$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer File: 67e403a1-9185-4f5a-9910-5089c51f9fc3.cer (raw, json) Hash identifier: ZTKshKbRfxH4sHlnn1mw0lFvFczlTXcFmRWb2xlz9yM= Subject key identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584E4758816F8B151668CC5FB0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jun 2026 14:09:14 +0000 Certificate not after: Sun 18 Jun 2028 15:13:09 +0000 Subordinate resources: IP: 185.83.159.0/24 IP: 2602:f64d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:47:58:81:6f:8b:15:16:68:cc:5f:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jun 24 14:09:14 2026 GMT Not After : Jun 18 15:13:09 2028 GMT Subject: CN=67e403a1-9185-4f5a-9910-5089c51f9fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c4:6a:91:4a:97:10:16:a2:45:84:7e:5c:4c: 7e:4d:a6:14:52:d5:3c:29:01:ae:b5:44:00:a9:35: ab:84:13:dc:26:e8:fa:93:36:a8:80:fd:55:e3:22: 83:47:96:c1:81:01:7d:3d:40:57:3d:06:9e:1b:7f: f3:70:8b:63:4d:5b:49:8d:c7:62:76:72:df:e1:7e: 56:70:3b:3f:0d:29:5b:02:90:be:a0:e0:02:7a:c1: 5e:54:86:e5:07:9d:a4:93:a1:1d:4a:8b:76:76:a7: f0:38:76:07:c1:a2:d8:e0:80:3f:f0:49:98:61:67: ad:99:db:11:33:1f:00:e1:ea:ac:d6:a7:f6:e3:22: 2b:92:87:3b:a6:f6:40:8d:85:00:27:0a:51:16:72: 71:a9:62:d4:0b:ff:d2:b2:92:41:50:b7:33:fe:9d: d9:1b:b0:eb:ce:60:6c:59:2a:37:49:71:44:f1:59: 30:2a:48:98:20:d8:5f:71:91:4d:60:89:88:92:9f: 3c:33:41:35:c0:fc:30:06:28:98:e3:29:22:c5:b8: ed:ef:4b:05:34:9d:c3:a4:4d:6e:5b:a7:1d:9a:c3: c6:a7:d2:d8:7f:c1:c3:9f:80:b0:ea:7e:57:0c:ea: d7:06:49:82:ae:3c:92:59:41:b6:1e:a8:0a:e3:58: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 185.83.159.0/24 IPv6: 2602:f64d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:61:da:fa:9f:66:63:dc:a0:d9:e4:86:1d:b3:0c:8c:b6:68: b6:a7:51:5e:46:1a:e1:36:41:26:af:0e:5e:87:e8:9d:35:e7: 98:4b:07:e3:54:cc:4a:cf:11:2b:29:a9:a8:61:1c:48:cc:7c: 1d:3e:42:da:26:78:8c:7d:a5:1b:f2:bf:aa:f0:37:25:f8:69: 53:9e:21:2d:41:d6:77:cb:93:05:23:82:ba:ae:7d:b7:7e:cb: d8:ac:64:9a:84:b2:8c:13:84:90:31:02:51:72:af:da:ca:e7: be:1f:ea:bf:fe:0d:3d:38:64:c6:d9:4f:54:25:c0:73:34:4e: 10:3c:1c:f3:dc:97:ed:6d:f1:52:85:e6:0f:ac:6c:7c:a1:1a: 51:eb:91:cd:85:b2:f4:be:be:db:98:bf:02:9d:9c:68:ef:ab: 5b:0e:39:b9:a8:96:39:db:5a:9b:c5:7d:5b:52:a0:1c:10:32: 2b:04:82:28:f0:fc:4f:d3:62:b7:24:12:14:45:94:af:37:c9: 5b:dd:ca:a1:8f:a5:bc:29:1f:db:8a:8a:ff:7b:4c:20:df:45: 7b:3d:ee:ad:c1:b3:9c:91:44:f4:31:1b:e9:4b:3a:1a:f6:04: ef:c7:6d:fe:08:69:ea:d5:d9:cc:ae:03:b8:2b:9f:77:e4:30: 21:dd:39:ad -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE5HWIFvixUWaMxfsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDYyNDE0MDkxNFoXDTI4MDYxODE1MTMwOVowLzEtMCsGA1UEAxMk NjdlNDAzYTEtOTE4NS00ZjVhLTk5MTAtNTA4OWM1MWY5ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisRqkUqXEBaiRYR+XEx+TaYUUtU8KQGutUQA qTWrhBPcJuj6kzaogP1V4yKDR5bBgQF9PUBXPQaeG3/zcItjTVtJjcdidnLf4X5W cDs/DSlbApC+oOACesFeVIblB52kk6EdSot2dqfwOHYHwaLY4IA/8EmYYWetmdsR Mx8A4eqs1qf24yIrkoc7pvZAjYUAJwpRFnJxqWLUC//SspJBULcz/p3ZG7DrzmBs WSo3SXFE8VkwKkiYINhfcZFNYImIkp88M0E1wPwwBiiY4ykixbjt70sFNJ3DpE1u W6cdmsPGp9LYf8HDn4Cw6n5XDOrXBkmCrjySWUG2HqgK41jn9QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBpYTqIQ7NtnAyh1AwvHYBKjg4DOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 N2U0MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5YzUxZjlmYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzY3ZTQwM2ExLTkxODUtNGY1YS05 OTEwLTUwODljNTFmOWZjMy82N2U0MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5YzUx ZjlmYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAC5U58wDgQCAAIwCAMGACYC9k0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE1h2vqfZmPcoNnkhh2zDIy2aLanUV5GGuE2QSavDl6H6J0155hLB+NUzErPESsp qahhHEjMfB0+QtomeIx9pRvyv6rwNyX4aVOeIS1B1nfLkwUjgrqufbd+y9isZJqE sowThJAxAlFyr9rK574f6r/+DT04ZMbZT1QlwHM0ThA8HPPcl+1t8VKF5g+sbHyh GlHrkc2FsvS+vtuYvwKdnGjvq1sOObmoljnbWpvFfVtSoBwQMisEgijw/E/TYrck EhRFlK83yVvdyqGPpbwpH9uKiv97TCDfRXs97q3Bs5yRRPQxG+lLOhr2BO/Hbf4I aerV2cyuA7grn3fkMCHdOa0= -----END CERTIFICATE-----Generated at Thu Jul 2 23:32:10 2026 by rpki-client