$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer File: 21f498b5-84f8-4255-a971-76e62e3a212d.cer (raw, json) Hash identifier: gXbFtH9mCpZhXryHKYhUjDihz48o1LH2dTYoqXjeBJk= Subject key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E507D13D31EAF3AF52DD6BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Jun 2026 20:45:12 +0000 Certificate not after: Fri 29 Sep 2028 20:45:12 +0000 Subordinate resources: AS: 29803 IP: 23.136.100.0/24 IP: 2602:f6ab::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:7d:13:d3:1e:af:3a:f5:2d:d6:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 27 20:45:12 2026 GMT Not After : Sep 29 20:45:12 2028 GMT Subject: CN=21f498b5-84f8-4255-a971-76e62e3a212d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:90:16:f4:0f:5c:66:36:22:6e:d2:64:3c: 2b:67:9d:76:1c:c7:c2:9c:55:0a:72:bc:33:b4:a3: 98:39:cc:0e:e9:d8:d8:74:d2:a6:0f:f9:63:22:5e: 95:a3:bf:46:55:87:4f:55:0d:f7:b6:14:eb:8f:06: c1:3a:2b:18:20:e2:cb:7d:66:3d:2e:fb:cc:a6:0c: ec:af:f3:ac:6d:2e:8e:8b:a3:e1:1b:bb:dd:20:2e: 4f:4c:94:42:61:dd:0a:cf:30:51:af:03:d1:ea:52: f6:ed:f1:70:fc:71:f3:dc:9b:0d:26:40:75:f0:1f: 00:9b:4b:bd:df:16:df:9b:df:83:9f:d3:0f:ac:11: 75:cf:3d:1c:c3:f6:e8:f4:4e:d3:ca:26:df:c8:2f: 1f:a0:69:49:df:a2:76:8b:33:31:51:4a:33:54:c1: 0a:3e:88:72:ea:33:a6:c6:1e:6d:c6:08:ed:96:6d: 13:7c:96:33:46:fc:91:20:01:44:82:78:61:8e:97: 31:53:5b:0c:d0:8c:97:39:71:28:23:4e:95:e2:31: a1:ea:47:cf:b2:df:9a:98:55:1d:bd:8a:25:99:d0: a5:76:8c:6b:cf:57:56:da:f3:18:4b:3d:d7:72:4f: 9f:3a:62:d7:46:ff:1a:ac:38:26:c1:c4:30:71:67: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.100.0/24 IPv6: 2602:f6ab::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:77:08:3c:c3:84:f3:54:3f:b8:d6:ab:1b:9e:e6:89:95:a3: 96:36:d2:76:ab:f6:aa:12:13:25:72:75:ee:f6:ee:1c:1a:cb: 1b:40:dd:b4:e1:77:96:13:b5:8f:fc:cb:db:e9:31:8a:11:3e: 2e:66:00:81:fb:7b:69:d9:30:68:77:7f:eb:84:11:e1:48:3c: b2:f0:15:d6:5e:b0:30:d1:c8:fc:66:d0:13:be:5e:67:f5:e6: 1f:8a:88:5f:a7:07:53:ab:55:c3:8c:fa:70:01:3e:a2:ef:fa: ed:30:a2:37:80:62:c8:19:17:55:ff:c7:84:28:fa:fd:6a:ae: 82:e1:93:7d:5b:2b:8e:7a:0f:71:14:8e:34:d4:ec:50:25:14: 9a:f6:1b:6b:ec:92:8b:fd:78:d7:b9:c2:bb:88:02:eb:c1:d3: 0a:71:61:e5:16:14:e3:c1:da:35:2d:98:0d:39:67:d4:05:f9: 06:e5:d3:b6:ee:03:90:c0:5d:e0:01:49:39:73:7e:4c:2c:89: ba:80:2f:cf:6b:02:5d:b6:39:8e:42:bb:b1:f6:48:ea:40:c4: 54:e8:42:28:c4:04:11:9c:f2:e6:eb:42:79:4c:91:98:e6:9c: d7:ce:7d:15:8e:4e:2d:db:ad:62:f4:b5:7f:d2:a9:87:98:c6: 84:0d:bd:e8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5QfRPTHq869S3WvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYyNzIwNDUxMloXDTI4MDkyOTIwNDUxMlowLzEtMCsGA1UEAxMk MjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2EyMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUeQFvQPXGY2Im7SZDwrZ512HMfCnFUKcrwz tKOYOcwO6djYdNKmD/ljIl6Vo79GVYdPVQ33thTrjwbBOisYIOLLfWY9LvvMpgzs r/OsbS6Oi6PhG7vdIC5PTJRCYd0KzzBRrwPR6lL27fFw/HHz3JsNJkB18B8Am0u9 3xbfm9+Dn9MPrBF1zz0cw/bo9E7TyibfyC8foGlJ36J2izMxUUozVMEKPohy6jOm xh5txgjtlm0TfJYzRvyRIAFEgnhhjpcxU1sM0IyXOXEoI06V4jGh6kfPst+amFUd vYolmdCldoxrz1dW2vMYSz3Xck+fOmLXRv8arDgmwcQwcWf1aQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJoEffM4hO+d220g2SCtXdQGZXfdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIxZjQ5OGI1LTg0ZjgtNDI1NS1h OTcxLTc2ZTYyZTNhMjEyZC8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUz YTIxMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiGQwDgQCAAIwCAMGACYC9qsAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnRrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADt3CDzDhPNUP7jWqxue5omVo5Y2 0nar9qoSEyVyde727hwayxtA3bThd5YTtY/8y9vpMYoRPi5mAIH7e2nZMGh3f+uE EeFIPLLwFdZesDDRyPxm0BO+Xmf15h+KiF+nB1OrVcOM+nABPqLv+u0wojeAYsgZ F1X/x4Qo+v1qroLhk31bK456D3EUjjTU7FAlFJr2G2vskov9eNe5wruIAuvB0wpx YeUWFOPB2jUtmA05Z9QF+Qbl07buA5DAXeABSTlzfkwsibqAL89rAl22OY5Cu7H2 SOpAxFToQijEBBGc8ubrQnlMkZjmnNfOfRWOTi3brWL0tX/SqYeYxoQNveg= -----END CERTIFICATE-----Generated at Sat Jul 18 02:59:25 2026 by rpki-client