$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer File: 8451ed63-cb69-4202-bd4e-4bb93315e13c.cer (raw, json) Hash identifier: 1LH5qOMHOp5U2aZE3yUS0XjmZ1QqaRg8XOoN/lebHw0= Subject key identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584EDC8A647B2780ACB618BA7520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Aug 2026 00:45:11 +0000 Certificate not after: Sun 19 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 11540 IP: 2620:31:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:8a:64:7b:27:80:ac:b6:18:ba:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 17 00:45:11 2026 GMT Not After : Nov 19 01:45:11 2028 GMT Subject: CN=8451ed63-cb69-4202-bd4e-4bb93315e13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:85:c9:4b:b2:d4:8f:5d:63:88:08:3a:6a: c2:25:c6:61:78:c5:76:ef:7b:e6:d7:c6:95:4c:d4: fc:33:28:34:4b:60:66:aa:aa:9c:cd:e5:77:07:de: a1:1b:89:ed:22:d4:9f:b6:2a:ec:28:ad:1b:1f:d5: 33:ad:4c:f1:0a:a7:d8:20:40:7f:87:e9:66:a3:aa: 97:d9:8a:0d:36:e8:82:12:39:cd:2a:38:e7:81:77: 6f:e8:b7:b0:ef:30:ef:f2:05:da:53:7d:f7:6e:5a: 96:92:7c:91:5f:11:1c:d6:d9:e3:22:85:d2:fd:82: 8a:14:36:29:c5:cc:3d:5f:ae:21:db:1b:77:79:86: 33:2b:af:89:5e:c2:c0:d7:cc:86:30:9f:da:95:70: 3e:2f:2d:50:25:2d:66:b2:db:f8:5b:20:9b:82:cf: 35:6d:aa:0b:83:a4:f3:93:a7:fa:1a:95:64:79:d4: 38:6a:96:35:1d:ce:96:71:d5:c5:40:e3:74:1f:43: 89:1a:0a:0e:25:5a:d5:4a:c4:af:68:63:82:99:b9: 3a:b8:82:c2:50:fa:24:0a:bb:81:e6:cc:02:d9:1e: b6:99:8e:8e:2e:e0:d6:df:64:dd:61:97:61:fd:ca: 0b:72:ce:c0:30:43:69:00:1c:a1:8b:e7:8b:6f:77: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2620:31:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11540 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bd:31:12:87:f7:66:4a:61:ec:9c:e6:bd:1d:a8:97:e4:4e: 27:dd:61:f3:9d:a9:2e:af:48:aa:b6:28:71:5b:eb:18:10:c9: 47:b6:a1:73:08:cb:c0:99:93:ad:3b:be:39:a6:f4:2b:54:be: b3:e7:a9:08:bf:1b:be:3d:19:b0:35:78:35:31:42:bd:58:35: 6c:71:05:9b:92:ea:d6:7d:20:20:8a:ef:9a:83:60:97:57:98: 58:19:cc:04:b7:64:ca:48:2a:3f:97:4b:d3:7a:f2:61:cc:b7: c2:ec:03:f0:e5:39:b8:69:ea:2a:44:04:e9:81:b1:d3:a8:31: 12:64:9d:49:81:a7:81:d2:89:6e:94:87:eb:a6:5f:8f:b3:95: a4:9e:86:96:d9:bc:7c:3d:4e:5b:b0:6f:65:bf:ce:82:e5:36: b2:be:8b:d2:cc:5a:e3:67:80:be:9c:81:ef:e6:12:df:47:0c: 49:e1:52:92:20:d1:93:7f:32:8c:7a:ee:a5:5b:ed:c9:1e:c5: 60:f4:5a:94:7d:33:1b:05:1a:13:c7:45:f1:6e:d4:d9:e4:ef: 5f:4a:e6:65:cb:94:44:3c:ca:ac:ce:a4:40:25:47:1d:b2:08: d6:d7:2a:1a:0d:33:30:0e:4b:b6:23:18:5b:43:f0:e3:2b:35: 7f:d5:0f:fc -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE7cimR7J4Csthi6dSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDgxNzAwNDUxMVoXDTI4MTExOTAxNDUxMVowLzEtMCsGA1UEAxMk ODQ1MWVkNjMtY2I2OS00MjAyLWJkNGUtNGJiOTMzMTVlMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyOFyUuy1I9dY4gIOmrCJcZheMV273vm18aV TNT8Myg0S2BmqqqczeV3B96hG4ntItSftirsKK0bH9UzrUzxCqfYIEB/h+lmo6qX 2YoNNuiCEjnNKjjngXdv6Lew7zDv8gXaU333blqWknyRXxEc1tnjIoXS/YKKFDYp xcw9X64h2xt3eYYzK6+JXsLA18yGMJ/alXA+Ly1QJS1mstv4WyCbgs81baoLg6Tz k6f6GpVkedQ4apY1Hc6WcdXFQON0H0OJGgoOJVrVSsSvaGOCmbk6uILCUPokCruB 5swC2R62mY6OLuDW32TdYZdh/coLcs7AMENpAByhi+eLb3eiLQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFHpvigkMas/ZvtWLWf6WMoTpPhsRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NDUxZWQ2My1jYjY5LTQyMDItYmQ0ZS00YmI5MzMxNWUxM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg0NTFlZDYzLWNiNjktNDIwMi1i ZDRlLTRiYjkzMzE1ZTEzYy84NDUxZWQ2My1jYjY5LTQyMDItYmQ0ZS00YmI5MzMx NWUxM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAAxgAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICLRQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAW70xEof3Zkph7JzmvR2ol+ROJ91h852pLq9IqrYocVvr GBDJR7ahcwjLwJmTrTu+Oab0K1S+s+epCL8bvj0ZsDV4NTFCvVg1bHEFm5Lq1n0g IIrvmoNgl1eYWBnMBLdkykgqP5dL03ryYcy3wuwD8OU5uGnqKkQE6YGx06gxEmSd SYGngdKJbpSH66Zfj7OVpJ6Gltm8fD1OW7BvZb/OguU2sr6L0sxa42eAvpyB7+YS 30cMSeFSkiDRk38yjHrupVvtyR7FYPRalH0zGwUaE8dF8W7U2eTvX0rmZcuURDzK rM6kQCVHHbII1tcqGg0zMA5LtiMYW0Pw4ys1f9UP/A== -----END CERTIFICATE-----Generated at Wed Aug 19 22:24:22 2026 by rpki-client