$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.cer File: f7d89bee-0050-454d-8ec8-f07f5a25f2d2.cer (raw, json) Hash identifier: nKJYNNe3sk+PaeegqIfvhtyYAvy692rQp+A/3JLQwO8= Subject key identifier: 01:5D:01:DE:0C:62:E3:B4:2E:6D:07:C8:62:3B:1D:CC:93:22:B8:DE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EA43D987DA2A14DB9C5EA5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Jul 2026 20:45:11 +0000 Certificate not after: Sun 29 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 26323 IP: 198.133.75.0/24 IP: 199.201.222.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:3d:98:7d:a2:a1:4d:b9:c5:ea:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 27 20:45:11 2026 GMT Not After : Oct 29 20:45:11 2028 GMT Subject: CN=f7d89bee-0050-454d-8ec8-f07f5a25f2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:f2:28:6c:de:30:82:2c:8a:66:12:34:63: e7:84:15:ba:42:53:a2:ed:c5:32:26:2e:1c:5b:f9: 41:4d:53:fb:02:0a:7a:63:96:e4:63:05:f6:91:31: bf:a9:ea:bc:07:80:73:15:02:5b:ec:53:d3:7a:13: a1:fd:4e:41:b6:a7:bf:33:70:f5:db:44:c5:70:17: 4e:e2:4c:61:27:d0:44:0a:7b:e1:d8:57:f0:be:99: a8:04:f3:ce:41:6f:20:37:37:16:a1:1b:0a:fb:99: fa:52:e9:c5:14:a1:35:ac:34:6f:2a:17:45:50:f3: e1:d5:86:dc:35:7c:d6:a8:a4:a0:ef:ae:02:9c:70: 48:de:e9:c2:37:c6:df:b4:88:c9:58:57:58:bd:b6: 85:9d:b8:1f:e5:a8:d3:d8:31:fd:c8:0f:01:af:78: d3:c2:b8:4e:8d:ea:bd:3e:e7:e5:dd:41:cb:de:23: 9f:52:dc:14:46:0e:30:1b:7e:07:a3:4f:ed:f8:55: 5f:c2:22:d4:ed:76:38:31:96:6f:df:2a:e3:16:c2: d3:73:44:35:fd:9f:a5:e0:58:a2:be:35:fc:1a:3a: 78:73:86:87:5c:37:ef:c6:60:98:74:6b:70:d9:3d: 56:04:bf:6e:93:ed:04:39:ed:32:2c:e5:62:f1:3a: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:01:DE:0C:62:E3:B4:2E:6D:07:C8:62:3B:1D:CC:93:22:B8:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.133.75.0/24 199.201.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26323 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3a:5b:10:01:2b:56:3a:38:87:b0:94:b7:19:06:07:32:77: cb:5d:2a:4c:26:f1:a4:c9:c3:9b:1a:c4:d4:10:0a:d7:23:35: 31:d7:5c:ff:da:c9:c4:1f:eb:6b:a8:74:d7:c9:9e:80:94:79: a1:00:d6:69:55:6e:9d:1e:70:ec:35:06:e7:b8:8e:43:9d:10: 51:1c:88:61:b2:20:55:19:0b:e0:1c:a5:04:28:38:cd:c2:e0: 5f:5a:32:b7:e6:30:52:4b:ba:a1:1a:81:9e:ce:19:63:48:29: 6c:8d:93:70:4b:e0:59:b5:bc:cb:df:a2:19:64:c8:77:6f:f0: 55:c2:45:47:a6:03:b5:f3:81:64:a1:81:e3:19:83:ca:11:cc: d2:6a:21:03:06:6d:ae:5f:cb:7f:27:71:74:f4:8b:e2:f0:76: 7a:89:d6:cd:96:3f:f5:93:e4:26:bf:57:b4:97:3f:aa:49:6a: 76:23:ad:d2:e5:5d:e6:59:64:97:c5:59:4f:eb:b6:b0:71:40: e2:4b:0c:03:3e:2d:08:58:26:ce:ce:33:09:9d:b9:f4:f5:1e: 96:c0:78:99:1e:fd:71:fc:ad:8c:28:76:ec:3a:e7:a1:d6:8b: 91:d9:82:38:95:7b:9f:1d:d0:82:6c:1d:86:fa:73:9e:0c:cb: 4c:9f:41:c1 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE6kPZh9oqFNucXqWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyNzIwNDUxMVoXDTI4MTAyOTIwNDUxMVowLzEtMCsGA1UEAxMk ZjdkODliZWUtMDA1MC00NTRkLThlYzgtZjA3ZjVhMjVmMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG7yKGzeMIIsimYSNGPnhBW6QlOi7cUyJi4c W/lBTVP7Agp6Y5bkYwX2kTG/qeq8B4BzFQJb7FPTehOh/U5Btqe/M3D120TFcBdO 4kxhJ9BECnvh2FfwvpmoBPPOQW8gNzcWoRsK+5n6UunFFKE1rDRvKhdFUPPh1Ybc NXzWqKSg764CnHBI3unCN8bftIjJWFdYvbaFnbgf5ajT2DH9yA8Br3jTwrhOjeq9 Pufl3UHL3iOfUtwURg4wG34Ho0/t+FVfwiLU7XY4MZZv3yrjFsLTc0Q1/Z+l4Fii vjX8Gjp4c4aHXDfvxmCYdGtw2T1WBL9uk+0EOe0yLOVi8TohVwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFAFdAd4MYuO0Lm0HyGI7HcyTIrjeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m N2Q4OWJlZS0wMDUwLTQ1NGQtOGVjOC1mMDdmNWEyNWYyZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Y3ZDg5YmVlLTAwNTAtNDU0ZC04 ZWM4LWYwN2Y1YTI1ZjJkMi9mN2Q4OWJlZS0wMDUwLTQ1NGQtOGVjOC1mMDdmNWEy NWYyZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGhUsDBADHyd4wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICZtMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAdTpbEAErVjo4h7CUtxkGBzJ3y10qTCbxpMnDmxrE 1BAK1yM1Mddc/9rJxB/ra6h018megJR5oQDWaVVunR5w7DUG57iOQ50QURyIYbIg VRkL4BylBCg4zcLgX1oyt+YwUku6oRqBns4ZY0gpbI2TcEvgWbW8y9+iGWTId2/w VcJFR6YDtfOBZKGB4xmDyhHM0mohAwZtrl/LfydxdPSL4vB2eonWzZY/9ZPkJr9X tJc/qklqdiOt0uVd5llkl8VZT+u2sHFA4ksMAz4tCFgmzs4zCZ259PUelsB4mR79 cfytjCh27DrnodaLkdmCOJV7nx3QgmwdhvpzngzLTJ9BwQ== -----END CERTIFICATE-----Generated at Tue Jul 28 16:07:48 2026 by rpki-client