$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer File: 3f61b400-76de-4d47-93da-b04c33b5a504.cer (raw, json) Hash identifier: OuVV4S65O9cEAaf2pOF52tawQXw03k+ZwR2KtaGOXD0= Subject key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E481D05E732366F721A56CC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jun 2026 20:45:11 +0000 Certificate not after: Tue 26 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 192.67.7.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:1d:05:e7:32:36:6f:72:1a:56:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 24 20:45:11 2026 GMT Not After : Sep 26 20:45:11 2028 GMT Subject: CN=3f61b400-76de-4d47-93da-b04c33b5a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:49:94:22:ad:c5:35:32:f0:95:62:ca:56: e0:2b:73:ce:d1:20:92:69:5b:86:ca:85:e1:9f:8b: 54:8b:9f:49:b2:77:b7:b5:50:ea:ea:59:aa:26:53: 37:69:89:74:81:c1:a6:c0:76:d1:b7:91:fe:e6:08: 5e:79:8f:dc:e9:53:a1:91:58:bb:12:9d:fe:63:fc: 48:f8:7a:91:e2:0c:ca:3e:ea:10:20:d3:95:ee:59: 0e:70:d1:70:12:b0:4e:53:88:78:e4:11:2c:41:a6: a2:00:c7:f9:c5:07:f5:38:06:07:ba:b4:3f:e6:24: 5b:e7:cd:a5:01:74:46:08:e9:1f:46:89:69:28:17: ea:54:4a:8f:77:64:c2:82:87:2e:31:16:47:d9:8d: dc:92:5d:4f:86:13:cb:10:7f:9a:54:cb:b5:d7:ed: b1:e1:ba:2f:f8:85:c3:d0:74:1e:67:42:f3:40:c9: 95:cb:26:a3:71:a6:59:9d:d5:68:b2:08:41:1f:c1: 74:a6:77:8b:3e:09:61:ee:ef:0f:16:e8:c4:5f:82: fb:70:00:52:02:68:1b:93:5d:99:92:b8:b6:db:58: f6:59:3f:d9:be:d4:54:18:d9:c9:bb:bd:4e:ae:20: 6f:27:dc:2e:6b:37:21:02:3f:55:88:66:f9:f1:e2: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.67.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:da:ee:e1:ae:a6:e9:e6:21:15:d4:23:10:94:20:76:91:aa: 08:14:67:9f:cf:12:9f:2f:0c:66:e5:55:b7:90:00:6c:d8:15: 0f:7f:0d:4f:8c:68:b9:70:66:1b:8a:80:ac:22:6a:2e:a3:17: 74:4a:c7:86:fe:8a:0f:b0:91:a7:ba:68:42:b7:82:61:99:80: 52:47:85:b1:2b:51:ef:55:96:93:8b:77:1f:8c:12:9c:a0:4a: 39:dc:31:12:a9:bd:28:17:9f:cc:32:f5:a1:46:1b:eb:26:1f: 7a:42:8b:20:9c:02:b6:38:e2:a6:dc:c3:c7:ce:d8:aa:84:77: fa:b0:1f:9d:17:49:5c:73:58:52:12:f6:ac:1b:f8:04:38:f2: 13:d0:90:04:9f:09:1e:20:4c:b1:cf:84:79:79:97:e2:58:e7: 40:51:5a:b4:99:c7:3d:c4:bd:18:c9:7a:b5:1b:53:9e:b9:3b: ba:31:4f:59:af:9f:79:3e:cb:79:ce:15:4a:9a:43:73:ff:b4: 4e:4b:c6:21:4a:bb:9c:48:e2:b1:91:5d:cd:06:6d:aa:ce:71: 04:ff:e0:06:05:36:93:d4:35:94:ae:ee:bc:c6:8c:e1:95:1d: 01:46:87:59:77:fc:fc:c1:28:4f:f8:ed:ea:1c:80:21:29:db: 85:fd:6a:a8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5IHQXnMjZvchpWzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYyNDIwNDUxMVoXDTI4MDkyNjIwNDUxMVowLzEtMCsGA1UEAxMk M2Y2MWI0MDAtNzZkZS00ZDQ3LTkzZGEtYjA0YzMzYjVhNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8tJlCKtxTUy8JViylbgK3PO0SCSaVuGyoXh n4tUi59Jsne3tVDq6lmqJlM3aYl0gcGmwHbRt5H+5gheeY/c6VOhkVi7Ep3+Y/xI +HqR4gzKPuoQINOV7lkOcNFwErBOU4h45BEsQaaiAMf5xQf1OAYHurQ/5iRb582l AXRGCOkfRolpKBfqVEqPd2TCgocuMRZH2Y3ckl1PhhPLEH+aVMu11+2x4bov+IXD 0HQeZ0LzQMmVyyajcaZZndVosghBH8F0pneLPglh7u8PFujEX4L7cABSAmgbk12Z kri221j2WT/ZvtRUGNnJu71OriBvJ9wuazchAj9ViGb58eJ5AwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCa5JloGLxI37vBp1BTbn3Q6aoA/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNiNWE1MDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNmNjFiNDAwLTc2ZGUtNGQ0Ny05 M2RhLWIwNGMzM2I1YTUwNC8zZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNi NWE1MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAQwcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiNru4a6m6eYhFdQjEJQg dpGqCBRnn88Sny8MZuVVt5AAbNgVD38NT4xouXBmG4qArCJqLqMXdErHhv6KD7CR p7poQreCYZmAUkeFsStR71WWk4t3H4wSnKBKOdwxEqm9KBefzDL1oUYb6yYfekKL IJwCtjjiptzDx87YqoR3+rAfnRdJXHNYUhL2rBv4BDjyE9CQBJ8JHiBMsc+EeXmX 4ljnQFFatJnHPcS9GMl6tRtTnrk7ujFPWa+feT7Lec4VSppDc/+0TkvGIUq7nEji sZFdzQZtqs5xBP/gBgU2k9Q1lK7uvMaM4ZUdAUaHWXf8/MEoT/jt6hyAISnbhf1q qA== -----END CERTIFICATE-----Generated at Mon Jul 6 19:29:56 2026 by rpki-client