$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer File: 5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer (raw, json) Hash identifier: cd3XmTutYoknwHmQbOPrlIr/Szm7TzjqPEalFVOYcD8= Subject key identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EC8FF9A08183FD13BEB336810 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Aug 2026 00:45:11 +0000 Certificate not after: Sun 12 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 401696 AS: 401701 IP: 23.138.12.0/24 IP: 2602:f673::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c8:ff:9a:08:18:3f:d1:3b:eb:33:68:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 10 00:45:11 2026 GMT Not After : Nov 12 01:45:11 2028 GMT Subject: CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:d1:a3:a8:84:ae:a3:72:5c:5c:e4:11:38: 0d:b4:7e:b4:49:3b:37:ce:5e:8e:48:a2:0e:8a:70: 63:67:8b:64:a4:ca:59:ac:be:63:67:fb:f6:80:82: 74:da:e3:f7:2b:2a:e4:9d:bd:fd:38:ab:90:d7:0f: a6:b2:24:bd:0e:24:83:53:7e:24:dc:32:6f:09:52: d5:13:6a:39:b2:2c:28:e1:bb:78:7e:87:79:5d:22: 36:87:dc:8b:ad:6a:31:53:7a:dc:5c:1c:54:bc:9a: 0a:d8:35:7f:6c:db:38:ac:23:82:7a:ef:f5:05:9a: 92:d3:54:43:a6:78:3f:e8:18:03:1e:ae:e2:6d:ae: 67:75:b4:fe:e4:f3:f3:07:78:05:ff:8e:b4:2a:9d: 32:0a:bf:29:06:79:da:93:71:52:bf:6d:94:e3:71: 13:96:c4:44:ec:03:6e:b1:55:d4:7d:78:db:b1:66: 0e:21:87:6a:b4:68:85:c4:6b:15:d1:ec:5d:7d:b4: 0f:ee:1f:0f:15:71:61:73:c4:cd:37:a5:c9:ca:5d: e7:e6:39:67:40:a1:19:08:4f:1e:3a:53:27:51:68: 92:ad:9d:7f:46:43:6d:59:1b:ba:96:b6:43:b2:25: aa:40:9a:88:3f:28:11:69:da:35:1f:4e:ee:1d:7a: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.12.0/24 IPv6: 2602:f673::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401696 401701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ba:43:a2:38:88:d5:9e:66:b3:8d:3a:89:51:12:15:55:7c: 92:98:fe:4d:5e:68:4e:2b:f5:ac:80:19:4b:b3:0e:bc:72:24: 7c:21:de:e5:6e:b2:72:2e:fb:cf:6c:a2:76:6b:7f:53:b4:f4: 88:5a:20:7e:9b:f8:b8:c2:89:61:7e:3f:9a:88:6e:07:2c:6f: a4:2a:18:a7:3e:99:1c:1c:a9:45:40:45:bf:dc:6b:4f:e9:90: 68:5c:27:2a:9d:69:9a:2e:b9:93:34:b4:0c:3b:2d:20:8f:38: 30:50:fd:3a:43:bf:53:c1:ec:9c:8d:40:2d:60:2b:b4:eb:b5: e6:9a:76:67:08:d1:82:89:79:59:b9:6a:b6:7f:e4:59:00:d7: 4d:ed:fd:34:f5:1e:95:f6:a3:96:7c:f5:34:3d:26:4b:6a:9d: 5d:5a:c3:ba:dd:96:ea:22:a0:be:9d:7c:5a:6f:48:ff:0f:49: 78:14:09:24:db:97:89:15:ca:bd:b6:0f:47:d5:18:c1:7d:53: 29:32:ea:7c:b2:cd:25:27:09:ff:a4:9a:2e:ba:d9:df:87:e9: aa:29:54:cc:02:b7:e5:be:d7:4c:d5:ba:10:66:de:0b:e4:e8: dc:ee:94:1c:3f:d7:ba:14:02:66:20:3a:ae:dd:6b:54:f6:9d: 0f:87:2d:50 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE7I/5oIGD/RO+szaBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgxMDAwNDUxMVoXDTI4MTExMjAxNDUxMVowLzEtMCsGA1UEAxMk NWI2ZTlmOWEtN2FiZC00MzZlLThlOTYtYzM0ODgyOWJhNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLvRo6iErqNyXFzkETgNtH60STs3zl6OSKIO inBjZ4tkpMpZrL5jZ/v2gIJ02uP3Kyrknb39OKuQ1w+msiS9DiSDU34k3DJvCVLV E2o5siwo4bt4fod5XSI2h9yLrWoxU3rcXBxUvJoK2DV/bNs4rCOCeu/1BZqS01RD png/6BgDHq7iba5ndbT+5PPzB3gF/460Kp0yCr8pBnnak3FSv22U43ETlsRE7ANu sVXUfXjbsWYOIYdqtGiFxGsV0exdfbQP7h8PFXFhc8TNN6XJyl3n5jlnQKEZCE8e OlMnUWiSrZ1/RkNtWRu6lrZDsiWqQJqIPygRado1H07uHXq73wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFN+6kBFofXhCENDMEj0vI///splWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 YjZlOWY5YS03YWJkLTQzNmUtOGU5Ni1jMzQ4ODI5YmE0ZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzViNmU5ZjlhLTdhYmQtNDM2ZS04 ZTk2LWMzNDg4MjliYTRlNC81YjZlOWY5YS03YWJkLTQzNmUtOGU5Ni1jMzQ4ODI5 YmE0ZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXigwwDgQCAAIwCAMGACYC9nMAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwYhIAIDBiElMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABa6Q6I4iNWeZrONOolR EhVVfJKY/k1eaE4r9ayAGUuzDrxyJHwh3uVusnIu+89sonZrf1O09IhaIH6b+LjC iWF+P5qIbgcsb6QqGKc+mRwcqUVARb/ca0/pkGhcJyqdaZouuZM0tAw7LSCPODBQ /TpDv1PB7JyNQC1gK7TrteaadmcI0YKJeVm5arZ/5FkA103t/TT1HpX2o5Z89TQ9 JktqnV1aw7rdluoioL6dfFpvSP8PSXgUCSTbl4kVyr22D0fVGMF9Uyky6nyyzSUn Cf+kmi662d+H6aopVMwCt+W+10zVuhBm3gvk6NzulBw/17oUAmYgOq7da1T2nQ+H LVA= -----END CERTIFICATE-----Generated at Tue Sep 1 05:20:57 2026 by rpki-client