$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer File: 66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer (raw, json) Hash identifier: h3PGDO7tdua2BZP+VR83FxTwXM/5buIcX+rdp8KE6zE= Subject key identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584ED85A5DA98C639C203F19F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Aug 2026 12:45:11 +0000 Certificate not after: Fri 17 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 192.245.64.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:5a:5d:a9:8c:63:9c:20:3f:19:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 15 12:45:11 2026 GMT Not After : Nov 17 13:45:11 2028 GMT Subject: CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:ff:ae:8b:01:6f:4e:da:36:2c:d9:98:92: 55:f7:3f:dc:35:73:f2:81:93:00:e1:c7:90:a5:6d: 01:72:6d:4c:06:5f:44:9c:34:c3:ce:72:e9:8e:74: 5b:e0:95:9b:59:ec:ff:ab:98:5a:62:53:c2:90:9b: 52:69:85:cc:66:a0:75:ca:f1:39:27:b8:b8:f3:c0: a9:a6:f6:18:d6:94:c4:d5:84:91:54:2b:e7:31:97: 85:49:92:13:3c:3e:84:78:f3:db:d7:0e:79:a9:86: 2f:03:5e:c5:ba:e3:42:75:49:91:e9:b2:4b:fc:d2: c1:d9:07:ce:03:e0:0e:d5:13:f1:32:d9:dd:90:24: 1c:10:a1:3d:db:5b:71:25:f2:3d:a2:74:41:5e:92: fe:f7:d5:6f:b2:8a:72:86:e3:db:75:94:c5:d7:db: a8:8c:80:40:94:28:46:47:9c:d4:be:1a:da:77:df: 25:8c:b4:bd:06:91:7a:df:7c:46:d7:07:53:51:a8: 35:68:25:d7:2e:a9:1c:fb:82:a3:82:0e:4d:b8:2e: 29:bd:a4:fc:cf:34:98:0e:fe:a5:fd:f0:49:1d:ab: 06:e8:4f:2a:37:21:16:1d:27:b1:06:cb:b4:d6:03: b3:03:29:ba:64:ff:7f:c2:69:9d:d2:d6:27:10:f6: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.245.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8b:0f:fe:9b:58:c5:ce:74:a1:2d:89:b2:1a:f5:d4:9b:f7: bf:19:c9:c2:75:92:4d:ee:f9:bc:4e:9d:c2:3f:f6:db:79:fe: 32:90:43:08:ba:80:4d:7f:3a:1b:e2:fb:96:82:d5:ed:85:75: 58:4b:ed:91:98:9e:ec:9d:05:c7:fa:67:95:ee:9a:45:7b:d1: ff:e3:d4:64:c4:a6:fc:8a:d1:ac:fc:ff:45:6d:e6:fc:35:5e: 43:a0:e8:f4:dd:ab:53:16:31:a0:7d:8f:1e:c7:b0:57:94:4d: 79:bd:c1:70:aa:b7:94:8a:e9:20:98:4d:0a:3c:ec:54:22:b5: 48:a3:a6:da:b7:70:44:54:7a:b3:ba:63:45:bc:77:bd:42:74: 43:3c:2f:3d:6e:16:2b:60:ba:0c:a1:2b:4b:87:5d:62:30:ca: df:e6:41:52:a4:88:10:b8:97:80:70:77:21:80:64:e5:fa:7b: db:f6:9d:2f:0b:a4:27:66:48:be:86:31:f1:f1:9f:e5:7c:46: 9e:38:82:a1:2d:1a:4b:60:91:3e:08:07:e0:c2:65:1f:13:c7: 0d:71:1e:ab:fb:f2:3b:86:d5:11:aa:1a:d1:5d:ff:68:4f:a3: 85:4e:35:f7:e5:25:c0:68:16:da:f9:9b:e3:29:5b:b9:9b:fc: 69:e0:10:c7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7YWl2pjGOcID8Z+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDgxNTEyNDUxMVoXDTI4MTExNzEzNDUxMVowLzEtMCsGA1UEAxMk NjZlYjkwZTktNjUwYS00YWZhLTkyMzgtNWJjZjRkZTM4YzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr3/rosBb07aNizZmJJV9z/cNXPygZMA4ceQ pW0Bcm1MBl9EnDTDznLpjnRb4JWbWez/q5haYlPCkJtSaYXMZqB1yvE5J7i488Cp pvYY1pTE1YSRVCvnMZeFSZITPD6EePPb1w55qYYvA17FuuNCdUmR6bJL/NLB2QfO A+AO1RPxMtndkCQcEKE921txJfI9onRBXpL+99VvsopyhuPbdZTF19uojIBAlChG R5zUvhrad98ljLS9BpF633xG1wdTUag1aCXXLqkc+4Kjgg5NuC4pvaT8zzSYDv6l /fBJHasG6E8qNyEWHSexBsu01gOzAym6ZP9/wmmd0tYnEPYEwQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJKp63Fj1zChnB0PNs2dYj+bMzoAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 NmViOTBlOS02NTBhLTRhZmEtOTIzOC01YmNmNGRlMzhjOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzY2ZWI5MGU5LTY1MGEtNGFmYS05 MjM4LTViY2Y0ZGUzOGM5ZC82NmViOTBlOS02NTBhLTRhZmEtOTIzOC01YmNmNGRl MzhjOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA9UAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJIsP/ptYxc50oS2Jshr1 1Jv3vxnJwnWSTe75vE6dwj/223n+MpBDCLqATX86G+L7loLV7YV1WEvtkZie7J0F x/pnle6aRXvR/+PUZMSm/IrRrPz/RW3m/DVeQ6Do9N2rUxYxoH2PHsewV5RNeb3B cKq3lIrpIJhNCjzsVCK1SKOm2rdwRFR6s7pjRbx3vUJ0QzwvPW4WK2C6DKErS4dd YjDK3+ZBUqSIELiXgHB3IYBk5fp72/adLwukJ2ZIvoYx8fGf5XxGnjiCoS0aS2CR PggH4MJlHxPHDXEeq/vyO4bVEaoa0V3/aE+jhU419+UlwGgW2vmb4ylbuZv8aeAQ xw== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:29 2026 by rpki-client