$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer File: 6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer (raw, json) Hash identifier: zJnLAVXILGGCmL2DcoJ/i7ZnjYwfJQ7S8HVBTzB96qA= Subject key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E481D05EF4E325EA7E4B77DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jun 2026 20:45:11 +0000 Certificate not after: Tue 26 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 199.244.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:1d:05:ef:4e:32:5e:a7:e4:b7:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 24 20:45:11 2026 GMT Not After : Sep 26 20:45:11 2028 GMT Subject: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:44:47:93:8b:f8:91:e6:b4:a0:a5:e1:44: 9b:73:44:f2:2d:27:c9:44:6a:78:02:05:83:85:3e: 14:9e:d2:18:8d:5a:c9:27:08:29:2f:a9:11:a1:c7: 5f:c6:6b:24:24:4b:cf:4d:b0:62:ef:42:ed:6d:27: 7a:56:33:1d:cc:c0:4a:53:5c:d6:bf:12:0a:55:3e: 86:9f:f8:83:ae:23:6a:22:a1:cf:8f:1a:b5:63:ca: db:0d:e9:da:b5:e4:6f:9b:13:c6:24:cc:95:10:e6: d6:11:7a:8f:8d:d4:a6:cb:e0:9a:6d:8b:cf:db:31: 3c:9a:07:72:41:6b:4c:35:d1:7b:cd:b4:c1:67:67: a5:1e:86:4d:eb:f0:cd:26:e8:de:46:a5:18:26:43: 8b:55:d8:67:76:9c:14:7e:84:a7:be:4d:a0:4d:b6: 24:12:2c:9f:0d:bf:8b:b9:77:58:43:dd:dd:bc:a9: 09:06:4b:8e:ac:72:a6:b7:43:e6:49:92:42:96:39: 97:cb:78:a0:0a:ee:81:73:c8:3c:8c:31:15:b7:29: cd:4c:8d:bb:d3:14:41:54:94:8b:2a:cf:71:3f:ee: a0:e0:af:e2:99:01:47:7f:71:11:cc:75:1d:b9:d9: 32:8c:14:a6:56:cc:bf:ad:41:81:21:cd:8b:48:3b: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.244.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2c:cf:af:48:e9:5d:b5:0f:e8:0e:8f:3e:63:f4:e5:0b:fb: b0:f0:2a:0f:2b:d1:f8:4f:a5:03:88:13:57:eb:9f:50:75:8a: 53:c5:29:79:ee:f4:c6:4d:8a:8d:35:60:f4:0a:57:bb:fa:6f: ac:1b:ae:8c:3c:5b:86:b8:90:38:e0:85:c2:13:01:99:a0:b9: 80:b3:73:b0:90:a6:60:02:fd:8b:5c:c3:5b:6a:e0:0a:1a:5e: c5:0e:56:e6:0d:4e:d3:ba:dd:9f:ff:7e:ae:6c:4b:ae:ad:a3: 4e:61:8e:9b:e4:7d:d5:5b:59:54:b2:2d:8c:55:12:59:46:8c: 4b:f9:cb:f8:a4:6d:3a:cd:2d:8c:37:1d:32:a9:b0:cb:4c:a7: 76:33:0f:14:46:8f:a6:55:bc:0d:03:5b:10:05:86:6b:5b:71: 20:9a:55:7e:ed:0d:17:b6:9a:61:ec:71:85:bc:6f:a4:38:72: ee:0d:f9:cc:0f:c3:57:fe:7f:46:ff:54:77:fc:47:78:19:4c: dd:e4:49:41:e8:0d:a7:54:8b:5f:10:03:41:2b:36:b1:ec:0a: c3:3d:6a:8f:2f:fd:25:ee:d6:cb:d0:ab:d8:b3:cb:35:a8:0a: 2d:81:51:49:16:f9:32:ef:2c:0b:9d:39:36:88:a7:17:1e:1c: c3:a4:63:40 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5IHQXvTjJep+S3feAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYyNDIwNDUxMVoXDTI4MDkyNjIwNDUxMVowLzEtMCsGA1UEAxMk NmIwN2NhMTQtMTRhYS00YjU2LWI5Y2UtNDZjOTc2OGE4ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYxER5OL+JHmtKCl4USbc0TyLSfJRGp4AgWD hT4UntIYjVrJJwgpL6kRocdfxmskJEvPTbBi70LtbSd6VjMdzMBKU1zWvxIKVT6G n/iDriNqIqHPjxq1Y8rbDenateRvmxPGJMyVEObWEXqPjdSmy+CabYvP2zE8mgdy QWtMNdF7zbTBZ2elHoZN6/DNJujeRqUYJkOLVdhndpwUfoSnvk2gTbYkEiyfDb+L uXdYQ93dvKkJBkuOrHKmt0PmSZJCljmXy3igCu6Bc8g8jDEVtynNTI270xRBVJSL Ks9xP+6g4K/imQFHf3ERzHUdudkyjBSmVsy/rUGBIc2LSDul4wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAXbqEU8AT9haA1uUzEDqYCVfl7TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 YjA3Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5NzY4YThmOTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZiMDdjYTE0LTE0YWEtNGI1Ni1i OWNlLTQ2Yzk3NjhhOGY5My82YjA3Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5NzY4 YThmOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATH9CAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZyzPr0jpXbUP6A6PPmP0 5Qv7sPAqDyvR+E+lA4gTV+ufUHWKU8Upee70xk2KjTVg9ApXu/pvrBuujDxbhriQ OOCFwhMBmaC5gLNzsJCmYAL9i1zDW2rgChpexQ5W5g1O07rdn/9+rmxLrq2jTmGO m+R91VtZVLItjFUSWUaMS/nL+KRtOs0tjDcdMqmwy0yndjMPFEaPplW8DQNbEAWG a1txIJpVfu0NF7aaYexxhbxvpDhy7g35zA/DV/5/Rv9Ud/xHeBlM3eRJQegNp1SL XxADQSs2sewKwz1qjy/9Je7Wy9Cr2LPLNagKLYFRSRb5Mu8sC505NoinFx4cw6Rj QA== -----END CERTIFICATE-----Generated at Fri Jun 26 03:15:02 2026 by rpki-client