$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer File: d0a791ca-4569-43e8-b02a-989f79143fe4.cer (raw, json) Hash identifier: KkILk/yFCzuKeVjxOlMU7TlN9V4zRkyylRsz5YzlCVk= Subject key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DF6390395B3D8E1C20B413C70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 12:45:18 +0000 Certificate not after: Mon 28 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 96.47.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:39:03:95:b3:d8:e1:c2:0b:41:3c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 26 12:45:18 2026 GMT Not After : Aug 28 12:45:18 2028 GMT Subject: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:59:54:d1:18:cc:ab:78:96:99:7f:5c:64: b0:a9:fc:fb:18:c4:79:b6:4a:6a:18:98:38:ef:90: 04:46:34:eb:18:60:18:c1:18:04:49:b6:38:05:89: 43:58:b0:c4:e9:1b:a0:a0:49:9b:e4:33:03:f2:97: 3d:53:a1:ad:56:a2:99:7e:7a:81:aa:b5:87:48:ba: 00:3a:d5:ec:ef:dd:e3:63:09:82:1d:57:c8:e9:86: 03:62:1a:36:8f:01:b1:61:4c:d2:75:b7:c7:d9:3e: e9:b0:cf:fa:76:e7:f7:cc:6f:ff:16:0a:f9:4f:e9: bd:0b:d9:74:35:ee:5d:e8:34:55:d6:1f:72:b6:6e: a3:21:6f:4b:fd:bd:98:32:7d:0c:19:ab:d2:b2:7e: d4:82:18:e9:48:2f:6d:b8:b1:f3:a7:6a:b4:90:02: 3a:36:0b:e2:96:7c:cf:46:06:1b:8b:65:b5:0a:cc: e8:66:b8:62:c6:49:7c:37:05:e3:9a:0a:ea:89:63: 81:91:37:71:b6:a0:94:68:1f:fe:be:07:5f:d2:f5: 10:26:3c:3e:c7:5d:4b:37:93:28:52:1a:43:ef:03: 45:9a:12:5b:4d:46:3f:6c:b2:41:f8:b7:dc:dd:c0: 11:0a:ae:7b:f1:e0:cf:e4:9f:c4:d0:cd:56:19:ab: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 96.47.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ac:92:cb:58:d7:d9:fa:57:fe:28:b9:8a:40:65:76:73:a7: cf:bb:66:fe:93:77:71:84:e5:54:7c:15:69:0c:36:3b:b9:8c: cb:a3:8a:ac:e3:ab:36:5e:9f:09:e1:7c:2d:29:cd:7a:57:77: 57:0d:d4:10:d0:4d:62:67:7b:9a:0a:41:d8:bd:a7:4f:98:86: a1:c6:12:ec:03:74:16:11:3d:66:0d:70:80:1b:8f:61:e8:4f: 31:70:4e:0b:cc:a6:96:4a:d1:cc:8d:61:03:55:b1:6d:31:a7: 72:f4:8a:5d:1c:ad:1a:c9:b5:8c:5f:14:0c:6e:64:5c:67:a7: b6:3b:c5:1b:70:1e:65:f8:1e:ae:d8:09:78:53:59:18:8f:dc: 5d:97:b7:53:0f:1f:b4:40:2c:68:f4:92:34:52:c9:3a:53:bf: 0e:0e:62:a2:84:f6:c5:8b:4e:d2:77:2e:1a:95:b5:f4:b0:1e: 78:7e:fb:d9:85:1d:b7:eb:b4:9f:6b:87:69:56:24:91:78:a5: 87:a6:24:4f:1c:0f:24:88:e9:45:3e:b6:64:20:b2:2a:24:90: 23:b2:c2:f4:18:ef:7d:6b:d7:38:ab:20:b1:af:36:12:eb:35: 98:16:e5:1f:79:06:62:af:70:0b:a6:94:6b:7f:06:66:9c:d5: 55:a8:99:9b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE32OQOVs9jhwgtBPHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDUyNjEyNDUxOFoXDTI4MDgyODEyNDUxOFowLzEtMCsGA1UEAxMk ZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQzZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUtZVNEYzKt4lpl/XGSwqfz7GMR5tkpqGJg4 75AERjTrGGAYwRgESbY4BYlDWLDE6RugoEmb5DMD8pc9U6GtVqKZfnqBqrWHSLoA OtXs793jYwmCHVfI6YYDYho2jwGxYUzSdbfH2T7psM/6duf3zG//Fgr5T+m9C9l0 Ne5d6DRV1h9ytm6jIW9L/b2YMn0MGavSsn7UghjpSC9tuLHzp2q0kAI6NgvilnzP RgYbi2W1CszoZrhixkl8NwXjmgrqiWOBkTdxtqCUaB/+vgdf0vUQJjw+x11LN5Mo UhpD7wNFmhJbTUY/bLJB+Lfc3cARCq578eDP5J/E0M1WGavN/wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFF1kTQs+VGZOB4gWMvGLyB7HoYETMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QwYTc5MWNhLTQ1NjktNDNlOC1i MDJhLTk4OWY3OTE0M2ZlNC9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkx NDNmZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARgLyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfqySy1jX2fpX/ii5ikBl dnOnz7tm/pN3cYTlVHwVaQw2O7mMy6OKrOOrNl6fCeF8LSnNeld3Vw3UENBNYmd7 mgpB2L2nT5iGocYS7AN0FhE9Zg1wgBuPYehPMXBOC8ymlkrRzI1hA1WxbTGncvSK XRytGsm1jF8UDG5kXGentjvFG3AeZfgertgJeFNZGI/cXZe3Uw8ftEAsaPSSNFLJ OlO/Dg5iooT2xYtO0ncuGpW19LAeeH772YUdt+u0n2uHaVYkkXilh6YkTxwPJIjp RT62ZCCyKiSQI7LC9BjvfWvXOKsgsa82Eus1mBblH3kGYq9wC6aUa38GZpzVVaiZ mw== -----END CERTIFICATE-----Generated at Sat Jun 6 01:08:18 2026 by rpki-client