$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer File: cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer (raw, json) Hash identifier: CnFmkWB0S7k9hSnxee+BC/qadPGjHIL/dzplQfEP1io= Subject key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F10300C0032B5AC0B3C31D680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Sep 2026 12:45:11 +0000 Certificate not after: Thu 07 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 207.174.4.0/22 IP: 2602:2db::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:30:0c:00:32:b5:ac:0b:3c:31:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 4 12:45:11 2026 GMT Not After : Dec 7 13:45:11 2028 GMT Subject: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:1f:6e:e2:0f:6a:e1:0d:1a:b5:67:d4:c2: d4:a3:7b:a3:85:93:b6:27:cf:72:eb:b3:3e:c8:1b: 8d:7b:a5:00:97:82:a6:bf:1c:e9:08:5d:be:ad:b9: 7d:d6:22:69:6e:c4:24:27:47:03:12:a8:94:59:89: 51:ab:12:74:4f:ab:ca:68:1f:0f:ed:b3:39:16:3c: 51:9c:76:55:1a:40:72:5f:e1:d4:c7:6c:5b:d4:1b: 80:69:1c:25:20:78:a1:83:db:cf:1a:31:48:f3:94: 0d:46:76:76:5f:45:dc:5c:49:94:08:1f:9b:45:43: c1:bc:94:92:ab:24:02:ca:0d:33:e3:7e:ca:24:b5: 60:1e:7f:d4:3a:f2:52:13:8a:64:ff:ca:b6:c8:d2: b2:69:10:2f:53:d7:c8:59:63:df:2e:69:b3:75:b4: 8b:b0:99:b6:20:5b:23:f8:5d:0a:a2:fb:d3:8d:fb: 01:0a:18:67:dd:89:03:2c:28:07:61:31:ad:49:a6: f4:af:97:f8:cb:fc:a3:36:00:a3:45:4e:d4:13:72: b3:1e:89:a5:c6:ba:aa:d0:f0:37:7c:c9:b7:35:6f: a0:d7:94:bc:3a:98:4c:b4:5b:0f:ea:d4:5f:70:12: 69:7e:59:62:4a:9d:82:6e:30:51:62:9e:63:d2:e0: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 207.174.4.0/22 IPv6: 2602:2db::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d4:06:2a:c3:fb:9e:89:dc:44:74:6b:3b:04:da:68:ca:b1: 42:22:f2:e3:dc:71:19:78:3d:fa:83:08:fe:95:c9:0e:cc:62: d5:b7:f3:b1:fe:54:41:a5:71:19:1c:dc:9e:04:da:89:37:9d: 81:4a:08:b0:d9:fe:ed:2c:a0:81:e2:73:6c:84:3f:b2:dc:af: dc:24:a6:31:e3:15:21:13:2d:d6:27:b6:63:e5:f6:8e:8f:a6: e5:fb:15:40:18:91:08:29:1b:d0:21:fe:03:24:94:40:fc:54: 3b:44:af:81:8a:c8:0b:02:11:97:53:e4:f5:9e:4c:6c:16:66: a0:2d:b7:af:b1:9b:d6:5e:f9:f7:40:5b:07:85:39:b1:97:16: c2:90:38:5f:c5:e9:e3:df:d3:32:c7:a0:9e:b9:a1:a2:70:97: 6c:93:4a:23:69:c2:b8:fd:8c:b3:8d:49:07:02:34:68:65:2e: 92:e3:b8:da:da:34:da:a1:eb:e3:58:6b:01:ae:31:12:d6:e5: b9:61:47:ef:17:df:2b:34:db:7e:32:86:1f:d1:ac:91:e8:e5: da:15:30:b9:06:60:48:a9:de:1f:c3:e9:18:de:d9:45:33:19: bd:35:1a:84:4e:a3:32:56:9e:8d:31:c6:73:e9:ad:27:a7:2e: 1b:a2:8e:5a -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE8QMAwAMrWsCzwx1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDkwNDEyNDUxMVoXDTI4MTIwNzEzNDUxMVowLzEtMCsGA1UEAxMk Y2MwZWIyZGUtZTVlOC00MTA4LTg3MGUtOGNiYmZmMzk4ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC8fbuIPauENGrVn1MLUo3ujhZO2J89y67M+ yBuNe6UAl4KmvxzpCF2+rbl91iJpbsQkJ0cDEqiUWYlRqxJ0T6vKaB8P7bM5FjxR nHZVGkByX+HUx2xb1BuAaRwlIHihg9vPGjFI85QNRnZ2X0XcXEmUCB+bRUPBvJSS qyQCyg0z437KJLVgHn/UOvJSE4pk/8q2yNKyaRAvU9fIWWPfLmmzdbSLsJm2IFsj +F0KovvTjfsBChhn3YkDLCgHYTGtSab0r5f4y/yjNgCjRU7UE3KzHomlxrqq0PA3 fMm3NW+g15S8OphMtFsP6tRfcBJpflliSp2CbjBRYp5j0uDt9QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGwoEUvC40qcgZfaM0h7Hq9Od/TJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j YzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYzOTg4NWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NjMGViMmRlLWU1ZTgtNDEwOC04 NzBlLThjYmJmZjM5ODg1ZC9jYzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYz OTg4NWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALPrgQwDgQCAAIwCAMGBCYCAtsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACrUBirD+56J3ER0azsE2mjKsUIi8uPccRl4PfqDCP6VyQ7MYtW387H+VEGlcRkc 3J4E2ok3nYFKCLDZ/u0soIHic2yEP7Lcr9wkpjHjFSETLdYntmPl9o6PpuX7FUAY kQgpG9Ah/gMklED8VDtEr4GKyAsCEZdT5PWeTGwWZqAtt6+xm9Ze+fdAWweFObGX FsKQOF/F6ePf0zLHoJ65oaJwl2yTSiNpwrj9jLONSQcCNGhlLpLjuNraNNqh6+NY awGuMRLW5blhR+8X3ys0234yhh/RrJHo5doVMLkGYEip3h/D6Rje2UUzGb01GoRO ozJWno0xxnPprSenLhuijlo= -----END CERTIFICATE-----Generated at Fri Sep 4 22:12:16 2026 by rpki-client