$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: j8DHb/xC/gME5TzCi1T8uIstHm5hQSy6zupxXfvHg18= Subject key identifier: A6:EC:B3:48:99:06:6F:D3:18:58:BE:2D:BD:FF:81:A2:6A:48:1E:F8 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584EA65D3E56F5325882D13C3400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C76F Signing time: Tue 28 Jul 2026 15:00:23 +0000 Manifest this update: Tue 28 Jul 2026 15:00:23 +0000 Manifest next update: Fri 31 Jul 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: qpglPdIXdO3JX6YriZnrA/V6gf0ZfzipZQ5oXeyxYnk=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: fRKCMtsYdcigLchR+clGt67ZDo3Puu34gDluVQ2d7HU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:5d:3e:56:f5:32:58:82:d1:3c:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Jul 28 15:00:23 2026 GMT Not After : Jul 31 15:00:00 2026 GMT Subject: CN=d125bca1-af0e-4418-864f-3662cdb374dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:f6:8e:46:e8:1c:bd:a3:b5:e4:d8:77:3c: e6:f2:37:e5:79:4f:bf:15:4b:84:57:16:3b:38:cb: f8:74:fe:f7:5e:03:aa:ad:c5:95:db:d1:df:26:24: be:c2:40:62:fc:40:bd:ac:de:80:22:d7:76:7a:db: f4:86:fc:b0:7a:e1:62:64:c1:2a:fb:b1:bc:9c:33: bd:54:cf:ae:cb:8c:d2:34:d4:85:56:03:f5:b1:88: f6:b7:fe:5b:8d:0f:0f:91:2d:8b:61:35:3e:9e:44: 66:fb:da:5b:2b:b4:bd:8c:b8:58:eb:50:d7:c5:16: 18:be:9e:f4:74:71:b0:84:82:cb:c8:d3:3a:da:da: e1:13:d6:da:15:bf:9a:71:4f:07:54:fe:d9:63:d9: 89:63:b8:4d:cc:8d:60:41:9e:1c:e6:0a:ef:bf:ff: 29:93:45:f7:5c:14:d1:93:e9:41:62:66:15:0b:ce: da:31:b8:07:cc:ee:8c:09:0c:bc:74:ea:b3:04:c5: 86:39:0d:94:b4:e8:1b:f9:22:1a:59:1d:e7:31:96: 73:3c:e8:89:5a:bf:27:dc:43:ab:7e:37:33:83:d7: 24:b5:e9:fd:98:1c:88:38:6e:cf:6e:81:61:d5:a0: 98:0a:14:aa:f7:a2:68:b9:d7:fd:dd:b0:e7:75:f1: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EC:B3:48:99:06:6F:D3:18:58:BE:2D:BD:FF:81:A2:6A:48:1E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fa:32:8c:00:d5:96:0e:02:37:ff:d3:a8:03:17:24:70:b1: 25:c4:0f:ee:c5:41:ed:45:9c:73:fd:5b:fd:02:e5:00:68:2a: 8a:da:0b:9c:35:b5:17:2b:2e:40:31:d5:55:49:f7:0e:62:05: 21:9d:4b:bc:c7:b0:f6:0a:e2:9f:1c:1b:e6:98:2b:22:5e:ac: fc:e6:5b:fc:76:b5:28:fa:11:3d:11:36:ef:7f:fd:f8:57:ad: c8:89:21:51:96:04:3a:ae:e6:eb:15:f2:7c:3c:ec:4f:d8:5a: a5:ac:86:a4:10:9a:5c:57:80:83:e0:1e:60:0e:de:76:3e:47: 8e:0a:4a:7f:07:7e:6e:5b:ce:29:f6:51:f0:ec:cf:d9:c3:a6: 72:30:bd:14:fd:e8:44:e7:3c:78:75:3d:4e:1d:8d:ac:1b:9b: e1:52:ef:6d:9e:67:94:36:c8:c5:67:26:14:18:44:58:84:e7: 4e:35:1f:12:4b:bf:07:37:8f:76:36:49:85:c5:f6:3a:65:7d: fb:30:a7:a1:4c:92:4e:6d:12:ee:e8:a7:ff:b1:02:fa:d7:10: e9:8f:6c:0b:41:c3:91:f4:4e:fe:c5:17:c2:52:56:48:67:8f: 95:8d:47:5c:60:4c:cc:d1:5d:d1:e5:5d:1e:fc:5e:2b:52:d8: a9:4b:7d:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mXT5W9TJYgtE8NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDcyODE1MDAyM1oXDTI2MDczMTE1MDAwMFowLzEtMCsGA1UEAxMk ZDEyNWJjYTEtYWYwZS00NDE4LTg2NGYtMzY2MmNkYjM3NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBz2jkboHL2jteTYdzzm8jfleU+/FUuEVxY7 OMv4dP73XgOqrcWV29HfJiS+wkBi/EC9rN6AItd2etv0hvyweuFiZMEq+7G8nDO9 VM+uy4zSNNSFVgP1sYj2t/5bjQ8PkS2LYTU+nkRm+9pbK7S9jLhY61DXxRYYvp70 dHGwhILLyNM62trhE9baFb+acU8HVP7ZY9mJY7hNzI1gQZ4c5grvv/8pk0X3XBTR k+lBYmYVC87aMbgHzO6MCQy8dOqzBMWGOQ2UtOgb+SIaWR3nMZZzPOiJWr8n3EOr fjczg9ckten9mByIOG7PboFh1aCYChSq96Joudf93bDndfHHOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKbss0iZBm/TGFi+Lb3/gaJqSB74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE+jKMANWWDgI3/9OoAxck cLElxA/uxUHtRZxz/Vv9AuUAaCqK2gucNbUXKy5AMdVVSfcOYgUhnUu8x7D2CuKf HBvmmCsiXqz85lv8drUo+hE9ETbvf/34V63IiSFRlgQ6rubrFfJ8POxP2FqlrIak EJpcV4CD4B5gDt52PkeOCkp/B35uW84p9lHw7M/Zw6ZyML0U/ehE5zx4dT1OHY2s G5vhUu9tnmeUNsjFZyYUGERYhOdONR8SS78HN492NkmFxfY6ZX37MKehTJJObRLu 6Kf/sQL61xDpj2wLQcOR9E7+xRfCUlZIZ4+VjUdcYEzM0V3R5V0e/F4rUtipS32g -----END CERTIFICATE-----Generated at Tue Jul 28 21:55:53 2026 by rpki-client