$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer File: 980354e2-3c42-4edd-9777-d1d6e1642181.cer (raw, json) Hash identifier: XkABLA9Z1m1qWpWQn70weyZ6hOka812aBvlPx3g7Wa0= Subject key identifier: F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB2AA21FD0363624173BD1D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Aug 2026 00:45:11 +0000 Certificate not after: Sat 04 Nov 2028 00:45:11 +0000 Subordinate resources: IP: 207.166.139.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:aa:21:fd:03:63:62:41:73:bd:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 2 00:45:11 2026 GMT Not After : Nov 4 00:45:11 2028 GMT Subject: CN=980354e2-3c42-4edd-9777-d1d6e1642181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:b9:57:2e:cb:49:aa:fb:bf:28:b2:62:cc: c0:1f:63:8c:81:31:d9:75:33:e9:f0:cc:18:50:90: d8:db:b0:d6:30:5c:12:f0:a1:28:5f:dd:62:8a:9e: 94:76:64:fe:70:3d:1f:14:7b:0e:a7:82:75:85:c4: 27:e4:d7:c6:6e:bd:16:75:57:ce:4f:50:7a:2f:5f: 1f:00:9e:32:bb:da:ee:52:8a:6b:8d:ec:8b:48:b1: 82:79:cb:63:d9:11:4c:84:74:40:4b:2e:b2:21:48: df:91:29:e8:b6:f9:26:c7:aa:38:f7:4d:1d:f1:ce: 58:2e:fa:8a:b1:15:22:b6:6e:f6:55:25:6b:ec:c3: d0:3c:d2:da:2d:2a:15:25:e2:73:1e:0f:80:23:24: ed:4c:4f:c2:e3:95:09:f3:7c:d6:66:39:b1:8a:3e: fb:30:32:7c:6d:c3:8f:8f:a4:95:91:a5:aa:4a:fa: 24:1f:5e:63:b8:28:db:cf:91:4d:c1:a7:49:04:30: 18:83:ff:d1:72:7c:89:7a:16:f1:a0:4d:38:ab:cd: f7:af:f6:fa:b7:70:e1:bd:9c:95:15:02:b0:a6:de: 7d:0c:37:44:b3:27:59:42:66:49:2e:e3:07:ad:c4: 10:b0:f6:fc:8f:5c:76:4b:fb:c7:d0:9a:28:6d:75: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 207.166.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5f:14:33:44:2b:bd:5e:b7:3e:b2:7b:e1:52:f6:2f:54:cc: 0b:9d:17:7a:5e:56:ac:b7:48:1c:28:35:93:a1:99:68:a1:c0: 68:3e:fb:f8:1c:9b:13:2d:81:f0:6e:d3:0d:ca:01:4e:c5:2f: e1:06:d4:44:b2:bb:06:de:e4:3f:18:1f:be:03:ff:c3:9c:b4: 14:d8:d8:59:58:d8:7f:db:a1:87:33:27:b4:9b:65:a0:ef:47: 6b:c1:d3:9e:17:2c:06:fc:0b:12:45:fe:35:82:79:f1:2b:2d: 62:8f:b8:7b:da:33:30:7a:bb:c5:f8:5b:37:f1:12:a9:8f:61: 92:c0:60:65:7a:ab:61:71:03:66:06:1a:39:55:fe:e9:33:b0: 15:fd:15:f5:15:3a:27:3c:53:ee:9f:ca:7a:ea:81:4c:a9:e1: 1b:0f:aa:5f:0f:7f:71:81:f4:91:5b:b9:f1:de:c8:78:72:e6: 48:35:c5:65:4c:7c:47:93:d9:1b:8c:fb:fe:9e:35:b5:6f:38: f2:2d:5d:14:91:0c:e0:65:29:66:7b:5e:d0:86:6d:b7:ef:b8: 14:b7:01:a7:96:de:71:35:6e:67:ff:b3:d7:70:f5:ba:20:d1: 2e:97:bb:c0:2c:69:69:04:bc:b8:63:e1:d7:a2:24:3a:bd:ec: 94:53:ec:56 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE6yqiH9A2NiQXO9HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwMjAwNDUxMVoXDTI4MTEwNDAwNDUxMVowLzEtMCsGA1UEAxMk OTgwMzU0ZTItM2M0Mi00ZWRkLTk3NzctZDFkNmUxNjQyMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwie5Vy7LSar7vyiyYszAH2OMgTHZdTPp8MwY UJDY27DWMFwS8KEoX91iip6UdmT+cD0fFHsOp4J1hcQn5NfGbr0WdVfOT1B6L18f AJ4yu9ruUoprjeyLSLGCectj2RFMhHRASy6yIUjfkSnotvkmx6o4900d8c5YLvqK sRUitm72VSVr7MPQPNLaLSoVJeJzHg+AIyTtTE/C45UJ83zWZjmxij77MDJ8bcOP j6SVkaWqSvokH15juCjbz5FNwadJBDAYg//RcnyJehbxoE04q833r/b6t3DhvZyV FQKwpt59DDdEsydZQmZJLuMHrcQQsPb8j1x2S/vH0JoobXUvVwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPRfn5t231gTq4BeeWXb908pKi0IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 ODAzNTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2ZTE2NDIxODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzk4MDM1NGUyLTNjNDItNGVkZC05 Nzc3LWQxZDZlMTY0MjE4MS85ODAzNTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2ZTE2 NDIxODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADPposwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG18UM0QrvV63PrJ74VL2 L1TMC50Xel5WrLdIHCg1k6GZaKHAaD77+BybEy2B8G7TDcoBTsUv4QbURLK7Bt7k PxgfvgP/w5y0FNjYWVjYf9uhhzMntJtloO9Ha8HTnhcsBvwLEkX+NYJ58SstYo+4 e9ozMHq7xfhbN/ESqY9hksBgZXqrYXEDZgYaOVX+6TOwFf0V9RU6JzxT7p/KeuqB TKnhGw+qXw9/cYH0kVu58d7IeHLmSDXFZUx8R5PZG4z7/p41tW848i1dFJEM4GUp Znte0IZtt++4FLcBp5becTVuZ/+z13D1uiDRLpe7wCxpaQS8uGPh16IkOr3slFPs Vg== -----END CERTIFICATE-----Generated at Wed Aug 26 06:40:44 2026 by rpki-client