$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer File: 907e0105-3516-47a0-a9c2-5f0b77661cb1.cer (raw, json) Hash identifier: Wm2RGfPqej8JYlVkpOLG4W59kXlGZ1tiSe4h6tGJQX4= Subject key identifier: 38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DF903A0F43D62B2F741395500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 May 2026 12:45:10 +0000 Certificate not after: Tue 29 Aug 2028 12:45:10 +0000 Subordinate resources: IP: 74.120.120.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:03:a0:f4:3d:62:b2:f7:41:39:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 27 12:45:10 2026 GMT Not After : Aug 29 12:45:10 2028 GMT Subject: CN=907e0105-3516-47a0-a9c2-5f0b77661cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:4f:3c:fd:c1:d0:ed:f8:32:80:40:35:73: d3:44:50:39:b4:5d:66:4c:17:bd:73:54:c9:c3:4c: ef:83:f6:3e:9d:ba:bf:43:0e:0e:66:72:85:cc:96: 64:f4:b2:0b:33:ac:d2:a0:8c:6c:a9:5d:48:3b:d5: 0b:aa:74:7d:f6:24:b3:62:b1:14:30:56:4f:1c:b2: b0:d8:72:55:bf:63:a3:c8:9e:4c:64:74:89:a1:25: 17:e5:86:9b:eb:2b:a5:df:c7:b9:0b:fc:c3:6c:3d: 78:c8:e1:26:9b:64:21:4c:37:c9:22:8b:3a:66:d5: bf:78:7e:b3:01:4e:ed:d0:99:45:24:c5:69:7a:f4: ac:82:da:71:34:28:4f:64:ba:02:75:7f:8b:27:29: 25:dd:df:4e:a9:13:10:4e:f6:e3:34:be:aa:6c:5a: 38:53:80:fa:63:d8:db:c3:39:fb:8c:d1:55:1d:1b: 7b:f8:54:9e:87:ad:87:6c:6a:cb:7c:ca:46:b8:7b: e5:cd:84:56:fd:9b:57:4b:84:5e:80:6a:92:89:e8: e0:18:17:89:28:7c:a7:1a:f5:37:50:c3:c5:0b:aa: 9c:b2:ec:91:4b:7d:40:f5:cf:2c:03:79:7d:18:49: a2:7f:69:ec:9a:a2:aa:54:99:d8:4b:fb:d4:51:95: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.120.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ac:98:29:44:be:8a:81:3a:0c:5b:e3:cb:8d:81:ae:d8:3d: b6:ea:d4:22:35:9a:fb:e7:15:da:42:04:4b:3c:35:d8:b4:5e: c9:6b:d6:2c:32:5e:66:2b:14:fa:ec:7a:2e:36:45:48:ab:49: 6d:aa:08:cf:dc:f2:6d:aa:d9:3e:2f:87:75:0d:94:1e:19:3b: f6:68:0b:57:ac:11:92:ff:60:ad:e8:c0:32:1e:76:c4:05:30: de:8f:c3:ff:1b:7b:51:1d:64:be:4b:0c:63:d0:0c:a7:14:8e: a9:bf:8c:e9:bf:4f:df:e3:c0:34:31:18:7c:76:26:06:7d:dc: a6:7a:a9:9c:41:62:2f:ca:88:77:79:f9:63:06:a7:77:a1:67: 65:03:b9:02:da:86:2b:8f:5f:76:1c:a9:95:16:6c:02:73:b7: 0b:97:e7:40:ac:42:24:56:31:fe:0c:c3:d0:22:34:19:f7:d9: 43:86:39:28:dc:ce:e2:6d:ce:19:03:14:f6:17:93:80:c6:59: 66:ee:80:1b:ad:9a:88:23:72:32:a1:8d:f9:b7:08:ba:59:8c: aa:3c:0e:c3:8b:97:f4:1a:03:a4:0d:0a:71:74:b5:b2:7d:c8: 8e:8b:23:0b:c4:d1:8b:0d:b8:e4:6c:ba:f4:2e:78:16:05:c2: 86:ce:83:89 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE35A6D0PWKy90E5VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDUyNzEyNDUxMFoXDTI4MDgyOTEyNDUxMFowLzEtMCsGA1UEAxMk OTA3ZTAxMDUtMzUxNi00N2EwLWE5YzItNWYwYjc3NjYxY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNxPPP3B0O34MoBANXPTRFA5tF1mTBe9c1TJ w0zvg/Y+nbq/Qw4OZnKFzJZk9LILM6zSoIxsqV1IO9ULqnR99iSzYrEUMFZPHLKw 2HJVv2OjyJ5MZHSJoSUX5Yab6yul38e5C/zDbD14yOEmm2QhTDfJIos6ZtW/eH6z AU7t0JlFJMVpevSsgtpxNChPZLoCdX+LJykl3d9OqRMQTvbjNL6qbFo4U4D6Y9jb wzn7jNFVHRt7+FSeh62HbGrLfMpGuHvlzYRW/ZtXS4RegGqSiejgGBeJKHynGvU3 UMPFC6qcsuyRS31A9c8sA3l9GEmif2nsmqKqVJnYS/vUUZXyWwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDinuYrST8dozsqbYHZH6FZgwDg6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 MDdlMDEwNS0zNTE2LTQ3YTAtYTljMi01ZjBiNzc2NjFjYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzkwN2UwMTA1LTM1MTYtNDdhMC1h OWMyLTVmMGI3NzY2MWNiMS85MDdlMDEwNS0zNTE2LTQ3YTAtYTljMi01ZjBiNzc2 NjFjYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKeHgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZKyYKUS+ioE6DFvjy42B rtg9turUIjWa++cV2kIESzw12LReyWvWLDJeZisU+ux6LjZFSKtJbaoIz9zybarZ Pi+HdQ2UHhk79mgLV6wRkv9grejAMh52xAUw3o/D/xt7UR1kvksMY9AMpxSOqb+M 6b9P3+PANDEYfHYmBn3cpnqpnEFiL8qId3n5Ywand6FnZQO5AtqGK49fdhyplRZs AnO3C5fnQKxCJFYx/gzD0CI0GffZQ4Y5KNzO4m3OGQMU9heTgMZZZu6AG62aiCNy MqGN+bcIulmMqjwOw4uX9BoDpA0KcXS1sn3IjosjC8TRiw245Gy69C54FgXChs6D iQ== -----END CERTIFICATE-----Generated at Thu May 28 19:21:35 2026 by rpki-client