$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer File: d0df77c4-4a94-461b-9582-441eb75796a4.cer (raw, json) Hash identifier: f6yp+o2DHo0OhDkYds7J1u9x2kPu4t3wD4fWfwMyNIM= Subject key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E280226A3A11DB2A61D37E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Jun 2026 08:45:11 +0000 Certificate not after: Fri 15 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 192.139.35.0/24 IP: 206.108.10.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:02:26:a3:a1:1d:b2:a6:1d:37:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 13 08:45:11 2026 GMT Not After : Sep 15 08:45:11 2028 GMT Subject: CN=d0df77c4-4a94-461b-9582-441eb75796a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:d4:1a:a1:19:40:46:f1:e3:8f:77:ee:7e: cc:f8:68:b2:7e:50:ef:85:e2:82:ca:8f:ab:72:e0: b9:2d:6f:e0:95:9e:3d:a7:42:a9:85:68:a0:cb:35: 4c:9e:d8:68:3d:8d:c1:70:5a:68:a0:56:0b:1d:c5: 6c:72:3c:d6:a1:3d:d2:09:8f:bd:71:c3:89:a7:19: eb:85:84:b2:0b:4a:b9:26:17:2d:fd:20:16:b1:63: 91:a8:b3:f5:c9:2b:c3:52:7b:b1:95:8f:dc:1a:73: e6:09:b3:bd:b1:09:76:e6:7e:d9:37:a8:97:ec:b7: cf:4e:cb:02:e3:a0:fc:f5:d5:22:8d:d5:f6:11:81: 0c:50:d7:25:1d:d7:b2:12:71:82:3d:c8:c7:bb:97: e1:b5:3b:a7:fa:d0:54:e1:dc:c2:70:f9:d6:99:ca: 36:8a:27:6f:91:78:aa:ce:19:09:ae:a3:5d:db:a3: 5b:ac:a4:89:a4:b2:0c:5a:ea:43:d6:db:e4:9e:01: d3:04:de:70:f5:38:1d:90:dc:0f:08:10:f5:33:6a: 5b:b3:5a:78:9e:06:91:e1:de:9e:d5:12:2e:ac:b6: cb:1b:3f:48:16:80:f9:cb:fd:d6:e2:6e:44:09:9c: 5c:1c:ae:6d:d3:5d:19:47:22:ad:76:28:06:0d:13: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.139.35.0/24 206.108.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:da:ce:37:ba:ed:a7:19:18:24:9e:69:aa:44:c3:a7:d1:36: 0f:01:8c:d0:c6:df:5b:5a:cd:00:f3:c7:63:c5:db:73:60:42: 04:5a:dd:7a:40:9c:8e:db:f9:7b:e8:3b:d5:9d:5b:c2:24:5f: 41:ac:96:2e:9d:ee:9f:a3:ff:23:df:11:fa:fc:29:95:51:dc: a7:43:e8:e1:8f:86:f2:fa:2c:7a:45:53:b8:70:6b:35:71:06: 54:88:05:cb:8a:67:12:b4:05:e2:98:52:e3:a6:4d:44:42:88: e7:73:1b:7a:ce:31:86:8c:af:63:d7:88:6d:96:85:1c:b9:75: 2b:40:87:61:51:85:f1:c4:cd:5b:5d:40:1c:e8:da:0b:4b:e4: 9f:b3:b6:5a:67:73:36:fd:9e:74:b4:ce:a6:60:34:36:d9:5a: 8e:b7:e6:e5:3e:5b:1e:b4:f7:65:b2:2c:76:d0:1e:61:c6:d2: a2:ad:30:1a:4b:40:9b:de:0f:6b:c8:19:7d:4c:c8:24:24:8e: 2d:26:35:88:0f:19:57:63:06:87:f4:40:6c:9a:8f:b9:b8:8c: cd:90:3b:1a:c4:d8:57:35:4e:63:6a:f6:45:f0:a5:44:50:3f: 0e:78:ce:40:05:b6:fd:bd:6f:bd:1f:4a:fc:6d:22:e7:bd:f1: ec:07:44:cf -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE4oAiajoR2yph035oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYxMzA4NDUxMVoXDTI4MDkxNTA4NDUxMVowLzEtMCsGA1UEAxMk ZDBkZjc3YzQtNGE5NC00NjFiLTk1ODItNDQxZWI3NTc5NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidXUGqEZQEbx44937n7M+GiyflDvheKCyo+r cuC5LW/glZ49p0KphWigyzVMnthoPY3BcFpooFYLHcVscjzWoT3SCY+9ccOJpxnr hYSyC0q5Jhct/SAWsWORqLP1ySvDUnuxlY/cGnPmCbO9sQl25n7ZN6iX7LfPTssC 46D89dUijdX2EYEMUNclHdeyEnGCPcjHu5fhtTun+tBU4dzCcPnWmco2iidvkXiq zhkJrqNd26NbrKSJpLIMWupD1tvkngHTBN5w9TgdkNwPCBD1M2pbs1p4ngaR4d6e 1RIurLbLGz9IFoD5y/3W4m5ECZxcHK5t010ZRyKtdigGDRMfbwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFNph5N82cTaKFWFQS5N4RgXwe8n8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1Nzk2YTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwZGY3N2M0LTRhOTQtNDYxYi05 NTgyLTQ0MWViNzU3OTZhNC9kMGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1 Nzk2YTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAiyMDBAHObAowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWNrON7rtpxkY JJ5pqkTDp9E2DwGM0MbfW1rNAPPHY8Xbc2BCBFrdekCcjtv5e+g71Z1bwiRfQayW Lp3un6P/I98R+vwplVHcp0Po4Y+G8vosekVTuHBrNXEGVIgFy4pnErQF4phS46ZN REKI53Mbes4xhoyvY9eIbZaFHLl1K0CHYVGF8cTNW11AHOjaC0vkn7O2WmdzNv2e dLTOpmA0Ntlajrfm5T5bHrT3ZbIsdtAeYcbSoq0wGktAm94Pa8gZfUzIJCSOLSY1 iA8ZV2MGh/RAbJqPubiMzZA7GsTYVzVOY2r2RfClRFA/DnjOQAW2/b1vvR9K/G0i 573x7AdEzw== -----END CERTIFICATE-----Generated at Mon Jul 6 20:11:12 2026 by rpki-client