$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3.cer File: 192bda67-8a07-4f68-a34a-58d60df5acf3.cer (raw, json) Hash identifier: sRg9IhopMBx3goO77Pr7zTofezLjXrOnfWhNFHLenWE= Subject key identifier: 6F:14:E7:07:8F:D3:2C:59:54:04:72:AF:80:B7:65:28:B1:C1:E2:FD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E7A5D541E9A0C02C055F05500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/192bda67-8a07-4f68-a34a-58d60df5acf3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jul 2026 20:45:10 +0000 Certificate not after: Sat 14 Oct 2028 20:45:10 +0000 Subordinate resources: IP: 23.137.28.0/24 IP: 2602:f693::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:5d:54:1e:9a:0c:02:c0:55:f0:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 12 20:45:10 2026 GMT Not After : Oct 14 20:45:10 2028 GMT Subject: CN=192bda67-8a07-4f68-a34a-58d60df5acf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:99:ae:88:fd:dd:e5:9f:2b:8a:8e:4d:1a: 9c:d9:68:3f:8a:23:a2:b5:8b:96:31:8a:23:23:23: c2:00:85:2e:33:84:38:5b:c7:de:94:cb:ee:c9:98: 69:b1:36:49:52:6d:82:33:89:d1:4c:63:24:ff:21: 66:2b:57:65:03:84:00:d6:f7:4d:d3:e3:6e:7c:1d: e2:ec:61:5b:e2:c3:48:74:f7:25:83:65:83:83:a3: 67:c8:95:75:37:de:33:d2:84:c7:da:b9:3e:48:ac: 5c:4e:de:64:e7:1e:3c:49:1f:f2:0d:a6:11:77:da: c0:c8:56:e8:e1:79:1a:23:77:be:7d:22:bb:e9:65: e4:c4:30:63:f5:64:24:42:11:3e:3c:31:77:a3:25: 94:be:1b:c6:79:ba:89:0b:b3:97:9c:69:af:f6:85: 5a:ac:2f:ed:f2:17:33:53:55:6b:b3:d4:a1:84:82: c5:06:6d:ec:de:db:c1:3d:bd:43:95:e5:c7:64:ed: 09:f7:74:ce:6b:1d:53:28:04:15:ad:e7:31:62:29: bb:45:c7:18:b2:5a:13:da:79:dc:d2:d4:6b:e1:82: e1:bc:29:f0:d1:45:97:50:55:c0:4e:8d:f5:42:49: 2a:6e:1f:f6:28:f5:03:bd:5e:bc:72:8a:c9:b5:b5: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:14:E7:07:8F:D3:2C:59:54:04:72:AF:80:B7:65:28:B1:C1:E2:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/192bda67-8a07-4f68-a34a-58d60df5acf3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.137.28.0/24 IPv6: 2602:f693::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:6b:4e:cd:c8:6a:ea:71:da:13:ec:bc:d4:31:66:02:96:a2: ae:06:f9:b6:4f:4b:f8:5c:a5:d9:98:d9:9d:3a:a7:1c:0e:43: cf:96:c5:a8:14:db:ae:ee:d7:8c:f2:49:f5:4d:c7:38:2d:0d: de:da:84:72:02:8f:02:72:ae:1c:2c:14:50:77:ac:8c:bc:f9: df:16:02:d6:06:3b:7e:94:d8:f5:5f:71:77:f8:77:8c:11:ba: 3f:ec:40:83:05:d7:c0:5b:b2:1b:c4:38:06:53:6b:38:95:7a: b8:4e:44:99:0d:a0:3d:a0:a8:75:f9:30:6e:96:90:6d:f0:87: 6a:02:3c:42:dd:a4:51:76:3a:30:dd:b4:a8:4d:3d:f9:93:eb: 9e:4d:d4:e9:a1:81:c4:35:d9:b1:b8:53:16:21:2b:81:4b:ae: 68:27:3b:2c:7a:88:9a:36:72:25:f3:1f:be:31:f5:6c:27:71: 0e:72:ba:db:4f:84:04:0b:9e:7b:e0:2e:08:14:45:7e:a9:79: e7:e2:08:a2:01:90:4f:84:e4:df:e1:0d:e8:c3:db:4d:29:88: b7:0e:f6:ba:0a:dd:6b:bf:c4:49:7a:21:61:b0:91:71:43:df: 55:17:c5:db:ef:59:72:65:7c:1c:42:4c:36:8d:e6:80:a6:44: 4c:b2:6e:31 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE56XVQemgwCwFXwVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcxMjIwNDUxMFoXDTI4MTAxNDIwNDUxMFowLzEtMCsGA1UEAxMk MTkyYmRhNjctOGEwNy00ZjY4LWEzNGEtNThkNjBkZjVhY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlmZroj93eWfK4qOTRqc2Wg/iiOitYuWMYoj IyPCAIUuM4Q4W8felMvuyZhpsTZJUm2CM4nRTGMk/yFmK1dlA4QA1vdN0+NufB3i 7GFb4sNIdPclg2WDg6NnyJV1N94z0oTH2rk+SKxcTt5k5x48SR/yDaYRd9rAyFbo 4XkaI3e+fSK76WXkxDBj9WQkQhE+PDF3oyWUvhvGebqJC7OXnGmv9oVarC/t8hcz U1Vrs9ShhILFBm3s3tvBPb1DleXHZO0J93TOax1TKAQVrecxYim7RccYsloT2nnc 0tRr4YLhvCnw0UWXUFXATo31Qkkqbh/2KPUDvV68corJtbXPIQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFG8U5weP0yxZVARyr4C3ZSixweL9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x OTJiZGE2Ny04YTA3LTRmNjgtYTM0YS01OGQ2MGRmNWFjZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE5MmJkYTY3LThhMDctNGY2OC1h MzRhLTU4ZDYwZGY1YWNmMy8xOTJiZGE2Ny04YTA3LTRmNjgtYTM0YS01OGQ2MGRm NWFjZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiRwwDgQCAAIwCAMGACYC9pMAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJVrTs3Iaupx2hPsvNQxZgKWoq4G+bZPS/hcpdmY2Z06pxwOQ8+WxagU267u14zy SfVNxzgtDd7ahHICjwJyrhwsFFB3rIy8+d8WAtYGO36U2PVfcXf4d4wRuj/sQIMF 18BbshvEOAZTaziVerhORJkNoD2gqHX5MG6WkG3wh2oCPELdpFF2OjDdtKhNPfmT 655N1OmhgcQ12bG4UxYhK4FLrmgnOyx6iJo2ciXzH74x9WwncQ5yuttPhAQLnnvg LggURX6peefiCKIBkE+E5N/hDejD200piLcO9roK3Wu/xEl6IWGwkXFD31UXxdvv WXJlfBxCTDaN5oCmREyybjE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:42:09 2026 by rpki-client