$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer File: 117f0c8a-705e-440d-8160-752196eb04a2.cer (raw, json) Hash identifier: AERTnOfAHIVf/6Pnso4sy56snbm8euEAUZtKiqx3Z7c= Subject key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FA4264F854FE4A17B0ADFEF60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Oct 2026 12:45:12 +0000 Certificate not after: Mon 29 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 72.22.200.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:26:4f:85:4f:e4:a1:7b:0a:df:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 27 12:45:12 2026 GMT Not After : Jan 29 13:45:12 2029 GMT Subject: CN=117f0c8a-705e-440d-8160-752196eb04a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:b2:8d:47:4b:4d:fb:d5:44:a9:2d:2f:90: eb:12:3a:b8:a1:4a:1f:48:34:39:76:b8:d5:4c:47: f9:b7:d0:6c:59:43:ff:2b:2a:f5:8b:66:3f:fc:41: d5:ce:33:b9:7c:21:02:97:29:69:96:15:7d:f6:be: 8b:a8:fb:be:5b:61:b9:ba:23:8f:51:9c:73:46:a7: 26:60:e5:43:e6:9d:76:4f:9f:48:0a:da:87:38:12: e3:64:b1:58:07:9e:a3:5d:45:20:3e:59:ae:0d:e5: bb:69:1c:99:15:db:c7:94:e6:b8:fc:9a:9a:a5:d3: eb:e5:31:96:ea:e8:98:c7:0b:15:2d:02:7f:52:d0: 72:0a:f0:df:a0:32:4b:1f:8b:b7:f9:88:02:0a:58: 9a:43:02:8e:a5:24:c1:09:5a:77:bf:d7:c3:bd:58: ed:4f:a1:42:29:f2:f0:26:60:93:5f:b5:91:ca:9f: f8:f6:be:7b:86:8d:e5:7a:68:ad:32:f0:e0:b2:57: 5f:41:2b:e3:07:78:ff:fa:88:59:b2:ca:59:46:8d: f9:ae:73:8d:57:b6:04:41:03:c2:37:cd:20:f7:77: 5f:8d:b1:18:ce:41:ed:56:64:6c:44:e3:b0:47:6a: 8d:1a:0b:73:0a:51:33:20:2e:1e:ee:b3:19:95:b2: 44:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 72.22.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:31:70:91:cc:bf:a2:6a:b9:73:0f:a2:b4:a4:1c:20:52:63: 54:69:6e:6c:41:c5:37:2e:e7:cc:43:14:61:dc:14:ee:7a:a3: c0:ab:50:80:d3:f2:eb:40:df:e7:28:d8:8f:5f:f8:ef:0b:34: eb:f2:2e:87:e6:19:dd:1f:40:81:98:64:8f:7b:9c:f1:b8:7b: 04:e3:b8:03:3b:2e:91:7b:85:c9:4a:46:80:e7:f5:b3:a4:0c: c6:eb:90:15:14:36:22:24:a1:13:d1:cb:5f:65:4d:a6:4a:66: a4:74:9a:c2:0a:9c:75:07:ee:40:d8:98:3c:db:0a:33:e5:40: 12:35:b2:3e:2d:ab:45:f4:e1:31:53:9c:d2:59:69:23:ef:98: bb:af:18:66:c7:bc:4e:25:5f:18:b5:95:3f:af:83:8c:33:cd: e0:19:8d:14:69:15:b5:e1:e0:7d:ed:2d:50:6a:7c:79:07:0a: 4b:ba:26:29:84:7d:c9:cb:c5:82:69:e9:2a:39:63:45:ac:00: 04:f8:c9:69:14:55:ff:3c:b7:a8:66:b0:e0:9d:58:81:b1:86: 95:0c:1d:20:da:14:6a:54:fc:60:ab:8c:ba:0a:fb:aa:dd:90: 66:29:23:df:f5:98:bc:74:26:41:b8:44:0e:cd:a9:c0:6f:12: 2e:b3:10:e8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+kJk+FT+Shewrf72AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTAyNzEyNDUxMloXDTI5MDEyOTEzNDUxMlowLzEtMCsGA1UEAxMk MTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIwNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6+yjUdLTfvVRKktL5DrEjq4oUofSDQ5drjV TEf5t9BsWUP/Kyr1i2Y//EHVzjO5fCEClylplhV99r6LqPu+W2G5uiOPUZxzRqcm YOVD5p12T59ICtqHOBLjZLFYB56jXUUgPlmuDeW7aRyZFdvHlOa4/JqapdPr5TGW 6uiYxwsVLQJ/UtByCvDfoDJLH4u3+YgCCliaQwKOpSTBCVp3v9fDvVjtT6FCKfLw JmCTX7WRyp/49r57ho3lemitMvDgsldfQSvjB3j/+ohZsspZRo35rnONV7YEQQPC N80g93dfjbEYzkHtVmRsROOwR2qNGgtzClEzIC4e7rMZlbJEAQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK0flchlgeeV2oxlVCtEai6SyPfYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x MTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzExN2YwYzhhLTcwNWUtNDQwZC04 MTYwLTc1MjE5NmViMDRhMi8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZl YjA0YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBANIFsgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbjFwkcy/omq5cw+itKQc IFJjVGlubEHFNy7nzEMUYdwU7nqjwKtQgNPy60Df5yjYj1/47ws06/Iuh+YZ3R9A gZhkj3uc8bh7BOO4AzsukXuFyUpGgOf1s6QMxuuQFRQ2IiShE9HLX2VNpkpmpHSa wgqcdQfuQNiYPNsKM+VAEjWyPi2rRfThMVOc0llpI++Yu68YZse8TiVfGLWVP6+D jDPN4BmNFGkVteHgfe0tUGp8eQcKS7omKYR9ycvFgmnpKjljRawABPjJaRRV/zy3 qGaw4J1YgbGGlQwdINoUalT8YKuMugr7qt2QZikj3/WYvHQmQbhEDs2pwG8SLrMQ 6A== -----END CERTIFICATE-----Generated at Fri Oct 30 18:07:40 2026 by rpki-client