$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer File: a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer (raw, json) Hash identifier: uA72k7EfAqvzf0Cna8ID+02VkmX3371HZZGJZDA0sf0= Subject key identifier: DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584E4CAADF3E4CCF7B0C17742000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 11:54:14 +0000 Certificate not after: Wed 13 Oct 2027 22:05:00 +0000 Subordinate resources: IP: 67.208.32.0/20 IP: 2607:bc80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:aa:df:3e:4c:cf:7b:0c:17:74:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jun 26 11:54:14 2026 GMT Not After : Oct 13 22:05:00 2027 GMT Subject: CN=a6b962cd-d36a-4673-8d04-bc6f84e0b6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:94:7c:64:55:82:ac:0d:ba:3e:93:f3:f6: 8f:0e:cc:42:68:a8:93:0a:4a:cf:c4:3e:e7:1b:95: 24:9a:0b:6c:a7:8a:1c:b4:7c:9b:35:9a:62:35:e2: 8b:a2:0d:a2:cb:57:a3:ef:37:78:85:c4:c1:0f:f2: 97:55:a7:6f:0a:4f:2e:7c:6e:3e:43:cc:5a:39:e4: ec:d0:fc:91:c2:9b:00:6f:3f:ad:47:8c:ee:8f:5e: a6:1f:e0:cb:b2:e3:96:8d:02:ae:d4:8d:42:cb:9f: b8:37:03:e5:71:60:e0:44:ff:be:83:5f:90:16:a0: 14:47:62:f8:6d:2c:d7:54:c6:a0:1e:eb:39:ea:37: c2:00:db:e5:23:e7:8e:b9:83:9c:92:53:b0:cd:df: 9f:a7:6e:b0:90:f7:3a:c4:dd:59:6d:35:b1:3e:67: 10:40:2c:ca:13:96:75:8b:a1:26:a1:dc:0b:77:4f: b2:d4:b3:9b:29:09:76:19:b1:7d:3d:8f:5e:7c:6a: 25:cd:e3:51:a7:1e:e4:cb:0b:33:17:24:77:cd:5a: 56:03:e3:3f:52:e0:cc:42:1b:f5:83:e2:0e:aa:07: 9c:8c:68:31:f9:97:ef:50:be:bd:7b:02:cf:61:a7: 12:e6:85:00:84:a2:86:94:e4:29:a4:4b:46:f7:78: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 67.208.32.0/20 IPv6: 2607:bc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2b:fa:de:c4:b6:f1:5f:5e:09:d6:bd:99:04:08:8f:36:2b: 25:f4:78:d0:69:4e:00:ac:a2:5f:d2:63:d0:ae:88:df:fc:ca: ce:77:f9:66:12:6d:06:ac:e7:6a:5b:ce:7a:a9:ce:6c:f4:0c: 64:7c:7e:df:97:24:81:4a:3e:44:b5:0a:45:30:7b:f2:e8:fa: af:ba:6d:80:82:f8:b5:95:de:92:df:6f:8a:c5:f3:8c:1a:53: 0d:b4:0d:a6:4f:35:00:d7:05:1b:d4:6b:ea:5b:6d:e7:eb:9b: 27:bc:48:54:70:27:46:04:d2:27:8f:03:9d:6c:06:c4:c8:c5: af:ab:94:30:de:6b:a8:e8:36:1c:f5:98:b4:18:8e:b3:6c:0f: 05:ba:aa:b2:17:79:91:ba:a6:1c:b6:c8:04:91:50:32:41:e1: d7:65:d7:6c:a6:52:88:dd:ab:4e:cb:5a:17:25:8c:01:01:8a: 5d:83:fc:12:d3:20:49:70:0c:58:9f:39:80:4a:f4:33:7b:b1: 4a:f9:be:29:a6:b1:84:43:f2:2a:bc:10:f7:a3:4a:d9:51:43: f7:fb:e9:6c:a0:59:35:26:40:89:42:6c:56:c9:7b:70:b5:06: ed:ac:1f:57:2d:4c:7b:30:27:29:50:f7:3c:76:75:84:3f:83: 9d:8d:6c:12 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE5Mqt8+TM97DBd0IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDYyNjExNTQxNFoXDTI3MTAxMzIyMDUwMFowLzEtMCsGA1UEAxMk YTZiOTYyY2QtZDM2YS00NjczLThkMDQtYmM2Zjg0ZTBiNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkOUfGRVgqwNuj6T8/aPDsxCaKiTCkrPxD7n G5Ukmgtsp4octHybNZpiNeKLog2iy1ej7zd4hcTBD/KXVadvCk8ufG4+Q8xaOeTs 0PyRwpsAbz+tR4zuj16mH+DLsuOWjQKu1I1Cy5+4NwPlcWDgRP++g1+QFqAUR2L4 bSzXVMagHus56jfCANvlI+eOuYOcklOwzd+fp26wkPc6xN1ZbTWxPmcQQCzKE5Z1 i6EmodwLd0+y1LObKQl2GbF9PY9efGolzeNRpx7kywszFyR3zVpWA+M/UuDMQhv1 g+IOqgecjGgx+ZfvUL69ewLPYacS5oUAhKKGlOQppEtG93gKSwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFN7Yj+s1sL55QQpBYlIsHcFEitOeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h NmI5NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZmODRlMGI2ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E2Yjk2MmNkLWQzNmEtNDY3My04 ZDA0LWJjNmY4NGUwYjZlZi9hNmI5NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZmODRl MGI2ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARD0CAwDQQCAAIwBwMFACYHvIAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Lyv63sS28V9eCda9mQQIjzYrJfR40GlOAKyiX9Jj0K6I3/zKznf5ZhJtBqznalvO eqnObPQMZHx+35ckgUo+RLUKRTB78uj6r7ptgIL4tZXekt9visXzjBpTDbQNpk81 ANcFG9Rr6ltt5+ubJ7xIVHAnRgTSJ48DnWwGxMjFr6uUMN5rqOg2HPWYtBiOs2wP Bbqqshd5kbqmHLbIBJFQMkHh12XXbKZSiN2rTstaFyWMAQGKXYP8EtMgSXAMWJ85 gEr0M3uxSvm+KaaxhEPyKrwQ96NK2VFD9/vpbKBZNSZAiUJsVsl7cLUG7awfVy1M ezAnKVD3PHZ1hD+DnY1sEg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:52:56 2026 by rpki-client