$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea.cer File: fe3ef598-e802-4fab-a220-9d90cd5b74ea.cer (raw, json) Hash identifier: NgvwDZZHPAJaoQn9k4hKuiS0ZOcr44r8PKaDlk/X0C8= Subject key identifier: AE:B9:B7:C1:4F:27:6A:D9:9C:C0:CD:25:76:0B:66:A7:72:65:53:82 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E7A5D543CF312FCD4F7F8B080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/fe3ef598-e802-4fab-a220-9d90cd5b74ea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jul 2026 20:45:10 +0000 Certificate not after: Sat 14 Oct 2028 20:45:10 +0000 Subordinate resources: AS: 393936 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:5d:54:3c:f3:12:fc:d4:f7:f8:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 12 20:45:10 2026 GMT Not After : Oct 14 20:45:10 2028 GMT Subject: CN=fe3ef598-e802-4fab-a220-9d90cd5b74ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:7d:6a:ce:60:04:95:f8:20:5c:ff:f4:c4: b3:17:dd:75:d8:fa:8d:a5:37:a2:53:b6:ac:57:cf: e0:39:c8:48:40:43:ba:ca:27:94:e4:63:20:1f:bf: 1d:de:e6:03:8c:15:6a:19:ce:0f:b1:c8:25:bf:09: d9:ec:60:03:19:b2:c2:e3:2a:ad:1b:10:c1:e0:2e: df:32:74:bb:85:45:06:38:43:b8:c1:af:d2:bf:a4: e4:24:b7:46:f2:9d:04:b1:7a:46:89:e5:a6:69:9b: a4:00:46:14:98:ad:57:fa:68:68:27:4a:15:bc:80: 68:6f:44:dc:8b:de:c6:f1:09:25:52:32:39:eb:7f: 8b:dd:6b:8c:7e:16:d2:27:e4:93:4c:1c:16:8a:60: 84:6b:85:4e:52:25:4e:e9:dd:15:72:a4:69:46:28: cc:12:84:e0:3a:91:c9:bd:54:b2:96:96:95:46:d6: aa:90:ac:fc:95:7a:54:8c:12:da:e2:2d:02:79:be: 65:05:f3:7c:86:7a:2c:9c:f5:08:e0:05:28:59:d7: c1:96:ac:f4:d9:9b:bd:ee:46:2f:fd:5d:bc:bf:66: bf:94:f4:95:0d:89:3d:b3:43:4d:59:e4:69:0c:6a: ba:22:ad:63:ff:15:ad:c3:08:57:fe:20:bc:78:67: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:B7:C1:4F:27:6A:D9:9C:C0:CD:25:76:0B:66:A7:72:65:53:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/fe3ef598-e802-4fab-a220-9d90cd5b74ea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 393936 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:87:43:ec:ad:ba:49:01:8a:29:29:61:18:39:c0:33:fd:a8: bb:dc:88:d8:6b:fd:5d:07:d7:d9:61:a0:3a:02:0e:59:bd:c0: 75:e1:39:ea:a7:db:cb:c2:1a:d1:f6:46:3f:d2:5d:81:9d:f8: 1a:71:80:50:31:b3:b6:ac:70:75:08:6d:30:f7:f2:d7:dd:48: b6:06:6a:9c:8d:ef:4f:a9:d7:bd:19:2c:3a:f2:09:ab:8c:13: 9f:9e:9b:1a:54:d8:cc:74:ef:df:9a:31:48:f2:66:de:5e:25: 95:76:59:ee:96:f0:84:e1:86:57:da:7a:c4:1b:86:00:ed:e4: e7:55:f7:fd:13:47:39:1f:77:49:ac:4b:c7:15:41:9c:32:8a: 55:8f:c0:28:b4:c4:26:ef:ac:82:ad:76:6e:62:c3:48:d5:83: e0:60:f0:9a:34:72:1b:59:cf:be:b2:1b:37:71:a9:19:36:5f: 88:6c:d3:cd:cb:67:55:26:c8:47:96:7a:31:cd:b2:59:af:27: 46:0c:01:86:63:48:14:85:4a:81:5d:21:1b:2a:55:80:09:a8: fc:be:2d:00:0c:62:ec:1c:9f:83:d9:9d:d4:6f:7b:96:a8:33: 81:f6:61:78:8f:e7:a6:6b:20:b2:c3:1c:a1:ff:5e:2c:84:8e: 84:c0:4d:89 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE56XVQ88xL81Pf4sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxMjIwNDUxMFoXDTI4MTAxNDIwNDUxMFowLzEtMCsGA1UEAxMk ZmUzZWY1OTgtZTgwMi00ZmFiLWEyMjAtOWQ5MGNkNWI3NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAR9as5gBJX4IFz/9MSzF9112PqNpTeiU7as V8/gOchIQEO6yieU5GMgH78d3uYDjBVqGc4PscglvwnZ7GADGbLC4yqtGxDB4C7f MnS7hUUGOEO4wa/Sv6TkJLdG8p0EsXpGieWmaZukAEYUmK1X+mhoJ0oVvIBob0Tc i97G8QklUjI563+L3WuMfhbSJ+STTBwWimCEa4VOUiVO6d0VcqRpRijMEoTgOpHJ vVSylpaVRtaqkKz8lXpUjBLa4i0Ceb5lBfN8hnosnPUI4AUoWdfBlqz02Zu97kYv /V28v2a/lPSVDYk9s0NNWeRpDGq6Iq1j/xWtwwhX/iC8eGcQWwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFK65t8FPJ2rZnMDNJXYLZqdyZVOCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m ZTNlZjU5OC1lODAyLTRmYWItYTIyMC05ZDkwY2Q1Yjc0ZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZlM2VmNTk4LWU4MDItNGZhYi1h MjIwLTlkOTBjZDViNzRlYS9mZTNlZjU5OC1lODAyLTRmYWItYTIyMC05ZDkwY2Q1 Yjc0ZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgLQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIiHQ+ytukkBiikpYRg5wDP9qLvc iNhr/V0H19lhoDoCDlm9wHXhOeqn28vCGtH2Rj/SXYGd+BpxgFAxs7ascHUIbTD3 8tfdSLYGapyN70+p170ZLDryCauME5+emxpU2Mx079+aMUjyZt5eJZV2We6W8ITh hlfaesQbhgDt5OdV9/0TRzkfd0msS8cVQZwyilWPwCi0xCbvrIKtdm5iw0jVg+Bg 8Jo0chtZz76yGzdxqRk2X4hs083LZ1UmyEeWejHNslmvJ0YMAYZjSBSFSoFdIRsq VYAJqPy+LQAMYuwcn4PZndRve5aoM4H2YXiP56ZrILLDHKH/XiyEjoTATYk= -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:39 2026 by rpki-client