$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab.cer File: ef6b36b6-45de-499c-9b34-a884902574ab.cer (raw, json) Hash identifier: 9ocYvOZmRyMvYqJrujloiiSAcT/w2PwMRcjNZz+prkA= Subject key identifier: 15:14:D8:36:C9:02:56:72:B4:0C:87:44:8A:4A:2E:0A:96:67:1F:8B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F039FF879C86C27F8A617A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ef6b36b6-45de-499c-9b34-a884902574ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Aug 2026 00:45:12 +0000 Certificate not after: Sun 03 Dec 2028 01:45:12 +0000 Subordinate resources: IP: 199.120.202.0/24 IP: 204.194.56.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:9f:f8:79:c8:6c:27:f8:a6:17:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 31 00:45:12 2026 GMT Not After : Dec 3 01:45:12 2028 GMT Subject: CN=ef6b36b6-45de-499c-9b34-a884902574ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:7d:55:41:80:1d:87:4d:e0:50:fd:ad:5c: bb:ef:01:4e:e2:45:83:2e:f8:a7:cb:3f:28:21:f7: 8d:7b:e7:6a:f1:41:c0:fd:8f:48:6a:0e:b9:9e:79: 4b:51:57:41:e1:a3:ac:14:5b:45:9a:ac:89:b5:28: 82:aa:28:86:42:b6:6b:bd:52:fa:93:69:27:54:e5: 0c:e5:01:6e:b5:d9:44:20:81:3d:d8:8f:f1:39:5e: cb:1d:ac:9d:e6:7d:9f:df:c4:2c:9e:f4:fd:aa:22: 26:59:a1:1b:cf:0c:af:3d:1a:e4:b4:54:14:f6:30: 3a:ab:3a:2a:bf:d1:58:af:d4:74:08:1e:fc:58:71: ed:e5:17:a9:0b:36:e5:80:22:0d:1a:11:bc:cb:d3: 99:99:77:89:8e:ce:f0:7a:cc:11:da:fd:99:20:a9: d4:e4:39:3b:36:5f:5c:2e:0b:6d:6f:4c:18:07:49: f7:0e:49:43:e5:a0:58:0f:39:68:5b:46:b8:bd:48: 04:e8:d8:0e:ef:94:fe:5c:2a:68:8c:46:d7:8f:7e: b3:ad:ed:e5:3a:fe:c8:74:8c:27:c8:1f:dd:0f:81: 6f:da:d0:1a:32:29:4e:64:3f:81:ea:57:45:a5:56: ef:c0:a4:cc:a8:08:6f:11:80:1c:96:18:64:87:e3: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:14:D8:36:C9:02:56:72:B4:0C:87:44:8A:4A:2E:0A:96:67:1F:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ef6b36b6-45de-499c-9b34-a884902574ab/ef6b36b6-45de-499c-9b34-a884902574ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.120.202.0/24 204.194.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b4:30:a9:fd:00:20:12:8a:87:82:56:34:f0:90:e9:3c:b0: 2e:18:4f:37:dd:30:e4:cf:ec:d6:d7:82:d5:13:24:0b:0b:c1: 9c:4e:8e:d5:92:b7:b6:00:d1:85:84:ef:0d:9b:be:53:39:2f: b4:73:66:ae:59:92:b9:7b:1a:14:83:ff:a9:8b:12:a9:a4:5c: c7:a0:b2:20:2e:ff:5d:a7:74:22:33:31:d2:ea:0b:ff:f7:16: d1:ab:64:c6:54:4d:7e:b3:58:9a:ef:5f:4e:13:db:22:47:63: c8:89:5d:90:67:25:7c:c2:4a:0c:39:a3:b6:af:7f:ad:88:53: 62:2b:6d:40:8a:e9:8a:85:01:c3:8e:47:ed:d9:fa:3e:ee:44: 0f:e4:4c:71:2f:2d:84:27:6b:8f:74:01:b2:e3:b3:45:cf:67: bd:87:d5:33:2b:5a:60:4c:bb:5b:82:5a:1a:a0:1c:44:75:c1: ba:3a:59:c5:30:1c:90:ef:37:3b:41:a5:83:3c:7e:51:fc:18: 1c:bf:6d:47:ab:ad:89:8a:ce:a7:8c:fb:35:57:ce:5b:15:c5: 62:a6:d0:d5:e3:c7:16:aa:4a:58:bb:46:82:e3:b6:b1:64:36: 4c:83:25:6c:67:94:b9:42:ce:e7:49:a9:2e:03:31:fd:1f:2f: 4a:9e:94:76 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE8Dn/h5yGwn+KYXpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgzMTAwNDUxMloXDTI4MTIwMzAxNDUxMlowLzEtMCsGA1UEAxMk ZWY2YjM2YjYtNDVkZS00OTljLTliMzQtYTg4NDkwMjU3NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcF9VUGAHYdN4FD9rVy77wFO4kWDLvinyz8o IfeNe+dq8UHA/Y9Iag65nnlLUVdB4aOsFFtFmqyJtSiCqiiGQrZrvVL6k2knVOUM 5QFutdlEIIE92I/xOV7LHayd5n2f38QsnvT9qiImWaEbzwyvPRrktFQU9jA6qzoq v9FYr9R0CB78WHHt5RepCzblgCINGhG8y9OZmXeJjs7weswR2v2ZIKnU5Dk7Nl9c Lgttb0wYB0n3DklD5aBYDzloW0a4vUgE6NgO75T+XCpojEbXj36zre3lOv7IdIwn yB/dD4Fv2tAaMilOZD+B6ldFpVbvwKTMqAhvEYAclhhkh+MVAwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFBUU2DbJAlZytAyHRIpKLgqWZx+LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l ZjZiMzZiNi00NWRlLTQ5OWMtOWIzNC1hODg0OTAyNTc0YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VmNmIzNmI2LTQ1ZGUtNDk5Yy05 YjM0LWE4ODQ5MDI1NzRhYi9lZjZiMzZiNi00NWRlLTQ5OWMtOWIzNC1hODg0OTAy NTc0YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHeMoDBAPMwjgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI7Qwqf0AIBKK h4JWNPCQ6TywLhhPN90w5M/s1teC1RMkCwvBnE6O1ZK3tgDRhYTvDZu+UzkvtHNm rlmSuXsaFIP/qYsSqaRcx6CyIC7/Xad0IjMx0uoL//cW0atkxlRNfrNYmu9fThPb IkdjyIldkGclfMJKDDmjtq9/rYhTYittQIrpioUBw45H7dn6Pu5ED+RMcS8thCdr j3QBsuOzRc9nvYfVMytaYEy7W4JaGqAcRHXBujpZxTAckO83O0Glgzx+UfwYHL9t R6utiYrOp4z7NVfOWxXFYqbQ1ePHFqpKWLtGguO2sWQ2TIMlbGeUuULO50mpLgMx /R8vSp6Udg== -----END CERTIFICATE-----Generated at Sat Sep 5 04:26:26 2026 by rpki-client