$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer File: fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer (raw, json) Hash identifier: 5nWG7O968Ooh9h8y1nO9sNryvDJ9RLY8JOsPmUugbXY= Subject key identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E57C242B7EF47433C156D9680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jun 2026 11:15:15 +0000 Certificate not after: Fri 28 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 192.245.136.0/24 IP: 198.91.32.0/21 IP: 198.91.41.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:c2:42:b7:ef:47:43:3c:15:6d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 30 11:15:15 2026 GMT Not After : Jul 28 12:45:17 2028 GMT Subject: CN=fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:09:b9:ba:b2:76:8b:6e:21:97:ec:28:5e: 50:f5:da:66:a4:f2:f0:87:10:20:31:1a:70:2e:be: e5:56:37:b7:13:93:1b:2f:26:b1:26:6b:02:64:b5: fe:bb:ec:38:f1:37:b9:fb:d1:4e:14:5d:2e:c8:d9: 70:15:a2:a6:a9:da:c8:e9:51:cc:74:03:26:79:ee: c9:8d:54:f1:24:22:a5:e2:1d:90:3e:ef:03:30:2a: 95:f3:74:e8:38:4f:31:51:cf:69:9c:f9:f2:5f:8b: 53:a7:bd:52:44:ba:cb:dd:95:c5:9b:8b:73:fd:77: 32:0a:4a:31:01:13:ec:12:84:40:96:62:6f:14:7f: ab:7b:f8:34:b3:a7:5e:db:fa:4f:ad:32:7d:bd:b4: 99:b9:cd:9c:d4:80:06:da:86:3b:de:64:d2:8c:bb: b2:a3:13:3a:c9:2a:8d:44:b5:61:83:8d:3b:03:57: 38:37:6b:08:64:07:12:81:91:a6:ba:05:85:1f:43: 50:e2:12:91:40:ae:8a:32:1d:b5:e7:e9:a2:b3:7c: 5b:10:ff:48:90:75:14:bd:1b:d7:b8:7f:7c:48:b0: 32:f7:cf:88:5d:e1:6c:54:55:7d:dc:7a:f6:3f:7a: d7:06:52:4e:f3:0d:33:23:57:90:e4:09:cc:9f:1b: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.245.136.0/24 198.91.32.0/21 198.91.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:85:fe:36:a8:dd:8d:0a:70:fc:ba:c4:e8:e7:a8:c8:dc:bf: ee:9d:9c:ed:8b:5b:e1:39:2d:e3:46:80:a8:95:b0:b5:2c:09: 91:fd:44:e5:2e:24:c0:d4:7e:f4:ac:00:56:ed:e1:cd:8c:35: ad:10:ec:07:dc:ae:cb:03:1e:1b:5a:da:4c:b3:dd:60:a1:a8: bd:2d:a4:d7:fa:8b:3d:fe:2d:16:44:6d:27:dd:87:a3:a0:04: db:b6:9b:8a:10:a4:4c:29:af:5f:36:43:c7:db:4b:08:25:fc: 1e:11:e3:4a:80:44:ea:9d:1c:9d:f5:4f:a2:a5:c0:de:6c:9c: dc:dd:20:c9:e6:e8:69:68:42:53:42:0d:16:1b:43:0b:6d:b7: b6:ec:2f:2f:bc:ad:73:f3:3f:81:0f:c7:99:73:3a:bc:cf:d6: f7:05:67:8a:e9:38:6c:e6:52:23:79:a0:9c:75:32:2a:64:23: 5b:f8:c8:02:26:3c:58:89:e4:28:8d:65:20:54:38:fa:54:b8: 13:72:65:48:f0:3c:5b:4d:76:d4:2e:07:f0:a0:ac:15:dd:7a: 54:1c:ca:a1:ab:61:30:5a:d3:3b:95:9c:b8:0a:2a:92:ba:d4: c2:f3:55:db:1d:9f:36:75:50:63:1a:90:2a:28:af:94:dd:35: 0f:9d:c9:43 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE5XwkK370dDPBVtloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYzMDExMTUxNVoXDTI4MDcyODEyNDUxN1owLzEtMCsGA1UEAxMk ZmE5M2YxYTEtOTA5OC00Yzc5LTlmZmMtOWZhZmU2YTNkZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji4JubqydotuIZfsKF5Q9dpmpPLwhxAgMRpw Lr7lVje3E5MbLyaxJmsCZLX+u+w48Te5+9FOFF0uyNlwFaKmqdrI6VHMdAMmee7J jVTxJCKl4h2QPu8DMCqV83ToOE8xUc9pnPnyX4tTp71SRLrL3ZXFm4tz/XcyCkox ARPsEoRAlmJvFH+re/g0s6de2/pPrTJ9vbSZuc2c1IAG2oY73mTSjLuyoxM6ySqN RLVhg407A1c4N2sIZAcSgZGmugWFH0NQ4hKRQK6KMh215+mis3xbEP9IkHUUvRvX uH98SLAy98+IXeFsVFV93Hr2P3rXBlJO8w0zI1eQ5AnMnxuj2QIDAQABo4IECzCC BAcwHQYDVR0OBBYEFM0k/pPhIZkSq2/QCalFWeWXfR+3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZhM2RkYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZhOTNmMWExLTkwOTgtNGM3OS05 ZmZjLTlmYWZlNmEzZGRhZi9mYTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZh M2RkYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADA9YgDBAPGWyADBADGWykwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARYX+ NqjdjQpw/LrE6OeoyNy/7p2c7Ytb4Tkt40aAqJWwtSwJkf1E5S4kwNR+9KwAVu3h zYw1rRDsB9yuywMeG1raTLPdYKGovS2k1/qLPf4tFkRtJ92Ho6AE27abihCkTCmv XzZDx9tLCCX8HhHjSoBE6p0cnfVPoqXA3myc3N0gyeboaWhCU0INFhtDC223tuwv L7ytc/M/gQ/HmXM6vM/W9wVniuk4bOZSI3mgnHUyKmQjW/jIAiY8WInkKI1lIFQ4 +lS4E3JlSPA8W0121C4H8KCsFd16VBzKoathMFrTO5WcuAoqkrrUwvNV2x2fNnVQ YxqQKiivlN01D53JQw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:43:51 2026 by rpki-client