$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer File: 1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer (raw, json) Hash identifier: +5yRFmaJiaxXmShavSUMW8lDJq08GR/T3I6C0nFo/z4= Subject key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E3E57A0D9D6B30701029CD300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Jun 2026 08:45:11 +0000 Certificate not after: Sat 23 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 128.198.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:57:a0:d9:d6:b3:07:01:02:9c:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 21 08:45:11 2026 GMT Not After : Sep 23 08:45:11 2028 GMT Subject: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:5d:dd:bd:8d:01:b0:5f:ea:0f:74:88:03: 34:cd:49:af:ae:54:82:b7:3e:3a:fc:3e:9d:39:44: f7:6f:84:bb:ca:b4:0c:1d:7f:ae:70:a5:29:0e:da: d8:2e:e1:34:68:fc:b3:9b:30:07:52:12:3f:1b:3c: b6:bf:30:ac:70:20:92:df:1b:ad:af:c6:bd:72:df: f2:b6:37:58:61:f3:a3:41:2a:3f:0b:82:c1:4c:d5: 4c:14:c6:93:f8:aa:e8:c7:1a:a0:f1:33:f9:b2:98: a1:36:eb:b8:7d:c2:66:3a:a4:c0:ce:45:35:f5:65: 42:6e:b3:bd:e2:46:dd:0b:23:13:86:e5:3e:42:45: 75:ff:07:4f:16:91:9a:e2:31:9c:83:c4:95:3a:3f: 02:26:9d:da:96:a5:ff:8c:4a:e4:f5:f3:d0:ee:11: f0:95:97:ab:5b:3b:5f:e0:e0:80:5e:a0:75:d3:8f: 80:98:8f:a6:fc:c1:ea:11:ca:8f:c5:2a:44:06:de: d3:79:9e:a0:77:2d:a8:b0:0e:fc:c5:88:7a:3d:a3: c6:69:39:f9:3a:27:6d:5e:13:e2:60:c4:03:a0:a2: a0:cb:55:e5:ad:f4:10:60:01:b3:96:7a:2a:10:e6: 2a:be:1b:71:60:a6:be:24:fc:5c:cf:06:0e:75:92: 36:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 128.198.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:41:62:28:7d:45:e0:be:60:4f:19:ff:c4:e4:8a:0b:7f:09: 60:ed:65:1a:e4:c8:f1:58:e5:fe:bf:44:7f:1f:3a:fb:71:6d: 8a:f6:45:1a:97:2f:11:8d:7b:c7:03:10:2b:5c:08:cb:6f:b3: f2:c7:f6:0c:f0:bd:b5:74:15:ab:2d:8c:13:7d:2a:13:33:50: 51:0c:47:2b:b2:41:2d:8f:aa:b3:e0:a5:ed:81:a0:41:63:8d: 4b:37:d7:ee:74:1e:49:76:a7:4b:00:5c:0e:1f:64:51:66:4d: da:70:d0:79:b8:fe:19:74:07:03:d2:4c:23:87:6a:d8:0f:b4: cc:ce:96:c1:93:56:9c:04:af:01:bc:94:97:d9:d2:87:b6:61: 59:79:29:25:2e:4b:00:f3:24:f5:f4:d1:79:6a:39:58:cf:84: d7:09:72:d2:35:20:3e:a6:3e:2b:aa:dc:f7:dc:44:c3:e2:73: 8b:cf:13:da:fc:96:45:b3:4d:24:79:97:b0:a0:c8:37:4b:15: 65:bc:0c:7a:85:93:9f:20:37:7c:25:ce:7a:f5:13:8e:f9:96: ab:de:fe:ff:b6:ba:91:71:ae:fa:01:c2:ec:d1:c3:ee:80:27: c6:3b:79:05:74:b3:7a:62:0b:2a:fe:56:22:a1:e5:b3:5a:69: a6:03:8e:28 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE4+V6DZ1rMHAQKc0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYyMTA4NDUxMVoXDTI4MDkyMzA4NDUxMVowLzEtMCsGA1UEAxMk MWQyNjkzNGUtMGJiZi00MzljLWExMTUtNGU2ZjRhOGQ1M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ypd3b2NAbBf6g90iAM0zUmvrlSCtz46/D6d OUT3b4S7yrQMHX+ucKUpDtrYLuE0aPyzmzAHUhI/Gzy2vzCscCCS3xutr8a9ct/y tjdYYfOjQSo/C4LBTNVMFMaT+Kroxxqg8TP5spihNuu4fcJmOqTAzkU19WVCbrO9 4kbdCyMThuU+QkV1/wdPFpGa4jGcg8SVOj8CJp3alqX/jErk9fPQ7hHwlZerWztf 4OCAXqB104+AmI+m/MHqEcqPxSpEBt7TeZ6gdy2osA78xYh6PaPGaTn5OidtXhPi YMQDoKKgy1XlrfQQYAGzlnoqEOYqvhtxYKa+JPxczwYOdZI2eQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJd0GAQV/QjhwH5JrOs6+D6BqaDLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x ZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4ZDUzYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFkMjY5MzRlLTBiYmYtNDM5Yy1h MTE1LTRlNmY0YThkNTNhMi8xZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4 ZDUzYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCAxjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBQWIofUXgvmBPGf/E5IoL fwlg7WUa5MjxWOX+v0R/Hzr7cW2K9kUaly8RjXvHAxArXAjLb7Pyx/YM8L21dBWr LYwTfSoTM1BRDEcrskEtj6qz4KXtgaBBY41LN9fudB5JdqdLAFwOH2RRZk3acNB5 uP4ZdAcD0kwjh2rYD7TMzpbBk1acBK8BvJSX2dKHtmFZeSklLksA8yT19NF5ajlY z4TXCXLSNSA+pj4rqtz33ETD4nOLzxPa/JZFs00keZewoMg3SxVlvAx6hZOfIDd8 Jc569ROO+Zar3v7/trqRca76AcLs0cPugCfGO3kFdLN6Ygsq/lYioeWzWmmmA44o -----END CERTIFICATE-----Generated at Mon Jul 6 21:10:05 2026 by rpki-client