt7EjbXVWZxQxtwhrRDw1A85hAxpc8VqcLCBD+ kQMu1CiQEfhJhIfHDESNa1DLFDiBRCr7bgS3v9oiu7DO7+foJaKd4JPM5JxqJQDF 1zwC4nTgvuqBiBVd4sHdzz9OCf4b/7G0loqKxfWIR9waXWng9fWNorXa3jcrgMgZ 77Nq/lPe1wbNmoLEyEWMbczX0iltl/TdW3b39/uA5GWAl1exCamYPQ794QCc -----END CERTIFICATE-----Generated at Thu Jul 23 20:20:57 2026 by rpki-client