$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer File: 4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer (raw, json) Hash identifier: 5qNfwDssQVwZ1KkSbPQxNanRpPCDFnezaEgnbohwe7U= Subject key identifier: 12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584ECE94F82940C8831FC0138200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Aug 2026 00:45:11 +0000 Certificate not after: Tue 14 Nov 2028 01:45:11 +0000 Subordinate resources: IP: 23.185.120.0/24 IP: 2602:f85c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ce:94:f8:29:40:c8:83:1f:c0:13:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 12 00:45:11 2026 GMT Not After : Nov 14 01:45:11 2028 GMT Subject: CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:48:34:f2:29:1c:ce:4d:f2:1b:f3:4f:aa:e8: f0:d7:41:92:20:80:d5:97:38:dc:69:ee:14:fd:fd: 4a:d4:a5:01:8a:18:44:5a:0c:4a:05:17:20:ec:08: 69:b3:9a:11:22:fe:9d:93:f2:db:fc:b3:c4:89:22: aa:dd:07:b2:b7:40:dd:1b:61:79:2c:28:e9:a4:ea: ab:aa:57:ba:32:c9:45:e7:30:f0:e4:75:e8:b8:57: 63:43:e3:ee:7d:0a:35:82:a3:49:06:44:a0:bb:42: 2d:c2:b6:04:9e:e5:2d:26:b3:09:e2:09:c6:9a:41: 19:42:bd:7e:a8:6e:bf:97:90:e3:e1:0f:de:8c:2c: 64:0f:c9:24:92:8d:bf:9c:e6:4b:22:1e:e2:d8:ff: b4:73:92:9f:64:85:77:81:f7:55:14:d5:e2:65:c7: 9d:00:45:b0:c7:86:a8:50:70:d6:a8:88:92:eb:57: 7a:44:45:68:da:e1:e5:d2:c8:13:e4:2f:2d:23:75: 07:23:fd:a7:e6:92:13:9d:fc:0d:fb:cb:ca:0f:bc: 6c:43:bd:88:a0:2f:ec:a3:9c:58:ac:76:e9:a2:76: 8d:5e:2e:45:63:f2:ba:35:b9:8b:06:d9:24:5e:60: bd:d7:fe:f0:75:8c:92:bf:3e:c3:9c:8b:d9:79:18: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.185.120.0/24 IPv6: 2602:f85c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:da:d9:5c:a9:17:8d:8f:4d:09:92:a2:35:20:c2:b3:ce:e6: 66:e4:28:01:1d:25:b9:ce:ae:df:a5:4c:eb:fb:59:3c:8f:e1: 70:d2:d9:08:42:ba:f6:4a:4f:6d:61:78:f0:03:42:88:cf:1f: 6a:89:78:6b:a0:e6:60:e4:67:fc:41:fa:0b:35:7f:58:d0:a9: c8:e2:b3:d4:98:77:4e:3f:0a:ef:d4:0e:e1:77:e3:1b:2b:9d: 0a:85:7e:15:68:3f:47:a7:c7:6d:ab:d0:bf:03:10:da:2f:e6: e6:00:83:6f:33:01:59:f1:08:e2:52:b3:3a:d0:45:f1:bf:09: 2c:94:95:91:49:26:cc:13:32:1e:f3:1b:58:78:f9:91:7b:41: 5a:5e:3a:05:92:9f:b8:99:a5:47:82:b2:5c:9c:da:d9:92:80: ec:43:ab:24:78:a6:92:5b:10:09:90:6e:3f:d8:02:df:57:8b: a3:a1:e7:60:4d:c8:2b:f9:11:a6:b2:d8:89:b6:25:5b:8a:7a: 93:25:d9:50:e5:25:b8:2a:08:aa:1f:9a:fa:37:30:5d:7c:1c: 5e:af:1f:ad:c8:c2:e3:89:d1:a2:de:28:d5:d7:52:a5:44:51: eb:ec:ae:a7:32:6e:03:a4:b6:28:8c:97:64:39:90:a1:2f:44: 3b:9f:5d:bc -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE7OlPgpQMiDH8ATggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgxMjAwNDUxMVoXDTI4MTExNDAxNDUxMVowLzEtMCsGA1UEAxMk NDMxNmJmYzktMmEyYy00MTM4LWFkNTgtYWI1MWQ3Y2MzN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkg08ikczk3yG/NPqujw10GSIIDVlzjcae4U /f1K1KUBihhEWgxKBRcg7Ahps5oRIv6dk/Lb/LPEiSKq3Qeyt0DdG2F5LCjppOqr qle6MslF5zDw5HXouFdjQ+PufQo1gqNJBkSgu0ItwrYEnuUtJrMJ4gnGmkEZQr1+ qG6/l5Dj4Q/ejCxkD8kkko2/nOZLIh7i2P+0c5KfZIV3gfdVFNXiZcedAEWwx4ao UHDWqIiS61d6REVo2uHl0sgT5C8tI3UHI/2n5pITnfwN+8vKD7xsQ72IoC/so5xY rHbponaNXi5FY/K6NbmLBtkkXmC91/7wdYySvz7DnIvZeRj4bwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBLiXDRfGzfR3IniFtEaB8C1vUzhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MzE2YmZjOS0yYTJjLTQxMzgtYWQ1OC1hYjUxZDdjYzM3ZDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQzMTZiZmM5LTJhMmMtNDEzOC1h ZDU4LWFiNTFkN2NjMzdkNi80MzE2YmZjOS0yYTJjLTQxMzgtYWQ1OC1hYjUxZDdj YzM3ZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXuXgwDgQCAAIwCAMGACYC+FwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACba2VypF42PTQmSojUgwrPO5mbkKAEdJbnOrt+lTOv7WTyP4XDS2QhCuvZKT21h ePADQojPH2qJeGug5mDkZ/xB+gs1f1jQqcjis9SYd04/Cu/UDuF34xsrnQqFfhVo P0enx22r0L8DENov5uYAg28zAVnxCOJSszrQRfG/CSyUlZFJJswTMh7zG1h4+ZF7 QVpeOgWSn7iZpUeCslyc2tmSgOxDqyR4ppJbEAmQbj/YAt9Xi6Oh52BNyCv5Eaay 2Im2JVuKepMl2VDlJbgqCKofmvo3MF18HF6vH63IwuOJ0aLeKNXXUqVEUevsrqcy bgOktiiMl2Q5kKEvRDufXbw= -----END CERTIFICATE-----Generated at Thu Sep 10 20:37:53 2026 by rpki-client