$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer File: 4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer (raw, json) Hash identifier: iHuvm1MymUSuTMNmm4ZBwRCsNhsh8sgmLTyGAmJMeKQ= Subject key identifier: 19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB83F7ED626BD97ACA9E42D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Aug 2026 00:45:11 +0000 Certificate not after: Mon 06 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 11753 AS: 25707 IP: 204.11.240.0/22 IP: 216.220.160.0/20 IP: 2604:b9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:3f:7e:d6:26:bd:97:ac:a9:e4:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 4 00:45:11 2026 GMT Not After : Nov 6 01:45:11 2028 GMT Subject: CN=4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:12:7d:a4:dc:69:51:90:70:c6:88:c8:fb: 33:45:0f:f4:34:b9:25:ce:89:f2:ab:5d:91:57:0f: c2:11:1d:6b:f8:e1:b4:35:76:f6:64:06:db:a4:b4: 92:43:6c:fd:a9:27:4f:98:76:94:21:d4:c7:b7:77: fc:e2:fa:00:d7:45:01:e2:2c:38:d5:94:9e:cd:74: ac:70:75:b0:58:97:11:bc:88:6f:25:f0:94:a3:ea: d1:2e:f6:0a:12:66:08:6e:7a:d9:f9:f5:39:b1:60: b6:4d:72:b0:84:8d:ab:0e:53:ca:23:c8:6c:fe:9d: 2c:cb:c3:d4:55:23:8f:ae:cd:b2:b7:94:5f:3d:4c: e9:ac:a9:92:19:6d:cf:fd:d4:58:ae:1e:76:9c:db: 4e:3f:65:90:ab:8c:c4:18:9f:19:03:14:7d:cb:08: 35:c6:34:9e:5a:78:c0:fd:a1:87:d4:fd:56:b2:89: 38:ed:34:8e:ea:02:64:f7:5c:fc:02:fd:b4:bd:3a: 86:d5:53:66:88:1c:2a:56:c9:55:ed:c9:ac:5e:5b: 37:2b:56:c6:84:9f:3b:18:bf:32:32:85:a2:e9:0c: 04:d1:63:ad:88:da:53:21:22:dc:51:8f:35:8c:84: f3:c1:a0:d4:a2:8e:a6:1c:eb:1c:a6:53:b0:6b:fb: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.240.0/22 216.220.160.0/20 IPv6: 2604:b9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11753 25707 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bc:ed:1d:a8:ab:7a:22:2f:ed:32:d2:ac:71:51:6e:fb:17: 8b:0e:8e:dc:45:8d:26:f8:dc:c7:92:7e:f6:02:ae:ab:04:5c: f8:2c:2c:76:3d:be:83:57:a4:ee:6f:fe:ef:d6:f3:6b:b4:c5: 9b:74:97:cb:15:cf:b8:f5:b1:2d:fc:39:48:86:e2:ea:5b:7e: e3:af:57:a2:fb:13:fd:e8:57:31:bf:39:52:47:21:08:3c:50: 65:51:a4:a6:1d:e4:35:bb:15:3d:82:b6:bf:9f:78:bb:63:56: db:61:e9:ba:0e:44:c8:92:6d:ff:09:de:44:2b:b3:cd:fe:0f: b1:0a:0e:d0:76:fc:a2:f3:d9:b0:74:a2:94:0e:db:0e:08:b0: a9:10:90:ea:9b:c6:44:2d:3c:06:f0:0d:e3:72:08:7b:03:12: 35:ba:80:97:9c:bf:d8:6d:9a:c3:39:4f:81:c7:e5:5b:75:13: 6b:da:7b:16:6f:5a:b4:94:c5:d9:1d:d8:36:e2:d8:c4:2e:97: d8:06:a8:8a:d4:d7:f9:fb:a5:17:46:ec:18:77:90:21:c1:4c: f2:4d:41:07:3a:4d:cb:9d:96:61:74:09:27:a4:3c:c9:76:93: 3e:53:2e:a7:ca:00:97:31:db:91:6c:46:a4:06:b9:9d:ed:99: 5d:74:3d:85 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWE64P37WJr2XrKnkLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwNDAwNDUxMVoXDTI4MTEwNjAxNDUxMVowLzEtMCsGA1UEAxMk NGFhM2U5ZGMtYWQ1ZS00YmViLWJjYTEtOWEyMTAyZWJjZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy8SfaTcaVGQcMaIyPszRQ/0NLklzonyq12R Vw/CER1r+OG0NXb2ZAbbpLSSQ2z9qSdPmHaUIdTHt3f84voA10UB4iw41ZSezXSs cHWwWJcRvIhvJfCUo+rRLvYKEmYIbnrZ+fU5sWC2TXKwhI2rDlPKI8hs/p0sy8PU VSOPrs2yt5RfPUzprKmSGW3P/dRYrh52nNtOP2WQq4zEGJ8ZAxR9ywg1xjSeWnjA /aGH1P1Wsok47TSO6gJk91z8Av20vTqG1VNmiBwqVslV7cmsXls3K1bGhJ87GL8y MoWi6QwE0WOtiNpTISLcUY81jITzwaDUoo6mHOscplOwa/u1rQIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFBmUxn79Z7YgCReUl9i1N8i7i9MDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 YWEzZTlkYy1hZDVlLTRiZWItYmNhMS05YTIxMDJlYmNmNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzRhYTNlOWRjLWFkNWUtNGJlYi1i Y2ExLTlhMjEwMmViY2Y3My80YWEzZTlkYy1hZDVlLTRiZWItYmNhMS05YTIxMDJl YmNmNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALMC/ADBATY3KAwDQQCAAIwBwMFACYEucAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICLekCAmRrMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJS87R2oq3oiL+0y 0qxxUW77F4sOjtxFjSb43MeSfvYCrqsEXPgsLHY9voNXpO5v/u/W82u0xZt0l8sV z7j1sS38OUiG4upbfuOvV6L7E/3oVzG/OVJHIQg8UGVRpKYd5DW7FT2Ctr+feLtj Vtth6boORMiSbf8J3kQrs83+D7EKDtB2/KLz2bB0opQO2w4IsKkQkOqbxkQtPAbw DeNyCHsDEjW6gJecv9htmsM5T4HH5Vt1E2vaexZvWrSUxdkd2Dbi2MQul9gGqIrU 1/n7pRdG7Bh3kCHBTPJNQQc6TcudlmF0CSekPMl2kz5TLqfKAJcx25FsRqQGuZ3t mV10PYU= -----END CERTIFICATE-----Generated at Tue Aug 25 21:56:53 2026 by rpki-client