$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer File: 28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer (raw, json) Hash identifier: Ac+P/RKkPBfMP79JFo7emb/0B3ZOrbU+rooAYyW6gHE= Subject key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E2D9786850F2810EC075FA100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jun 2026 08:45:11 +0000 Certificate not after: Sun 17 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 216.150.64.0/19 IP: 216.169.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:97:86:85:0f:28:10:ec:07:5f:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 15 08:45:11 2026 GMT Not After : Sep 17 08:45:11 2028 GMT Subject: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:1a:c8:29:64:04:c9:55:34:2d:4b:82:22: 06:25:8d:67:1e:87:8a:e9:9d:fb:af:06:a9:69:d6: 91:ce:74:10:67:10:82:91:66:b5:02:b3:5b:db:77: 59:98:6a:c7:df:07:cd:9f:52:5b:fa:e0:07:13:de: 98:e0:84:94:73:7e:ec:66:7e:d6:45:09:22:a0:29: 71:fb:bd:4e:ca:d2:dc:da:61:60:d4:02:97:d7:c5: c0:c5:df:8c:aa:7c:12:1b:85:ff:5e:a9:a5:61:1a: af:55:00:fd:65:1b:6f:5c:bb:a1:32:3b:f6:0c:d2: b1:ef:39:88:dd:25:7c:cb:5d:4f:b6:2b:ec:20:31: 9e:c5:75:db:60:8b:69:bd:6c:ef:04:20:eb:20:6c: 63:67:6c:7c:58:87:f3:c1:48:7f:43:58:1b:ab:b3: 34:5d:e7:bf:c7:99:1a:a1:1a:f4:17:61:ad:cd:6d: 47:dc:6d:3e:4f:aa:97:cc:15:eb:2b:39:13:96:24: d1:95:2b:02:1f:6f:7f:53:cf:29:db:9a:61:7e:9d: 23:f1:82:e0:25:56:32:70:4a:b5:f7:19:36:cb:85: a3:08:28:bd:00:89:c5:b6:e5:88:2e:d3:66:45:0f: 5c:fe:33:10:d8:ac:29:ba:b5:64:00:c6:fc:7b:80: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.150.64.0/19 216.169.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:34:8f:b7:9d:db:aa:7b:61:bd:33:b2:c7:61:a2:27:a6:80: 73:3b:54:5a:12:c2:2d:a3:49:5b:0d:13:30:87:e2:b9:d0:e3: c5:09:9e:3e:79:3c:e7:cd:76:2b:20:e7:40:59:91:a6:dd:af: 7b:d8:b1:b9:98:3a:c2:69:06:07:a5:b4:f3:b9:b0:7a:4b:60: 8c:f0:f0:d3:b5:2a:b9:c5:bf:c3:df:bf:d8:ab:8d:88:3d:9e: 8c:34:27:1b:71:a4:ab:91:30:1f:a5:ff:74:15:6f:9d:69:51: f7:b8:85:79:1f:40:63:bf:d4:b7:2b:e3:4e:41:5a:6b:fd:61: 15:58:ca:a8:fd:22:16:68:ca:dc:ef:6a:ff:ae:b7:53:3d:38: 38:0b:d1:c4:a9:69:90:33:54:70:ca:4f:0b:9e:cd:12:55:06: cf:ec:0d:80:de:c1:b1:67:09:ae:ee:e2:55:32:0a:c0:db:84: f6:1c:38:aa:48:68:08:70:ec:43:ef:fa:31:88:b1:e7:07:20: 02:30:20:35:62:f2:c2:68:c4:ad:64:5b:fd:c5:11:1c:85:8b: f3:f3:4e:22:42:5d:77:78:65:b8:77:4e:3e:d0:bf:43:53:e1: 65:04:21:2e:4d:23:e1:7e:78:0b:4f:3f:16:b4:81:67:b2:6e: 69:d8:48:8c -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE4tl4aFDygQ7AdfoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDYxNTA4NDUxMVoXDTI4MDkxNzA4NDUxMVowLzEtMCsGA1UEAxMk MjhkMGMyNjItOGVhMi00NDRhLWFiMWUtNmQwN2MzNDgzZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkYayClkBMlVNC1LgiIGJY1nHoeK6Z37rwap adaRznQQZxCCkWa1ArNb23dZmGrH3wfNn1Jb+uAHE96Y4ISUc37sZn7WRQkioClx +71OytLc2mFg1AKX18XAxd+MqnwSG4X/XqmlYRqvVQD9ZRtvXLuhMjv2DNKx7zmI 3SV8y11PtivsIDGexXXbYItpvWzvBCDrIGxjZ2x8WIfzwUh/Q1gbq7M0Xee/x5ka oRr0F2GtzW1H3G0+T6qXzBXrKzkTliTRlSsCH29/U88p25phfp0j8YLgJVYycEq1 9xk2y4WjCCi9AInFtuWILtNmRQ9c/jMQ2KwpurVkAMb8e4CdHQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFHv9IcPzoF/8dMvepo/ZNATsiwjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y OGQwYzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3YzM0ODNlNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzI4ZDBjMjYyLThlYTItNDQ0YS1h YjFlLTZkMDdjMzQ4M2U0NS8yOGQwYzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3YzM0 ODNlNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAXYlkADBAXYqWAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASTSPt53bqnth vTOyx2GiJ6aAcztUWhLCLaNJWw0TMIfiudDjxQmePnk85812KyDnQFmRpt2ve9ix uZg6wmkGB6W087mwektgjPDw07UqucW/w9+/2KuNiD2ejDQnG3Gkq5EwH6X/dBVv nWlR97iFeR9AY7/UtyvjTkFaa/1hFVjKqP0iFmjK3O9q/663Uz04OAvRxKlpkDNU cMpPC57NElUGz+wNgN7BsWcJru7iVTIKwNuE9hw4qkhoCHDsQ+/6MYix5wcgAjAg NWLywmjErWRb/cURHIWL8/NOIkJdd3hluHdOPtC/Q1PhZQQhLk0j4X54C08/FrSB Z7JuadhIjA== -----END CERTIFICATE-----Generated at Wed Jul 8 14:08:42 2026 by rpki-client