$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer File: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer (raw, json) Hash identifier: Uo2I/IynNtQkoeA9gvs9HuHNEJe0sQwYPeNMt5BpeqA= Subject key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584EDC8A6483DDABD5EC49B06C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Aug 2026 00:45:11 +0000 Certificate not after: Sun 19 Nov 2028 01:45:11 +0000 Subordinate resources: AS: 10465 AS: 10993 AS: 19130 IP: 64.136.128.0/19 IP: 69.26.128.0/19 IP: 69.84.0.0/20 IP: 206.72.64.0/19 IP: 216.240.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:8a:64:83:dd:ab:d5:ec:49:b0:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 17 00:45:11 2026 GMT Not After : Nov 19 01:45:11 2028 GMT Subject: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c2:62:54:2a:e9:b6:b8:eb:45:67:45:b8:79: 37:b8:f6:e6:49:88:a8:05:33:eb:4f:5e:d9:e3:e0: 09:a7:5a:36:4c:ca:94:bb:b9:b8:99:cb:96:59:fe: 3a:fb:8a:16:04:27:68:a4:4c:07:d2:d5:8a:d9:87: 49:d0:5f:19:62:d5:12:a6:a8:ac:61:c5:37:db:b2: b2:8a:ff:51:8d:31:92:55:66:ad:48:60:73:94:e2: 9e:c5:cc:22:ea:e5:6f:67:29:78:c8:b2:70:7a:1b: 7d:97:bb:0f:6b:5f:b6:f7:46:b3:c7:47:5c:e6:f5: 28:38:24:d2:34:63:9f:fa:45:51:2d:8c:64:c2:88: 80:7f:d0:fb:92:07:f3:fc:76:95:d2:20:f0:86:66: 98:29:2f:eb:7a:3b:84:57:fc:87:28:c5:36:ca:91: 15:1d:31:53:75:f0:0a:54:2f:6a:a2:15:4f:53:5b: b4:30:77:8a:84:3a:86:3e:4b:1e:78:5c:d3:9b:93: 67:0d:c4:ab:a2:54:a5:76:7c:52:f5:00:d3:92:57: 59:13:4c:f5:d2:81:3d:7b:ae:20:ba:4a:fe:bf:f4: b6:5b:c8:c6:57:c8:94:f0:9d:b7:94:9f:b5:ab:fa: d3:6a:0b:05:c4:40:db:7c:3f:2a:eb:9f:3f:11:01: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.136.128.0/19 69.26.128.0/19 69.84.0.0/20 206.72.64.0/19 216.240.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10465 10993 19130 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d5:8b:dc:3b:19:f1:c0:f8:6e:77:6b:b5:b9:85:61:e6:54: 4a:2d:eb:d6:a8:13:93:e4:5c:a1:fd:c0:27:f1:ab:cb:3f:10: 17:4d:28:ca:7e:b9:c1:63:39:b1:cd:9c:b7:64:ce:41:27:cb: 8c:b9:62:0b:c1:9f:53:6b:13:ef:4c:95:1b:da:4c:05:15:d4: f4:24:78:b7:d1:57:e8:dd:c1:00:ad:11:95:f7:41:ed:74:22: e3:ea:0e:e0:da:dc:79:f9:84:6b:d6:79:08:70:37:2f:fc:31: f4:05:8f:45:98:5f:15:a6:bc:85:86:64:46:de:28:53:b6:b3: 52:ca:a8:08:2e:f1:16:52:be:5d:ee:f3:f5:cd:8b:97:3a:8e: 52:e1:b0:68:43:0a:db:b4:df:7b:30:81:46:11:b1:a3:df:41: 98:9b:29:f5:aa:45:55:66:8a:c3:84:6f:1a:e6:8d:21:2e:f0: 7d:b3:97:58:6c:c8:66:6e:46:e2:60:23:65:45:4d:a2:7a:f8: e9:24:0a:79:3b:99:70:59:71:4c:df:f4:e7:a8:be:66:a6:6d: 66:ff:f9:c7:7f:b5:3f:69:4f:72:35:7c:e8:5a:6e:20:96:52: 9d:79:13:02:5f:fa:9d:f1:d0:eb:68:ef:3b:4b:e0:19:46:3d: 5b:31:bb:ef -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWE7cimSD3avV7EmwbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDgxNzAwNDUxMVoXDTI4MTExOTAxNDUxMVowLzEtMCsGA1UEAxMk MjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVkY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MJiVCrptrjrRWdFuHk3uPbmSYioBTPrT17Z 4+AJp1o2TMqUu7m4mcuWWf46+4oWBCdopEwH0tWK2YdJ0F8ZYtUSpqisYcU327Ky iv9RjTGSVWatSGBzlOKexcwi6uVvZyl4yLJweht9l7sPa1+290azx0dc5vUoOCTS NGOf+kVRLYxkwoiAf9D7kgfz/HaV0iDwhmaYKS/rejuEV/yHKMU2ypEVHTFTdfAK VC9qohVPU1u0MHeKhDqGPkseeFzTm5NnDcSrolSldnxS9QDTkldZE0z10oE9e64g ukr+v/S2W8jGV8iU8J23lJ+1q/rTagsFxEDbfD8q658/EQHjDwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFENME25JVsYvv7MkahSaQ2mTnZvgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y MWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzIxYzU4MGMxLWEwNWQtNGUyOC1h NDhkLTllYTBlYzVlZGNhYy8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1 ZWRjYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAVAiIADBAVFGoADBARFVAADBAXOSEADBAXY8CAw IQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICKOECAirxAgJKujBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBr1Yvc OxnxwPhud2u1uYVh5lRKLevWqBOT5Fyh/cAn8avLPxAXTSjKfrnBYzmxzZy3ZM5B J8uMuWILwZ9TaxPvTJUb2kwFFdT0JHi30Vfo3cEArRGV90HtdCLj6g7g2tx5+YRr 1nkIcDcv/DH0BY9FmF8VpryFhmRG3ihTtrNSyqgILvEWUr5d7vP1zYuXOo5S4bBo QwrbtN97MIFGEbGj30GYmyn1qkVVZorDhG8a5o0hLvB9s5dYbMhmbkbiYCNlRU2i evjpJAp5O5lwWXFM3/TnqL5mpm1m//nHf7U/aU9yNXzoWm4gllKdeRMCX/qd8dDr aO87S+AZRj1bMbvv -----END CERTIFICATE-----Generated at Sat Sep 19 00:54:37 2026 by rpki-client