$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer File: a25dba35-fbce-4e02-ac3e-dba534f71021.cer (raw, json) Hash identifier: LdLTR9lnCqhTAqUhbn/+hrZiAFgq81pT8fMMSUgHVMo= Subject key identifier: EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E5BA7D0D911B3105EDE1E7E50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 20:45:12 +0000 Certificate not after: Tue 03 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 10446 IP: 209.94.64.0/24 IP: 209.94.76.0/24 IP: 209.94.95.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:a7:d0:d9:11:b3:10:5e:de:1e:7e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 1 20:45:12 2026 GMT Not After : Oct 3 20:45:12 2028 GMT Subject: CN=a25dba35-fbce-4e02-ac3e-dba534f71021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:59:f8:90:9f:10:9e:1f:32:8d:ac:76:75: 39:0b:8b:64:b7:b3:30:f6:71:49:dc:8f:06:1b:46: b9:7d:d7:54:ea:09:31:24:97:83:98:02:f0:26:92: a0:45:3d:b7:0b:19:05:ca:23:75:65:f7:00:3c:07: e1:d7:38:d8:05:e5:18:b9:d7:e7:42:fc:46:85:c7: 83:b9:d3:af:a0:8f:6e:15:e5:7e:47:75:3f:35:50: d7:b7:6c:32:1d:ef:4f:85:70:38:fa:30:f1:06:47: 85:09:73:87:cb:06:88:28:0e:b3:31:88:55:48:65: 16:9d:f6:64:33:c6:e6:b8:0b:03:85:db:c4:48:80: bf:56:c4:70:03:8f:55:14:93:e9:48:31:55:a5:55: f2:08:8e:65:e4:09:a8:4a:8e:51:e0:a5:7a:7f:74: 29:49:48:72:32:d3:4c:4c:92:a8:63:70:a8:3d:87: d5:c3:ee:64:63:13:58:c0:3a:5e:ef:13:46:4b:9b: 86:9e:e8:5b:2c:89:fe:66:a7:fc:1f:21:11:73:d2: 31:01:73:7a:40:32:62:48:a3:1e:da:95:e8:a8:54: 92:47:af:ff:4f:62:92:d8:f0:ef:3e:24:9e:bb:47: 91:de:5e:ae:70:bc:be:40:57:ff:50:6b:a5:a3:24: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 209.94.64.0/24 209.94.76.0/24 209.94.95.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:12:fa:f3:ab:cc:08:9d:f1:26:8f:7e:8b:ec:55:c5:19:e3: c4:6a:d6:69:25:20:5d:27:19:74:93:b0:dd:e3:81:68:60:f7: 31:10:d7:74:b9:a9:0f:c3:e8:fe:e4:05:89:f5:7c:38:09:cc: 87:69:98:a9:23:4a:5d:24:62:4a:ed:99:5e:c5:e0:5f:02:9e: 8b:08:26:db:fe:6d:1e:64:9e:b1:e3:73:8b:49:e6:b7:28:8b: c6:7f:fb:c3:ce:37:02:d9:0a:b4:42:a6:4c:03:38:0e:f5:ec: d1:c3:d8:29:77:97:55:a8:f0:f6:bf:38:ed:b6:27:dd:da:14: 93:7c:7d:87:25:a9:fb:36:6c:4c:ed:92:b2:36:cf:14:1e:57: ff:88:ea:5b:8e:ff:e5:c1:64:50:f0:4c:fa:a5:6e:5a:aa:aa: 49:c7:2e:91:08:f3:5f:20:7c:79:69:3c:97:b4:6c:6a:fd:89: cd:27:d0:9c:5a:7c:f3:9f:ee:2b:c2:84:40:c5:92:93:ca:d5: 68:d1:dd:53:c7:d4:0d:50:a5:72:e0:9a:b2:48:91:29:1a:97: 8c:75:4c:27:bd:61:cb:8c:5e:b4:79:e2:1e:49:e9:10:6f:11: 2a:1f:53:05:24:af:69:53:35:0e:6f:64:fa:4f:93:f6:7b:4b: b1:10:5f:9a -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE5bp9DZEbMQXt4eflAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwMTIwNDUxMloXDTI4MTAwMzIwNDUxMlowLzEtMCsGA1UEAxMk YTI1ZGJhMzUtZmJjZS00ZTAyLWFjM2UtZGJhNTM0ZjcxMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzupZ+JCfEJ4fMo2sdnU5C4tkt7Mw9nFJ3I8G G0a5fddU6gkxJJeDmALwJpKgRT23CxkFyiN1ZfcAPAfh1zjYBeUYudfnQvxGhceD udOvoI9uFeV+R3U/NVDXt2wyHe9PhXA4+jDxBkeFCXOHywaIKA6zMYhVSGUWnfZk M8bmuAsDhdvESIC/VsRwA49VFJPpSDFVpVXyCI5l5AmoSo5R4KV6f3QpSUhyMtNM TJKoY3CoPYfVw+5kYxNYwDpe7xNGS5uGnuhbLIn+Zqf8HyERc9IxAXN6QDJiSKMe 2pXoqFSSR6//T2KS2PDvPiSeu0eR3l6ucLy+QFf/UGuloyS1rQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFOzH4PZflsVNuHJkQQZMNyML/kZrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h MjVkYmEzNS1mYmNlLTRlMDItYWMzZS1kYmE1MzRmNzEwMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyNWRiYTM1LWZiY2UtNGUwMi1h YzNlLWRiYTUzNGY3MTAyMS9hMjVkYmEzNS1mYmNlLTRlMDItYWMzZS1kYmE1MzRm NzEwMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADRXkADBADRXkwDBADRXl8wGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICKM4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASxL686vMCJ3xJo9+i+xVxRnjxGrWaSUg XScZdJOw3eOBaGD3MRDXdLmpD8Po/uQFifV8OAnMh2mYqSNKXSRiSu2ZXsXgXwKe iwgm2/5tHmSeseNzi0nmtyiLxn/7w843AtkKtEKmTAM4DvXs0cPYKXeXVajw9r84 7bYn3doUk3x9hyWp+zZsTO2SsjbPFB5X/4jqW47/5cFkUPBM+qVuWqqqSccukQjz XyB8eWk8l7Rsav2JzSfQnFp885/uK8KEQMWSk8rVaNHdU8fUDVClcuCaskiRKRqX jHVMJ71hy4xetHniHknpEG8RKh9TBSSvaVM1Dm9k+k+T9ntLsRBfmg== -----END CERTIFICATE-----Generated at Tue Jul 21 10:15:57 2026 by rpki-client