$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f947a4-f520-460a-800f-889f7bad3065.cer File: 17f947a4-f520-460a-800f-889f7bad3065.cer (raw, json) Hash identifier: fNjDMgosRBW7zgp+oy/0incc3s9IoTnv/SJ/t7HPspk= Subject key identifier: 10:DB:3D:12:FB:BC:0D:DA:85:65:F0:01:C3:A4:F1:08:73:84:E6:4D Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584E5846C6F7DF7A56E53EF97700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f947a4-f520-460a-800f-889f7bad3065/17f947a4-f520-460a-800f-889f7bad3065.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f947a4-f520-460a-800f-889f7bad3065/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jun 2026 15:42:15 +0000 Certificate not after: Mon 02 Oct 2028 15:42:15 +0000 Subordinate resources: IP: 207.207.210.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:58:46:c6:f7:df:7a:56:e5:3e:f9:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jun 30 15:42:15 2026 GMT Not After : Oct 2 15:42:15 2028 GMT Subject: CN=17f947a4-f520-460a-800f-889f7bad3065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:22:37:4f:23:0a:ff:c0:80:24:f2:5f:7b: 85:84:10:5d:b8:bd:89:1b:cb:bb:f5:13:55:df:b1: 4d:55:f1:4a:6c:02:90:54:ab:05:f3:b8:c9:0d:d8: 82:59:48:fa:cb:47:1d:7d:9b:22:1f:75:8a:c1:28: e6:80:8f:d6:3f:05:b2:85:37:b2:d4:97:d3:0b:33: 86:c3:54:6b:c4:7e:e7:72:a9:97:d7:1b:13:c7:13: 15:a6:c2:0a:5d:39:10:a5:3b:bd:36:a3:95:10:22: 7c:9a:0f:b3:1e:e6:ab:7b:e0:5e:92:e3:60:b0:ff: 94:1c:4e:70:67:42:50:42:34:37:93:05:fb:a4:e3: bb:35:8c:fc:8d:98:36:e4:f9:3e:0a:90:25:4d:4a: f2:9a:5a:97:47:2d:0b:53:62:a8:ef:83:ec:ad:50: 65:10:68:83:0a:0d:ca:17:1e:c6:4f:3d:52:76:b3: 50:6f:5d:df:c6:e1:f3:5c:6a:14:72:82:0d:12:ef: 54:c4:eb:0c:91:5a:d8:3f:bd:a1:be:41:99:9f:32: 34:bf:49:00:4b:74:83:ff:5e:53:b4:f0:5f:31:6f: 5b:f3:ac:e4:10:53:51:bf:21:88:31:a3:35:52:79: c9:67:53:38:06:f9:89:95:9a:2e:9d:f8:64:e3:a8: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:3D:12:FB:BC:0D:DA:85:65:F0:01:C3:A4:F1:08:73:84:E6:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f947a4-f520-460a-800f-889f7bad3065/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f947a4-f520-460a-800f-889f7bad3065/17f947a4-f520-460a-800f-889f7bad3065.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 207.207.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:54:e4:84:0d:8f:ac:01:09:5b:01:4d:41:08:94:25:a4:9d: d3:e9:f1:e4:45:67:0a:1e:8c:98:09:05:fb:31:db:c1:f6:ec: 0c:ed:f6:f6:1a:a1:29:da:8e:67:9b:71:e0:1e:90:ec:81:4a: 9f:e4:e2:ad:b3:68:ff:c6:59:f2:88:a5:bf:06:f0:32:ed:33: 27:fe:8f:33:9d:58:d7:f7:5b:0f:0b:ec:62:40:6f:a3:b6:e0: 7a:97:bc:60:0d:7b:6d:a0:e0:5a:95:34:1a:4c:98:06:97:36: 56:73:a6:bf:04:5e:97:81:54:a6:46:63:63:94:34:ee:83:9f: ae:4f:63:fa:3e:69:9a:64:48:91:fd:4d:bc:cd:56:a9:1c:ec: 31:af:19:73:73:7b:be:07:15:62:d5:f9:83:03:2b:c1:8f:9d: 7b:f1:44:01:7b:61:14:de:a8:9d:d2:bd:d8:6a:b1:fb:61:f9: c6:f5:e4:1c:6b:ed:a3:33:ed:23:37:d7:d6:27:a3:e8:83:ff: 4b:92:1d:43:63:68:1c:e0:43:65:7e:1a:20:a3:09:6d:a7:ad: 72:c3:07:df:00:a7:08:04:bc:ad:13:2f:25:bb:04:aa:f5:c2: d3:2c:86:73:97:dc:34:84:4f:0b:12:e3:ce:2a:b0:31:45:56: 38:6f:ac:90 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5YRsb333pW5T75dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDYzMDE1NDIxNVoXDTI4MTAwMjE1NDIxNVowLzEtMCsGA1UEAxMk MTdmOTQ3YTQtZjUyMC00NjBhLTgwMGYtODg5ZjdiYWQzMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK4iN08jCv/AgCTyX3uFhBBduL2JG8u79RNV 37FNVfFKbAKQVKsF87jJDdiCWUj6y0cdfZsiH3WKwSjmgI/WPwWyhTey1JfTCzOG w1RrxH7ncqmX1xsTxxMVpsIKXTkQpTu9NqOVECJ8mg+zHuare+BekuNgsP+UHE5w Z0JQQjQ3kwX7pOO7NYz8jZg25Pk+CpAlTUrymlqXRy0LU2Ko74PsrVBlEGiDCg3K Fx7GTz1SdrNQb13fxuHzXGoUcoINEu9UxOsMkVrYP72hvkGZnzI0v0kAS3SD/15T tPBfMW9b86zkEFNRvyGIMaM1UnnJZ1M4BvmJlZounfhk46iA3wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBDbPRL7vA3ahWXwAcOk8QhzhOZNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x N2Y5NDdhNC1mNTIwLTQ2MGEtODAwZi04ODlmN2JhZDMwNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzE3Zjk0N2E0LWY1MjAtNDYwYS04 MDBmLTg4OWY3YmFkMzA2NS8xN2Y5NDdhNC1mNTIwLTQ2MGEtODAwZi04ODlmN2Jh ZDMwNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADPz9IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiFTkhA2PrAEJWwFNQQiU JaSd0+nx5EVnCh6MmAkF+zHbwfbsDO329hqhKdqOZ5tx4B6Q7IFKn+TirbNo/8ZZ 8oilvwbwMu0zJ/6PM51Y1/dbDwvsYkBvo7bgepe8YA17baDgWpU0GkyYBpc2VnOm vwRel4FUpkZjY5Q07oOfrk9j+j5pmmRIkf1NvM1WqRzsMa8Zc3N7vgcVYtX5gwMr wY+de/FEAXthFN6ondK92Gqx+2H5xvXkHGvtozPtIzfX1iej6IP/S5IdQ2NoHOBD ZX4aIKMJbaetcsMH3wCnCAS8rRMvJbsEqvXC0yyGc5fcNIRPCxLjziqwMUVWOG+s kA== -----END CERTIFICATE-----Generated at Mon Jul 6 19:05:08 2026 by rpki-client