$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.cer File: cf174adc-ec77-409b-8966-d3eb3d0bcc8e.cer (raw, json) Hash identifier: 2jtwUuu+z/RzyQgxkq1t4Lz4doa4ig5XtwYEVzDL9Yc= Subject key identifier: 9F:D1:BA:46:A5:F1:06:75:8C:3C:EE:05:44:BD:33:B6:62:E6:8F:F9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584ED15FA6C95251EC76A7091940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Aug 2026 00:45:11 +0000 Certificate not after: Wed 15 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 30387 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:5f:a6:c9:52:51:ec:76:a7:09:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 13 00:45:11 2026 GMT Not After : Nov 15 01:45:11 2028 GMT Subject: CN=cf174adc-ec77-409b-8966-d3eb3d0bcc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:50:bc:be:91:45:48:0c:e7:24:f9:cb:8e: cd:56:26:2e:bd:41:ad:48:05:8f:97:b5:cf:92:63: 7f:db:f3:c1:ad:e0:c2:91:44:ea:62:55:11:5e:60: 0a:a9:98:69:dc:30:5b:27:ae:06:f4:6d:9e:33:55: 38:59:a7:4a:cc:43:52:f7:4c:fe:c8:e1:58:2d:6c: b7:97:87:76:4f:1d:91:55:7b:1f:5a:a2:21:29:f5: 29:21:87:33:76:c6:94:38:cc:89:f4:8c:81:da:b4: 9e:7c:57:26:b1:5d:11:a9:1c:53:e0:09:1a:9e:f2: 41:1f:e7:38:24:39:7c:ea:0d:68:5d:f6:91:30:55: 56:62:4c:4a:48:f4:61:db:5b:43:9c:87:00:9e:cc: 6b:10:30:25:a6:f9:c1:5b:31:78:29:61:f1:7d:a4: 24:1e:22:1f:be:44:25:ba:2d:47:4d:32:bd:96:40: 9c:96:9f:3f:a0:54:af:c6:40:7b:18:9f:d3:d5:49: d1:5d:32:a9:b0:5c:13:07:e4:80:35:1e:6c:e6:1c: 6a:b4:7f:55:e1:2c:ce:a6:02:d2:da:11:50:dd:04: 7e:c0:24:1a:51:11:11:dd:20:da:82:36:79:f6:9b: 83:0c:9b:1e:9d:60:88:2a:b0:97:c6:15:d1:18:93: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D1:BA:46:A5:F1:06:75:8C:3C:EE:05:44:BD:33:B6:62:E6:8F:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 30387 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1f:43:cf:ab:7a:76:2e:9f:c0:2d:3a:e2:e3:32:09:e9:25: 73:9b:99:7c:ab:90:73:8f:cc:6e:55:2b:6d:9f:b3:ca:11:e3: b2:ca:59:6a:f8:7c:05:fc:fb:3b:93:e1:0f:43:86:c0:65:34: db:97:36:b2:ff:03:99:d6:59:3f:7f:17:c4:0f:1a:8e:1e:f7: 56:2d:cc:8f:e7:a3:4d:21:8a:b9:8e:d8:18:86:c1:8a:a2:d1: 5f:c8:97:20:38:78:f5:71:f8:00:42:97:99:75:2e:7d:ee:0b: 70:7e:cd:3e:44:0f:06:80:4e:55:e5:83:bb:ad:c0:0b:d3:76: 0f:47:a1:c5:23:ce:d7:38:9d:65:9f:90:fd:61:7f:d9:30:0a: f9:44:17:78:3c:4a:c1:eb:72:55:b4:42:a7:53:34:ac:7a:72: 8b:51:02:28:2e:55:94:8d:c1:c7:8b:4d:77:ea:89:b7:da:ac: 84:76:27:40:dd:07:8d:58:dd:81:cf:e0:1d:1b:e2:dc:24:73: a6:3c:f4:26:eb:6e:02:b3:f7:38:aa:4f:c9:71:22:fa:5b:9d: a7:c4:ef:25:37:f8:58:7e:b2:6d:fa:63:ff:13:ff:83:6d:e6: 9c:9c:1f:ad:e3:ab:14:6c:3d:ea:33:74:cd:19:81:96:f0:f3: 12:87:d9:fc -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE7RX6bJUlHsdqcJGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgxMzAwNDUxMVoXDTI4MTExNTAxNDUxMVowLzEtMCsGA1UEAxMk Y2YxNzRhZGMtZWM3Ny00MDliLTg5NjYtZDNlYjNkMGJjYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5pQvL6RRUgM5yT5y47NViYuvUGtSAWPl7XP kmN/2/PBreDCkUTqYlURXmAKqZhp3DBbJ64G9G2eM1U4WadKzENS90z+yOFYLWy3 l4d2Tx2RVXsfWqIhKfUpIYczdsaUOMyJ9IyB2rSefFcmsV0RqRxT4AkanvJBH+c4 JDl86g1oXfaRMFVWYkxKSPRh21tDnIcAnsxrEDAlpvnBWzF4KWHxfaQkHiIfvkQl ui1HTTK9lkCclp8/oFSvxkB7GJ/T1UnRXTKpsFwTB+SANR5s5hxqtH9V4SzOpgLS 2hFQ3QR+wCQaURER3SDagjZ59puDDJsenWCIKrCXxhXRGJP8wwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJ/Rukal8QZ1jDzuBUS9M7Zi5o/5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j ZjE3NGFkYy1lYzc3LTQwOWItODk2Ni1kM2ViM2QwYmNjOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NmMTc0YWRjLWVjNzctNDA5Yi04 OTY2LWQzZWIzZDBiY2M4ZS9jZjE3NGFkYy1lYzc3LTQwOWItODk2Ni1kM2ViM2Qw YmNjOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdrMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMR9Dz6t6di6fwC064uMyCeklc5uZ fKuQc4/MblUrbZ+zyhHjsspZavh8Bfz7O5PhD0OGwGU025c2sv8DmdZZP38XxA8a jh73Vi3Mj+ejTSGKuY7YGIbBiqLRX8iXIDh49XH4AEKXmXUufe4LcH7NPkQPBoBO VeWDu63AC9N2D0ehxSPO1zidZZ+Q/WF/2TAK+UQXeDxKwetyVbRCp1M0rHpyi1EC KC5VlI3Bx4tNd+qJt9qshHYnQN0HjVjdgc/gHRvi3CRzpjz0JutuArP3OKpPyXEi +ludp8TvJTf4WH6ybfpj/xP/g23mnJwfreOrFGw96jN0zRmBlvDzEofZ/A== -----END CERTIFICATE-----Generated at Tue Aug 25 23:43:36 2026 by rpki-client