$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer File: cb309158-c6de-47be-ad39-450cc6e8cb6c.cer (raw, json) Hash identifier: 68e5oUF9DopFW56SKclwWxX0GXSKjE3KdMzJ0GppHDU= Subject key identifier: 0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EE4EA71DB350DD136468E9510 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Aug 2026 00:45:11 +0000 Certificate not after: Wed 22 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 7250 IP: 173.212.0.0 -- 173.212.47.255 IP: 2604:8a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:ea:71:db:35:0d:d1:36:46:8e:95:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 20 00:45:11 2026 GMT Not After : Nov 22 01:45:11 2028 GMT Subject: CN=cb309158-c6de-47be-ad39-450cc6e8cb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:ca:3c:50:b0:14:0e:87:10:ee:e1:1d:50: fa:2b:cf:bb:d3:13:8a:3c:23:66:6c:7d:df:98:bb: 8d:5c:34:85:7d:b4:28:10:43:8e:9d:20:b1:e4:85: 9a:68:9f:90:ce:16:79:39:e0:5b:0d:21:a4:89:3a: bb:b2:f5:bc:b3:ce:15:bd:b7:ce:f3:b0:88:73:3e: 78:09:4d:de:c3:04:40:ad:98:b2:5c:54:e7:13:0f: ed:b5:ce:42:54:e1:57:23:e4:c5:20:0e:53:6e:2a: 61:39:ae:54:71:40:e9:16:ae:a4:f1:cb:89:9a:5b: 03:ec:43:4f:55:4f:20:9e:7e:60:e2:1a:68:ee:4f: 3a:7f:0c:5c:6a:ac:27:87:12:b7:2d:3d:54:6f:7a: 79:1c:3c:9f:20:62:17:c8:43:e6:cf:71:29:2f:f6: bc:38:09:73:2d:90:fb:44:69:2c:1c:46:a8:cd:db: f3:5e:f9:79:e7:0a:49:ec:62:f6:68:04:25:c5:5e: 99:6a:c9:4d:45:41:59:62:8d:3f:42:3e:ac:18:e0: 51:ea:8e:c7:5d:99:8e:a0:03:c1:34:2e:5f:78:ea: 39:ac:47:27:96:b5:54:25:06:34:13:de:a1:58:62: e4:52:c2:b5:d7:bc:51:41:08:a0:ad:62:03:90:60: 78:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.212.0.0-173.212.47.255 IPv6: 2604:8a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7250 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f4:09:fa:3d:be:51:1d:1c:f2:b7:aa:61:b8:df:2f:79:58: 77:e0:78:74:1b:d3:a9:a1:00:73:20:38:2e:e0:cb:bd:45:3d: c8:3a:55:54:bf:ea:33:a4:e5:0d:c8:a0:47:e0:f4:81:4e:24: 60:4d:69:69:25:d9:15:86:71:9c:f7:2b:ed:4b:47:ce:75:66: c2:95:a8:1e:4f:a4:bb:6e:a7:b1:7f:29:76:69:2f:38:65:ab: 59:20:f1:00:d4:a9:18:14:5e:e5:39:af:b8:a8:36:94:e8:48: 7b:3e:85:2b:4c:ff:57:64:b4:de:0a:48:e8:15:3f:ef:c7:ee: 63:2e:89:86:3c:08:b2:4e:e9:2b:97:2b:8f:a6:20:89:81:91: ee:6a:c0:4d:bb:a9:fc:c7:fd:32:18:c7:ba:42:17:d8:c9:48: 00:16:33:ac:7f:34:83:05:1d:bd:fd:ea:a0:72:bf:7a:1a:2d: 5a:b5:27:3d:30:60:7c:cc:32:f7:94:e0:d6:09:c3:c3:46:62: 41:7f:be:f4:1a:e4:ef:11:93:49:cc:c6:6c:ce:65:5a:94:22: 72:54:f0:f1:66:48:7a:5f:58:1f:87:ab:6d:67:d5:0f:2f:07: 7b:71:52:1e:f9:cf:25:31:44:c9:dc:d8:06:9d:83:50:82:27: 3f:49:c5:3e -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE7k6nHbNQ3RNkaOlRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyMDAwNDUxMVoXDTI4MTEyMjAxNDUxMVowLzEtMCsGA1UEAxMk Y2IzMDkxNTgtYzZkZS00N2JlLWFkMzktNDUwY2M2ZThjYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa3KPFCwFA6HEO7hHVD6K8+70xOKPCNmbH3f mLuNXDSFfbQoEEOOnSCx5IWaaJ+QzhZ5OeBbDSGkiTq7svW8s84VvbfO87CIcz54 CU3ewwRArZiyXFTnEw/ttc5CVOFXI+TFIA5TbiphOa5UcUDpFq6k8cuJmlsD7ENP VU8gnn5g4hpo7k86fwxcaqwnhxK3LT1Ub3p5HDyfIGIXyEPmz3EpL/a8OAlzLZD7 RGksHEaozdvzXvl55wpJ7GL2aAQlxV6ZaslNRUFZYo0/Qj6sGOBR6o7HXZmOoAPB NC5feOo5rEcnlrVUJQY0E96hWGLkUsK117xRQQigrWIDkGB4eQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFAtA0th0YU4ec3V4jHcDw/vQCwyFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j YjMwOTE1OC1jNmRlLTQ3YmUtYWQzOS00NTBjYzZlOGNiNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NiMzA5MTU4LWM2ZGUtNDdiZS1h ZDM5LTQ1MGNjNmU4Y2I2Yy9jYjMwOTE1OC1jNmRlLTQ3YmUtYWQzOS00NTBjYzZl OGNiNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBMEAgABMA0wCwMDAq3UAwQErdQgMA0EAgACMAcDBQAmBIoAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhxSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH70Cfo9vlEdHPK3qmG4 3y95WHfgeHQb06mhAHMgOC7gy71FPcg6VVS/6jOk5Q3IoEfg9IFOJGBNaWkl2RWG cZz3K+1LR851ZsKVqB5PpLtup7F/KXZpLzhlq1kg8QDUqRgUXuU5r7ioNpToSHs+ hStM/1dktN4KSOgVP+/H7mMuiYY8CLJO6SuXK4+mIImBke5qwE27qfzH/TIYx7pC F9jJSAAWM6x/NIMFHb396qByv3oaLVq1Jz0wYHzMMveU4NYJw8NGYkF/vvQa5O8R k0nMxmzOZVqUInJU8PFmSHpfWB+Hq21n1Q8vB3txUh75zyUxRMnc2Aadg1CCJz9J xT4= -----END CERTIFICATE-----Generated at Tue Aug 25 15:41:18 2026 by rpki-client