$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer File: c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer (raw, json) Hash identifier: hNQUr2Igq67GQVhnYpBlunQyK3I1PyF6cm0BTDC7MeM= Subject key identifier: 60:D0:E1:1D:71:00:37:A1:D6:C4:8D:70:B1:FE:5D:A0:12:A2:26:C6 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D2048538DDD33E2D356C8B140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 21:33:10 +0000 Certificate not after: Mon 12 Jun 2028 21:33:10 +0000 Subordinate resources: IP: 140.235.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:48:53:8d:dd:33:e2:d3:56:c8:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 10 21:33:10 2026 GMT Not After : Jun 12 21:33:10 2028 GMT Subject: CN=c26bd691-4ee7-472e-b41f-ac02b34ddb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:69:38:d2:67:e7:2c:c3:ea:56:06:74:48: 5f:b4:8e:81:97:41:e2:c8:87:0b:c4:dd:65:c6:19: 79:ef:59:eb:04:92:fa:89:53:80:a3:78:75:db:21: 1b:c8:1d:d1:fe:10:15:5a:72:76:85:c6:8a:32:dc: 7a:79:bd:47:4e:10:c5:17:f0:6b:a0:36:29:87:0c: 18:02:42:d1:90:bc:e3:9d:02:6e:bd:da:87:af:18: 58:74:a0:ad:1b:76:57:0b:26:0d:42:d3:98:55:1c: 6e:de:38:0d:4d:67:f8:0a:50:06:bf:40:42:c1:87: ca:f2:b9:ff:b8:9b:7c:ee:c2:ac:9a:9e:6d:2e:9e: ff:ab:b8:89:5c:01:76:87:17:c8:75:2c:d0:0d:e6: f4:d4:c5:26:20:3c:80:00:a1:a6:d4:18:c2:4f:48: 78:c8:bf:d2:23:00:c2:f8:93:00:d6:c5:f5:9a:5d: 59:c7:ef:fc:1f:51:de:5e:ee:4a:80:b5:a9:b9:e9: ce:c6:61:d4:9a:c5:cb:23:01:5c:64:d8:fe:50:dc: 58:15:6b:e3:39:6f:62:91:92:c2:5c:4a:6d:40:2b: d0:7f:75:ed:1c:88:8b:f0:68:51:b2:bc:16:80:5c: 29:e1:28:61:73:37:24:b9:1b:0e:85:f0:cc:49:49: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D0:E1:1D:71:00:37:A1:D6:C4:8D:70:B1:FE:5D:A0:12:A2:26:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 140.235.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:65:fa:6b:f4:06:6c:45:22:8f:77:71:7c:e2:bf:db:ed:67: 04:61:2c:29:90:bc:cd:1e:37:d4:72:75:29:6d:1e:3f:e3:2d: 86:27:47:3d:62:ef:7f:6d:69:97:c5:1a:96:ec:57:47:22:c4: 67:2d:7d:22:7c:4d:99:bd:47:92:7b:d5:f2:8d:25:24:8b:6b: 61:bb:20:41:e1:5d:04:9e:e6:91:08:49:71:a7:9e:8e:dd:d7: 6b:6a:b4:ab:c0:28:b6:03:70:ac:31:61:e6:37:d8:bb:4c:fe: 25:7c:0b:72:4f:fe:ae:be:93:03:d2:13:8b:f1:66:01:93:5b: d4:34:b7:07:74:0a:56:2f:87:4a:b4:63:f2:33:5b:b0:6a:05: 97:f2:fd:3d:df:aa:87:94:3d:5f:6c:f2:8f:7e:55:9a:77:ee: ac:e2:4b:4f:b7:e9:f3:20:b5:f4:e4:72:3e:e9:7a:10:91:c1: d8:c1:3f:f5:22:ea:3d:78:9a:c1:af:1f:33:de:f6:bd:f3:a3: 53:d4:19:fd:c3:5f:55:79:a5:2d:8a:f6:c2:90:18:21:fe:1f: fb:24:2f:41:2c:01:10:50:dd:37:db:fe:b8:1a:26:cc:9c:89: a4:ee:5a:a5:08:af:1a:5b:37:6a:fa:8f:87:06:f6:f2:f9:e1: 01:11:24:68 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0gSFON3TPi01bIsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMxMDIxMzMxMFoXDTI4MDYxMjIxMzMxMFowLzEtMCsGA1UEAxMk YzI2YmQ2OTEtNGVlNy00NzJlLWI0MWYtYWMwMmIzNGRkYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybVpONJn5yzD6lYGdEhftI6Bl0HiyIcLxN1l xhl571nrBJL6iVOAo3h12yEbyB3R/hAVWnJ2hcaKMtx6eb1HThDFF/BroDYphwwY AkLRkLzjnQJuvdqHrxhYdKCtG3ZXCyYNQtOYVRxu3jgNTWf4ClAGv0BCwYfK8rn/ uJt87sKsmp5tLp7/q7iJXAF2hxfIdSzQDeb01MUmIDyAAKGm1BjCT0h4yL/SIwDC +JMA1sX1ml1Zx+/8H1HeXu5KgLWpuenOxmHUmsXLIwFcZNj+UNxYFWvjOW9ikZLC XEptQCvQf3XtHIiL8GhRsrwWgFwp4ShhczckuRsOhfDMSUk9jwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGDQ4R1xADeh1sSNcLH+XaASoibGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MjZiZDY5MS00ZWU3LTQ3MmUtYjQxZi1hYzAyYjM0ZGRiMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MyNmJkNjkxLTRlZTctNDcyZS1i NDFmLWFjMDJiMzRkZGIxZS9jMjZiZDY5MS00ZWU3LTQ3MmUtYjQxZi1hYzAyYjM0 ZGRiMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKM6xQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS2X6a/QGbEUij3dxfOK/ 2+1nBGEsKZC8zR431HJ1KW0eP+MthidHPWLvf21pl8UaluxXRyLEZy19InxNmb1H knvV8o0lJItrYbsgQeFdBJ7mkQhJcaeejt3Xa2q0q8AotgNwrDFh5jfYu0z+JXwL ck/+rr6TA9ITi/FmAZNb1DS3B3QKVi+HSrRj8jNbsGoFl/L9Pd+qh5Q9X2zyj35V mnfurOJLT7fp8yC19ORyPul6EJHB2ME/9SLqPXiawa8fM972vfOjU9QZ/cNfVXml LYr2wpAYIf4f+yQvQSwBEFDdN9v+uBomzJyJpO5apQivGls3avqPhwb28vnhAREk aA== -----END CERTIFICATE-----Generated at Sun Mar 22 07:02:47 2026 by rpki-client