$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1.cer File: 0904b695-2226-49f0-a43e-0bd98a26b3c1.cer (raw, json) Hash identifier: Q1D/TuzzLXXOe3DblBQ0spL9dSnA/enaMPBTqQVQ7hY= Subject key identifier: 7B:1B:39:1D:D3:E3:AA:B4:D2:C0:F6:77:DB:AC:88:99:87:53:5A:AE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E2EFCDE4437030E00E1F85F18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/0904b695-2226-49f0-a43e-0bd98a26b3c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jun 2026 20:45:11 +0000 Certificate not after: Sun 17 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 192.80.58.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2e:fc:de:44:37:03:0e:00:e1:f8:5f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 15 20:45:11 2026 GMT Not After : Sep 17 20:45:11 2028 GMT Subject: CN=0904b695-2226-49f0-a43e-0bd98a26b3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:32:1f:f3:69:87:6a:27:59:7d:e8:a5:10:c3: 96:08:cf:bc:8c:80:da:1e:bf:4d:d8:e0:03:41:5e: e3:ac:b1:4b:4c:5d:22:ee:7f:b1:55:07:a5:b8:96: a9:57:90:b4:3a:69:b9:ce:08:4b:33:44:58:f1:6f: d8:c9:c3:e9:4a:e8:b1:3c:66:c4:cf:f9:79:8b:c5: bf:71:5d:dc:49:3d:05:24:4d:45:36:73:3e:03:e2: 90:f8:ab:2f:b3:92:a4:d3:ee:1a:4f:ea:eb:6c:12: 9b:5e:b3:14:a8:5d:56:0e:80:ff:c4:a4:78:af:96: c9:77:c0:e5:c5:76:27:cb:01:82:9a:3b:f3:76:d7: fa:ac:74:74:93:11:46:88:1e:d3:6f:de:9e:ee:eb: b5:48:76:cf:2e:20:83:34:b5:25:9a:ff:40:c0:d8: 0e:3f:e5:89:74:7d:fd:27:09:69:90:da:ed:90:12: 5d:87:1d:1f:a8:0e:94:21:f7:e0:d4:03:56:30:4b: ff:ed:0d:9a:b2:32:1b:07:cf:a3:23:31:9a:cf:01: ef:e7:52:db:be:cf:2b:d6:57:94:38:47:72:68:c8: 3b:3d:06:b9:a6:f8:74:39:5f:70:29:1c:30:a4:67: ac:e9:b8:ea:89:30:c2:3a:3b:fe:af:53:d4:0d:10: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1B:39:1D:D3:E3:AA:B4:D2:C0:F6:77:DB:AC:88:99:87:53:5A:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/0904b695-2226-49f0-a43e-0bd98a26b3c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.80.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0a:7b:4c:6e:4b:02:46:c7:58:9b:17:0b:4b:35:2c:be:5f: d5:f7:dc:9f:c8:94:13:ab:4d:64:c9:fd:6a:1a:ea:8f:76:95: 3b:22:1e:47:3b:e4:77:33:d0:2e:7e:de:f9:26:03:1b:47:43: af:97:9f:ca:72:9f:84:67:32:eb:73:ff:02:42:44:eb:c1:0a: 1f:e8:49:57:f7:f7:51:17:ca:0b:91:48:95:3c:dc:1b:7f:82: e3:32:9c:bf:9b:6e:5a:07:ff:82:2c:82:11:21:e2:de:96:b2: dd:ea:00:92:a6:68:f5:54:87:ee:a0:40:2d:ed:79:a5:de:8a: f8:c4:7e:a5:f1:74:33:42:b7:cb:58:18:58:f4:b0:7a:f5:3c: 56:79:78:87:e6:4d:c9:a9:04:61:56:a9:06:9f:df:62:d8:dc: 76:40:44:9d:39:69:77:c4:09:a9:b9:56:2a:e6:09:ab:fc:5c: a5:6e:24:e4:35:d3:75:12:06:38:78:34:00:86:88:2a:a9:47: f7:57:98:c4:63:df:0b:7e:20:be:1b:de:bd:f8:92:4e:94:25: 27:5d:af:a1:d5:c4:f6:10:7c:58:43:76:a1:24:ea:e3:00:df: f3:ed:3d:45:45:5f:95:21:a4:78:65:dd:df:85:8c:19:60:7b: 00:ec:42:4c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4u/N5ENwMOAOH4XxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYxNTIwNDUxMVoXDTI4MDkxNzIwNDUxMVowLzEtMCsGA1UEAxMk MDkwNGI2OTUtMjIyNi00OWYwLWE0M2UtMGJkOThhMjZiM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TIf82mHaidZfeilEMOWCM+8jIDaHr9N2OAD QV7jrLFLTF0i7n+xVQeluJapV5C0Omm5zghLM0RY8W/YycPpSuixPGbEz/l5i8W/ cV3cST0FJE1FNnM+A+KQ+Ksvs5Kk0+4aT+rrbBKbXrMUqF1WDoD/xKR4r5bJd8Dl xXYnywGCmjvzdtf6rHR0kxFGiB7Tb96e7uu1SHbPLiCDNLUlmv9AwNgOP+WJdH39 JwlpkNrtkBJdhx0fqA6UIffg1ANWMEv/7Q2asjIbB8+jIzGazwHv51Lbvs8r1leU OEdyaMg7PQa5pvh0OV9wKRwwpGes6bjqiTDCOjv+r1PUDRA75wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHsbOR3T46q00sD2d9usiJmHU1quMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w OTA0YjY5NS0yMjI2LTQ5ZjAtYTQzZS0wYmQ5OGEyNmIzYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzA5MDRiNjk1LTIyMjYtNDlmMC1h NDNlLTBiZDk4YTI2YjNjMS8wOTA0YjY5NS0yMjI2LTQ5ZjAtYTQzZS0wYmQ5OGEy NmIzYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAUDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlgp7TG5LAkbHWJsXC0s1 LL5f1ffcn8iUE6tNZMn9ahrqj3aVOyIeRzvkdzPQLn7e+SYDG0dDr5efynKfhGcy 63P/AkJE68EKH+hJV/f3URfKC5FIlTzcG3+C4zKcv5tuWgf/giyCESHi3pay3eoA kqZo9VSH7qBALe15pd6K+MR+pfF0M0K3y1gYWPSwevU8Vnl4h+ZNyakEYVapBp/f YtjcdkBEnTlpd8QJqblWKuYJq/xcpW4k5DXTdRIGOHg0AIaIKqlH91eYxGPfC34g vhvevfiSTpQlJ12vodXE9hB8WEN2oSTq4wDf8+09RUVflSGkeGXd34WMGWB7AOxC TA== -----END CERTIFICATE-----Generated at Thu Jul 9 19:15:06 2026 by rpki-client