$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer File: bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer (raw, json) Hash identifier: xuLpfkOSKxtgBY6QL3IIAe9NFTM9pt90TAfwPvWBcck= Subject key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E51E26B3C1D019BDC0A31DB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Jun 2026 08:45:12 +0000 Certificate not after: Sat 30 Sep 2028 08:45:12 +0000 Subordinate resources: IP: 67.58.192.0/19 IP: 67.213.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e2:6b:3c:1d:01:9b:dc:0a:31:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 28 08:45:12 2026 GMT Not After : Sep 30 08:45:12 2028 GMT Subject: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:f7:37:f2:fc:c9:e3:37:cc:4c:45:68:cd: 36:56:00:f1:7f:c8:37:e0:68:0a:58:cc:74:f4:0a: 4b:23:72:7d:f0:01:34:3e:85:09:88:a0:fe:2b:6b: 82:8a:ac:56:dd:04:a2:cb:2a:12:fd:fa:7a:f0:15: 7c:43:75:e5:fc:5d:df:11:5b:c8:1b:c1:4b:c5:4c: d3:d0:8d:da:94:e0:65:e5:69:04:e5:38:da:59:4f: 06:3e:13:ee:1d:78:e5:3d:2f:2c:06:33:30:a2:97: 65:50:40:14:17:84:64:d2:8d:87:6d:7b:40:49:1b: c5:a1:55:c5:63:dc:ad:bc:3e:c0:28:8d:d7:1c:66: ec:c6:64:dd:a4:d5:78:21:f1:93:7f:9b:f9:27:34: 2d:da:43:c0:ed:f6:e8:4c:d7:47:c5:3e:b4:38:46: 4c:46:d5:d2:42:59:c9:51:f5:cc:e8:13:c9:a5:5f: c4:72:0d:42:9d:05:71:21:c2:8f:20:0c:1f:52:96: 81:44:1a:86:7d:18:05:b4:fb:07:fe:85:f5:93:9b: da:55:42:60:12:92:cb:0a:ac:8b:93:27:eb:cb:c9: 59:d4:87:a7:3e:79:a3:95:d8:fc:08:39:65:e9:e7: 2a:e6:2c:76:bc:f4:2e:f1:9a:fe:31:3d:56:55:ea: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 67.58.192.0/19 67.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:22:f5:95:b8:6e:5a:a6:b0:75:b9:23:21:75:1c:73:95:e1: 14:b1:d6:a7:04:a9:44:49:16:48:88:0f:10:5b:16:bd:eb:f5: 0a:d6:c7:b0:d8:a3:0b:e3:00:05:00:62:cb:38:93:0f:d2:59: 37:8c:6b:db:fe:30:36:59:63:f7:79:13:b7:b5:b8:0e:2b:44: 2e:42:f6:ed:08:39:6b:5d:ce:b3:15:3c:0e:49:f5:fc:92:c6: 81:20:bc:99:ad:98:51:12:7a:d1:5e:d2:02:59:94:70:73:80: 0f:28:31:58:f3:fa:32:c3:a1:e1:6d:2c:58:22:00:d2:28:84: 99:14:55:42:39:d3:2b:5e:93:e4:cd:61:62:a2:db:e3:1a:34: fe:7e:79:86:bb:e3:c6:59:a2:93:f9:89:55:1c:ec:14:88:16: bc:aa:49:7d:a1:79:03:71:54:ec:bf:b2:cf:39:c5:0a:43:a1: b2:6c:e0:40:34:26:3b:a5:aa:9c:55:6d:b0:a5:14:f1:d4:de: 7a:78:1d:07:78:ff:ed:d3:32:f8:b6:9f:88:96:3d:e0:76:2c: e7:be:91:fa:7d:a6:c0:ad:dc:1d:f5:54:50:01:0e:e2:dc:50: c0:fd:0e:01:bc:32:f8:8a:74:36:2d:e1:02:b6:2d:00:24:27: 07:b4:2c:14 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE5R4ms8HQGb3Aox2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDYyODA4NDUxMloXDTI4MDkzMDA4NDUxMlowLzEtMCsGA1UEAxMk YmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVhYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUv3N/L8yeM3zExFaM02VgDxf8g34GgKWMx0 9ApLI3J98AE0PoUJiKD+K2uCiqxW3QSiyyoS/fp68BV8Q3Xl/F3fEVvIG8FLxUzT 0I3alOBl5WkE5TjaWU8GPhPuHXjlPS8sBjMwopdlUEAUF4Rk0o2HbXtASRvFoVXF Y9ytvD7AKI3XHGbsxmTdpNV4IfGTf5v5JzQt2kPA7fboTNdHxT60OEZMRtXSQlnJ UfXM6BPJpV/Ecg1CnQVxIcKPIAwfUpaBRBqGfRgFtPsH/oX1k5vaVUJgEpLLCqyL kyfry8lZ1IenPnmjldj8CDll6ecq5ix2vPQu8Zr+MT1WVepbRwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJVbUz1OqqPp4OdF/fzmSFknSy0SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i Y2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JjYTQ4YWQwLWY2MTMtNGM2Ni1i MDdhLTY0NzNkOGE1YWEyNi9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhh NWFhMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAVDOsADBARD1WAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVSL1lbhuWqaw dbkjIXUcc5XhFLHWpwSpREkWSIgPEFsWvev1CtbHsNijC+MABQBiyziTD9JZN4xr 2/4wNllj93kTt7W4DitELkL27Qg5a13OsxU8Dkn1/JLGgSC8ma2YURJ60V7SAlmU cHOADygxWPP6MsOh4W0sWCIA0iiEmRRVQjnTK16T5M1hYqLb4xo0/n55hrvjxlmi k/mJVRzsFIgWvKpJfaF5A3FU7L+yzznFCkOhsmzgQDQmO6WqnFVtsKUU8dTeengd B3j/7dMy+LafiJY94HYs576R+n2mwK3cHfVUUAEO4txQwP0OAbwy+Ip0Ni3hArYt ACQnB7QsFA== -----END CERTIFICATE-----Generated at Wed Jul 22 07:06:40 2026 by rpki-client