$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer File: ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer (raw, json) Hash identifier: RGZU3KOUr/BIYSMqiUmDjQXknEqdnnJLgmpoFuTwa5A= Subject key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB2AA21F4DDEF550A16E89900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Aug 2026 00:45:11 +0000 Certificate not after: Sat 04 Nov 2028 00:45:11 +0000 Subordinate resources: IP: 199.21.192.0/21 IP: 2604:f500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:aa:21:f4:dd:ef:55:0a:16:e8:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 2 00:45:11 2026 GMT Not After : Nov 4 00:45:11 2028 GMT Subject: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3b:4c:07:85:e9:d7:11:01:d2:95:30:0c:30: 9e:75:19:f4:dc:03:37:31:fa:00:6a:06:71:1c:81: 1d:08:7f:5f:56:85:67:62:c6:db:f5:59:48:5b:ee: 66:b6:03:02:fd:80:b4:ec:b9:21:aa:4f:f0:b9:a7: 84:2a:d6:b2:c7:9b:ea:66:b9:64:c0:78:a0:fa:a0: 2e:65:7f:fc:84:f5:b5:53:00:13:e2:5d:e6:a9:d0: 25:96:56:c3:11:bf:78:d4:36:b2:ef:a4:16:f7:41: 7d:29:f9:95:71:b2:f3:0f:49:77:b2:6c:db:33:76: be:cf:63:43:88:a9:da:2d:9b:d5:56:b2:14:67:d9: 35:7c:dd:9e:4a:b6:34:73:40:16:84:04:2f:0e:b9: 17:69:04:e4:37:2f:fd:08:d4:4d:2d:14:5d:e4:6f: d2:d5:5f:64:1c:0c:4e:79:21:38:cc:d0:d1:4a:4f: c4:4b:0b:ff:ae:e9:8d:4e:24:ca:cc:3d:7d:54:b7: f0:33:8e:b0:4b:95:5f:4d:c5:00:84:d5:0a:b0:45: f8:eb:95:26:87:53:07:34:26:6c:ee:6a:d9:89:a9: fc:a6:1a:5d:b5:6e:86:76:fd:c8:5e:95:87:cc:c3: cd:99:fd:a7:1a:8d:d4:21:16:4d:d2:0e:55:94:0e: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.21.192.0/21 IPv6: 2604:f500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6e:b1:9f:a1:ee:f9:f7:6f:25:53:70:44:18:81:70:0b:45: 2b:f6:7d:eb:3d:58:13:73:77:6a:23:2b:65:0e:8e:22:0f:dc: c2:53:17:56:a6:72:95:9c:f7:90:01:41:ea:10:04:b2:56:1c: c5:60:69:89:bf:4d:02:43:33:56:11:54:1e:00:d7:7b:88:49: e3:5d:75:dc:01:75:f5:eb:bc:cb:82:03:e7:f2:37:95:3e:29: a4:7a:fa:93:98:e8:37:df:12:e0:04:04:6d:b3:2a:43:b9:39: b5:e1:3c:33:37:7e:ce:e4:4f:56:74:d6:1b:8a:4e:5e:25:56: 1a:29:bc:1a:ab:33:3f:9f:bc:a4:db:2f:b0:08:89:ff:3f:fe: 77:cb:5d:0f:b5:3c:16:67:70:a6:8f:01:8c:f2:38:5c:54:c9: 7c:ad:08:ae:26:33:b2:cb:54:c2:d3:f1:14:d5:54:c5:b0:ad: f8:2d:a0:6f:fb:88:4e:45:d5:e3:11:49:44:67:2d:5c:56:52: 42:e2:34:9f:ef:5f:aa:d4:eb:a6:42:a3:27:05:18:24:23:3f: d1:a9:5a:f3:20:bc:7a:ba:7b:1c:3b:f9:14:a3:6f:17:cc:3d: 01:88:b5:c7:80:3c:8f:97:7f:0e:88:37:7b:2f:42:42:c2:87: 33:10:d1:9b -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE6yqiH03e9VChbomQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwMjAwNDUxMVoXDTI4MTEwNDAwNDUxMVowLzEtMCsGA1UEAxMk YmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TtMB4Xp1xEB0pUwDDCedRn03AM3MfoAagZx HIEdCH9fVoVnYsbb9VlIW+5mtgMC/YC07Lkhqk/wuaeEKtayx5vqZrlkwHig+qAu ZX/8hPW1UwAT4l3mqdAlllbDEb941Day76QW90F9KfmVcbLzD0l3smzbM3a+z2ND iKnaLZvVVrIUZ9k1fN2eSrY0c0AWhAQvDrkXaQTkNy/9CNRNLRRd5G/S1V9kHAxO eSE4zNDRSk/ESwv/rumNTiTKzD19VLfwM46wS5VfTcUAhNUKsEX465Umh1MHNCZs 7mrZian8phpdtW6Gdv3IXpWHzMPNmf2nGo3UIRZN0g5VlA7NUQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFIOIs7wkiMyZj/HodwX7KsPpoLPOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i YThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JhOGMxZDQxLTJjN2MtNDkwNS04 ZGViLWM2YTUwZTFkN2UyZi9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUx ZDdlMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPHFcAwDQQCAAIwBwMFACYE9QAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA jW6xn6Hu+fdvJVNwRBiBcAtFK/Z96z1YE3N3aiMrZQ6OIg/cwlMXVqZylZz3kAFB 6hAEslYcxWBpib9NAkMzVhFUHgDXe4hJ41113AF19eu8y4ID5/I3lT4ppHr6k5jo N98S4AQEbbMqQ7k5teE8Mzd+zuRPVnTWG4pOXiVWGim8GqszP5+8pNsvsAiJ/z/+ d8tdD7U8Fmdwpo8BjPI4XFTJfK0IriYzsstUwtPxFNVUxbCt+C2gb/uITkXV4xFJ RGctXFZSQuI0n+9fqtTrpkKjJwUYJCM/0ala8yC8erp7HDv5FKNvF8w9AYi1x4A8 j5d/Dog3ey9CQsKHMxDRmw== -----END CERTIFICATE-----Generated at Tue Aug 25 21:06:14 2026 by rpki-client