$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.cer File: 19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.cer (raw, json) Hash identifier: L4CQgB6LhhPCSMMKsWItmnSQx67VDDnIsx+SAS1vH6U= Subject key identifier: 88:27:1E:5B:E5:35:7B:34:A2:A2:BD:76:AE:CF:0F:5B:48:DB:6D:86 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E6837E37F93D4A339C3785870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 08:45:11 +0000 Certificate not after: Sun 08 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 205.233.18.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:37:e3:7f:93:d4:a3:39:c3:78:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 6 08:45:11 2026 GMT Not After : Oct 8 08:45:11 2028 GMT Subject: CN=19dbf4a8-2a2a-4402-b66e-75dd65b4ef30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:36:5e:4b:76:17:89:ff:8e:11:f6:b4:39: d2:8b:36:74:0a:68:03:be:1a:33:74:c6:6e:4a:ab: 4d:78:a2:f7:9c:98:13:1e:4d:2b:24:d2:a2:0a:4f: f1:2f:37:28:f3:8f:45:fe:2d:98:4e:d2:ec:ae:27: 86:39:01:53:86:3b:84:c1:75:d3:ac:80:b0:cd:47: 99:44:ba:68:98:8c:d4:21:36:71:91:04:0a:76:f9: a1:e3:54:bf:cd:81:35:d5:de:f1:ab:1f:87:b3:96: e8:58:91:22:98:f9:9f:0c:38:24:2c:5c:6a:13:60: cc:08:4f:f8:66:81:48:3a:df:78:8c:f1:87:e2:f1: ad:68:3e:8e:f2:67:1d:5b:59:20:b2:e4:8f:d5:04: 4f:ea:76:d8:54:d5:05:ac:b3:ca:98:ff:6e:a3:d5: e8:fa:b4:9e:e6:7c:fc:e1:f8:32:cc:70:44:ba:43: e8:90:fd:56:2b:42:0a:bf:7c:ac:78:b4:ea:ea:49: 63:07:33:64:e3:e4:cb:e7:f1:ea:df:72:92:83:45: 18:01:02:0b:21:97:63:c4:ad:7b:9e:2d:cf:78:a0: 1a:6d:4c:b6:82:a0:e5:97:a7:cb:41:a3:95:d5:53: 14:0e:67:6d:31:98:a0:bb:81:f7:e5:10:a3:02:26: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:27:1E:5B:E5:35:7B:34:A2:A2:BD:76:AE:CF:0F:5B:48:DB:6D:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.233.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d6:50:3b:e9:e9:6e:b7:ad:26:2d:7b:83:b1:6e:20:f4:0d: df:ea:7f:09:ed:ac:80:27:c8:f9:5f:d7:05:09:1d:a2:ad:1e: ae:2a:37:08:fd:c5:0b:45:cc:a0:59:cc:ca:b0:ff:3d:0a:96: 91:d7:c1:08:db:50:a2:05:eb:de:1a:b0:ac:2b:e3:d2:8e:16: 33:32:9e:63:22:a0:c9:d2:6c:44:87:58:82:8d:e9:4e:6c:4c: 35:1b:8d:5c:e7:6e:5e:79:ed:99:1f:04:a0:c1:fc:2a:a7:40: 45:c2:97:ef:aa:55:b0:99:c3:5b:87:9f:36:05:41:4b:7f:7b: 94:26:47:66:c3:bd:84:ca:b6:4e:90:bd:1b:34:23:c5:d8:6c: 7e:bd:a2:30:54:c0:37:f2:05:8d:e2:13:56:84:9c:11:07:85: 43:44:b7:0b:81:40:ff:46:c8:07:d9:ba:2d:da:4d:bd:d9:65: 39:27:1b:eb:35:4e:07:cc:8e:2d:05:4a:b2:20:26:47:a9:07: 7c:77:3d:96:b3:2a:22:c3:e0:ee:f5:8d:d9:9a:4f:c5:26:75: 01:d0:48:f0:d3:70:9e:9c:18:c9:4a:94:e0:17:c6:ab:59:76: 95:bd:48:c9:b1:ab:a1:88:bb:fd:f1:b3:04:aa:a6:a3:d9:65: f9:e8:ed:31 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5oN+N/k9SjOcN4WHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcwNjA4NDUxMVoXDTI4MTAwODA4NDUxMVowLzEtMCsGA1UEAxMk MTlkYmY0YTgtMmEyYS00NDAyLWI2NmUtNzVkZDY1YjRlZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxI2Xkt2F4n/jhH2tDnSizZ0CmgDvhozdMZu SqtNeKL3nJgTHk0rJNKiCk/xLzco849F/i2YTtLsrieGOQFThjuEwXXTrICwzUeZ RLpomIzUITZxkQQKdvmh41S/zYE11d7xqx+Hs5boWJEimPmfDDgkLFxqE2DMCE/4 ZoFIOt94jPGH4vGtaD6O8mcdW1kgsuSP1QRP6nbYVNUFrLPKmP9uo9Xo+rSe5nz8 4fgyzHBEukPokP1WK0IKv3yseLTq6kljBzNk4+TL5/Hq33KSg0UYAQILIZdjxK17 ni3PeKAabUy2gqDll6fLQaOV1VMUDmdtMZigu4H35RCjAibsDwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIgnHlvlNXs0oqK9dq7PD1tI222GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x OWRiZjRhOC0yYTJhLTQ0MDItYjY2ZS03NWRkNjViNGVmMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzE5ZGJmNGE4LTJhMmEtNDQwMi1i NjZlLTc1ZGQ2NWI0ZWYzMC8xOWRiZjRhOC0yYTJhLTQ0MDItYjY2ZS03NWRkNjVi NGVmMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN6RIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVtZQO+npbretJi17g7Fu IPQN3+p/Ce2sgCfI+V/XBQkdoq0erio3CP3FC0XMoFnMyrD/PQqWkdfBCNtQogXr 3hqwrCvj0o4WMzKeYyKgydJsRIdYgo3pTmxMNRuNXOduXnntmR8EoMH8KqdARcKX 76pVsJnDW4efNgVBS397lCZHZsO9hMq2TpC9GzQjxdhsfr2iMFTAN/IFjeITVoSc EQeFQ0S3C4FA/0bIB9m6LdpNvdllOScb6zVOB8yOLQVKsiAmR6kHfHc9lrMqIsPg 7vWN2ZpPxSZ1AdBI8NNwnpwYyUqU4BfGq1l2lb1IybGroYi7/fGzBKqmo9ll+ejt MQ== -----END CERTIFICATE-----Generated at Mon Jul 6 20:10:02 2026 by rpki-client