$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer File: cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer (raw, json) Hash identifier: bzVp1tTwWyiiJKCxn6QrQf3lc63lAac/DRhoyRhdmhk= Subject key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FAC865C0FC91A269BC229FF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Oct 2026 12:45:12 +0000 Certificate not after: Thu 01 Feb 2029 13:45:12 +0000 Subordinate resources: IP: 165.135.0.0/16 IP: 192.104.54.0/24 IP: 192.133.125.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:86:5c:0f:c9:1a:26:9b:c2:29:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 30 12:45:12 2026 GMT Not After : Feb 1 13:45:12 2029 GMT Subject: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:9c:41:19:72:ba:f0:9d:20:c1:58:e4:24: b3:a7:d9:53:86:cb:de:a2:24:8c:04:de:98:48:c3: e8:92:fe:91:29:45:04:c0:ae:cd:4a:81:d3:9c:44: 17:dc:de:2b:7c:c2:55:e9:88:99:27:d3:a0:45:96: 7c:7e:b7:35:20:65:0e:ea:ee:cb:94:23:b0:96:d3: 6d:80:94:1d:49:af:18:2c:b1:15:91:6e:09:d0:03: 0c:d9:34:b6:a7:70:8d:ea:97:e9:56:9f:ec:4f:d1: 7f:1a:bb:62:e8:77:da:78:1c:0d:e5:ef:ca:c7:cc: 49:9f:2e:e1:b8:57:69:c2:3f:ff:81:1a:de:ca:68: 2c:92:fd:25:1b:8d:70:25:cb:fb:87:f7:21:e3:da: c1:25:ab:f8:17:5c:22:38:10:d3:92:ca:f3:47:d3: 2f:0c:10:5c:b1:bd:a8:6d:d8:c1:81:ba:94:89:c9: 6a:4b:a6:a7:d5:b7:76:ac:8e:77:01:1b:f2:f5:b9: 54:92:99:fc:b5:80:de:bb:91:81:f4:9b:86:7b:ea: 14:f6:7c:61:95:cb:05:11:a9:4b:fe:7c:dd:01:93: 3e:f0:d7:31:b8:78:3f:21:6b:9c:b8:b0:53:4f:2d: 22:7d:f2:5c:fc:8d:60:b7:96:64:d5:b4:b0:35:27: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 165.135.0.0/16 192.104.54.0/24 192.133.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0d:de:a6:ab:8f:34:bb:65:ec:cc:40:3b:58:16:26:ee:7d: b9:24:31:7d:a8:01:41:b8:26:ea:1c:5c:c6:ca:9f:f6:54:17: ca:08:8b:7c:b8:0b:30:54:fa:df:60:d7:6f:fb:9c:bc:29:5a: fa:99:f2:e8:3b:e7:bd:d9:47:a1:3a:c7:4c:0a:94:d3:c8:ab: b4:f1:4d:fa:d7:b5:62:63:20:da:6e:77:1d:b9:17:73:f0:e8: 61:46:cf:5b:32:91:57:30:02:99:ca:b0:93:c8:b7:95:f2:60: 6f:e7:82:59:ab:a5:a9:92:37:4b:5a:2e:ed:54:46:0e:0a:41: b3:8d:90:d5:64:df:4c:d9:f8:71:98:b4:52:e0:a9:eb:60:e2: 05:86:d5:d7:da:f8:4a:1a:1c:ae:50:29:9f:66:b9:66:9e:65: c4:0f:4e:0c:87:e0:2f:47:48:1f:57:b6:32:ec:e6:1c:63:40: b9:ff:fa:7a:1b:9a:de:e0:87:ba:ac:c0:92:69:ae:eb:86:dc: 66:57:79:89:18:4d:1b:79:55:c3:df:06:f7:7f:54:a5:37:5f: f2:90:55:84:a2:fd:c6:58:66:8d:b3:0e:7b:31:8b:1d:49:aa: 76:d0:00:b4:c0:98:a3:36:fa:44:e9:22:0b:76:6c:4a:7f:4b: d0:2b:f7:21 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWE+shlwPyRomm8Ip/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTAzMDEyNDUxMloXDTI5MDIwMTEzNDUxMlowLzEtMCsGA1UEAxMk Y2YwMTY2NzgtZGFiMy00M2QxLWI3ZWEtNWQzYWQ4MTQ4ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2qcQRlyuvCdIMFY5CSzp9lThsveoiSMBN6Y SMPokv6RKUUEwK7NSoHTnEQX3N4rfMJV6YiZJ9OgRZZ8frc1IGUO6u7LlCOwltNt gJQdSa8YLLEVkW4J0AMM2TS2p3CN6pfpVp/sT9F/Grti6HfaeBwN5e/Kx8xJny7h uFdpwj//gRreymgskv0lG41wJcv7h/ch49rBJav4F1wiOBDTksrzR9MvDBBcsb2o bdjBgbqUiclqS6an1bd2rI53ARvy9blUkpn8tYDeu5GB9JuGe+oU9nxhlcsFEalL /nzdAZM+8NcxuHg/IWucuLBTTy0iffJc/I1gt5Zk1bSwNSebiQIDAQABo4IECjCC BAYwHQYDVR0OBBYEFEaF0lBrkFDTF5NuEXHqw4uZ5QE2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j ZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgxNDhlOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2NmMDE2Njc4LWRhYjMtNDNkMS1i N2VhLTVkM2FkODE0OGU5Ny9jZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgx NDhlOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwClhwMEAMBoNgMEAMCFfTBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApDd6m q480u2XszEA7WBYm7n25JDF9qAFBuCbqHFzGyp/2VBfKCIt8uAswVPrfYNdv+5y8 KVr6mfLoO+e92UehOsdMCpTTyKu08U3617ViYyDabncduRdz8OhhRs9bMpFXMAKZ yrCTyLeV8mBv54JZq6WpkjdLWi7tVEYOCkGzjZDVZN9M2fhxmLRS4KnrYOIFhtXX 2vhKGhyuUCmfZrlmnmXED04Mh+AvR0gfV7Yy7OYcY0C5//p6G5re4Ie6rMCSaa7r htxmV3mJGE0beVXD3wb3f1SlN1/ykFWEov3GWGaNsw57MYsdSap20AC0wJijNvpE 6SILdmxKf0vQK/ch -----END CERTIFICATE-----Generated at Sat Oct 31 12:07:34 2026 by rpki-client