$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer File: c732f1a1-a4d1-4822-8730-10a209755167.cer (raw, json) Hash identifier: Xn/QVR4FfTO7fFVtGfTR78AeOWYVEX4cevaju32f/JU= Subject key identifier: B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584EB9A4D6D803E67B41D4E7CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Aug 2026 12:45:11 +0000 Certificate not after: Mon 06 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 216.241.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:a4:d6:d8:03:e6:7b:41:d4:e7:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 4 12:45:11 2026 GMT Not After : Nov 6 13:45:11 2028 GMT Subject: CN=c732f1a1-a4d1-4822-8730-10a209755167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d8:d9:42:04:21:31:24:8c:e3:2b:6d:a5:60: 7f:5a:bc:84:41:45:bb:a4:f3:11:20:fe:db:eb:60: e2:51:f1:7f:ff:22:29:be:ec:03:62:f8:40:34:8a: bd:72:04:1e:46:81:95:a9:10:58:07:a0:0d:db:bd: c2:88:e5:cd:3e:dd:d9:9d:02:6a:1e:71:33:55:94: 76:89:aa:23:ae:2c:0e:c8:17:15:98:1c:3e:11:ce: 4e:d1:63:08:16:be:37:f0:ea:70:44:cb:0a:d2:32: cf:26:13:6d:05:17:b7:7d:e6:4a:51:87:cf:d4:d6: d9:81:54:7d:81:6f:5a:c0:13:b8:f9:ff:a1:ec:79: f6:b6:61:98:c6:ea:25:db:5f:49:d1:83:f0:ff:9b: e5:52:ed:d6:bb:79:67:40:70:50:a6:e5:8d:41:c2: 27:60:b6:32:29:0c:1f:03:80:9e:6d:d1:3f:a6:a3: 69:79:b4:38:7b:a9:6f:d5:7c:4c:09:ab:fe:42:df: d6:0b:ef:b9:a3:cf:eb:6a:1e:a9:a1:66:4f:9e:28: 17:65:f0:bb:7e:7a:de:ea:50:e1:c5:5c:83:ab:a3: 91:61:1c:e4:df:d4:02:6f:36:8c:bb:35:5c:37:0c: b6:09:7c:8e:07:c1:63:30:70:cf:71:23:3a:0c:b0: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.241.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f3:04:3e:d8:d6:f1:b8:e4:0c:13:c2:a3:56:90:79:10:92: 19:cd:c5:b2:95:71:72:88:49:c6:d7:22:5f:e1:df:bf:4f:b5: cf:ca:87:3b:c5:37:f6:4f:ae:03:a6:cf:52:87:de:5b:a6:9a: 18:c6:38:03:d2:da:10:5f:de:b3:1f:35:16:79:e0:89:42:7b: ca:a1:f1:80:f8:2c:fe:d2:3a:8d:4c:08:10:01:84:6b:37:8a: 83:d2:c2:df:26:f4:4b:07:1f:45:b6:4c:25:74:da:ab:eb:40: ff:2e:a9:6e:b3:be:dd:72:c0:86:78:a4:53:9c:46:c4:03:4d: d4:fe:8d:4b:f9:7f:78:c6:0f:be:71:96:a0:4e:cc:04:33:ca: cd:9c:a4:c4:30:96:f8:42:7d:dc:ef:88:c1:8e:37:ef:25:47: 2a:61:17:e8:25:70:f1:5a:2d:30:3a:4a:85:c2:f3:2d:56:b6: b5:26:d9:e3:30:1f:b3:0a:c8:b6:36:f2:57:0b:bd:8b:0a:57: 59:a0:5e:bf:4f:f3:23:b1:9e:99:2c:03:39:bf:3e:e3:69:b9: be:eb:84:77:8b:5f:fd:56:e0:a1:82:f4:12:6f:76:87:2f:49: 90:72:7c:0b:35:cd:76:3c:86:8a:2a:3e:65:bf:64:5d:db:2b: 3d:0d:1c:70 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE65pNbYA+Z7QdTnzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDgwNDEyNDUxMVoXDTI4MTEwNjEzNDUxMVowLzEtMCsGA1UEAxMk YzczMmYxYTEtYTRkMS00ODIyLTg3MzAtMTBhMjA5NzU1MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tjZQgQhMSSM4yttpWB/WryEQUW7pPMRIP7b 62DiUfF//yIpvuwDYvhANIq9cgQeRoGVqRBYB6AN273CiOXNPt3ZnQJqHnEzVZR2 iaojriwOyBcVmBw+Ec5O0WMIFr438OpwRMsK0jLPJhNtBRe3feZKUYfP1NbZgVR9 gW9awBO4+f+h7Hn2tmGYxuol219J0YPw/5vlUu3Wu3lnQHBQpuWNQcInYLYyKQwf A4CebdE/pqNpebQ4e6lv1XxMCav+Qt/WC++5o8/rah6poWZPnigXZfC7fnre6lDh xVyDq6ORYRzk39QCbzaMuzVcNwy2CXyOB8FjMHDPcSM6DLA9DwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLHC1hroOTjBYMOrLxGDGU9LIje4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NzMyZjFhMS1hNGQxLTQ4MjItODczMC0xMGEyMDk3NTUxNjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M3MzJmMWExLWE0ZDEtNDgyMi04 NzMwLTEwYTIwOTc1NTE2Ny9jNzMyZjFhMS1hNGQxLTQ4MjItODczMC0xMGEyMDk3 NTUxNjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATY8dAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArvMEPtjW8bjkDBPCo1aQ eRCSGc3FspVxcohJxtciX+Hfv0+1z8qHO8U39k+uA6bPUofeW6aaGMY4A9LaEF/e sx81FnngiUJ7yqHxgPgs/tI6jUwIEAGEazeKg9LC3yb0SwcfRbZMJXTaq+tA/y6p brO+3XLAhnikU5xGxANN1P6NS/l/eMYPvnGWoE7MBDPKzZykxDCW+EJ93O+IwY43 7yVHKmEX6CVw8VotMDpKhcLzLVa2tSbZ4zAfswrItjbyVwu9iwpXWaBev0/zI7Ge mSwDOb8+42m5vuuEd4tf/VbgoYL0Em92hy9JkHJ8CzXNdjyGiio+Zb9kXdsrPQ0c cA== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:57 2026 by rpki-client