$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer File: 6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer (raw, json) Hash identifier: T/BtSXa97Kk13muW591hLri4i6yVH1WH4IMWQ//exY8= Subject key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EA5A2F02B68B8AE8E893DED74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jul 2026 08:45:11 +0000 Certificate not after: Mon 30 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 64.239.63.0/24 IP: 162.252.36.0/22 IP: 170.117.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:a2:f0:2b:68:b8:ae:8e:89:3d:ed:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 28 08:45:11 2026 GMT Not After : Oct 30 08:45:11 2028 GMT Subject: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:e8:d2:4e:de:dd:65:e3:0a:da:91:e2:85: 4a:aa:00:05:18:31:fe:8a:b2:77:aa:67:f4:ba:08: 0c:d4:45:ef:b6:55:ec:98:99:bd:37:8a:1a:72:e8: da:5b:b6:65:b3:94:45:42:22:aa:8b:8a:cf:19:49: 0f:d4:4c:f8:87:ee:a4:15:38:5a:45:62:c4:e7:63: 3d:b3:be:ee:3c:0a:d3:ce:a8:0e:02:5d:23:3d:8b: ed:f8:17:f2:04:74:3e:3b:32:b3:16:8f:bf:4a:a3: 88:f0:fe:e9:d5:7c:65:25:b5:5e:a5:07:79:4c:04: ce:65:6c:34:82:9b:7c:1a:9a:b7:58:61:99:69:5a: 10:d0:98:3e:1c:8e:6b:56:1c:29:f2:95:67:58:ce: 12:08:95:01:a2:03:a8:6d:ee:b3:18:85:b7:ec:0f: 2c:fc:d1:d2:b1:57:e7:cf:15:e3:e4:9a:12:89:d9: b8:80:5e:1f:c0:f4:e3:8e:df:ad:a2:7e:41:4d:55: 35:ca:44:bf:8a:66:9a:28:78:27:27:4f:47:01:9b: e7:0d:9e:e6:1e:57:9f:e1:88:ba:8e:52:28:8f:a8: 8b:ca:83:2a:8e:65:52:0c:46:90:d4:12:8e:85:fc: 7f:1c:f0:79:a4:c1:19:8f:d8:cd:a1:19:d1:76:7f: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.239.63.0/24 162.252.36.0/22 170.117.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5c:27:e5:85:8c:76:c6:dd:4e:b6:63:c4:54:ff:ea:8b:d3: 75:78:11:53:6c:ad:24:c3:8f:00:bc:24:30:eb:28:80:18:93: 9b:2d:4a:81:c0:28:72:cc:c9:d7:04:23:5d:34:9c:cb:05:98: d2:03:e0:49:00:ad:86:75:85:cb:34:b3:40:73:00:b0:0d:06: a6:2e:53:28:82:30:fa:65:6d:6a:83:22:9f:fa:25:bb:8c:fb: bb:cf:50:83:0c:80:0f:fc:06:f0:25:51:bb:89:d4:97:81:fb: ee:c4:de:22:02:59:95:ea:57:2b:a3:25:a6:8f:49:84:8c:b8: 16:fe:fa:b7:8a:29:ef:01:b0:0b:ba:75:eb:7f:a6:12:b5:da: 98:a2:c0:b5:2e:6f:b9:b9:98:b0:99:a1:b4:89:3c:52:48:d0: c2:98:d6:e9:4c:28:8e:b0:52:72:33:7c:d6:7e:20:b0:93:08: 7a:41:b5:ba:6a:d8:ed:64:18:c9:79:13:7a:e1:8f:99:70:5f: 04:d5:c5:95:3f:43:7e:9a:fb:20:eb:e8:fd:d4:38:2f:5f:d1: 74:5d:74:89:ac:35:d2:e8:66:b1:19:ee:4f:aa:d7:50:a2:54: d8:15:e3:d9:32:f1:28:13:c6:25:7d:b0:f6:6d:b1:a1:fd:66: f8:c9:1c:6a -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE6lovAraLiujok97XQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcyODA4NDUxMVoXDTI4MTAzMDA4NDUxMVowLzEtMCsGA1UEAxMk Njk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeLo0k7e3WXjCtqR4oVKqgAFGDH+irJ3qmf0 uggM1EXvtlXsmJm9N4oacujaW7Zls5RFQiKqi4rPGUkP1Ez4h+6kFThaRWLE52M9 s77uPArTzqgOAl0jPYvt+BfyBHQ+OzKzFo+/SqOI8P7p1XxlJbVepQd5TATOZWw0 gpt8Gpq3WGGZaVoQ0Jg+HI5rVhwp8pVnWM4SCJUBogOobe6zGIW37A8s/NHSsVfn zxXj5JoSidm4gF4fwPTjjt+ton5BTVU1ykS/imaaKHgnJ09HAZvnDZ7mHlef4Yi6 jlIoj6iLyoMqjmVSDEaQ1BKOhfx/HPB5pMEZj9jNoRnRdn+QwwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFNQJW061/jcu84R2FwYeIvUXnAqEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY5NTJjYzBiLWEzNjUtNDBiOC1h OGIzLTQzNDA4YzRjNmZlMS82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0 YzZmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABA7z8DBAKi/CQDBAKqdaQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPVwn 5YWMdsbdTrZjxFT/6ovTdXgRU2ytJMOPALwkMOsogBiTmy1KgcAocszJ1wQjXTSc ywWY0gPgSQCthnWFyzSzQHMAsA0Gpi5TKIIw+mVtaoMin/olu4z7u89QgwyAD/wG 8CVRu4nUl4H77sTeIgJZlepXK6Mlpo9JhIy4Fv76t4op7wGwC7p163+mErXamKLA tS5vubmYsJmhtIk8UkjQwpjW6UwojrBScjN81n4gsJMIekG1umrY7WQYyXkTeuGP mXBfBNXFlT9Dfpr7IOvo/dQ4L1/RdF10iaw10uhmsRnuT6rXUKJU2BXj2TLxKBPG JX2w9m2xof1m+Mkcag== -----END CERTIFICATE-----Generated at Tue Jul 28 20:37:37 2026 by rpki-client