$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413.cer File: cff891b4-da78-48f4-a781-5d562c139413.cer (raw, json) Hash identifier: 8h4R4YHd6QVgFnHdxwE0j38uSAwukHWHtqL4XeCclUw= Subject key identifier: 32:E8:C1:E8:90:08:A2:6C:54:74:60:E2:93:F3:9D:5D:C7:6F:79:6A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E4C4D0C23BD5B51DD2A3A8B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/cff891b4-da78-48f4-a781-5d562c139413.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 08:45:11 +0000 Certificate not after: Thu 28 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 395148 IP: 192.243.64.0/21 IP: 208.81.56.0/24 IP: 2607:b280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:4d:0c:23:bd:5b:51:dd:2a:3a:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 26 08:45:11 2026 GMT Not After : Sep 28 08:45:11 2028 GMT Subject: CN=cff891b4-da78-48f4-a781-5d562c139413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:d2:a4:30:93:d4:93:0c:a3:76:60:3a:d5: d1:09:7a:f8:1b:d5:51:89:6e:71:1d:bb:bc:cc:d7: c6:67:ed:01:a9:e0:91:fe:a7:3b:f7:a1:da:fd:87: 48:20:8c:35:d7:de:39:47:19:b6:c7:b9:1c:45:b4: f3:68:c4:2c:01:88:a5:4b:61:4c:47:5f:3b:95:92: f8:1f:34:11:dc:bf:ea:94:25:21:66:dd:f2:e3:cc: a2:de:a2:25:fc:8b:df:cb:58:31:61:f0:2c:ab:48: 84:c2:7d:64:eb:dc:e3:b2:3e:31:23:68:67:b4:00: 42:80:4a:a9:99:bc:0a:78:4e:c2:43:59:1a:13:5d: cb:ba:7f:6e:68:e2:8a:6e:fc:cd:c5:91:7a:71:bd: a5:e1:c5:56:9d:51:f8:cf:bf:9d:8a:c0:67:a9:29: 47:90:37:a0:8d:df:63:dc:b5:96:7b:d4:19:f5:38: 15:15:88:4f:60:52:c2:8b:77:61:f6:c4:f8:7e:17: 78:99:b7:72:e5:9d:04:8b:56:57:0d:25:c6:d2:52: ff:e7:38:e6:4e:61:36:22:56:85:1d:16:58:e4:c4: a8:a4:7e:36:ed:8d:ea:90:46:11:9d:92:de:03:02: fc:e9:ca:00:75:c2:95:99:f0:7c:31:23:10:9c:e5: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E8:C1:E8:90:08:A2:6C:54:74:60:E2:93:F3:9D:5D:C7:6F:79:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cff891b4-da78-48f4-a781-5d562c139413/cff891b4-da78-48f4-a781-5d562c139413.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.243.64.0/21 208.81.56.0/24 IPv6: 2607:b280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395148 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0f:09:69:02:c6:ab:33:ee:d1:ab:5a:86:ea:68:36:a2:da: b9:b7:8c:48:ee:16:29:b7:a5:65:8e:20:a0:37:9d:8c:92:d7: 1c:2f:c1:8e:8f:dd:9c:c8:a5:4d:15:96:24:3e:73:90:07:57: 37:0a:6e:35:59:76:17:90:80:26:1a:54:c0:16:05:cd:66:6b: 07:c0:e7:ea:ff:b6:9a:e3:e1:78:9d:21:94:97:79:32:af:7f: db:06:96:0e:b8:6a:d3:5d:49:8b:bf:e7:24:29:d7:c9:13:a5: ff:80:3c:06:92:33:63:f2:7c:aa:31:8e:d9:24:89:d4:eb:12: b2:5d:54:cf:8a:5b:b3:7a:52:de:6b:2a:e3:61:ee:26:e9:62: 21:d3:4f:05:9c:3c:65:c6:cc:90:e7:28:21:03:fe:0d:20:fb: 03:7a:0a:ef:74:f6:f5:6b:9d:84:03:92:75:a9:c2:0f:10:fd: cf:4a:ac:e4:78:50:6e:d1:51:83:f3:c1:27:12:51:59:d3:88: d1:72:b4:72:ee:1f:f5:f4:37:60:26:11:d4:ad:68:98:1d:d6: 97:a9:e0:55:8c:2b:ec:e5:92:cf:8a:cc:f8:9f:f3:28:67:93: c5:c3:39:12:20:a4:0a:0e:37:54:60:0e:c1:d1:a2:c3:f8:96: bf:72:d3:3a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5MTQwjvVtR3So6i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDYyNjA4NDUxMVoXDTI4MDkyODA4NDUxMVowLzEtMCsGA1UEAxMk Y2ZmODkxYjQtZGE3OC00OGY0LWE3ODEtNWQ1NjJjMTM5NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXfSpDCT1JMMo3ZgOtXRCXr4G9VRiW5xHbu8 zNfGZ+0BqeCR/qc796Ha/YdIIIw11945Rxm2x7kcRbTzaMQsAYilS2FMR187lZL4 HzQR3L/qlCUhZt3y48yi3qIl/Ivfy1gxYfAsq0iEwn1k69zjsj4xI2hntABCgEqp mbwKeE7CQ1kaE13Lun9uaOKKbvzNxZF6cb2l4cVWnVH4z7+disBnqSlHkDegjd9j 3LWWe9QZ9TgVFYhPYFLCi3dh9sT4fhd4mbdy5Z0Ei1ZXDSXG0lL/5zjmTmE2IlaF HRZY5MSopH427Y3qkEYRnZLeAwL86coAdcKVmfB8MSMQnOVBXQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDLoweiQCKJsVHRg4pPznV3Hb3lqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZmY4OTFiNC1kYTc4LTQ4ZjQtYTc4MS01ZDU2MmMxMzk0MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NmZjg5MWI0LWRhNzgtNDhmNC1h NzgxLTVkNTYyYzEzOTQxMy9jZmY4OTFiNC1kYTc4LTQ4ZjQtYTc4MS01ZDU2MmMx Mzk0MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPA80ADBADQUTgwDQQCAAIwBwMFACYHsoAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgeMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADsPCWkCxqsz7tGrWobq aDai2rm3jEjuFim3pWWOIKA3nYyS1xwvwY6P3ZzIpU0VliQ+c5AHVzcKbjVZdheQ gCYaVMAWBc1mawfA5+r/tprj4XidIZSXeTKvf9sGlg64atNdSYu/5yQp18kTpf+A PAaSM2PyfKoxjtkkidTrErJdVM+KW7N6Ut5rKuNh7ibpYiHTTwWcPGXGzJDnKCED /g0g+wN6Cu909vVrnYQDknWpwg8Q/c9KrOR4UG7RUYPzwScSUVnTiNFytHLuH/X0 N2AmEdStaJgd1pep4FWMK+zlks+KzPif8yhnk8XDORIgpAoON1RgDsHRosP4lr9y 0zo= -----END CERTIFICATE-----Generated at Tue Jul 7 18:03:26 2026 by rpki-client