$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer File: 65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer (raw, json) Hash identifier: yiEoS7lGDBvcIAX1hTliVpFAYGqr9DbZFjdNRWVGRGk= Subject key identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EAA4A144ED9F23B6A4088D560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jul 2026 00:45:11 +0000 Certificate not after: Wed 01 Nov 2028 00:45:11 +0000 Subordinate resources: AS: 30417 IP: 172.81.4.0/22 IP: 192.64.196.0/23 IP: 199.85.245.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:4a:14:4e:d9:f2:3b:6a:40:88:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 30 00:45:11 2026 GMT Not After : Nov 1 00:45:11 2028 GMT Subject: CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:b4:f0:07:de:67:20:fc:92:28:a9:12:df: c4:52:85:68:3d:69:26:a7:e4:71:34:97:eb:81:ec: 93:ee:06:0b:92:58:19:f3:3b:a7:42:17:b1:2c:47: 6e:cb:33:fd:5f:27:e2:f2:d4:91:0e:5a:eb:6b:06: 48:23:cb:32:ee:04:47:60:a1:bd:8a:3a:37:cc:bb: 0c:ec:bb:01:b4:52:6b:e3:95:bc:59:38:b4:3e:af: 8e:77:bc:9b:76:56:95:54:3a:c8:b6:d6:40:af:9d: 18:01:e0:13:7c:2c:47:9c:83:9e:e9:89:5c:71:25: b7:d7:ca:71:7d:19:71:ba:0d:bb:ed:e7:9d:76:2b: 6f:22:ff:7e:4b:f3:f8:ca:51:81:e1:a3:37:e1:89: 79:77:cf:75:86:1a:b7:f6:4c:7f:12:81:e5:27:f2: a8:64:bb:c2:6b:a8:ac:54:19:39:21:4b:60:db:29: 42:a7:55:7c:c6:5c:45:18:d4:60:01:07:4d:8b:d7: e6:20:d6:40:08:c7:09:54:5b:c3:a5:ce:c2:fa:f5: aa:1f:30:21:8f:2e:98:98:f9:05:ca:b8:19:06:75: ab:03:71:fd:a1:9b:07:dd:50:ed:b2:e2:f2:e1:2d: ff:27:95:1e:9d:19:08:0d:42:a0:d5:12:fe:c9:6f: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 172.81.4.0/22 192.64.196.0/23 199.85.245.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30417 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:82:fc:d5:a7:7f:1f:0e:19:b1:60:95:57:aa:86:d0:d8:f7: 40:1e:f7:89:48:b2:79:2b:a6:dd:cd:69:d8:8b:3f:c7:42:70: ac:98:d8:71:3b:5c:35:db:28:fb:b1:5a:1c:81:e2:fa:70:39: eb:6b:35:87:24:db:d2:b5:b4:83:99:0a:5b:07:c2:21:a6:97: 27:80:44:9e:e6:44:c1:e4:56:64:3c:79:0d:47:c2:59:c1:3e: f3:29:2f:60:b9:30:94:5a:40:80:35:da:05:17:d6:96:f1:96: 7f:00:df:40:2e:bf:4e:39:77:92:05:34:66:9d:c9:c7:6f:fc: fe:cc:9b:26:a4:01:4f:58:ff:6e:a5:e4:ad:b8:b0:d8:cb:bc: a0:35:55:fb:1c:d6:e8:93:2a:aa:0b:1d:5c:4d:93:44:00:d6: 5a:be:61:a0:bf:99:65:c7:f9:02:a3:0a:ed:20:ce:02:08:9c: 2e:b4:dc:6c:85:ce:df:1d:db:b5:e5:89:b3:a8:f4:7c:34:32: 66:1a:9c:27:57:b4:be:bd:c6:79:f8:ad:a8:b1:06:63:fd:c2: b3:17:2c:0d:a2:fb:1e:f6:f0:37:4d:8f:0d:7c:46:8b:31:48: 4c:73:92:b8:60:ea:3b:4d:a0:58:32:4a:6f:6e:94:da:fe:33: 10:ff:25:ac -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE6qShRO2fI7akCI1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDczMDAwNDUxMVoXDTI4MTEwMTAwNDUxMVowLzEtMCsGA1UEAxMk NjVkZjcyYTUtZjBkYS00YzY0LTk1M2EtMTVhNjJkNWNhM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidy08AfeZyD8kiipEt/EUoVoPWkmp+RxNJfr geyT7gYLklgZ8zunQhexLEduyzP9Xyfi8tSRDlrrawZII8sy7gRHYKG9ijo3zLsM 7LsBtFJr45W8WTi0Pq+Od7ybdlaVVDrIttZAr50YAeATfCxHnIOe6YlccSW318px fRlxug277eedditvIv9+S/P4ylGB4aM34Yl5d891hhq39kx/EoHlJ/KoZLvCa6is VBk5IUtg2ylCp1V8xlxFGNRgAQdNi9fmINZACMcJVFvDpc7C+vWqHzAhjy6YmPkF yrgZBnWrA3H9oZsH3VDtsuLy4S3/J5UenRkIDUKg1RL+yW/bqwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFMP37WsB42MnvJu6CfoLibSDz5ciMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1Y2EzYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY1ZGY3MmE1LWYwZGEtNGM2NC05 NTNhLTE1YTYyZDVjYTNiMC82NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1 Y2EzYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKsUQQDBAHAQMQDBADHVfUwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICdtEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcoL81ad/Hw4ZsWCVV6qG0Nj3QB73iUiy eSum3c1p2Is/x0JwrJjYcTtcNdso+7FaHIHi+nA562s1hyTb0rW0g5kKWwfCIaaX J4BEnuZEweRWZDx5DUfCWcE+8ykvYLkwlFpAgDXaBRfWlvGWfwDfQC6/Tjl3kgU0 Zp3Jx2/8/sybJqQBT1j/bqXkrbiw2Mu8oDVV+xzW6JMqqgsdXE2TRADWWr5hoL+Z Zcf5AqMK7SDOAgicLrTcbIXO3x3bteWJs6j0fDQyZhqcJ1e0vr3GefitqLEGY/3C sxcsDaL7HvbwN02PDXxGizFITHOSuGDqO02gWDJKb26U2v4zEP8lrA== -----END CERTIFICATE-----Generated at Sat Aug 15 09:37:35 2026 by rpki-client