$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/691e68a4-39de-40a5-87a7-afc1c3167b80.cer File: 691e68a4-39de-40a5-87a7-afc1c3167b80.cer (raw, json) Hash identifier: xXefbNYJQqcpUC69yR5BVxZvJsSlAh1czWjRNabTNXI= Subject key identifier: 8D:09:59:AA:C5:C0:E0:BC:5E:D2:17:11:B7:94:F7:7B:A7:C6:56:46 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E6837E3990F40BC3035135BE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/691e68a4-39de-40a5-87a7-afc1c3167b80/691e68a4-39de-40a5-87a7-afc1c3167b80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/691e68a4-39de-40a5-87a7-afc1c3167b80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 08:45:11 +0000 Certificate not after: Sun 08 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 394913 IP: 208.78.80.0/23 IP: 2607:8980::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:37:e3:99:0f:40:bc:30:35:13:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 6 08:45:11 2026 GMT Not After : Oct 8 08:45:11 2028 GMT Subject: CN=691e68a4-39de-40a5-87a7-afc1c3167b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:41:cf:3c:78:a6:b1:50:59:c5:ce:48:17: 43:27:3c:af:04:dc:63:00:9c:01:1f:63:3e:24:f1: cf:03:76:c9:2d:a3:13:15:65:64:9f:b2:e4:4d:fa: 30:1c:5f:67:7e:29:b9:d0:c1:0d:fc:cb:41:9d:8f: 75:77:f0:a4:4d:79:cb:9d:9b:7f:09:21:40:ac:7c: 39:a7:d9:5a:ae:ef:07:d4:14:cb:85:5f:66:62:0c: ee:e5:fb:77:ff:2e:67:06:91:cb:e0:26:fa:84:52: 6b:6b:07:fa:f7:6f:fa:cb:ec:3f:02:15:2c:30:29: 70:5f:f1:d6:2b:ca:65:49:18:ce:b6:e4:2f:71:f5: 74:18:25:d7:0a:4d:54:9d:30:ed:43:66:1f:02:5b: d1:c9:ba:56:1a:2c:84:c7:26:b3:09:27:5c:df:11: 32:a8:08:e7:67:36:10:36:f5:b4:00:04:8f:d3:34: bf:3c:df:5a:15:19:5d:37:d5:96:7e:4d:d3:18:00: 86:a0:19:2d:89:60:5d:e0:d1:ba:3d:cc:0b:b9:61: 1a:7a:2c:1f:de:9c:e2:05:2f:84:75:f7:70:cc:01: da:50:57:77:53:f3:93:94:f2:6a:9b:24:f1:45:f2: 49:d4:ad:66:20:3b:a6:6b:72:cd:c3:54:9e:cf:63: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:09:59:AA:C5:C0:E0:BC:5E:D2:17:11:B7:94:F7:7B:A7:C6:56:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/691e68a4-39de-40a5-87a7-afc1c3167b80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/691e68a4-39de-40a5-87a7-afc1c3167b80/691e68a4-39de-40a5-87a7-afc1c3167b80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 208.78.80.0/23 IPv6: 2607:8980::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394913 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:25:da:9a:80:d1:4d:fc:ca:a1:e4:f8:e1:ef:27:38:d8:3f: eb:6c:29:7f:09:41:45:d2:b4:37:7c:54:7a:98:6f:a5:bc:be: a0:67:81:27:f6:5c:26:19:e2:01:0e:8c:58:ff:81:ac:36:c0: b5:a5:16:1e:2f:c2:5d:b6:0d:31:ff:81:2a:d4:9b:9a:be:0f: d7:61:79:89:b6:5c:5c:0f:02:b8:9e:c3:f6:41:ad:25:95:2c: 00:a2:86:82:e4:5a:91:84:54:89:3b:c4:fb:3b:91:49:66:e3: ff:71:29:86:b1:82:a6:da:8f:77:59:a1:6a:90:a1:45:0a:87: 26:6e:ce:41:2d:00:e5:34:e9:0f:65:1d:f8:67:8b:c8:81:ac: 50:45:a2:ba:86:06:71:86:5f:e7:f4:cb:6a:2d:9e:04:48:7e: a5:8f:41:7c:f0:bd:a2:f1:73:65:1a:43:71:00:4b:39:5c:da: 55:d0:9d:ab:3c:10:72:cd:89:b9:61:96:5a:37:7d:4b:0d:10: 82:73:6f:da:20:d3:38:1b:ec:d6:e0:3a:64:e0:90:79:6e:2b: 23:f8:9f:e8:b1:dd:f2:d0:3a:62:c6:cc:8f:87:b0:a9:c2:82: 35:30:4c:31:83:d2:03:29:a2:d3:36:ac:22:3d:58:79:1c:ff: 0b:49:62:9e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5oN+OZD0C8MDUTW+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcwNjA4NDUxMVoXDTI4MTAwODA4NDUxMVowLzEtMCsGA1UEAxMk NjkxZTY4YTQtMzlkZS00MGE1LTg3YTctYWZjMWMzMTY3YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxdBzzx4prFQWcXOSBdDJzyvBNxjAJwBH2M+ JPHPA3bJLaMTFWVkn7LkTfowHF9nfim50MEN/MtBnY91d/CkTXnLnZt/CSFArHw5 p9laru8H1BTLhV9mYgzu5ft3/y5nBpHL4Cb6hFJrawf692/6y+w/AhUsMClwX/HW K8plSRjOtuQvcfV0GCXXCk1UnTDtQ2YfAlvRybpWGiyExyazCSdc3xEyqAjnZzYQ NvW0AASP0zS/PN9aFRldN9WWfk3TGACGoBktiWBd4NG6PcwLuWEaeiwf3pziBS+E dfdwzAHaUFd3U/OTlPJqmyTxRfJJ1K1mIDuma3LNw1Sez2MGAwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFI0JWarFwOC8XtIXEbeU93unxlZGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 OTFlNjhhNC0zOWRlLTQwYTUtODdhNy1hZmMxYzMxNjdiODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY5MWU2OGE0LTM5ZGUtNDBhNS04 N2E3LWFmYzFjMzE2N2I4MC82OTFlNjhhNC0zOWRlLTQwYTUtODdhNy1hZmMxYzMx NjdiODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHQTlAwDgQCAAIwCAMGBCYHiYAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtJdqagNFN/Mqh5Pjh7yc42D/r bCl/CUFF0rQ3fFR6mG+lvL6gZ4En9lwmGeIBDoxY/4GsNsC1pRYeL8Jdtg0x/4Eq 1Juavg/XYXmJtlxcDwK4nsP2Qa0llSwAooaC5FqRhFSJO8T7O5FJZuP/cSmGsYKm 2o93WaFqkKFFCocmbs5BLQDlNOkPZR34Z4vIgaxQRaK6hgZxhl/n9MtqLZ4ESH6l j0F88L2i8XNlGkNxAEs5XNpV0J2rPBByzYm5YZZaN31LDRCCc2/aINM4G+zW4Dpk 4JB5bisj+J/osd3y0DpixsyPh7CpwoI1MEwxg9IDKaLTNqwiPVh5HP8LSWKe -----END CERTIFICATE-----Generated at Tue Jul 7 18:02:53 2026 by rpki-client