$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer File: fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer (raw, json) Hash identifier: niHLcyPfJFGwKPRtu5SOVljAkZ6j+UOS0FKIFM98/ic= Subject key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584ECD2FA05C838EF530B9B8C0F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Aug 2026 12:45:11 +0000 Certificate not after: Mon 13 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 157.239.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:2f:a0:5c:83:8e:f5:30:b9:b8:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 11 12:45:11 2026 GMT Not After : Nov 13 13:45:11 2028 GMT Subject: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:e3:5e:8d:7c:2c:57:78:92:71:60:f1:7f: e2:d0:ad:cd:2a:f2:50:ea:f6:58:96:7b:d5:b1:7b: a7:48:e7:d7:b3:2f:4a:ec:91:9c:18:05:b4:51:6b: 35:62:1b:ac:3f:0c:5c:55:ac:e4:c6:12:59:6d:9d: b1:6c:2c:ab:b8:aa:20:69:d3:cd:80:b4:12:c5:75: bf:1e:5e:43:58:be:35:e7:a3:8e:e2:a7:af:35:0e: a0:43:ea:53:4e:d1:41:c2:bf:1b:06:0d:a6:c5:93: a7:20:d6:4f:9d:d3:de:b0:de:28:bd:a3:0c:6e:63: a3:61:a4:4f:2b:a3:fe:c5:5c:1b:00:fd:0c:2b:48: 69:ab:9c:1f:d9:76:57:db:48:9f:f0:67:c4:58:89: 40:ca:9c:fa:58:63:34:df:f0:d4:1c:93:46:83:15: a3:98:17:8a:ad:fe:c7:22:3e:56:b7:ce:fd:0e:ff: 28:a2:04:01:bf:57:92:14:1d:8e:a6:e2:03:b0:8c: 11:93:8e:0b:c0:8c:01:ab:97:45:cd:58:22:85:41: 21:75:8e:cf:1d:63:0b:19:e6:af:0d:07:ab:02:58: af:9b:10:70:da:62:57:8e:cc:af:8c:07:2b:87:33: 1b:94:f1:87:de:8e:79:07:12:b6:5d:0a:59:2b:d7: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3d:2f:f3:8b:f8:64:2c:94:59:a2:5c:d6:f2:c5:3f:16:20: 6d:bd:0e:42:8c:c9:bb:37:6d:34:c8:52:01:41:fc:80:9f:82: d8:f3:a1:9d:01:0b:6e:e1:9f:f6:d1:20:07:a6:91:51:4f:b2: 1b:54:75:16:97:09:1a:40:0f:91:7a:a0:fc:58:f3:01:60:06: d1:3d:fc:6a:b8:8c:5c:ea:e4:38:b9:46:13:dd:d1:46:af:2f: ff:2a:9a:a2:c2:4c:22:9d:1a:81:68:04:64:91:4c:f8:ec:2b: bf:99:57:2f:f6:c4:b9:56:25:4d:7c:e8:ee:43:cf:57:6c:f5: a6:73:55:37:97:82:aa:e7:39:50:73:ef:b0:b6:2a:ad:f9:7c: 3c:e9:f2:8a:bf:3d:ab:d0:50:c2:93:a5:f1:a8:01:5f:55:d1: 83:4a:4e:41:58:6a:0c:0f:81:b4:d4:da:91:47:bc:21:51:6f: 26:91:8e:c0:7f:91:bc:14:fa:19:0e:70:5b:a9:b4:e5:1e:02: 8e:17:a5:0b:20:09:40:75:8e:d1:dd:bc:c9:f8:e9:a9:0c:11: 0c:76:cc:8c:d1:ae:7c:05:d8:32:d1:0c:25:b6:f6:89:12:cf: df:5e:dd:bb:1b:b7:81:85:aa:61:14:25:a6:85:28:55:d1:4f: c9:10:6a:6b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7NL6Bcg471MLm4wPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgxMTEyNDUxMVoXDTI4MTExMzEzNDUxMVowLzEtMCsGA1UEAxMk ZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2ExZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSbjXo18LFd4knFg8X/i0K3NKvJQ6vZYlnvV sXunSOfXsy9K7JGcGAW0UWs1YhusPwxcVazkxhJZbZ2xbCyruKogadPNgLQSxXW/ Hl5DWL4156OO4qevNQ6gQ+pTTtFBwr8bBg2mxZOnINZPndPesN4ovaMMbmOjYaRP K6P+xVwbAP0MK0hpq5wf2XZX20if8GfEWIlAypz6WGM03/DUHJNGgxWjmBeKrf7H Ij5Wt879Dv8oogQBv1eSFB2OpuIDsIwRk44LwIwBq5dFzVgihUEhdY7PHWMLGeav DQerAlivmxBw2mJXjsyvjAcrhzMblPGH3o55BxK2XQpZK9fXbQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDxsaTlkZJKPIM44yiZmG8hp9lI8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m ZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZkZDRiNWFkLWJiY2EtNGZlOS04 NWI0LThmMmU1Y2NhMWQ0Ny9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNj YTFkNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAWd7wAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQz0v84v4ZCyUWaJc1vLF PxYgbb0OQozJuzdtNMhSAUH8gJ+C2POhnQELbuGf9tEgB6aRUU+yG1R1FpcJGkAP kXqg/FjzAWAG0T38ariMXOrkOLlGE93RRq8v/yqaosJMIp0agWgEZJFM+Owrv5lX L/bEuVYlTXzo7kPPV2z1pnNVN5eCquc5UHPvsLYqrfl8POnyir89q9BQwpOl8agB X1XRg0pOQVhqDA+BtNTakUe8IVFvJpGOwH+RvBT6GQ5wW6m05R4CjhelCyAJQHWO 0d28yfjpqQwRDHbMjNGufAXYMtEMJbb2iRLP317duxu3gYWqYRQlpoUoVdFPyRBq aw== -----END CERTIFICATE-----Generated at Thu Aug 20 23:32:52 2026 by rpki-client