$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4.cer File: 52ec79e3-ffbe-409c-bf98-0026d97ea4a4.cer (raw, json) Hash identifier: BC4S3HcVOICj5eolbWLEXQMHwcBON9BGcysS77uw9GY= Subject key identifier: CC:9D:29:84:C9:0F:72:27:BE:12:D6:67:B9:93:A3:11:B3:88:54:27 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB574D08CD189343F3EA0B100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/52ec79e3-ffbe-409c-bf98-0026d97ea4a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Aug 2026 00:45:11 +0000 Certificate not after: Sun 05 Nov 2028 00:45:11 +0000 Subordinate resources: AS: 14821 IP: 45.58.0.0/20 IP: 208.72.36.0/22 IP: 2604:e7c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:74:d0:8c:d1:89:34:3f:3e:a0:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 3 00:45:11 2026 GMT Not After : Nov 5 00:45:11 2028 GMT Subject: CN=52ec79e3-ffbe-409c-bf98-0026d97ea4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:dc:96:b9:cf:3d:01:f0:77:34:4f:b6:b3: f7:57:21:61:a4:24:51:27:f1:0d:35:12:0f:c7:2c: 84:31:6c:76:77:ca:cd:1d:9e:50:2b:0f:bf:97:20: 31:f0:93:9b:ab:71:1f:5a:0f:7e:84:5b:63:d4:52: 4c:a7:c1:10:e1:e0:39:4a:7e:d3:b0:4f:19:91:06: fe:68:2b:35:f6:ae:57:79:11:0f:37:e5:66:14:22: 6f:a1:84:b4:dd:00:18:2c:57:db:16:d5:64:e4:72: 0e:24:f1:7a:64:b3:de:e6:71:3e:ff:d1:bf:d1:8e: e1:55:8c:61:21:58:79:ea:fb:a5:56:b4:39:01:61: 34:ff:97:5c:22:eb:c1:76:4c:43:6a:37:aa:05:a7: 50:9f:a7:4b:81:9a:47:d0:db:ba:f3:6b:a1:db:cc: 62:ca:2c:8b:db:72:2c:fe:14:3c:bf:3e:95:ec:b7: a6:c0:74:b0:5f:b8:5b:2f:9c:aa:68:d5:53:ca:28: d2:3b:17:1f:9c:96:63:17:ab:94:f7:95:48:f0:6b: f5:a0:c4:53:a5:87:3e:85:f6:0c:4c:68:b4:dd:89: 7c:f8:11:2f:fa:85:2a:0b:4f:d1:7d:e4:79:25:20: 18:db:1d:06:6f:c9:42:75:07:c9:25:05:e8:1c:4d: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9D:29:84:C9:0F:72:27:BE:12:D6:67:B9:93:A3:11:B3:88:54:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52ec79e3-ffbe-409c-bf98-0026d97ea4a4/52ec79e3-ffbe-409c-bf98-0026d97ea4a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 45.58.0.0/20 208.72.36.0/22 IPv6: 2604:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14821 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c8:f4:ab:cf:8e:10:88:f5:63:67:f0:e5:4c:b6:a0:2b:39: 9e:a8:1b:57:1e:8e:e2:5d:49:92:d2:14:ac:23:4f:2b:f3:2b: 20:ac:91:b4:cf:90:06:eb:a9:9d:0d:15:c4:2d:38:74:c8:41: 68:28:ea:ff:87:99:d4:77:3f:58:de:a1:d7:60:ca:8a:37:66: 59:c0:8b:56:ec:e6:ea:79:90:4c:9b:6f:c7:1a:6d:d2:79:19: b5:4a:04:da:cd:5b:54:f8:75:71:be:28:ef:30:75:06:4e:74: 5a:32:ff:fd:95:91:20:c1:b8:f4:97:89:11:48:6f:c8:93:48: 82:68:3e:4d:98:f0:83:91:0a:eb:e2:76:b9:3d:b9:d1:a1:71: 46:4c:21:3d:fe:35:4c:79:8c:35:5c:77:f5:8b:ef:9b:aa:35: c0:2f:bc:20:12:de:37:cb:3c:ad:b3:47:4b:7c:7b:4c:6b:04: 1f:71:43:0a:bb:b8:4a:4d:2f:70:a6:bc:93:0b:aa:95:fa:82: 5b:61:05:8a:ff:c3:eb:ad:9d:cf:5c:81:5f:c3:e9:29:88:c6: d9:b5:0f:80:93:ef:d8:07:69:88:34:1b:39:06:0d:be:e8:b6: f5:f0:41:e6:df:fb:b2:0a:54:92:3f:6b:bd:7f:92:e5:3d:4f: e8:78:f5:94 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE61dNCM0Yk0Pz6gsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwMzAwNDUxMVoXDTI4MTEwNTAwNDUxMVowLzEtMCsGA1UEAxMk NTJlYzc5ZTMtZmZiZS00MDljLWJmOTgtMDAyNmQ5N2VhNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsDclrnPPQHwdzRPtrP3VyFhpCRRJ/ENNRIP xyyEMWx2d8rNHZ5QKw+/lyAx8JObq3EfWg9+hFtj1FJMp8EQ4eA5Sn7TsE8ZkQb+ aCs19q5XeREPN+VmFCJvoYS03QAYLFfbFtVk5HIOJPF6ZLPe5nE+/9G/0Y7hVYxh IVh56vulVrQ5AWE0/5dcIuvBdkxDajeqBadQn6dLgZpH0Nu682uh28xiyiyL23Is /hQ8vz6V7LemwHSwX7hbL5yqaNVTyijSOxcfnJZjF6uU95VI8Gv1oMRTpYc+hfYM TGi03Yl8+BEv+oUqC0/RfeR5JSAY2x0Gb8lCdQfJJQXoHE2v7wIDAQABo4IELzCC BCswHQYDVR0OBBYEFMydKYTJD3InvhLWZ7mToxGziFQnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 MmVjNzllMy1mZmJlLTQwOWMtYmY5OC0wMDI2ZDk3ZWE0YTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzUyZWM3OWUzLWZmYmUtNDA5Yy1i Zjk4LTAwMjZkOTdlYTRhNC81MmVjNzllMy1mZmJlLTQwOWMtYmY5OC0wMDI2ZDk3 ZWE0YTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAQtOgADBALQSCQwDQQCAAIwBwMFACYE58AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICOeUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN8j0q8+OEIj1Y2fw5Uy2 oCs5nqgbVx6O4l1JktIUrCNPK/MrIKyRtM+QBuupnQ0VxC04dMhBaCjq/4eZ1Hc/ WN6h12DKijdmWcCLVuzm6nmQTJtvxxpt0nkZtUoE2s1bVPh1cb4o7zB1Bk50WjL/ /ZWRIMG49JeJEUhvyJNIgmg+TZjwg5EK6+J2uT250aFxRkwhPf41THmMNVx39Yvv m6o1wC+8IBLeN8s8rbNHS3x7TGsEH3FDCru4Sk0vcKa8kwuqlfqCW2EFiv/D662d z1yBX8PpKYjG2bUPgJPv2AdpiDQbOQYNvui29fBB5t/7sgpUkj9rvX+S5T1P6Hj1 lA== -----END CERTIFICATE-----Generated at Wed Aug 26 10:39:05 2026 by rpki-client