$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer File: 04723749-feb1-4da5-ac21-ba89ad1d057e.cer (raw, json) Hash identifier: tqjWxiG/INnOZalF8FZpTm901jCbjEmYG73iA5AXcvs= Subject key identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E9EA8397F4A2CE4DAE8923940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jul 2026 20:45:11 +0000 Certificate not after: Fri 27 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 398766 IP: 23.252.16.0/20 IP: 124.198.160.0/19 IP: 162.118.96.0/19 IP: 2605:eb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:a8:39:7f:4a:2c:e4:da:e8:92:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 25 20:45:11 2026 GMT Not After : Oct 27 20:45:11 2028 GMT Subject: CN=04723749-feb1-4da5-ac21-ba89ad1d057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:10:fb:9d:35:48:b1:27:31:61:34:0a:fc: 93:f3:fd:d6:ed:21:b3:a7:87:30:4c:a9:47:85:83: 83:13:b2:99:3e:54:4a:9b:50:5d:ac:41:0c:45:01: 2f:8c:27:5d:df:f6:cf:5e:8c:8a:05:c2:29:4e:f8: d8:86:bb:fd:78:e9:d5:29:ce:eb:e8:c8:d5:e2:9a: a9:e0:9a:d6:28:71:47:fa:fa:72:29:ad:ad:09:08: 17:61:cc:87:ee:ee:9d:dd:7e:4e:f7:79:d2:3c:20: b0:86:89:4c:72:44:d6:8b:6b:ee:62:c9:22:2c:ac: 6a:fa:33:40:4c:98:23:66:8e:34:98:d4:93:5d:78: 91:7e:28:1c:ce:f6:c7:aa:8f:58:1c:e4:f1:32:61: d1:6a:7b:82:36:e6:ca:1e:9e:6b:5d:f3:b1:b8:35: 5a:a6:44:2d:f9:84:ec:a7:ea:c7:72:bc:8b:bf:9e: 59:d9:88:0c:e7:4c:6b:c0:29:de:f7:96:01:51:53: 4f:5b:98:9f:e0:34:a9:dc:eb:c4:cb:ad:1d:c1:fa: df:5e:41:64:37:1a:17:f4:d2:26:7c:d1:e5:b7:28: 6b:fa:2e:2f:bf:8a:1f:93:7e:f9:10:0b:a1:0c:33: de:4e:f2:de:bb:17:26:11:2a:1b:f3:7e:11:0a:f2: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.252.16.0/20 124.198.160.0/19 162.118.96.0/19 IPv6: 2605:eb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:49:9c:df:82:d7:89:18:9a:80:35:54:ef:86:b2:45:e6:8d: 4c:29:d7:58:25:04:92:b3:46:93:33:1f:2c:64:e9:37:1e:80: 9d:6b:f4:d7:0f:e6:31:66:9a:80:34:f2:a6:48:a6:7f:9f:e4: 83:13:bb:f5:75:9c:c8:79:c8:ee:8e:5e:fa:44:eb:73:1e:d7: 34:be:5a:84:b2:89:71:ff:db:df:38:5a:a8:26:53:aa:02:e4: 9c:84:f0:55:7f:1e:a1:39:38:80:2d:93:83:c0:dd:2b:8a:e0: 81:58:3f:84:55:1a:77:0c:6b:36:88:e0:24:64:dd:17:c7:7f: 6d:e8:fc:d0:92:43:eb:12:80:cd:08:e4:5b:f9:12:8a:94:42: 9a:ed:39:e3:1c:ef:b8:bf:04:ac:a3:3d:6f:47:fb:06:49:66: bb:90:3b:7f:e2:f0:42:78:d2:4e:8f:b3:70:bb:e6:6d:31:d8: 35:56:92:6d:ac:1c:38:81:79:23:2f:d5:1f:66:5e:ca:5d:13: 38:3c:15:24:ff:38:d3:cf:52:4f:62:de:04:f4:5f:66:85:39: bf:f4:95:ba:cc:4f:ce:e1:14:ce:35:e3:8a:9e:68:a8:0c:22: 5c:2c:da:95:cc:eb:c0:a7:50:ab:d5:12:c2:5f:b6:1d:75:24: 34:b3:3c:39 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE6eqDl/Sizk2uiSOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyNTIwNDUxMVoXDTI4MTAyNzIwNDUxMVowLzEtMCsGA1UEAxMk MDQ3MjM3NDktZmViMS00ZGE1LWFjMjEtYmE4OWFkMWQwNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/sQ+501SLEnMWE0CvyT8/3W7SGzp4cwTKlH hYODE7KZPlRKm1BdrEEMRQEvjCdd3/bPXoyKBcIpTvjYhrv9eOnVKc7r6MjV4pqp 4JrWKHFH+vpyKa2tCQgXYcyH7u6d3X5O93nSPCCwholMckTWi2vuYskiLKxq+jNA TJgjZo40mNSTXXiRfigczvbHqo9YHOTxMmHRanuCNubKHp5rXfOxuDVapkQt+YTs p+rHcryLv55Z2YgM50xrwCne95YBUVNPW5if4DSp3OvEy60dwfrfXkFkNxoX9NIm fNHltyhr+i4vv4ofk375EAuhDDPeTvLeuxcmESob834RCvK6fwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFGAoMrN+PQzOqflRSMOOvedHV+xLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQxZDA1N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA0NzIzNzQ5LWZlYjEtNGRhNS1h YzIxLWJhODlhZDFkMDU3ZS8wNDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQx ZDA1N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAQX/BADBAV8xqADBAWidmAwDQQCAAIwBwMFACYF 60AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhWuMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAANJnN+C14kY moA1VO+GskXmjUwp11glBJKzRpMzHyxk6TcegJ1r9NcP5jFmmoA08qZIpn+f5IMT u/V1nMh5yO6OXvpE63Me1zS+WoSyiXH/2984WqgmU6oC5JyE8FV/HqE5OIAtk4PA 3SuK4IFYP4RVGncMazaI4CRk3RfHf23o/NCSQ+sSgM0I5Fv5EoqUQprtOeMc77i/ BKyjPW9H+wZJZruQO3/i8EJ40k6Ps3C75m0x2DVWkm2sHDiBeSMv1R9mXspdEzg8 FST/ONPPUk9i3gT0X2aFOb/0lbrMT87hFM4144qeaKgMIlws2pXM68CnUKvVEsJf th11JDSzPDk= -----END CERTIFICATE-----Generated at Tue Aug 25 22:13:48 2026 by rpki-client