$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer File: e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer (raw, json) Hash identifier: O05fmcPcaI8XBIDAZSDWXAXje4gLGWB2fJ1eIpN3ir0= Subject key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E58DD203BFEADBFB7BE8BBB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jun 2026 20:45:11 +0000 Certificate not after: Mon 02 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 146.88.208.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:58:dd:20:3b:fe:ad:bf:b7:be:8b:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 30 20:45:11 2026 GMT Not After : Oct 2 20:45:11 2028 GMT Subject: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:2d:64:ad:3e:3c:e1:07:13:cc:fd:f3:56: 03:81:18:10:64:35:eb:5d:90:ef:6a:f4:14:2b:25: d0:5a:af:bf:f4:bd:73:6f:28:20:8f:55:4e:01:e9: 59:88:90:fe:68:e8:2c:33:4b:08:9f:57:56:6b:69: 66:f7:ed:0e:cd:1b:36:f7:0c:e4:8b:f9:3e:90:34: cf:8a:0e:15:5e:a9:31:9c:ee:b6:b3:81:f7:18:f7: 88:fa:28:f8:ca:af:cf:71:39:91:ce:a9:06:af:d7: 6d:05:65:f2:73:eb:87:8a:0c:b2:e0:bc:83:30:0e: 82:9c:ab:5b:b3:dc:5d:94:52:b4:f9:1b:c9:92:5c: 3c:cc:b2:16:3c:ca:37:30:01:4f:3e:5b:29:53:b4: 04:50:78:f4:0d:7b:07:9d:20:54:f1:15:c0:dc:75: 67:7c:a5:d0:e9:6f:ec:37:67:1f:6e:f9:79:ec:90: cd:8f:bd:5a:c2:63:3c:9c:34:c4:29:79:3d:85:4a: 1f:60:40:ce:4a:09:83:e2:64:55:4f:6f:16:ef:2a: 1c:b3:68:b8:c1:10:f9:9f:84:d3:13:e7:71:dd:b4: 80:43:7b:3f:bd:3c:fb:55:64:fa:d6:ac:39:4f:22: 8d:1e:5e:d3:30:80:b8:d1:0d:d9:96:ba:87:1f:61: 52:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 146.88.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bd:92:d3:e6:81:05:24:00:1a:1d:f0:22:28:55:51:ed:0c: e6:e9:b6:83:ec:d0:a6:01:de:15:9b:49:12:d2:88:62:c1:cd: 30:d0:ac:a1:e9:05:59:cb:08:cd:1d:14:c0:56:7d:c9:31:79: 1b:a7:d7:9c:26:42:60:5b:c5:03:40:3f:59:89:66:db:2c:06: d4:fa:02:11:82:38:d7:79:0a:ee:6c:95:61:b7:18:12:e7:77: ff:4a:fa:62:b5:02:e3:75:db:aa:58:54:af:5c:a9:6d:e0:44: 81:e3:c9:2f:66:49:84:f9:df:b1:5c:e2:8f:96:82:6a:42:b0: 09:fe:47:db:7b:d0:aa:33:9b:44:ca:2d:61:00:4b:f1:b9:7c: 3e:95:89:aa:ee:19:4a:67:e3:57:9f:88:52:d7:ea:92:53:7b: 54:89:7b:3f:60:bd:69:48:4a:fe:a1:8e:6c:0b:d0:da:ea:f8: 94:e6:ba:45:03:eb:72:bf:73:1f:60:c4:e9:a4:bd:d4:1c:f7: a1:94:0a:82:1a:db:4e:f6:fa:da:ea:7f:59:34:cf:95:c1:0e: 10:fd:89:cb:6d:12:49:2f:48:66:39:99:10:62:bb:63:95:b0: 26:73:08:b1:20:8c:c5:c2:aa:14:5b:86:99:ea:75:33:3c:4e: c1:40:6f:1c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5Y3SA7/q2/t76Lu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYzMDIwNDUxMVoXDTI4MTAwMjIwNDUxMVowLzEtMCsGA1UEAxMk ZTA0YzAzN2QtZjA2ZC00YzAxLTlhZjUtZWYwYjJhZDNlZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+0tZK0+POEHE8z981YDgRgQZDXrXZDvavQU KyXQWq+/9L1zbyggj1VOAelZiJD+aOgsM0sIn1dWa2lm9+0OzRs29wzki/k+kDTP ig4VXqkxnO62s4H3GPeI+ij4yq/PcTmRzqkGr9dtBWXyc+uHigyy4LyDMA6CnKtb s9xdlFK0+RvJklw8zLIWPMo3MAFPPlspU7QEUHj0DXsHnSBU8RXA3HVnfKXQ6W/s N2cfbvl57JDNj71awmM8nDTEKXk9hUofYEDOSgmD4mRVT28W7yocs2i4wRD5n4TT E+dx3bSAQ3s/vTz7VWT61qw5TyKNHl7TMIC40Q3ZlrqHH2FSqwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFINb+dDyfWUtloYv6Faquh2fxWCDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l MDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFkM2VkZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2UwNGMwMzdkLWYwNmQtNGMwMS05 YWY1LWVmMGIyYWQzZWRlOC9lMDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFk M2VkZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOSWNAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGr2S0+aBBSQAGh3wIihV Ue0M5um2g+zQpgHeFZtJEtKIYsHNMNCsoekFWcsIzR0UwFZ9yTF5G6fXnCZCYFvF A0A/WYlm2ywG1PoCEYI413kK7myVYbcYEud3/0r6YrUC43XbqlhUr1ypbeBEgePJ L2ZJhPnfsVzij5aCakKwCf5H23vQqjObRMotYQBL8bl8PpWJqu4ZSmfjV5+IUtfq klN7VIl7P2C9aUhK/qGObAvQ2ur4lOa6RQPrcr9zH2DE6aS91Bz3oZQKghrbTvb6 2up/WTTPlcEOEP2Jy20SSS9IZjmZEGK7Y5WwJnMIsSCMxcKqFFuGmep1MzxOwUBv HA== -----END CERTIFICATE-----Generated at Wed Jul 1 02:19:16 2026 by rpki-client