$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer File: a295a695-e91a-4c5a-8a31-a920a42ea44d.cer (raw, json) Hash identifier: z9nnhB4woxJPEROLK57uUdPdjFaHB3yIlFib33V4hd0= Subject key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB144CA91D5949B26EC2F1AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Aug 2026 12:45:11 +0000 Certificate not after: Fri 03 Nov 2028 12:45:11 +0000 Subordinate resources: AS: 21748 IP: 104.37.232.0/21 IP: 2606:8b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b1:44:ca:91:d5:94:9b:26:ec:2f:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 1 12:45:11 2026 GMT Not After : Nov 3 12:45:11 2028 GMT Subject: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:c3:d9:d5:37:9b:ea:c1:66:67:2e:89:47: 8e:0d:84:f0:08:e1:15:da:48:51:a0:11:d7:d7:9c: f1:a6:ba:c2:e0:59:d2:aa:f1:d0:5b:f2:71:32:e6: 28:89:21:77:03:b4:06:00:0d:9d:9e:7f:5f:02:bb: fe:a9:f2:0e:38:c6:68:01:27:67:98:4a:c1:43:5d: b4:78:73:dd:5c:b7:62:ab:c6:e3:0a:90:6b:bc:12: 1e:ab:40:71:67:21:62:a1:b4:75:cf:2d:46:96:bd: e2:02:77:04:a9:01:ce:d1:85:5b:86:69:79:6f:49: 90:ee:93:43:26:f3:ac:d6:dd:20:77:ca:4b:40:76: 9d:7e:5d:b0:d4:00:a4:72:4f:dd:6a:e8:2d:21:db: 21:19:7d:81:80:60:ab:2b:66:86:47:ae:c2:86:d0: 3c:58:ea:2e:8a:08:1e:73:be:65:b0:63:9a:54:e2: b5:f9:9f:32:5e:4e:fa:26:1a:a3:b6:1c:22:62:57: 92:a7:de:75:ab:80:b2:ee:f9:94:1b:1d:ed:85:82: bf:1e:ac:44:61:4c:1b:c1:f9:73:49:3b:2f:bd:65: d4:23:5a:69:3a:65:74:e9:d0:43:e7:7c:39:34:4c: dc:22:7f:5f:1a:d1:89:6e:00:a8:92:36:0e:99:32: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21748 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:0d:0d:09:ad:33:f3:51:31:b4:51:b7:3e:95:25:57:a3: 80:56:ee:15:c2:46:ec:c4:30:80:4c:53:eb:25:f9:7c:b2:84: 27:87:64:09:7c:86:8b:37:0e:a3:5b:a5:a5:08:5a:84:76:a5: 4c:2d:0e:69:6a:d4:7a:3c:b8:ab:b2:38:b5:79:e0:2f:20:cb: 31:46:c3:d9:5d:27:b9:14:38:fd:d5:4d:cc:46:91:fa:15:78: f8:16:c9:d5:64:ed:96:1d:73:35:6b:f8:88:6d:cc:8a:46:f5: d0:30:82:dc:fb:99:db:e4:dc:86:cb:3c:38:99:5d:d1:3a:72: b0:89:ee:c3:f0:19:45:5d:e3:c2:80:ec:ad:63:0e:4c:1b:9d: 38:05:29:e3:c9:59:49:08:b4:8c:17:f1:66:1d:ec:c9:4f:04: 52:53:94:59:ab:37:f7:53:06:9d:80:90:c3:89:35:4b:1b:70: 88:1c:26:1f:ab:31:23:58:3e:70:71:87:ee:7f:af:6e:24:fa: 21:13:ee:d9:ea:b6:33:82:26:81:1f:8d:85:bd:90:3d:d7:e0: d2:64:25:f0:7a:0f:e2:98:c2:94:73:c0:ae:9d:ab:18:6e:f8: 00:66:53:3b:2f:5a:92:e5:39:56:b6:0b:fd:79:0e:03:33:91: 85:18:03:13 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE6xRMqR1ZSbJuwvGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwMTEyNDUxMVoXDTI4MTEwMzEyNDUxMVowLzEtMCsGA1UEAxMk YTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVhNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoTD2dU3m+rBZmcuiUeODYTwCOEV2khRoBHX 15zxprrC4FnSqvHQW/JxMuYoiSF3A7QGAA2dnn9fArv+qfIOOMZoASdnmErBQ120 eHPdXLdiq8bjCpBrvBIeq0BxZyFiobR1zy1Glr3iAncEqQHO0YVbhml5b0mQ7pND JvOs1t0gd8pLQHadfl2w1ACkck/daugtIdshGX2BgGCrK2aGR67ChtA8WOouigge c75lsGOaVOK1+Z8yXk76JhqjthwiYleSp951q4Cy7vmUGx3thYK/HqxEYUwbwflz STsvvWXUI1ppOmV06dBD53w5NEzcIn9fGtGJbgCokjYOmTLRFwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMa3Y5CdmUJuFvWeki0g9YgwwapsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h Mjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyOTVhNjk1LWU5MWEtNGM1YS04 YTMxLWE5MjBhNDJlYTQ0ZC9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQy ZWE0NGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBANoJegwDQQCAAIwBwMFACYGi0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVPQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALgsNDQmtM/NRMbRRtz6VJVejgFbu FcJG7MQwgExT6yX5fLKEJ4dkCXyGizcOo1ulpQhahHalTC0OaWrUejy4q7I4tXng LyDLMUbD2V0nuRQ4/dVNzEaR+hV4+BbJ1WTtlh1zNWv4iG3Mikb10DCC3PuZ2+Tc hss8OJld0TpysInuw/AZRV3jwoDsrWMOTBudOAUp48lZSQi0jBfxZh3syU8EUlOU Was391MGnYCQw4k1SxtwiBwmH6sxI1g+cHGH7n+vbiT6IRPu2eq2M4ImgR+Nhb2Q Pdfg0mQl8HoP4pjClHPArp2rGG74AGZTOy9akuU5VrYL/XkOAzORhRgDEw== -----END CERTIFICATE-----Generated at Tue Aug 25 21:54:15 2026 by rpki-client