$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer File: c3a944cd-51a8-4d10-ae57-724de26a1d62.cer (raw, json) Hash identifier: anGk+XoNcl2EiULsRclCvmauDCdwUYrewO4u9yeDR60= Subject key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB2AA2215E7504C130D2A3600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Aug 2026 00:45:11 +0000 Certificate not after: Sat 04 Nov 2028 00:45:11 +0000 Subordinate resources: AS: 25655 IP: 173.241.144.0/20 IP: 2620:103:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:aa:22:15:e7:50:4c:13:0d:2a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 2 00:45:11 2026 GMT Not After : Nov 4 00:45:11 2028 GMT Subject: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:9e:8b:21:48:28:13:52:e4:7d:43:d8:1e: 1a:2b:97:93:e1:cc:03:16:1a:2c:a3:b8:b4:56:dd: cb:ac:e6:fd:72:c9:0e:81:a3:be:5a:cc:79:2e:22: 38:d4:e9:b0:0e:53:ba:ac:47:9f:f6:ae:71:c1:eb: 51:c7:ab:eb:1d:a9:91:b8:ce:1c:41:0c:22:7f:89: ae:b0:91:31:3b:9f:86:e7:5d:b8:6b:be:47:8a:ae: 70:4f:66:2f:58:57:30:7a:c2:53:75:ea:96:b9:be: 0d:90:67:b1:f2:c4:76:74:7e:76:e0:45:97:bd:6a: 42:05:27:2e:1a:03:cf:a3:74:e5:33:de:14:42:4d: 2f:47:09:61:86:66:b5:52:08:74:3d:f8:53:3b:70: 2f:5d:f4:9f:8c:94:b3:b1:0d:10:85:62:24:9e:3a: 89:83:0a:47:a5:e6:9d:96:67:7b:29:9f:7e:19:0c: e0:df:0c:f8:5b:14:83:26:c0:df:98:22:70:cd:cb: 31:f0:61:4c:33:68:fb:3d:96:99:dc:92:55:ba:cd: ac:a3:6e:5f:f0:f7:07:a1:34:2f:ef:97:4e:51:dd: 3d:2c:ab:df:d8:55:d3:2d:e8:9f:66:bd:14:20:49: 74:f8:0c:55:ad:5e:18:79:c6:86:32:54:d7:15:d3: c0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.241.144.0/20 IPv6: 2620:103:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25655 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8c:89:70:7c:15:00:38:a0:6d:b6:50:4c:8f:bf:28:3b:f3: 82:40:dc:24:23:b8:d9:c7:86:bd:14:b2:8d:6d:95:d4:bc:35: 6e:46:95:ca:d7:28:15:30:fb:ab:2b:28:0c:ec:2d:15:c4:18: d5:06:ba:22:bc:89:2c:ba:4f:de:67:85:70:37:a8:81:24:d8: 79:b1:ff:13:7f:b2:08:a6:cb:1e:11:05:f7:dc:a1:d8:0c:c4: 77:c3:c3:e7:92:d0:d1:9d:40:9b:e5:c7:1b:1c:fc:81:75:51: 6e:b2:19:82:5a:75:77:13:2b:dc:b5:1b:e9:ba:a8:c4:41:2a: a9:04:f5:a6:3d:82:eb:a9:e8:ab:4d:6b:2a:92:d1:93:b2:55: 8d:f4:f8:cf:be:fe:ab:fa:bb:e5:e9:4c:3b:a0:5a:53:48:b0: d3:82:08:15:0d:89:fa:04:93:de:f7:2d:ca:12:92:83:f5:85: e8:8b:00:6c:32:32:f6:d6:4b:f7:a8:44:21:ae:35:b2:38:55: ae:54:77:9a:a5:63:ef:97:59:bf:9c:eb:9c:6a:84:f7:4a:3b: 1e:61:b6:38:c9:ae:53:cc:96:af:14:cd:ec:44:5f:e0:aa:bf: 0e:88:52:fa:ba:49:1f:17:c8:b1:e2:b1:ac:38:96:2d:0e:8e: 7d:63:3a:00 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6yqiIV51BMEw0qNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwMjAwNDUxMVoXDTI4MTEwNDAwNDUxMVowLzEtMCsGA1UEAxMk YzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmExZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbmeiyFIKBNS5H1D2B4aK5eT4cwDFhoso7i0 Vt3LrOb9cskOgaO+Wsx5LiI41OmwDlO6rEef9q5xwetRx6vrHamRuM4cQQwif4mu sJExO5+G5124a75Hiq5wT2YvWFcwesJTdeqWub4NkGex8sR2dH524EWXvWpCBScu GgPPo3TlM94UQk0vRwlhhma1Ugh0PfhTO3AvXfSfjJSzsQ0QhWIknjqJgwpHpead lmd7KZ9+GQzg3wz4WxSDJsDfmCJwzcsx8GFMM2j7PZaZ3JJVus2so25f8PcHoTQv 75dOUd09LKvf2FXTLeifZr0UIEl0+AxVrV4YecaGMlTXFdPAKwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKhgn7kXxeouzP4vW0NT0cJfrX21MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j M2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2MzYTk0NGNkLTUxYTgtNGQxMC1h ZTU3LTcyNGRlMjZhMWQ2Mi9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2 YTFkNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBASt8ZAwDwQCAAIwCQMHBCYgAQMQADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJkNzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+jIlwfBUAOKBttlBMj78oO/OC QNwkI7jZx4a9FLKNbZXUvDVuRpXK1ygVMPurKygM7C0VxBjVBroivIksuk/eZ4Vw N6iBJNh5sf8Tf7IIpsseEQX33KHYDMR3w8PnktDRnUCb5ccbHPyBdVFushmCWnV3 EyvctRvpuqjEQSqpBPWmPYLrqeirTWsqktGTslWN9PjPvv6r+rvl6Uw7oFpTSLDT gggVDYn6BJPe9y3KEpKD9YXoiwBsMjL21kv3qEQhrjWyOFWuVHeapWPvl1m/nOuc aoT3SjseYbY4ya5TzJavFM3sRF/gqr8OiFL6ukkfF8ix4rGsOJYtDo59YzoA -----END CERTIFICATE-----Generated at Tue Aug 25 11:02:54 2026 by rpki-client