$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer File: 29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer (raw, json) Hash identifier: s+oA4pDpm61KUkjyQe+qcPqHe0Dl3tA/fKkc8Opgj28= Subject key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF36E54D0C88DE8A9D7B2A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 May 2026 12:45:18 +0000 Certificate not after: Sun 27 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 204.209.216.0 -- 204.209.221.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:6e:54:d0:c8:8d:e8:a9:d7:b2:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 25 12:45:18 2026 GMT Not After : Aug 27 12:45:18 2028 GMT Subject: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:be:1d:aa:fb:e7:47:c1:05:fd:92:95:e5: 87:e1:a2:ab:b6:01:28:8d:bd:71:0a:06:8c:3b:bb: 3d:f9:95:8c:fd:d6:98:e7:48:8f:ab:45:21:9b:93: ba:ed:9c:de:89:ba:4e:00:2b:ee:bf:79:ec:b6:22: 1f:f3:ca:74:c6:b8:72:6f:fe:46:f8:b6:59:27:c7: 4c:b0:11:25:cc:35:2c:d2:0c:4c:d8:16:0d:97:c5: e9:a1:3c:26:1c:fe:f8:94:c6:e4:26:e7:ac:93:e6: 0d:8f:a6:21:76:a4:f2:74:a2:48:d9:0b:57:34:a5: b9:ef:d0:63:d3:29:5a:78:61:74:17:8e:c7:8e:84: d3:59:f1:60:17:59:f4:e5:30:a6:77:40:7c:d4:40: a9:ae:18:41:0a:08:31:0c:d8:a1:85:38:ff:c0:ff: c5:8f:d9:f0:b1:50:85:bd:ce:61:78:96:31:9b:3d: aa:d5:fa:a4:35:2d:b7:64:f6:6a:67:66:8c:7c:27: 24:5e:43:4a:5c:27:2e:ae:1f:66:d6:fd:15:e4:0d: ec:f8:f2:72:6b:1c:f8:af:36:82:9a:c4:27:b6:eb: f9:d6:be:e1:ca:2a:26:03:9b:dc:09:4f:e3:eb:92: 80:ab:88:9a:54:42:e9:21:3c:ba:87:bf:66:9e:77: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.209.216.0-204.209.221.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ff:7b:e9:6d:ab:9d:6f:93:2f:e9:d3:bc:62:3e:c1:18:f5: 3a:11:5c:48:b1:43:27:54:27:cf:f3:26:f0:11:17:a1:87:69: 4f:dd:73:41:85:ad:37:d5:d1:f1:de:b7:d0:42:ee:d8:56:e5: b6:35:d4:61:02:c8:fc:45:e1:de:67:2b:21:5c:aa:a0:4a:79: 4b:aa:7b:8a:84:c1:39:66:34:df:9e:42:cb:0c:29:89:3b:b5: 63:5a:dc:92:a9:47:d2:46:71:f6:b9:87:a4:30:d7:92:8e:52: e4:d5:fe:e2:df:73:9e:98:4c:34:b1:3a:1e:56:e8:04:45:40: c3:cd:a7:39:f5:47:b2:eb:eb:fe:52:a4:98:f3:4a:36:e5:bd: cc:14:35:e9:f7:4e:89:c8:9c:de:fb:43:92:90:70:d4:94:92: 1f:d3:0f:2a:4b:26:fe:0d:a5:a6:a0:3a:59:28:48:01:4b:43: 76:b2:83:42:fb:14:39:d3:a7:87:38:6a:ab:71:aa:f0:f4:41: 1b:d5:0f:7a:43:2a:53:de:6f:c7:72:28:bd:39:d7:5d:2b:21: 73:9f:66:57:6b:e5:b4:08:36:88:fa:82:49:4a:f7:c1:e4:70: 95:8e:b0:80:5c:9d:b2:fb:ec:4b:32:01:c5:f8:f6:d5:98:cd: 1a:25:d5:ba -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE3zblTQyI3oqdeyqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNTEyNDUxOFoXDTI4MDgyNzEyNDUxOFowLzEtMCsGA1UEAxMk MjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAyZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBu+Har750fBBf2SleWH4aKrtgEojb1xCgaM O7s9+ZWM/daY50iPq0Uhm5O67ZzeibpOACvuv3nstiIf88p0xrhyb/5G+LZZJ8dM sBElzDUs0gxM2BYNl8XpoTwmHP74lMbkJuesk+YNj6YhdqTydKJI2QtXNKW579Bj 0ylaeGF0F47HjoTTWfFgF1n05TCmd0B81ECprhhBCggxDNihhTj/wP/Fj9nwsVCF vc5heJYxmz2q1fqkNS23ZPZqZ2aMfCckXkNKXCcurh9m1v0V5A3s+PJyaxz4rzaC msQntuv51r7hyiomA5vcCU/j65KAq4iaVELpITy6h79mnncH2wIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFArrbRPX8GB7itEAeyiglYtFEKQtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y OWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI5ZDM1YjVkLWI1NmEtNDllYS1i ZTAxLWZjYmZmOGUwMmZjZi8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhl MDJmY2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEA8zR2AMEAczR3DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBt/3vpbaud b5Mv6dO8Yj7BGPU6EVxIsUMnVCfP8ybwERehh2lP3XNBha031dHx3rfQQu7YVuW2 NdRhAsj8ReHeZyshXKqgSnlLqnuKhME5ZjTfnkLLDCmJO7VjWtySqUfSRnH2uYek MNeSjlLk1f7i33OemEw0sToeVugERUDDzac59Uey6+v+UqSY80o25b3MFDXp906J yJze+0OSkHDUlJIf0w8qSyb+DaWmoDpZKEgBS0N2soNC+xQ506eHOGqrcarw9EEb 1Q96QypT3m/Hcii9OdddKyFzn2ZXa+W0CDaI+oJJSvfB5HCVjrCAXJ2y++xLMgHF +PbVmM0aJdW6 -----END CERTIFICATE-----Generated at Wed Jun 3 20:00:57 2026 by rpki-client