$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer File: 2ac961ff-f406-4f80-b06d-e1284358815a.cer (raw, json) Hash identifier: idRqu3M9NH2e0+qNdC8n+mj4WNHnNiSNFzAr8MnigTs= Subject key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584ED42A5768A2C4D7A3B9C36A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Aug 2026 00:45:12 +0000 Certificate not after: Thu 16 Nov 2028 01:45:12 +0000 Subordinate resources: IP: 35.128.192.0 -- 35.128.215.255 IP: 64.56.80.0/20 IP: 108.59.16.0/20 IP: 162.223.20.0/22 IP: 162.248.64.0/21 IP: 2607:f5d8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:2a:57:68:a2:c4:d7:a3:b9:c3:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 14 00:45:12 2026 GMT Not After : Nov 16 01:45:12 2028 GMT Subject: CN=2ac961ff-f406-4f80-b06d-e1284358815a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f0:cc:88:b6:00:5f:df:0e:50:44:aa:75:d9: cd:52:ce:91:82:00:d5:ff:9b:b8:ec:6b:09:51:35: 91:76:8d:ee:e0:98:71:50:e8:34:43:60:61:d2:ca: dc:cd:2c:dc:28:57:c1:a1:37:5e:f5:c4:08:87:19: 39:d9:d4:a9:1e:e6:32:c0:73:2d:b1:33:84:01:62: 19:84:5e:a2:a4:7a:ea:dc:a5:00:15:52:8d:dc:30: 0e:6c:df:fd:b3:37:ca:3e:94:0a:78:e4:eb:fb:2d: 43:1c:c9:9a:2e:f5:02:a5:52:18:d7:4d:ea:e2:e6: b5:63:8e:9c:d1:e1:fe:a4:15:ca:f1:a2:94:15:de: df:b5:d0:ed:c9:d2:08:c2:85:da:6d:03:4e:4f:d0: f4:e3:42:80:9d:50:dd:2c:d4:fb:45:c6:c9:ad:fc: ad:28:5f:c3:3f:42:37:72:4e:78:85:c6:af:3e:c6: 15:35:fb:d2:f0:1e:02:36:b6:3a:95:ce:a4:77:d0: 8d:df:eb:7a:6f:d8:e9:8e:86:08:3b:45:49:bf:e7: da:d9:a2:5f:bc:41:dc:d6:f0:91:2f:de:b5:0e:52: ed:2e:3f:e2:91:11:d7:98:d2:78:55:a2:f7:78:ba: 5e:01:0b:25:9a:7a:7e:b4:b3:78:11:33:a7:b1:fa: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 35.128.192.0-35.128.215.255 64.56.80.0/20 108.59.16.0/20 162.223.20.0/22 162.248.64.0/21 IPv6: 2607:f5d8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:58:78:41:bf:f1:af:56:cd:42:09:3d:04:29:32:d3:11:91: f1:2f:a5:04:64:7a:e0:a3:47:77:e2:64:16:58:2d:6f:54:45: 23:90:b9:60:6a:47:ba:45:80:3a:1d:dd:fd:ff:20:94:55:82: ec:c7:00:f5:fa:13:c8:3a:f9:83:4c:23:00:8c:c5:e5:7a:a2: 0c:2c:1c:dd:90:b7:70:ea:6b:13:ec:61:a4:e1:dc:b2:78:50: 11:c6:86:0c:74:73:4f:0d:ce:67:36:35:d8:ad:e6:31:cb:a9: 8b:4f:81:2d:74:e1:0a:70:d4:37:d8:4b:6e:4d:69:42:ee:bc: 31:98:ec:9f:9c:e3:32:04:bb:c0:0a:9d:50:bf:34:33:b5:9e: 87:10:50:69:c2:ff:d3:9e:b7:48:d9:bb:19:37:38:d2:74:6a: 43:71:ee:2e:87:df:ea:71:0a:cd:b1:33:23:31:2e:5b:78:bf: c8:a1:2e:a9:b5:75:76:28:18:01:9e:59:d3:72:71:24:4c:94: ad:1a:71:ca:6f:94:a3:d7:84:ff:c0:96:38:43:fe:b1:53:11: 6f:89:88:1a:3f:14:5c:0f:52:6f:cc:15:9f:7b:b2:28:ac:38: ad:ad:a7:16:54:97:65:b9:c8:e7:c7:8e:37:41:cc:c8:24:48: d4:7b:03:33 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWE7UKldoosTXo7nDagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgxNDAwNDUxMloXDTI4MTExNjAxNDUxMlowLzEtMCsGA1UEAxMk MmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/DMiLYAX98OUESqddnNUs6RggDV/5u47GsJ UTWRdo3u4JhxUOg0Q2Bh0srczSzcKFfBoTde9cQIhxk52dSpHuYywHMtsTOEAWIZ hF6ipHrq3KUAFVKN3DAObN/9szfKPpQKeOTr+y1DHMmaLvUCpVIY103q4ua1Y46c 0eH+pBXK8aKUFd7ftdDtydIIwoXabQNOT9D040KAnVDdLNT7RcbJrfytKF/DP0I3 ck54hcavPsYVNfvS8B4CNrY6lc6kd9CN3+t6b9jpjoYIO0VJv+fa2aJfvEHc1vCR L961DlLtLj/ikRHXmNJ4VaL3eLpeAQslmnp+tLN4ETOnsfqIkwIDAQABo4IELjCC BCowHQYDVR0OBBYEFPGLelv4h+TbMWv8sW0aZ94xtXyeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJhYzk2MWZmLWY0MDYtNGY4MC1i MDZkLWUxMjg0MzU4ODE1YS8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1 ODgxNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYwDAMEBiOAwAMEAyOA0AMEBEA4UAMEBGw7EAMEAqLf FAMEA6L4QDANBAIAAjAHAwUAJgf12DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSWHhBv/GvVs1CCT0EKTLT EZHxL6UEZHrgo0d34mQWWC1vVEUjkLlgake6RYA6Hd39/yCUVYLsxwD1+hPIOvmD TCMAjMXleqIMLBzdkLdw6msT7GGk4dyyeFARxoYMdHNPDc5nNjXYreYxy6mLT4Et dOEKcNQ32EtuTWlC7rwxmOyfnOMyBLvACp1QvzQztZ6HEFBpwv/TnrdI2bsZNzjS dGpDce4uh9/qcQrNsTMjMS5beL/IoS6ptXV2KBgBnlnTcnEkTJStGnHKb5Sj14T/ wJY4Q/6xUxFviYgaPxRcD1JvzBWfe7IorDitracWVJdlucjnx443QczIJEjUewMz -----END CERTIFICATE-----Generated at Fri Sep 4 21:10:26 2026 by rpki-client