$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer File: d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer (raw, json) Hash identifier: pTXCUGtuVfTo/SfsCgJspXfSHwxg3D0SPfo3dImNmuM= Subject key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E7A5D53D002DCEF78385B4380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jul 2026 20:45:10 +0000 Certificate not after: Sat 14 Oct 2028 20:45:10 +0000 Subordinate resources: IP: 104.193.192.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:5d:53:d0:02:dc:ef:78:38:5b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 12 20:45:10 2026 GMT Not After : Oct 14 20:45:10 2028 GMT Subject: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:8c:81:50:ce:4f:df:56:59:3d:d5:64:40: 36:61:70:e0:c2:f6:0d:e7:b0:6c:a0:ef:0a:34:db: 3b:32:fb:09:ef:91:5d:f7:92:a4:42:d3:48:25:ee: 48:70:33:f4:76:c0:88:50:2a:11:1f:22:2d:d4:d1: 34:d1:7b:74:26:7e:e1:c4:ab:bc:5d:21:67:5d:00: ae:a6:6d:90:40:72:ac:8d:0f:c0:1e:a2:0c:59:f4: d0:4a:3e:da:eb:c7:a1:6b:3a:0b:b6:5c:c8:76:8f: 0e:a9:a2:c8:9f:aa:4b:ca:8a:75:a2:f6:05:e8:36: 07:6c:0b:9e:82:4f:92:38:d9:ff:08:14:05:8c:2e: 26:b7:d7:a1:23:6b:cb:f1:1b:ce:4e:56:fd:cd:b1: 6d:25:7d:bd:d0:b6:e8:62:e2:38:fa:f2:3c:34:de: 85:0d:34:21:ce:9b:a3:6d:b5:c8:53:5a:11:81:f6: f9:18:f0:13:f1:4b:f3:ed:aa:49:dc:6b:b7:71:87: a5:c1:e8:c9:c2:d5:a7:ec:0e:ae:f9:a8:6c:8b:6f: c7:03:24:a1:58:0d:0e:c9:1d:db:09:db:5f:31:df: d4:4e:86:3a:f0:bb:6e:13:35:e1:51:d2:62:4d:66: 75:59:ee:28:37:8e:4f:4f:49:51:96:4f:0d:49:8f: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.193.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6a:96:40:51:46:e5:70:1c:59:fa:95:18:6a:3c:c8:28:1c: 07:89:f9:56:e3:11:89:4f:69:27:b7:ba:7a:d6:14:8f:38:35: 61:12:df:ac:a4:6a:04:62:d8:77:1c:9c:b3:73:ae:df:97:12: 47:16:09:d0:b7:00:a7:00:f1:55:3b:49:4d:c0:d7:4b:c3:ca: 05:2b:26:70:57:0d:82:ea:b0:e4:5b:5e:07:52:d3:52:f7:fe: 4f:f4:8b:92:8d:2b:a3:9f:ec:f3:09:ce:34:a9:78:24:a7:94: 7e:3c:69:91:1e:e8:d4:44:83:d8:5c:dd:42:02:94:02:6a:ed: 51:64:ee:86:f5:cc:dd:e6:ab:52:b0:04:0d:a1:1a:da:28:6b: 0f:77:9f:78:84:a2:62:19:4a:51:52:f0:6b:e4:1d:b8:cc:c0: ac:fa:f3:18:8f:eb:e1:3d:a5:5c:63:4f:1f:16:9c:9b:9b:6b: 72:37:ee:c6:fb:84:27:70:b2:14:6d:b5:34:f9:04:38:87:e3: 28:0e:46:8b:9f:28:33:2e:0b:b1:6b:4f:1b:31:3d:59:e0:7f: 36:d9:15:ab:19:ce:44:85:e7:67:84:d9:ef:fc:a1:db:4d:8c: f2:97:52:18:cb:d4:fe:8d:5e:be:0b:09:03:c6:3f:a3:06:7c: 0b:30:9f:bf -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE56XVPQAtzveDhbQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxMjIwNDUxMFoXDTI4MTAxNDIwNDUxMFowLzEtMCsGA1UEAxMk ZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEwZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuKMgVDOT99WWT3VZEA2YXDgwvYN57BsoO8K NNs7MvsJ75Fd95KkQtNIJe5IcDP0dsCIUCoRHyIt1NE00Xt0Jn7hxKu8XSFnXQCu pm2QQHKsjQ/AHqIMWfTQSj7a68ehazoLtlzIdo8OqaLIn6pLyop1ovYF6DYHbAue gk+SONn/CBQFjC4mt9ehI2vL8RvOTlb9zbFtJX290LboYuI4+vI8NN6FDTQhzpuj bbXIU1oRgfb5GPAT8Uvz7apJ3Gu3cYelwejJwtWn7A6u+ahsi2/HAyShWA0OyR3b CdtfMd/UToY68LtuEzXhUdJiTWZ1We4oN45PT0lRlk8NSY9g6QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFNEfwljklB3z2Wm7g99H+a9zqSzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwZWExMmZmLWY5NTQtNDIyOS04 OGEyLWQyYzY2NTZhMGVjYS9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2 YTBlY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfmqWQFFG5XAcWfqVGGo8 yCgcB4n5VuMRiU9pJ7e6etYUjzg1YRLfrKRqBGLYdxycs3Ou35cSRxYJ0LcApwDx VTtJTcDXS8PKBSsmcFcNguqw5FteB1LTUvf+T/SLko0ro5/s8wnONKl4JKeUfjxp kR7o1ESD2FzdQgKUAmrtUWTuhvXM3earUrAEDaEa2ihrD3efeISiYhlKUVLwa+Qd uMzArPrzGI/r4T2lXGNPHxacm5trcjfuxvuEJ3CyFG21NPkEOIfjKA5Gi58oMy4L sWtPGzE9WeB/NtkVqxnORIXnZ4TZ7/yh202M8pdSGMvU/o1evgsJA8Y/owZ8CzCf vw== -----END CERTIFICATE-----Generated at Tue Jul 21 17:15:00 2026 by rpki-client