$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer File: dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer (raw, json) Hash identifier: nJYiI99AZ8z/qO6iuQIrYfNrzk/6dhS/YPvTT+8xl9o= Subject key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E6407DC9D2B43BC4AF2441C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Jul 2026 20:45:11 +0000 Certificate not after: Fri 06 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 32249 IP: 162.250.56.0/22 IP: 2605:4780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:07:dc:9d:2b:43:bc:4a:f2:44:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 4 20:45:11 2026 GMT Not After : Oct 6 20:45:11 2028 GMT Subject: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:c4:fc:e6:4f:86:75:11:3f:be:95:e1:87: 5c:0d:50:6f:4d:c3:19:03:e0:e6:ec:d6:24:dc:c2: 4d:e0:64:6f:bf:4c:c6:21:4d:15:01:bb:f6:c3:9c: d5:7b:a6:60:cf:18:4a:8e:fd:20:f3:e6:f4:eb:96: 66:a3:5f:1d:a6:ca:09:2f:a0:48:41:9b:38:36:1d: cc:2c:21:5d:7b:35:68:a1:08:51:28:dd:de:f5:0d: a5:04:fa:5d:36:dd:bc:20:c6:9d:e4:d9:5f:75:77: 55:e4:1f:ac:72:7d:80:02:7e:64:82:dc:bc:81:18: d4:f5:ae:8f:9b:6c:43:66:51:6b:cb:ad:50:9d:73: 79:cb:62:2b:b1:4f:bc:5e:91:ea:46:38:da:44:00: 14:55:b2:ce:f6:57:b4:ca:25:a2:b2:5f:e5:64:3b: b2:67:6e:1b:87:f5:8e:82:d7:b2:d7:8c:f7:32:ed: ca:a0:7d:a6:b1:d0:d2:4c:ce:d6:ea:9b:47:d1:df: 47:bb:8b:66:d5:a9:f8:05:fd:ef:ce:3d:bd:3e:77: 6d:d7:87:0a:cb:69:15:e9:6b:c7:f1:71:6f:ab:47: 5d:ea:80:e3:30:8f:7d:ad:ce:1a:99:47:f3:34:54: 84:1d:7f:52:47:d2:2d:9c:8a:2b:4b:44:f3:52:51: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 162.250.56.0/22 IPv6: 2605:4780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32249 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:15:36:73:a6:f6:d5:42:ae:c5:45:aa:0d:ac:db:b2:18:c4: a5:1d:e5:ba:94:6e:bd:4a:56:c1:d2:a6:b4:b4:1d:f0:db:93: 2e:bf:a8:9c:72:c2:52:2c:2c:56:e9:e1:e0:7f:d3:67:c1:7a: c9:d2:3d:a6:31:94:fb:b2:b8:73:58:99:db:fc:68:23:26:07: b6:33:74:1d:79:c9:1c:fd:cc:0f:f7:47:b4:92:05:47:c9:5f: 1c:22:56:8e:35:4e:86:07:52:5e:61:29:27:8b:58:7d:85:7b: 64:99:80:e2:72:76:12:f6:7b:42:98:d2:32:98:36:ff:61:7e: 89:cc:1d:b4:67:ca:84:1f:54:e3:51:ed:bd:d5:e3:c0:68:c3: fa:6c:57:3f:2a:30:e2:04:e1:4c:a4:9b:b5:43:16:b3:ad:d1: 16:32:ad:64:cd:90:75:7b:00:18:02:c9:95:fe:76:b0:fc:6c: 4c:54:ec:77:d8:0b:a3:4b:81:74:28:aa:48:9b:3b:02:ea:86: f3:0f:1c:14:5d:58:b1:e3:c8:fd:df:46:06:75:6c:20:df:31: f1:b0:8d:37:b4:a4:80:04:a0:19:40:4c:61:20:31:0b:df:21: a1:0d:30:e8:1c:ce:dd:56:37:95:91:0e:d6:54:7a:6e:ad:4c: 36:9b:07:6b -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE5kB9ydK0O8SvJEHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwNDIwNDUxMVoXDTI4MTAwNjIwNDUxMVowLzEtMCsGA1UEAxMk ZGJhNmE2NDMtYjVkMC00ZjA5LThlNjAtZTgyYmExZWI3ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxvE/OZPhnURP76V4YdcDVBvTcMZA+Dm7NYk 3MJN4GRvv0zGIU0VAbv2w5zVe6ZgzxhKjv0g8+b065Zmo18dpsoJL6BIQZs4Nh3M LCFdezVooQhRKN3e9Q2lBPpdNt28IMad5NlfdXdV5B+scn2AAn5kgty8gRjU9a6P m2xDZlFry61QnXN5y2IrsU+8XpHqRjjaRAAUVbLO9le0yiWisl/lZDuyZ24bh/WO gtey14z3Mu3KoH2msdDSTM7W6ptH0d9Hu4tm1an4Bf3vzj29Pndt14cKy2kV6WvH 8XFvq0dd6oDjMI99rc4amUfzNFSEHX9SR9ItnIorS0TzUlHOtQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDV/oCTYhyE7WWTo+0IoNYCuXVMnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k YmE2YTY0My1iNWQwLTRmMDktOGU2MC1lODJiYTFlYjc4NDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RiYTZhNjQzLWI1ZDAtNGYwOS04 ZTYwLWU4MmJhMWViNzg0OC9kYmE2YTY0My1iNWQwLTRmMDktOGU2MC1lODJiYTFl Yjc4NDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKi+jgwDQQCAAIwBwMFACYFR4AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICffkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARxU2c6b21UKuxUWqDazbshjEpR3l upRuvUpWwdKmtLQd8NuTLr+onHLCUiwsVunh4H/TZ8F6ydI9pjGU+7K4c1iZ2/xo IyYHtjN0HXnJHP3MD/dHtJIFR8lfHCJWjjVOhgdSXmEpJ4tYfYV7ZJmA4nJ2EvZ7 QpjSMpg2/2F+icwdtGfKhB9U41HtvdXjwGjD+mxXPyow4gThTKSbtUMWs63RFjKt ZM2QdXsAGALJlf52sPxsTFTsd9gLo0uBdCiqSJs7AuqG8w8cFF1YsePI/d9GBnVs IN8x8bCNN7SkgASgGUBMYSAxC98hoQ0w6BzO3VY3lZEO1lR6bq1MNpsHaw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:14:34 2026 by rpki-client