$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer File: 1b7151e5-64cf-4efa-968e-47796f2f7523.cer (raw, json) Hash identifier: qtmT/mjz8QWd1CfsPQZkBSzt5Ol6S3NXSdLPboDyJXU= Subject key identifier: CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EA00D90EFDD0E3446D62AF080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jul 2026 08:45:11 +0000 Certificate not after: Sat 28 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 16995 IP: 104.218.84.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:0d:90:ef:dd:0e:34:46:d6:2a:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 26 08:45:11 2026 GMT Not After : Oct 28 08:45:11 2028 GMT Subject: CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:c9:d8:bd:4d:11:89:74:f8:ad:cc:c2:87: 9a:cc:33:8b:61:94:fb:6e:71:40:d0:f1:25:0a:9c: c6:0a:5c:e0:65:49:18:7a:95:e4:39:c0:b2:c5:5d: 47:be:aa:53:ad:5d:d5:a6:a3:50:e4:41:74:31:84: f2:75:a6:f8:b8:7a:f8:4f:fe:48:02:49:0f:fe:17: a9:e5:96:8e:5e:bb:41:24:04:ea:ce:3d:a3:ba:a0: 5d:59:00:1d:a3:1a:a2:21:42:16:c1:8f:84:b3:71: cc:53:b1:f6:c4:cc:db:a0:3c:12:02:0c:11:55:a6: 8c:9c:b0:ce:13:00:72:7c:30:a1:a9:a4:6e:50:fa: e2:9d:20:c9:89:75:40:3f:d6:ad:40:61:51:76:95: 0b:0b:2d:cb:a4:87:89:72:ef:82:1f:eb:31:95:b5: ed:8a:8d:67:7d:44:92:ba:83:2f:f7:45:d9:8d:fe: bc:24:cb:19:f0:c3:5d:ce:19:75:8f:1a:c7:11:23: 37:15:f5:ff:ca:32:e4:1b:2b:84:46:ab:7e:3e:df: 72:29:d3:77:54:ea:b5:1b:51:56:a7:83:03:d9:5a: 2b:32:32:3b:c4:55:54:29:5c:2d:49:bd:48:fc:95: 36:8b:50:c3:fa:61:93:03:20:ef:e5:20:06:41:d2: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.218.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16995 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fc:31:78:ee:14:66:87:5f:4d:0d:f8:16:46:ff:47:41:0e: 3e:cd:9a:9d:ef:f5:e7:b4:4f:b4:fb:88:9e:3f:95:92:2d:b9: b5:f5:89:c4:aa:59:ab:93:01:85:a0:b0:98:5e:e8:cd:a6:e6: 17:1f:e1:44:9c:28:57:c3:08:59:da:0b:32:47:b3:c4:f7:5c: ca:bb:57:65:e5:e8:9c:b5:a3:5c:9e:bc:8f:9e:6a:ee:dc:a7: fd:f7:ac:ee:46:fb:8f:e5:c6:89:79:a2:bc:28:d5:a9:f2:9f: 57:d6:a1:a6:b4:45:11:8f:ca:5f:41:10:9e:20:90:ed:00:43: 09:53:ef:d8:95:be:73:06:d8:6d:b1:cd:8a:d8:c0:67:3c:25: 7c:07:fc:6e:fa:ef:a0:fd:af:a9:bb:b8:97:00:00:be:50:f9: c5:f1:48:82:b0:9e:50:cc:be:ae:1f:cc:c5:a4:ce:23:51:aa: f1:d6:5c:3c:91:f0:7a:db:25:73:7e:41:0f:fc:af:bf:47:78: 32:34:37:24:c1:03:93:2e:6b:f7:2d:b5:21:64:50:84:d2:af: cb:57:a8:73:9f:34:f2:6d:fe:6c:8e:a9:b1:7a:d3:b1:b3:cc: f1:4c:57:3b:8b:9b:2e:19:4f:b9:1e:a8:5d:a6:db:c1:45:c2: 98:2d:4c:2b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE6gDZDv3Q40RtYq8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDcyNjA4NDUxMVoXDTI4MTAyODA4NDUxMVowLzEtMCsGA1UEAxMk MWI3MTUxZTUtNjRjZi00ZWZhLTk2OGUtNDc3OTZmMmY3NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWjJ2L1NEYl0+K3MwoeazDOLYZT7bnFA0PEl CpzGClzgZUkYepXkOcCyxV1HvqpTrV3VpqNQ5EF0MYTydab4uHr4T/5IAkkP/hep 5ZaOXrtBJATqzj2juqBdWQAdoxqiIUIWwY+Es3HMU7H2xMzboDwSAgwRVaaMnLDO EwByfDChqaRuUPrinSDJiXVAP9atQGFRdpULCy3LpIeJcu+CH+sxlbXtio1nfUSS uoMv90XZjf68JMsZ8MNdzhl1jxrHESM3FfX/yjLkGyuERqt+Pt9yKdN3VOq1G1FW p4MD2VorMjI7xFVUKVwtSb1I/JU2i1DD+mGTAyDv5SAGQdKSHQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFM7KGCwkpd+HFizhov1esFXges64MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x YjcxNTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5NmYyZjc1MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFiNzE1MWU1LTY0Y2YtNGVmYS05 NjhlLTQ3Nzk2ZjJmNzUyMy8xYjcxNTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5NmYy Zjc1MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo2lQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC QmMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKPwxeO4UZodfTQ34Fkb/R0EOPs2ane/157RPtPuInj+Vki25 tfWJxKpZq5MBhaCwmF7ozabmFx/hRJwoV8MIWdoLMkezxPdcyrtXZeXonLWjXJ68 j55q7tyn/fes7kb7j+XGiXmivCjVqfKfV9ahprRFEY/KX0EQniCQ7QBDCVPv2JW+ cwbYbbHNitjAZzwlfAf8bvrvoP2vqbu4lwAAvlD5xfFIgrCeUMy+rh/MxaTOI1Gq 8dZcPJHwetslc35BD/yvv0d4MjQ3JMEDky5r9y21IWRQhNKvy1eoc5808m3+bI6p sXrTsbPM8UxXO4ubLhlPuR6oXabbwUXCmC1MKw== -----END CERTIFICATE-----Generated at Tue Jul 28 14:46:41 2026 by rpki-client