$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer File: d96f592a-8fa9-4ec8-a272-b56c2537919c.cer (raw, json) Hash identifier: JhgJ4FKgWMvU46qW5qeC1oNc497M/pZND+v8hzGLxbw= Subject key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E5AD2ECBB75A312E2EEB54C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 13:36:15 +0000 Certificate not after: Tue 07 Sep 2027 22:35:24 +0000 Subordinate resources: AS: 399587 IP: 23.139.228.0/24 IP: 169.128.56.0/22 IP: 2602:f623::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:d2:ec:bb:75:a3:12:e2:ee:b5:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 1 13:36:15 2026 GMT Not After : Sep 7 22:35:24 2027 GMT Subject: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:fd:d5:5a:f0:6b:04:40:3d:06:d2:6d:8b: a3:37:39:95:3d:ea:f5:3a:aa:4d:36:7a:b5:b4:3c: 75:81:67:ad:3f:d8:f9:2b:dc:a9:ec:1d:ca:70:ba: d1:0b:20:b4:8b:16:a3:f6:a2:0d:d4:df:2c:40:ec: d0:0c:c4:49:1c:94:a6:ce:fa:aa:b2:03:b3:c3:a8: 98:f1:d7:83:92:96:bf:9f:90:c8:da:22:c8:18:be: b6:f1:83:58:31:95:dc:ba:39:a9:10:e5:90:4e:3b: 81:cd:3d:e6:a6:97:9e:78:ba:bd:df:2b:5e:23:c1: fe:8a:8c:49:92:a4:84:27:c1:48:15:9d:37:b3:26: 0a:c0:d5:6f:22:27:c7:2d:1c:f7:15:4d:6a:80:a4: f5:25:78:2f:a9:64:ff:57:e3:57:0f:80:78:dc:00: fa:b4:07:d9:bd:0f:77:24:b7:71:8a:50:c8:76:27: a5:b8:c5:e0:5f:47:26:8c:b4:f5:29:ea:73:26:b4: c9:9b:ea:72:82:04:ce:20:3b:5a:b1:7a:f0:d6:89: 4a:39:3f:2a:62:86:9a:dd:64:28:0a:b3:15:25:90: 8e:25:e0:42:57:fd:20:f6:a6:58:21:da:20:e9:87: 39:9a:b6:25:aa:c0:e6:3f:d5:ae:59:bc:da:00:bb: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.139.228.0/24 169.128.56.0/22 IPv6: 2602:f623::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399587 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d2:8d:ce:70:46:5e:26:13:29:4a:a2:c5:85:ff:05:ac:13: 5f:c9:34:48:6f:ac:77:ff:22:ee:62:69:dc:df:cb:f6:b8:9b: 97:52:ce:fe:75:ed:c9:8b:44:89:a9:a0:f8:42:14:ad:db:b3: f5:50:41:a5:c6:96:86:c9:93:f8:40:c6:3f:09:70:db:a5:f9: 64:ed:cc:d9:42:f4:cd:6e:fd:2d:20:9a:29:22:b5:6b:96:be: 89:8b:b9:a7:25:9e:6b:24:66:6f:7c:ec:cd:da:26:5e:50:45: 2c:83:ed:a4:20:8d:bc:48:d2:1f:0d:05:c9:d9:89:55:12:06: a6:44:22:a1:6a:d3:07:6c:1d:e0:79:01:1a:34:e1:bb:6b:ed: eb:52:1b:27:4a:cb:6d:2a:ca:34:f8:f5:68:fc:b5:74:10:21: 09:91:a9:53:65:f7:f2:aa:db:2b:48:04:4a:32:f5:d5:55:b4: 26:71:d7:47:f8:e2:cf:74:f2:11:3a:7e:b9:f0:e6:dc:b9:a9: 32:6a:77:cc:5a:f7:1a:d2:0c:05:9e:de:25:84:08:3f:a6:e8: 8f:af:0c:25:25:d8:5e:18:f4:40:43:ee:63:37:ef:3a:fc:fd: 06:29:2f:ef:ee:77:fc:1e:64:e4:4b:20:2e:32:91:34:f4:55: 2e:54:45:9a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5a0uy7daMS4u61TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwMTEzMzYxNVoXDTI3MDkwNzIyMzUyNFowLzEtMCsGA1UEAxMk ZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00H91VrwawRAPQbSbYujNzmVPer1OqpNNnq1 tDx1gWetP9j5K9yp7B3KcLrRCyC0ixaj9qIN1N8sQOzQDMRJHJSmzvqqsgOzw6iY 8deDkpa/n5DI2iLIGL628YNYMZXcujmpEOWQTjuBzT3mppeeeLq93yteI8H+ioxJ kqSEJ8FIFZ03syYKwNVvIifHLRz3FU1qgKT1JXgvqWT/V+NXD4B43AD6tAfZvQ93 JLdxilDIdieluMXgX0cmjLT1KepzJrTJm+pyggTOIDtasXrw1olKOT8qYoaa3WQo CrMVJZCOJeBCV/0g9qZYIdog6Yc5mrYlqsDmP9WuWbzaALtkIQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBSe/r9q2QEoOhZ+THDTY0FHgELyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k OTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Q5NmY1OTJhLThmYTktNGVjOC1h MjcyLWI1NmMyNTM3OTE5Yy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUz NzkxOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXi+QDBAKpgDgwDgQCAAIwCAMGBCYC9iMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYY4zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAq0o3OcEZeJhMpSqLF hf8FrBNfyTRIb6x3/yLuYmnc38v2uJuXUs7+de3Ji0SJqaD4QhSt27P1UEGlxpaG yZP4QMY/CXDbpflk7czZQvTNbv0tIJopIrVrlr6Ji7mnJZ5rJGZvfOzN2iZeUEUs g+2kII28SNIfDQXJ2YlVEgamRCKhatMHbB3geQEaNOG7a+3rUhsnSsttKso0+PVo /LV0ECEJkalTZffyqtsrSARKMvXVVbQmcddH+OLPdPIROn658ObcuakyanfMWvca 0gwFnt4lhAg/puiPrwwlJdheGPRAQ+5jN+86/P0GKS/v7nf8HmTkSyAuMpE09FUu VEWa -----END CERTIFICATE-----Generated at Sat Jul 4 00:26:24 2026 by rpki-client