$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857.cer File: 5b69689e-73ec-4bfc-a419-09f12ac26857.cer (raw, json) Hash identifier: N9SW2N6jTdBUCVcU0b3yOi91qQXXH+Bg66E+LIRfFSA= Subject key identifier: 7C:1F:00:4D:B7:AB:06:1E:99:2F:E7:EC:F8:96:44:04:6A:4C:01:56 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EED4A7F48DB1F1AB431138880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/5b69689e-73ec-4bfc-a419-09f12ac26857.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Aug 2026 00:45:11 +0000 Certificate not after: Sat 25 Nov 2028 01:45:11 +0000 Subordinate resources: IP: 208.84.96.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:4a:7f:48:db:1f:1a:b4:31:13:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 23 00:45:11 2026 GMT Not After : Nov 25 01:45:11 2028 GMT Subject: CN=5b69689e-73ec-4bfc-a419-09f12ac26857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:70:b0:62:11:90:55:3e:0e:86:72:4c:d7: 2f:93:19:83:2b:ac:1c:de:d3:2c:d3:48:79:16:63: 1f:40:cb:fb:49:33:e8:66:05:4e:1e:53:a0:dd:46: 46:56:4d:a3:e4:32:a5:fc:2d:e6:d5:8e:19:5c:9d: fe:18:6c:38:43:e0:84:7e:dd:65:2e:34:c5:e2:91: 3a:89:89:96:0d:36:da:03:a4:9f:2a:9f:e6:3d:29: 0f:51:2f:66:b4:d4:d7:ee:2b:25:ba:34:cd:74:7b: 3d:0a:80:66:af:fc:23:ca:ac:db:4b:da:f2:f6:f4: 23:b3:82:7d:a8:f1:72:74:b4:41:ad:21:54:51:31: 43:6f:57:23:60:47:ec:5b:35:7d:a8:98:54:90:76: 8e:22:b3:15:75:95:c9:93:c6:10:a5:01:a2:4a:7c: e5:53:e6:ca:94:17:01:09:81:42:58:b3:5d:f8:9c: 81:5d:c9:7a:95:de:9b:99:00:84:9e:b9:0e:cc:36: f3:ff:2c:ec:73:41:14:de:99:c0:bc:19:b7:dc:2b: 09:0d:9a:a9:c8:b1:95:05:a5:fd:8e:78:d8:01:50: 1f:9f:ad:7f:61:07:28:4c:8c:53:df:1b:6a:07:52: 86:f3:3f:f1:72:e5:e4:89:80:cb:7f:7c:22:73:fb: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1F:00:4D:B7:AB:06:1E:99:2F:E7:EC:F8:96:44:04:6A:4C:01:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/5b69689e-73ec-4bfc-a419-09f12ac26857.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 208.84.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fb:b5:54:cd:32:25:6f:6d:66:20:09:4e:96:4d:e1:5c:7f: 36:bd:11:5e:72:b2:7e:39:d1:7f:1d:36:08:e1:f8:1c:37:d9: 5a:95:c3:c1:0f:50:a4:9b:db:35:04:f7:42:c1:92:e8:09:7e: dd:e3:16:e3:ca:35:7e:6c:e2:07:6c:b8:d1:bd:b8:40:8a:f8: 86:81:4e:65:59:58:3d:a5:57:5f:03:90:e9:46:98:57:d7:97: 0e:ec:61:c4:7c:04:ff:03:60:dd:3a:52:d9:65:09:50:b8:4c: 95:67:72:c5:7e:54:4f:5d:72:1e:5e:8b:a5:4e:05:e4:46:d0: 27:92:22:61:7b:0c:35:ba:c5:e2:0d:57:d4:f7:96:00:a1:8f: 5e:a0:84:31:1d:b6:39:2b:e2:24:83:cd:f4:ba:58:ae:6c:44: 93:3f:6c:f0:74:47:c8:32:e4:a9:8e:81:f2:ef:1a:46:bc:16: 98:48:6c:29:91:4d:79:6c:27:59:b8:cb:ea:d7:c1:2c:79:a4: 99:6c:4f:38:59:4b:af:f6:56:e3:b5:c8:4a:4f:50:c1:a0:b2: 03:9c:c6:df:82:a3:e6:44:99:42:0c:9b:77:cf:de:07:62:22: 4b:b2:cf:f6:6b:25:b0:b6:a7:51:dd:6f:87:c9:3c:26:ab:d2: cc:09:2d:7f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7tSn9I2x8atDETiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyMzAwNDUxMVoXDTI4MTEyNTAxNDUxMVowLzEtMCsGA1UEAxMk NWI2OTY4OWUtNzNlYy00YmZjLWE0MTktMDlmMTJhYzI2ODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwghwsGIRkFU+DoZyTNcvkxmDK6wc3tMs00h5 FmMfQMv7STPoZgVOHlOg3UZGVk2j5DKl/C3m1Y4ZXJ3+GGw4Q+CEft1lLjTF4pE6 iYmWDTbaA6SfKp/mPSkPUS9mtNTX7islujTNdHs9CoBmr/wjyqzbS9ry9vQjs4J9 qPFydLRBrSFUUTFDb1cjYEfsWzV9qJhUkHaOIrMVdZXJk8YQpQGiSnzlU+bKlBcB CYFCWLNd+JyBXcl6ld6bmQCEnrkOzDbz/yzsc0EU3pnAvBm33CsJDZqpyLGVBaX9 jnjYAVAfn61/YQcoTIxT3xtqB1KG8z/xcuXkiYDLf3wic/sxaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHwfAE23qwYemS/n7PiWRARqTAFWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 YjY5Njg5ZS03M2VjLTRiZmMtYTQxOS0wOWYxMmFjMjY4NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzViNjk2ODllLTczZWMtNGJmYy1h NDE5LTA5ZjEyYWMyNjg1Ny81YjY5Njg5ZS03M2VjLTRiZmMtYTQxOS0wOWYxMmFj MjY4NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQVGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB/u1VM0yJW9tZiAJTpZN 4Vx/Nr0RXnKyfjnRfx02COH4HDfZWpXDwQ9QpJvbNQT3QsGS6Al+3eMW48o1fmzi B2y40b24QIr4hoFOZVlYPaVXXwOQ6UaYV9eXDuxhxHwE/wNg3TpS2WUJULhMlWdy xX5UT11yHl6LpU4F5EbQJ5IiYXsMNbrF4g1X1PeWAKGPXqCEMR22OSviJIPN9LpY rmxEkz9s8HRHyDLkqY6B8u8aRrwWmEhsKZFNeWwnWbjL6tfBLHmkmWxPOFlLr/ZW 47XISk9QwaCyA5zG34Kj5kSZQgybd8/eB2IiS7LP9mslsLanUd1vh8k8JqvSzAkt fw== -----END CERTIFICATE-----Generated at Sat Sep 5 07:38:08 2026 by rpki-client