$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e491e546-a01b-402a-a572-9d19e9b98692.cer File: e491e546-a01b-402a-a572-9d19e9b98692.cer (raw, json) Hash identifier: HwGw66cduErnBuNq+zF/klib83kDimIUANUuMVvE6Ic= Subject key identifier: A1:06:5A:8F:7E:5A:A9:BE:71:20:CB:01:B4:AC:79:A3:FB:1B:B8:F5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584E30623561533C2CEE764EA740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e491e546-a01b-402a-a572-9d19e9b98692/e491e546-a01b-402a-a572-9d19e9b98692.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e491e546-a01b-402a-a572-9d19e9b98692/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jun 2026 08:45:11 +0000 Certificate not after: Mon 18 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 234 AS: 267 IP: 192.131.22.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:62:35:61:53:3c:2c:ee:76:4e:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 16 08:45:11 2026 GMT Not After : Sep 18 08:45:11 2028 GMT Subject: CN=e491e546-a01b-402a-a572-9d19e9b98692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0b:d5:17:fe:41:40:d4:b7:a7:ce:49:d3:55: d8:e5:01:37:fa:20:2a:f2:de:a4:75:29:63:f8:24: 4a:fd:21:5d:41:be:1d:df:d9:9a:a5:90:49:3f:68: ee:5a:79:fc:bb:71:f3:9e:de:a4:71:68:eb:01:33: 0a:62:ce:bd:e1:4d:01:b4:da:b6:e7:70:06:11:51: 08:fe:32:c4:55:ca:b9:fc:f2:91:bc:dd:80:0e:25: 0d:2f:59:3c:63:fd:59:01:1f:1d:e4:7a:85:09:59: 2f:db:30:55:fe:9b:ba:06:c6:df:bb:0a:69:76:a4: bb:fc:be:40:58:59:4e:59:1e:57:3e:1b:5d:03:e0: a9:0a:e5:7b:47:be:3e:1d:a0:1b:aa:bb:3c:a8:41: d2:47:12:18:ff:d2:76:66:c7:3a:94:a3:e6:13:3d: 02:ca:f5:1b:37:7f:7f:77:e8:06:96:2c:70:e8:f9: d3:92:1a:1c:76:97:1b:fe:84:5f:bc:32:94:15:12: 3f:e1:1d:e2:e1:87:7d:31:c9:ab:8d:c5:3e:40:99: 59:2a:c3:ef:f9:4c:a7:36:eb:9d:14:95:38:bf:bb: 23:da:a1:ce:a6:e1:3f:bc:9c:18:8c:5e:14:0d:a7: f4:1f:57:1f:9f:b5:f8:72:3b:8d:d2:b6:30:d2:4a: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:5A:8F:7E:5A:A9:BE:71:20:CB:01:B4:AC:79:A3:FB:1B:B8:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e491e546-a01b-402a-a572-9d19e9b98692/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e491e546-a01b-402a-a572-9d19e9b98692/e491e546-a01b-402a-a572-9d19e9b98692.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.131.22.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 234 267 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:96:87:d1:b5:05:5c:14:bb:92:cb:ee:e1:c5:85:dd:a3:45: b0:12:1f:9f:3b:cb:49:a7:4a:6e:fe:2f:20:1e:e4:ca:9e:84: 07:ec:d0:72:e5:c3:f5:20:5d:4e:ff:90:8a:6a:9b:99:a2:89: 95:2d:42:06:79:89:a8:bf:03:79:06:78:7e:eb:24:c4:72:c1: 51:82:40:f7:2d:16:ff:ce:65:42:f4:e6:93:50:57:01:ec:56: cf:c6:a4:b0:46:fe:3a:8f:a4:4a:71:ad:85:e8:f4:ac:25:92: 67:25:99:85:71:f3:0f:26:e3:a5:72:21:f4:3f:d3:55:a8:6a: 9c:a6:0f:b2:e9:2e:55:05:c2:aa:fa:c7:02:86:fb:47:d3:39: d9:0a:c6:e0:3b:88:d9:ef:75:73:bf:5e:ac:4d:5b:79:df:ba: 04:a7:fe:37:1d:98:6d:94:32:f4:db:f7:0c:3f:86:4b:6c:58: 2c:21:69:62:d8:b7:c4:ea:39:a8:98:86:8c:99:38:61:88:1b: 12:dc:2a:a4:8d:03:73:77:4f:67:e2:e4:6c:66:1c:b4:8d:1e: 1c:ad:3d:54:e7:a2:d9:5a:d5:a1:3f:3b:d4:02:09:90:a4:9d: f5:33:43:5d:2a:56:b1:7a:a5:78:6e:6a:b9:bc:eb:1a:16:ba: d0:14:5f:09 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE4wYjVhUzws7nZOp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDYxNjA4NDUxMVoXDTI4MDkxODA4NDUxMVowLzEtMCsGA1UEAxMk ZTQ5MWU1NDYtYTAxYi00MDJhLWE1NzItOWQxOWU5Yjk4NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAvVF/5BQNS3p85J01XY5QE3+iAq8t6kdSlj +CRK/SFdQb4d39mapZBJP2juWnn8u3Hznt6kcWjrATMKYs694U0BtNq253AGEVEI /jLEVcq5/PKRvN2ADiUNL1k8Y/1ZAR8d5HqFCVkv2zBV/pu6BsbfuwppdqS7/L5A WFlOWR5XPhtdA+CpCuV7R74+HaAbqrs8qEHSRxIY/9J2Zsc6lKPmEz0CyvUbN39/ d+gGlixw6PnTkhocdpcb/oRfvDKUFRI/4R3i4Yd9McmrjcU+QJlZKsPv+UynNuud FJU4v7sj2qHOpuE/vJwYjF4UDaf0H1cfn7X4cjuN0rYw0ko6IQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFKEGWo9+Wqm+cSDLAbSseaP7G7j1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l NDkxZTU0Ni1hMDFiLTQwMmEtYTU3Mi05ZDE5ZTliOTg2OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U0OTFlNTQ2LWEwMWItNDAyYS1h NTcyLTlkMTllOWI5ODY5Mi9lNDkxZTU0Ni1hMDFiLTQwMmEtYTU3Mi05ZDE5ZTli OTg2OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAgxYwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC AOoCAgELMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAA2Wh9G1BVwUu5LL7uHFhd2jRbASH587y0mnSm7+LyAe 5MqehAfs0HLlw/UgXU7/kIpqm5miiZUtQgZ5iai/A3kGeH7rJMRywVGCQPctFv/O ZUL05pNQVwHsVs/GpLBG/jqPpEpxrYXo9KwlkmclmYVx8w8m46VyIfQ/01Woapym D7LpLlUFwqr6xwKG+0fTOdkKxuA7iNnvdXO/XqxNW3nfugSn/jcdmG2UMvTb9ww/ hktsWCwhaWLYt8TqOaiYhoyZOGGIGxLcKqSNA3N3T2fi5GxmHLSNHhytPVTnotla 1aE/O9QCCZCknfUzQ10qVrF6pXhuarm86xoWutAUXwk= -----END CERTIFICATE-----Generated at Sat Jun 20 19:13:45 2026 by rpki-client