$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a7fcb706-7dc0-4a2c-9581-a8d80f7f071a.cer File: a7fcb706-7dc0-4a2c-9581-a8d80f7f071a.cer (raw, json) Hash identifier: r+CpwulzbAjF7Yv12Jbh278+7VPvvjnDWtG4XKZ4poI= Subject key identifier: 4F:6B:E3:21:BD:5A:23:EF:AE:CE:12:B2:15:7C:25:F2:3D:AA:A4:59 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584E7F25D904A8EA749AA1570D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a7fcb706-7dc0-4a2c-9581-a8d80f7f071a/a7fcb706-7dc0-4a2c-9581-a8d80f7f071a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a7fcb706-7dc0-4a2c-9581-a8d80f7f071a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jul 2026 13:52:26 +0000 Certificate not after: Mon 16 Oct 2028 13:52:26 +0000 Subordinate resources: AS: 17177 IP: 104.37.144.0/22 IP: 140.235.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:25:d9:04:a8:ea:74:9a:a1:57:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 14 13:52:26 2026 GMT Not After : Oct 16 13:52:26 2028 GMT Subject: CN=a7fcb706-7dc0-4a2c-9581-a8d80f7f071a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:76:a4:09:97:eb:f4:f8:a0:c0:64:0a:c9: 5b:4c:d3:59:6f:e6:10:c8:9a:99:a8:eb:e1:19:60: ec:e3:30:de:fb:20:9b:6e:46:56:eb:99:cd:09:40: 43:78:70:40:ab:a5:23:e9:54:d2:2e:59:b7:d0:6a: ee:0c:d5:d8:08:64:e1:b7:7d:ba:f7:32:f3:39:fe: cc:c1:ae:c1:96:22:ee:56:c0:85:d5:de:25:2c:d7: d9:b3:b0:ec:a7:09:57:bd:7f:7d:77:cc:07:ba:3c: 90:70:ec:a2:c5:36:22:46:42:8b:7e:8e:9d:84:09: 82:e7:35:3c:93:41:8a:00:d3:27:7a:84:f0:04:64: 2a:bb:b7:63:0e:da:ea:65:14:eb:20:7d:26:79:43: 51:a9:f5:a0:82:6a:90:84:20:71:73:e5:ad:8a:42: 7e:69:d6:be:30:38:c8:69:2f:44:2d:95:36:3d:04: 50:f9:d5:7d:bf:1a:4d:9c:d8:17:78:07:ad:55:fc: a3:79:61:da:a4:2e:4b:86:6a:41:36:f8:10:f9:8f: 27:93:b1:68:60:4f:a0:a9:6c:66:3f:22:d3:e4:ed: 0a:cc:25:7f:ce:61:5c:dd:83:c6:be:96:c6:be:55: 28:dd:4a:b5:a9:d5:7b:50:03:47:9c:7b:81:46:1a: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:E3:21:BD:5A:23:EF:AE:CE:12:B2:15:7C:25:F2:3D:AA:A4:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a7fcb706-7dc0-4a2c-9581-a8d80f7f071a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a7fcb706-7dc0-4a2c-9581-a8d80f7f071a/a7fcb706-7dc0-4a2c-9581-a8d80f7f071a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 104.37.144.0/22 140.235.40.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17177 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9d:30:42:95:ee:fb:4f:0c:ca:17:38:b4:cc:62:57:18:d9: cc:6c:c3:57:6a:f0:13:b1:e8:fb:64:87:e6:a3:dc:43:16:b6: 9b:28:db:03:1c:c7:ea:76:6c:b5:80:53:1f:0c:d4:0a:c7:5c: ce:08:3f:51:31:40:21:2c:d4:23:8a:8d:5f:59:e1:cf:54:db: c8:89:45:28:ba:78:02:5d:a2:ae:9c:1a:f7:05:b3:6b:66:6a: 09:fd:17:57:8a:31:70:57:37:c5:43:a2:88:e7:fe:21:b8:33: 16:e2:aa:54:75:3c:02:32:38:01:ae:09:ac:a5:4b:c8:18:5c: 7d:2c:95:4b:42:34:31:59:08:3e:ca:ab:18:1b:c4:5e:92:b3: a2:c5:8e:00:29:5e:64:6d:d8:18:e8:ab:01:6b:b2:07:26:2a: 19:15:be:e9:9a:b9:ba:05:f3:87:ee:09:e4:41:c1:de:81:6e: 75:84:7f:c2:04:ef:75:6e:7c:00:61:27:8f:dc:06:04:92:68: 94:72:1c:36:e8:e1:1a:d0:6c:fc:2a:78:ef:1d:6c:97:f0:3f: 3d:6d:3a:a7:63:69:e1:8f:bc:04:97:c0:71:4c:13:89:73:bd: a8:88:d7:43:69:6a:2b:a6:d3:62:58:38:b0:1d:65:de:68:67: 81:99:33:ee -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE5/JdkEqOp0mqFXDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDcxNDEzNTIyNloXDTI4MTAxNjEzNTIyNlowLzEtMCsGA1UEAxMk YTdmY2I3MDYtN2RjMC00YTJjLTk1ODEtYThkODBmN2YwNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQR2pAmX6/T4oMBkCslbTNNZb+YQyJqZqOvh GWDs4zDe+yCbbkZW65nNCUBDeHBAq6Uj6VTSLlm30GruDNXYCGTht3269zLzOf7M wa7BliLuVsCF1d4lLNfZs7DspwlXvX99d8wHujyQcOyixTYiRkKLfo6dhAmC5zU8 k0GKANMneoTwBGQqu7djDtrqZRTrIH0meUNRqfWggmqQhCBxc+WtikJ+ada+MDjI aS9ELZU2PQRQ+dV9vxpNnNgXeAetVfyjeWHapC5LhmpBNvgQ+Y8nk7FoYE+gqWxm PyLT5O0KzCV/zmFc3YPGvpbGvlUo3Uq1qdV7UANHnHuBRhpoWwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFE9r4yG9WiPvrs4SshV8JfI9qqRZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h N2ZjYjcwNi03ZGMwLTRhMmMtOTU4MS1hOGQ4MGY3ZjA3MWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2E3ZmNiNzA2LTdkYzAtNGEyYy05 NTgxLWE4ZDgwZjdmMDcxYS9hN2ZjYjcwNi03ZGMwLTRhMmMtOTU4MS1hOGQ4MGY3 ZjA3MWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJoJZADBAKM6ygwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICQxkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAOZ0wQpXu+08Myhc4tMxiVxjZzGzDV2rwE7Ho+2SH 5qPcQxa2myjbAxzH6nZstYBTHwzUCsdczgg/UTFAISzUI4qNX1nhz1TbyIlFKLp4 Al2irpwa9wWza2ZqCf0XV4oxcFc3xUOiiOf+IbgzFuKqVHU8AjI4Aa4JrKVLyBhc fSyVS0I0MVkIPsqrGBvEXpKzosWOACleZG3YGOirAWuyByYqGRW+6Zq5ugXzh+4J 5EHB3oFudYR/wgTvdW58AGEnj9wGBJJolHIcNujhGtBs/Cp47x1sl/A/PW06p2Np 4Y+8BJfAcUwTiXO9qIjXQ2lqK6bTYlg4sB1l3mhngZkz7g== -----END CERTIFICATE-----Generated at Thu Jul 16 18:59:06 2026 by rpki-client