$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer File: 4e0731c4-3d05-4440-8c74-77d5a579b356.cer (raw, json) Hash identifier: FUmkMhgXiww5W/lPbB5avnoEm2cG10kA5Yxi8WTC2/k= Subject key identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E9EA839561DD8DFA0CB5ABB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jul 2026 20:45:11 +0000 Certificate not after: Fri 27 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 23.137.220.0/24 IP: 2602:f67b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:a8:39:56:1d:d8:df:a0:cb:5a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 25 20:45:11 2026 GMT Not After : Oct 27 20:45:11 2028 GMT Subject: CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:6e:cf:c2:f3:b1:c6:d5:54:1b:ec:1b:90: 8f:5d:6d:c7:6d:88:d0:e2:c3:84:f6:ed:57:86:9e: 46:6f:48:f0:14:8a:0e:26:07:a8:e3:d1:f1:a2:02: ca:2b:3b:43:c6:25:30:a5:2e:06:0e:86:6e:af:c7: bc:14:ff:d7:68:5f:a2:4f:6b:17:0a:40:47:96:5b: d0:ab:0b:17:81:ba:eb:e4:bf:e5:3c:0e:f2:7c:c0: c6:55:7f:41:b9:2d:1d:63:8a:1c:11:cf:33:79:d7: 5d:d4:99:68:f3:86:a3:c2:d3:d8:3a:0a:8d:56:e9: 8f:8f:f0:81:94:44:b4:87:c7:bc:be:ab:fc:bd:61: 3b:da:7b:8a:7d:da:9c:71:dc:0a:c6:fa:4f:36:42: fb:51:13:64:9d:64:81:c0:66:27:2c:58:c1:99:45: 17:9e:cb:5c:f0:98:d3:ba:f0:9d:90:7c:4b:3f:dc: 7a:38:92:12:ef:77:3d:56:bd:8e:75:5f:70:db:27: 57:7c:cb:1a:36:f4:48:fe:aa:62:de:67:64:ce:37: 73:bf:97:69:dd:d0:84:7a:9d:8f:9f:a0:b3:7b:d3: 6b:4d:f8:f7:f3:66:09:16:c7:25:e6:f3:4b:8d:1e: 7a:ad:47:63:49:4d:cf:7c:99:e1:25:d7:e5:75:52: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.220.0/24 IPv6: 2602:f67b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:62:c1:fa:10:a3:fd:aa:d5:3e:34:9f:6b:bb:4a:a2:a9:a8: 40:23:f2:84:69:92:79:63:6c:f4:9a:75:25:ab:c2:f2:bc:5e: a5:9a:09:59:05:b0:97:83:25:b7:5a:40:43:6d:64:50:18:30: 2d:95:6c:dd:39:ff:d1:4c:a2:eb:c9:bc:a2:a7:88:35:2b:9b: e4:5d:ba:29:32:ec:55:aa:f5:92:d1:4e:02:3d:2b:fd:49:dc: 8a:49:f6:7c:4b:38:2e:a0:31:43:3e:e8:30:01:09:6c:34:53: 96:d5:99:9e:98:ba:fd:01:a7:b3:92:3a:77:fd:ed:32:15:06: 09:e3:dc:9d:7c:3d:9d:63:18:46:ad:01:55:08:2f:f1:6f:10: 8a:e6:8c:dd:43:66:2d:c5:9f:b6:9a:3b:25:e2:3a:3d:e5:ca: dd:76:83:cb:7a:f3:95:75:4d:91:24:5d:8d:92:a8:b8:28:6e: d4:68:8a:6a:65:6a:9a:38:f3:60:c6:af:ab:af:fa:bb:a3:88: 9d:10:0a:07:c6:9c:4d:07:db:46:9f:e6:25:29:b2:cc:59:8c: a6:f9:2b:a7:30:e9:d9:74:50:30:bd:9b:97:9f:ec:27:64:e5: 99:f7:6c:64:39:71:f0:a2:bd:e5:39:16:36:eb:11:05:1e:96: 2b:87:73:09 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE6eqDlWHdjfoMtau4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyNTIwNDUxMVoXDTI4MTAyNzIwNDUxMVowLzEtMCsGA1UEAxMk NGUwNzMxYzQtM2QwNS00NDQwLThjNzQtNzdkNWE1NzliMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBNuz8LzscbVVBvsG5CPXW3HbYjQ4sOE9u1X hp5Gb0jwFIoOJgeo49HxogLKKztDxiUwpS4GDoZur8e8FP/XaF+iT2sXCkBHllvQ qwsXgbrr5L/lPA7yfMDGVX9BuS0dY4ocEc8zeddd1Jlo84ajwtPYOgqNVumPj/CB lES0h8e8vqv8vWE72nuKfdqccdwKxvpPNkL7URNknWSBwGYnLFjBmUUXnstc8JjT uvCdkHxLP9x6OJIS73c9Vr2OdV9w2ydXfMsaNvRI/qpi3mdkzjdzv5dp3dCEep2P n6Cze9NrTfj382YJFscl5vNLjR56rUdjSU3PfJnhJdfldVK1VwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFI5pnMoDzV6zpzvZN6R3CTLoU1kmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 ZTA3MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1YTU3OWIzNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzRlMDczMWM0LTNkMDUtNDQ0MC04 Yzc0LTc3ZDVhNTc5YjM1Ni80ZTA3MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1YTU3 OWIzNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXidwwDgQCAAIwCAMGACYC9nsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGliwfoQo/2q1T40n2u7SqKpqEAj8oRpknljbPSadSWrwvK8XqWaCVkFsJeDJbda QENtZFAYMC2VbN05/9FMouvJvKKniDUrm+Rduiky7FWq9ZLRTgI9K/1J3IpJ9nxL OC6gMUM+6DABCWw0U5bVmZ6Yuv0Bp7OSOnf97TIVBgnj3J18PZ1jGEatAVUIL/Fv EIrmjN1DZi3Fn7aaOyXiOj3lyt12g8t685V1TZEkXY2SqLgobtRoimplapo482DG r6uv+rujiJ0QCgfGnE0H20af5iUpssxZjKb5K6cw6dl0UDC9m5ef7Cdk5Zn3bGQ5 cfCiveU5FjbrEQUeliuHcwk= -----END CERTIFICATE-----Generated at Tue Jul 28 03:18:43 2026 by rpki-client