$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer File: 8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer (raw, json) Hash identifier: TJvcyZWdZt2TBeeg8t8nhCNPA5fiAOXIA0qkU97n5Uo= Subject key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EC2A2BEF4BF4D9E0F581A5DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Aug 2026 18:03:15 +0000 Certificate not after: Mon 09 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 53428 AS: 401712 AS: 402167 AS: 402685 IP: 104.204.0.0/19 IP: 104.204.96.0/19 IP: 161.210.111.0/24 IP: 167.234.0.0/19 IP: 204.12.160.0/19 IP: 2607:e840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:a2:be:f4:bf:4d:9e:0f:58:1a:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 7 18:03:15 2026 GMT Not After : Oct 9 20:45:11 2028 GMT Subject: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:97:3f:4f:f4:04:95:e1:93:94:37:0e:c2:21: 66:1f:6d:ee:29:c9:35:89:a7:3c:34:22:14:92:db: b3:fc:ad:a2:48:93:1c:4d:37:d0:82:39:da:ea:4b: c0:b7:ec:57:14:2d:f4:31:dc:b6:34:e0:88:21:86: 8b:5f:71:81:0e:51:69:98:e2:94:c7:85:3c:59:37: af:0c:d2:e3:43:9c:87:48:3f:92:67:71:b6:19:c8: 97:31:3f:3b:a4:e1:5d:53:de:80:1c:4a:7b:7e:c9: e4:fd:65:75:9c:32:4d:89:10:fa:1b:45:35:e6:de: cf:8a:c6:0f:25:90:7e:47:a4:78:e7:5f:ce:58:52: a3:39:26:55:52:01:09:a4:b2:3a:55:6d:6f:c0:30: 07:ff:c6:2c:8c:c0:ef:bc:1c:09:31:a2:0f:45:56: 4b:38:5c:f6:92:7b:e8:de:d8:e8:99:27:51:ba:93: f7:94:5f:4f:39:35:f9:91:f3:7e:c6:da:30:03:89: f2:f1:7e:30:82:e7:85:44:9e:e6:67:fb:e0:bb:b4: e2:f1:0b:a2:49:f3:c7:30:cf:bb:11:73:a6:37:41: 75:9e:cd:a2:b7:0a:49:39:7f:cf:fb:de:3a:a4:9a: ec:0f:13:57:e8:95:dc:f7:92:9b:6f:8b:01:26:88: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.204.0.0/19 104.204.96.0/19 161.210.111.0/24 167.234.0.0/19 204.12.160.0/19 IPv6: 2607:e840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53428 401712 402167 402685 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:20:5d:de:8f:ec:58:b2:e9:6d:4b:c8:d9:2a:23:4e:d4:e4: 58:b9:12:51:21:88:f3:fe:a7:b3:4b:11:c9:98:80:de:6f:ed: 5f:cd:7e:ec:cc:6d:71:c8:18:e4:94:2e:d6:23:8c:97:9c:9f: 22:77:9d:31:b1:c1:1c:b1:ca:af:d7:89:0a:93:20:23:7b:83: 3b:63:a8:64:4d:79:5b:af:57:35:68:76:7c:a1:eb:10:35:2c: b4:a2:1a:0d:1c:ca:af:40:14:dd:57:b7:c0:4b:02:ad:7e:9c: 23:59:3b:74:47:b0:9f:1e:13:7f:d2:dc:d0:1e:fa:1a:ac:a4: a3:ca:69:86:2e:67:c7:6c:78:1b:9a:c8:f9:bb:c5:e3:aa:40: c8:19:de:bf:2e:94:25:aa:78:dc:28:fb:8e:ea:f2:a3:34:a4: 91:7c:cc:0e:75:84:e3:8e:ae:6c:5a:92:7e:80:3a:68:6d:3f: 52:9b:3c:1f:7b:3d:55:e6:2c:b2:d5:92:7b:97:d1:93:e5:fc: ac:1f:df:8a:97:e8:21:9d:4a:37:c7:cd:e9:4f:e3:4f:8b:58: ad:67:cd:88:a7:90:04:55:cc:13:bd:77:26:10:73:da:44:43: 0b:8a:82:75:3e:90:cb:be:66:bc:b2:29:3e:af:97:8d:f9:76: 9b:f3:42:ad -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUAQ0Mn0MoWE7Cor70v02eD1gaXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwNzE4MDMxNVoXDTI4MTAwOTIwNDUxMVowLzEtMCsGA1UEAxMk OGY2ZjAxYjgtMTNhZC00Yzc5LWFhNzItNjVjZjBkZWRkODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZc/T/QEleGTlDcOwiFmH23uKck1iac8NCIU ktuz/K2iSJMcTTfQgjna6kvAt+xXFC30Mdy2NOCIIYaLX3GBDlFpmOKUx4U8WTev DNLjQ5yHSD+SZ3G2GciXMT87pOFdU96AHEp7fsnk/WV1nDJNiRD6G0U15t7PisYP JZB+R6R451/OWFKjOSZVUgEJpLI6VW1vwDAH/8YsjMDvvBwJMaIPRVZLOFz2knvo 3tjomSdRupP3lF9POTX5kfN+xtowA4ny8X4wgueFRJ7mZ/vgu7Ti8QuiSfPHMM+7 EXOmN0F1ns2itwpJOX/P+946pJrsDxNX6JXc95Kbb4sBJohg/QIDAQABo4IEUTCC BE0wHQYDVR0OBBYEFNGDy3XEj93Kar6WNC7HbFEON/4DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 ZjZmMDFiOC0xM2FkLTRjNzktYWE3Mi02NWNmMGRlZGQ4OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzhmNmYwMWI4LTEzYWQtNGM3OS1h YTcyLTY1Y2YwZGVkZDg5OS84ZjZmMDFiOC0xM2FkLTRjNzktYWE3Mi02NWNmMGRl ZGQ4OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAVozAADBAVozGADBACh0m8DBAWn6gADBAXMDKAw DQQCAAIwBwMFACYH6EAwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDANC0AgMGITAC AwYi9wIDBiT9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHsgXd6P7Fiy6W1LyNkqI07U5Fi5ElEhiPP+p7NL EcmYgN5v7V/NfuzMbXHIGOSULtYjjJecnyJ3nTGxwRyxyq/XiQqTICN7gztjqGRN eVuvVzVodnyh6xA1LLSiGg0cyq9AFN1Xt8BLAq1+nCNZO3RHsJ8eE3/S3NAe+hqs pKPKaYYuZ8dseBuayPm7xeOqQMgZ3r8ulCWqeNwo+47q8qM0pJF8zA51hOOOrmxa kn6AOmhtP1KbPB97PVXmLLLVknuX0ZPl/Kwf34qX6CGdSjfHzelP40+LWK1nzYin kARVzBO9dyYQc9pEQwuKgnU+kMu+ZryyKT6vl435dpvzQq0= -----END CERTIFICATE-----Generated at Sat Sep 12 09:43:23 2026 by rpki-client