$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer File: dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer (raw, json) Hash identifier: b8C3lbxmpk0Cs9coozyGYjmHO9KrpHP/DNT/ONEzLVg= Subject key identifier: 15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D204CDCC0F5906A50B61DB0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 21:42:19 +0000 Certificate not after: Mon 12 Jun 2028 21:42:19 +0000 Subordinate resources: IP: 128.254.176.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:4c:dc:c0:f5:90:6a:50:b6:1d:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 10 21:42:19 2026 GMT Not After : Jun 12 21:42:19 2028 GMT Subject: CN=dd8a2d71-ea3e-4a69-a215-5ee717cd29e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:23:43:eb:32:8e:26:a6:c0:3a:de:7c:9e: c6:92:01:93:8d:3e:d4:46:15:56:db:78:a6:f9:e8: da:97:14:9b:3c:30:3d:fa:95:ef:fb:62:b9:e1:a0: c5:dd:9f:e8:8c:99:e9:6e:67:ad:fa:24:70:d4:8d: 09:22:84:a3:62:1f:ea:fc:c8:84:79:9a:99:88:79: 76:1b:4b:19:16:37:75:6a:0e:bb:1a:57:29:a8:59: c2:cf:36:95:b2:51:d5:fe:3b:0e:49:c9:c5:e1:a6: 1b:d7:41:da:ea:d2:fa:b0:bc:e4:5f:2d:5c:4d:a2: 53:60:3b:91:3c:e6:c7:27:0f:6d:9b:11:00:02:16: 1d:14:cb:cc:78:63:d1:9c:dc:e5:48:b4:e4:1b:c4: 7b:b0:0a:78:91:f3:66:82:e3:14:bf:53:04:b9:ac: 90:0f:48:5c:35:98:97:51:c0:46:1f:e4:6b:f8:b1: f9:b6:44:c2:d3:de:b5:90:ee:c8:bb:8a:f7:fa:b2: ee:d8:d4:fe:86:09:56:05:63:f3:18:ac:54:cb:b8: d4:2f:82:47:00:e4:bf:77:0c:e0:5a:71:44:31:89: f8:c2:83:32:be:97:fa:34:26:c7:00:84:4d:a2:4e: 92:12:9e:c0:b3:60:7f:3f:f5:ec:dc:42:d8:ab:07: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 128.254.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3d:18:c3:06:4a:1b:26:2a:d2:13:a3:e4:29:7a:73:14:13: 72:8f:03:3c:d2:4c:88:52:5d:47:6a:12:62:b2:e7:a3:de:c1: 5d:ff:94:7d:28:4c:4f:ce:b8:f9:59:7c:d2:a4:c9:8e:75:58: 6d:82:37:68:bf:df:42:b6:84:75:d9:9e:51:b2:df:1a:fd:73: 99:29:e7:08:09:a7:a8:ac:c1:5f:d8:75:3b:06:11:07:9a:cb: 01:0a:95:7d:bf:e5:58:9d:64:74:73:81:cd:6e:dd:87:29:0b: d2:1a:2e:85:a3:2c:73:a2:44:d9:27:61:99:5a:47:95:7d:b6: 21:07:e5:85:de:b6:7f:0e:76:01:fd:c4:17:42:0b:db:ed:f3: bc:ac:bb:47:bd:71:92:43:9a:0b:73:9d:22:53:f7:3c:31:66: 91:0e:60:96:26:ca:c9:82:e5:c5:75:1f:97:d3:4a:e9:3c:d3: e0:6a:59:a6:61:01:c2:83:ad:45:e8:7a:96:77:c3:b4:d0:ee: 5a:b2:9e:74:2d:3c:d7:e6:e9:85:95:3f:0c:16:5b:6e:c0:17: 77:d2:52:a7:41:16:59:e7:a9:f5:78:2f:d5:bf:73:c2:6d:c7: 43:19:01:fa:6e:b3:63:01:3e:cd:84:96:98:b1:3f:70:c9:1d: 07:a3:10:7f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0gTNzA9ZBqULYdsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMxMDIxNDIxOVoXDTI4MDYxMjIxNDIxOVowLzEtMCsGA1UEAxMk ZGQ4YTJkNzEtZWEzZS00YTY5LWEyMTUtNWVlNzE3Y2QyOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOIjQ+syjiamwDrefJ7GkgGTjT7URhVW23im +ejalxSbPDA9+pXv+2K54aDF3Z/ojJnpbmet+iRw1I0JIoSjYh/q/MiEeZqZiHl2 G0sZFjd1ag67GlcpqFnCzzaVslHV/jsOScnF4aYb10Ha6tL6sLzkXy1cTaJTYDuR PObHJw9tmxEAAhYdFMvMeGPRnNzlSLTkG8R7sAp4kfNmguMUv1MEuayQD0hcNZiX UcBGH+Rr+LH5tkTC0961kO7Iu4r3+rLu2NT+hglWBWPzGKxUy7jUL4JHAOS/dwzg WnFEMYn4woMyvpf6NCbHAIRNok6SEp7As2B/P/Xs3ELYqwe8eQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBW47X3hS0A68V1CU7/nE6SnLo6YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k ZDhhMmQ3MS1lYTNlLTRhNjktYTIxNS01ZWU3MTdjZDI5ZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RkOGEyZDcxLWVhM2UtNGE2OS1h MjE1LTVlZTcxN2NkMjllNS9kZDhhMmQ3MS1lYTNlLTRhNjktYTIxNS01ZWU3MTdj ZDI5ZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKA/rAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYD0YwwZKGyYq0hOj5Cl6 cxQTco8DPNJMiFJdR2oSYrLno97BXf+UfShMT864+Vl80qTJjnVYbYI3aL/fQraE ddmeUbLfGv1zmSnnCAmnqKzBX9h1OwYRB5rLAQqVfb/lWJ1kdHOBzW7dhykL0hou haMsc6JE2SdhmVpHlX22IQflhd62fw52Af3EF0IL2+3zvKy7R71xkkOaC3OdIlP3 PDFmkQ5glibKyYLlxXUfl9NK6TzT4GpZpmEBwoOtReh6lnfDtNDuWrKedC081+bp hZU/DBZbbsAXd9JSp0EWWeep9Xgv1b9zwm3HQxkB+m6zYwE+zYSWmLE/cMkdB6MQ fw== -----END CERTIFICATE-----Generated at Sun Mar 22 07:02:47 2026 by rpki-client