$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013.cer File: 582dd4a9-9d5e-4349-b4cb-fbb66b88b013.cer (raw, json) Hash identifier: 50aiJn1OgrQnNQ5q1iAmrYzMid8WMDDo28AT4jz/fSM= Subject key identifier: F8:D0:47:EB:9F:EE:0E:C4:99:12:81:50:9E:26:3F:A3:DE:2F:67:EC Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EE21FC35161E45CB0D8C13280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/582dd4a9-9d5e-4349-b4cb-fbb66b88b013.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Aug 2026 00:45:12 +0000 Certificate not after: Tue 21 Nov 2028 01:45:12 +0000 Subordinate resources: AS: 17023 IP: 158.106.224.0 -- 158.106.247.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:1f:c3:51:61:e4:5c:b0:d8:c1:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 19 00:45:12 2026 GMT Not After : Nov 21 01:45:12 2028 GMT Subject: CN=582dd4a9-9d5e-4349-b4cb-fbb66b88b013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:1e:5d:a6:c5:3f:bd:32:dd:12:5b:fe:fd: 29:0e:3b:8d:50:76:18:70:d7:a4:51:0a:87:2d:8e: e4:83:86:c5:c8:6f:31:5b:1f:64:b8:f1:28:d9:19: 5f:42:7c:af:e7:86:fb:72:9a:85:3b:47:e7:2b:3a: 61:ca:51:c3:2f:ac:3e:4c:1d:b2:ca:23:cc:bf:37: 01:b5:99:b0:70:83:f7:89:0d:c3:7c:a9:b0:f4:5f: a3:07:c8:d0:9d:50:af:a1:d3:46:ab:cc:35:1f:3c: 1f:24:ef:e8:87:db:3c:8b:9a:49:bb:ed:17:95:e8: b6:96:4e:c4:6f:c9:85:84:ed:b9:25:26:93:59:ca: 49:ca:b2:07:c1:35:9d:07:a6:c7:bc:91:c1:4e:b2: 6e:6c:32:3e:07:f9:7a:9e:36:c5:ba:f8:78:0a:50: e5:d4:8d:9e:20:b9:06:d9:37:73:28:c6:c0:ac:53: e4:d8:cf:80:0e:58:1b:7e:57:d3:a8:a6:a5:49:3f: 90:9c:9d:fb:66:7d:70:89:40:64:53:cc:cb:76:f3: 20:da:3b:92:39:3d:b2:6e:6f:99:05:59:04:0a:94: f6:00:5c:cc:cd:17:79:f0:19:87:fd:5f:ae:75:f5: 61:57:c8:fa:86:45:ce:9d:04:82:e7:c8:62:99:81: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D0:47:EB:9F:EE:0E:C4:99:12:81:50:9E:26:3F:A3:DE:2F:67:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/582dd4a9-9d5e-4349-b4cb-fbb66b88b013.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 158.106.224.0-158.106.247.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17023 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1e:7c:02:fd:35:1d:84:49:9d:e0:e3:37:78:2c:fe:59:2d: d5:f5:55:76:dd:52:d7:60:a5:55:9e:35:b9:de:4e:8b:21:fa: de:c7:00:a1:d9:c9:53:44:ce:90:05:89:7b:5d:41:0f:9b:81: f7:92:0e:1e:20:08:a2:71:79:45:0e:b4:b8:2d:ef:37:91:12: 9f:ad:b0:e5:90:36:94:20:ea:1e:9a:a8:a2:91:da:c7:81:7f: fa:ec:f7:c2:74:1d:f6:6a:19:b5:ae:98:a7:31:54:14:27:68: 94:25:df:69:df:19:cb:1c:21:b0:cd:24:4e:a5:79:74:1c:0d: 09:2f:55:89:25:a7:25:45:42:fd:03:5b:ae:f9:5f:6f:19:6f: 45:53:f6:71:9d:20:58:58:89:23:b5:8c:64:de:5c:98:e0:c2: a7:9a:6d:5f:77:56:c3:c3:70:54:f1:3e:63:da:e9:bb:ae:0a: 32:b8:b2:b8:cb:14:67:5c:17:f3:f5:a7:b9:44:c8:9a:ba:67: 4e:5e:88:2b:f0:fb:47:b2:c9:bf:bb:f3:cd:f7:bc:89:a7:d0: 5a:1a:80:4a:86:c5:f5:74:76:26:6c:ce:e1:fb:b2:20:d5:f1: e3:a7:3f:77:b6:c5:61:af:11:93:83:97:9f:46:5d:6d:61:0b: 56:b1:0b:be -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWE7iH8NRYeRcsNjBMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgxOTAwNDUxMloXDTI4MTEyMTAxNDUxMlowLzEtMCsGA1UEAxMk NTgyZGQ0YTktOWQ1ZS00MzQ5LWI0Y2ItZmJiNjZiODhiMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSQeXabFP70y3RJb/v0pDjuNUHYYcNekUQqH LY7kg4bFyG8xWx9kuPEo2RlfQnyv54b7cpqFO0fnKzphylHDL6w+TB2yyiPMvzcB tZmwcIP3iQ3DfKmw9F+jB8jQnVCvodNGq8w1HzwfJO/oh9s8i5pJu+0Xlei2lk7E b8mFhO25JSaTWcpJyrIHwTWdB6bHvJHBTrJubDI+B/l6njbFuvh4ClDl1I2eILkG 2TdzKMbArFPk2M+ADlgbflfTqKalST+QnJ37Zn1wiUBkU8zLdvMg2juSOT2ybm+Z BVkECpT2AFzMzRd58BmH/V+udfVhV8j6hkXOnQSC58himYFt6wIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFPjQR+uf7g7EmRKBUJ4mP6PeL2fsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 ODJkZDRhOS05ZDVlLTQzNDktYjRjYi1mYmI2NmI4OGIwMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzU4MmRkNGE5LTlkNWUtNDM0OS1i NGNiLWZiYjY2Yjg4YjAxMy81ODJkZDRhOS05ZDVlLTQzNDktYjRjYi1mYmI2NmI4 OGIwMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBZ5q4AMEA55q8DAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgJCfzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGHnwC/TUdhEmd4OM3eCz+WS3V9VV23VLXYKVV njW53k6LIfrexwCh2clTRM6QBYl7XUEPm4H3kg4eIAiicXlFDrS4Le83kRKfrbDl kDaUIOoemqiikdrHgX/67PfCdB32ahm1rpinMVQUJ2iUJd9p3xnLHCGwzSROpXl0 HA0JL1WJJaclRUL9A1uu+V9vGW9FU/ZxnSBYWIkjtYxk3lyY4MKnmm1fd1bDw3BU 8T5j2um7rgoyuLK4yxRnXBfz9ae5RMiaumdOXogr8PtHssm/u/PN97yJp9BaGoBK hsX1dHYmbM7h+7Ig1fHjpz93tsVhrxGTg5efRl1tYQtWsQu+ -----END CERTIFICATE-----Generated at Tue Aug 25 15:41:27 2026 by rpki-client