$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer File: 6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer (raw, json) Hash identifier: vLUFL2PYOJa5f8YczLz5oj+KUsWofLXq5o9P99AazJM= Subject key identifier: A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584E5E445F8D71342E266F593600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 19:12:16 +0000 Certificate not after: Wed 31 May 2028 17:36:50 +0000 Subordinate resources: AS: 53359 IP: 23.152.132.0/24 IP: 206.197.223.0/24 IP: 2602:f446::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:44:5f:8d:71:34:2e:26:6f:59:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jul 2 19:12:16 2026 GMT Not After : May 31 17:36:50 2028 GMT Subject: CN=6e4a0a5e-aa44-4dce-87f2-8e9cedff1234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:2d:b6:de:8b:4f:37:8b:bb:b6:19:e6:8f: c7:8a:d8:31:43:77:66:99:0e:52:a0:09:d4:71:a5: 3a:26:38:93:af:f6:b1:03:25:1a:36:71:48:9f:92: f0:3f:40:43:7f:d2:85:df:53:e9:b9:2c:9d:ae:1b: d2:5d:ca:eb:35:7f:4c:7d:0a:61:2e:0c:26:f1:2b: cc:82:e2:30:1c:06:8a:b1:04:48:99:39:c1:8e:2b: 85:ff:38:f7:f9:f3:88:9b:77:e5:d7:a9:f4:4e:34: 55:3b:d8:2e:05:74:3d:a7:78:30:f3:a8:b7:80:70: 41:40:1f:93:ce:94:2b:6d:ff:7f:52:9a:e7:53:bd: a5:f9:3a:48:38:eb:85:62:b3:f5:7b:83:5e:79:c1: 65:8c:3e:15:f5:62:45:dd:10:5e:43:1e:48:be:7c: 6b:5c:0f:58:9b:49:42:30:e3:ce:b7:1d:14:72:71: e6:72:42:64:c5:30:77:80:0f:40:1d:fb:64:08:2a: f3:56:be:55:38:4b:9a:d8:70:02:c3:82:b9:e3:2e: 62:23:d9:6c:d5:6b:b4:79:ff:40:7d:aa:44:41:79: 9d:e7:e5:ed:8a:84:c0:15:59:32:f5:6f:90:57:8b: 44:00:e4:88:a2:09:1f:2c:b4:c2:ef:ea:fb:b6:8a: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.152.132.0/24 206.197.223.0/24 IPv6: 2602:f446::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53359 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:55:e8:ee:9e:83:12:ac:ab:35:02:2c:c6:37:a0:24:a8:3c: 01:21:a3:99:53:58:9e:08:c5:8d:fc:e9:13:d6:5a:43:7a:dd: 82:04:01:5d:c4:aa:ca:13:1e:fd:bc:b9:60:e7:51:83:9b:70: 99:5d:c9:be:fe:79:d6:a1:43:a8:b8:bf:4b:18:ba:06:7e:21: 56:ee:c5:5b:41:d0:b0:81:7f:39:4f:2e:ce:f2:cd:93:c3:c0: 8f:ea:53:30:e4:85:68:1a:f6:0d:2c:84:7c:7f:6d:c0:07:56: 5d:cd:67:c0:8b:76:fa:20:ea:90:ad:2c:4d:01:c1:4d:ec:08: 80:cd:96:78:52:e4:67:90:f6:ab:2a:55:9a:a5:c1:6c:d8:c9: 9d:fd:07:f1:5c:db:1c:dc:e2:80:26:6a:5b:b8:f4:17:4f:03: 70:3e:0b:f0:bf:70:c1:6c:db:7d:96:28:bc:84:cc:fc:34:6b: 23:21:22:d7:0e:8a:87:77:c4:8b:52:9f:38:ff:69:dc:7d:eb: 92:88:f9:46:b1:10:57:cf:bc:e2:57:87:b1:36:30:2a:89:62: 46:f0:2f:86:fd:42:54:1c:b9:ee:a1:f0:25:85:8d:1b:6d:4e: de:0e:c7:15:17:d8:65:2d:bf:f9:62:b5:bc:3d:4a:81:9c:3d: 8a:b5:07:e2 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5eRF+NcTQuJm9ZNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDcwMjE5MTIxNloXDTI4MDUzMTE3MzY1MFowLzEtMCsGA1UEAxMk NmU0YTBhNWUtYWE0NC00ZGNlLTg3ZjItOGU5Y2VkZmYxMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwukttt6LTzeLu7YZ5o/HitgxQ3dmmQ5SoAnU caU6JjiTr/axAyUaNnFIn5LwP0BDf9KF31PpuSydrhvSXcrrNX9MfQphLgwm8SvM guIwHAaKsQRImTnBjiuF/zj3+fOIm3fl16n0TjRVO9guBXQ9p3gw86i3gHBBQB+T zpQrbf9/UprnU72l+TpIOOuFYrP1e4NeecFljD4V9WJF3RBeQx5IvnxrXA9Ym0lC MOPOtx0UcnHmckJkxTB3gA9AHftkCCrzVr5VOEua2HACw4K54y5iI9ls1Wu0ef9A fapEQXmd5+XtioTAFVky9W+QV4tEAOSIogkfLLTC7+r7toq7TwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFKRADm+AtSk1fdn4sXRu2Ci90Gh6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 ZTRhMGE1ZS1hYTQ0LTRkY2UtODdmMi04ZTljZWRmZjEyMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzZlNGEwYTVlLWFhNDQtNGRjZS04 N2YyLThlOWNlZGZmMTIzNC82ZTRhMGE1ZS1hYTQ0LTRkY2UtODdmMi04ZTljZWRm ZjEyMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmIQDBADOxd8wDgQCAAIwCAMGACYC9EYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDQbzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7VejunoMSrKs1AizG N6AkqDwBIaOZU1ieCMWN/OkT1lpDet2CBAFdxKrKEx79vLlg51GDm3CZXcm+/nnW oUOouL9LGLoGfiFW7sVbQdCwgX85Ty7O8s2Tw8CP6lMw5IVoGvYNLIR8f23AB1Zd zWfAi3b6IOqQrSxNAcFN7AiAzZZ4UuRnkParKlWapcFs2Mmd/QfxXNsc3OKAJmpb uPQXTwNwPgvwv3DBbNt9lii8hMz8NGsjISLXDoqHd8SLUp84/2ncfeuSiPlGsRBX z7ziV4exNjAqiWJG8C+G/UJUHLnuofAlhY0bbU7eDscVF9hlLb/5YrW8PUqBnD2K tQfi -----END CERTIFICATE-----Generated at Fri Jul 17 03:19:51 2026 by rpki-client