$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer File: d416e28d-79e4-4432-b727-97e9702afe09.cer (raw, json) Hash identifier: JPSeRoKS5zXVJzGwT+egEn2Dd+yb1QWrs9HGJzbAV/c= Subject key identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584F74B0AC8AA8072008842C3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Oct 2026 12:45:11 +0000 Certificate not after: Fri 12 Jan 2029 13:45:11 +0000 Subordinate resources: IP: 208.73.212.0/22 IP: 2602:fb92::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b0:ac:8a:a8:07:20:08:84:2c:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 10 12:45:11 2026 GMT Not After : Jan 12 13:45:11 2029 GMT Subject: CN=d416e28d-79e4-4432-b727-97e9702afe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:c9:cf:6e:4d:23:01:1c:92:e9:12:df:af: 80:0c:71:21:e3:e0:90:5a:d3:3f:95:57:8f:56:f2: de:09:0d:7a:af:39:c3:6a:71:de:31:ff:8c:4d:0d: 89:d5:74:79:36:5b:da:50:83:e2:df:b9:a7:66:a2: 33:fb:b8:30:33:7e:39:22:bb:d8:fe:e8:4c:53:50: 8b:11:1d:62:0e:ab:3c:57:cf:d5:a1:d1:cc:6e:97: 40:96:ee:60:73:36:1a:bd:0a:89:c6:2b:c8:bb:ec: ca:56:52:44:62:5f:48:bd:8b:5d:b9:c7:b2:b2:d4: f3:1f:be:23:90:1e:b6:0f:b5:2e:cc:fd:d6:f3:24: 27:fc:f3:26:3f:49:2a:5a:48:a5:3b:36:a0:35:a0: c7:d8:df:91:9d:7c:e4:15:3a:67:e3:48:0c:f6:f9: d3:83:e3:60:78:c4:c9:eb:38:18:67:aa:ff:78:cf: 14:64:33:0e:53:e2:2c:07:d9:40:4b:af:3c:6e:63: 83:53:e6:16:27:bc:41:c4:a7:97:37:57:c4:24:a5: 21:82:5e:7e:42:2d:2e:ca:cc:5f:dd:50:87:60:9f: d1:9e:5a:e8:a9:39:19:24:9e:a6:6d:99:ce:14:47: 58:38:13:f7:4e:65:ac:a7:92:0d:e2:c5:3e:40:b7: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 208.73.212.0/22 IPv6: 2602:fb92::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:99:15:cb:1e:a7:35:66:e0:8b:99:52:91:53:15:9b:f2:4e: fd:86:2f:18:af:dc:0c:b9:8c:54:32:e1:8a:29:77:ac:3a:87: a6:33:3f:6a:f0:91:c9:da:ae:e8:25:79:6b:3b:3b:1d:03:09: c6:15:a3:f3:01:c6:a2:04:a7:df:69:f7:ff:64:53:5f:f8:48: d2:1e:e7:ca:2e:77:cc:29:48:96:26:3f:15:f5:04:28:8d:a0: 09:c0:be:80:13:39:3d:77:6e:6b:69:2f:27:f9:14:0f:ef:94: 31:df:b9:78:8b:0f:88:14:7e:17:ee:c6:a4:69:ba:74:c8:39: 54:e5:b2:60:2b:fe:36:23:0e:df:df:b2:e2:1f:db:86:32:f4: 96:52:b0:4a:03:cd:da:2f:bd:62:16:fa:9d:de:64:3a:67:dd: 4f:0e:91:3c:f9:74:88:a3:f3:fb:63:23:68:0a:67:12:3b:7d: 5a:e9:86:04:c6:5b:f0:7b:00:f0:72:94:b6:2d:0f:2b:c0:5c: 56:cd:f8:b9:24:84:52:3a:6f:3c:f7:c2:0d:b2:a1:d1:99:36: f0:c5:36:58:d9:2d:6e:3c:f8:d5:33:fd:27:b5:e4:84:2a:37: e8:3d:c1:01:f3:b9:e9:e6:2c:80:ed:dc:c0:d3:b5:b6:41:83: 8a:d3:5e:04 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE90sKyKqAcgCIQsNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MTAxMDEyNDUxMVoXDTI5MDExMjEzNDUxMVowLzEtMCsGA1UEAxMk ZDQxNmUyOGQtNzllNC00NDMyLWI3MjctOTdlOTcwMmFmZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj63Jz25NIwEckukS36+ADHEh4+CQWtM/lVeP VvLeCQ16rznDanHeMf+MTQ2J1XR5NlvaUIPi37mnZqIz+7gwM345IrvY/uhMU1CL ER1iDqs8V8/VodHMbpdAlu5gczYavQqJxivIu+zKVlJEYl9IvYtduceystTzH74j kB62D7UuzP3W8yQn/PMmP0kqWkilOzagNaDH2N+RnXzkFTpn40gM9vnTg+NgeMTJ 6zgYZ6r/eM8UZDMOU+IsB9lAS688bmODU+YWJ7xBxKeXN1fEJKUhgl5+Qi0uysxf 3VCHYJ/RnlroqTkZJJ6mbZnOFEdYOBP3TmWsp5IN4sU+QLf74wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKzAJjIEU5LeYrvYp2zSdtsFUjq7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k NDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAyYWZlMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MTZlMjhkLTc5ZTQtNDQzMi1i NzI3LTk3ZTk3MDJhZmUwOS9kNDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAy YWZlMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALQSdQwDgQCAAIwCAMGBCYC+5IAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE6ZFcsepzVm4IuZUpFTFZvyTv2GLxiv3Ay5jFQy4Yopd6w6h6YzP2rwkcnarugl eWs7Ox0DCcYVo/MBxqIEp99p9/9kU1/4SNIe58oud8wpSJYmPxX1BCiNoAnAvoAT OT13bmtpLyf5FA/vlDHfuXiLD4gUfhfuxqRpunTIOVTlsmAr/jYjDt/fsuIf24Yy 9JZSsEoDzdovvWIW+p3eZDpn3U8OkTz5dIij8/tjI2gKZxI7fVrphgTGW/B7APBy lLYtDyvAXFbN+LkkhFI6bzz3wg2yodGZNvDFNljZLW48+NUz/Se15IQqN+g9wQHz uenmLIDt3MDTtbZBg4rTXgQ= -----END CERTIFICATE-----Generated at Tue Oct 20 18:21:10 2026 by rpki-client