$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer File: 77b56428-9b52-416f-b279-bbae14422de2.cer (raw, json) Hash identifier: tX0c5JdOM7Bb0CKr6nQJVBiS+0RDZccxShQQzAZsnyQ= Subject key identifier: 0D:A4:EB:AC:C3:42:B9:9B:12:D5:DA:6A:55:68:C3:4F:BA:DA:2A:BF Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D974DC0C114BCEF474BE6DB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 12:45:18 +0000 Certificate not after: Tue 25 Jul 2028 12:45:18 +0000 Subordinate resources: IP: 96.127.0.0/17 IP: 2620:108:d000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:4d:c0:c1:14:bc:ef:47:4b:e6:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 22 12:45:18 2026 GMT Not After : Jul 25 12:45:18 2028 GMT Subject: CN=77b56428-9b52-416f-b279-bbae14422de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:c5:25:11:e9:8e:fd:95:b6:e4:42:77:37: 22:5c:fe:81:76:05:e9:45:2f:10:df:d9:84:91:f0: 91:6a:8a:84:ce:21:24:34:12:2e:a1:e7:7d:d3:e9: c8:95:9f:f8:7b:39:81:1e:f4:14:bf:64:ee:ec:e6: 02:3f:1a:8a:3f:7c:d9:e8:3e:5b:66:3d:15:ca:72: 35:9e:f0:a7:0c:4a:30:59:ef:7d:4d:32:3f:3d:6e: f9:dd:c3:5a:c8:15:1a:96:ad:51:08:a0:d4:46:98: 74:10:88:f8:a0:07:69:e2:35:e4:51:90:55:15:50: 68:4d:99:61:05:e5:d4:0a:d3:2d:e3:26:04:89:b6: 5a:27:32:d0:f2:af:8b:df:35:5f:8e:4e:f2:ed:68: d5:1b:af:3e:4b:80:40:2b:4a:34:26:75:e8:f1:89: ea:fa:71:00:e7:f6:b5:c0:45:b4:49:7d:20:7f:45: 73:6e:0a:0f:77:7c:63:41:dd:5d:3a:7d:5c:06:52: f7:6d:7f:d1:08:fd:ab:7d:29:82:c3:4e:48:26:fb: fd:38:91:76:d7:6e:c8:57:b4:45:e0:cc:59:5e:4a: fb:17:ee:87:c4:4c:a6:01:07:65:be:28:0a:6c:9d: f4:5c:f5:47:c5:d1:42:d9:be:c7:33:75:22:11:75: 98:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:EB:AC:C3:42:B9:9B:12:D5:DA:6A:55:68:C3:4F:BA:DA:2A:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/17 IPv6: 2620:108:d000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:58:3e:ff:62:b8:bb:bb:d1:ab:e6:4e:5c:fd:48:ba:c8:13: a3:d8:e2:b5:83:c0:26:36:43:8c:4e:20:4b:e0:12:52:50:00: 71:db:a9:d5:37:6f:17:1e:8e:f7:16:b6:8b:e1:23:8c:fe:21: 67:c7:a6:a1:b1:98:18:3c:dc:38:e3:0c:7e:e6:40:8a:24:fb: 79:55:90:d7:f7:b6:4f:f0:2f:f1:22:90:eb:63:37:5d:0a:38: f2:46:b7:4e:16:95:eb:25:ad:4d:87:93:35:2c:85:4e:8f:a0: c0:08:b9:fe:4b:69:c0:2c:8f:29:48:92:80:5b:ce:72:12:c1: dc:c2:79:10:e5:6b:72:40:56:d6:61:08:76:29:52:5d:10:7e: c8:0e:d5:02:46:30:a1:19:ac:79:a1:ba:0a:76:07:b8:13:33: 9a:56:d8:ce:56:f0:d9:61:31:98:d3:f8:b1:95:dc:b0:2a:1a: fb:c0:9d:24:9b:29:40:0e:36:63:49:d7:98:73:cf:b0:9a:2f: ac:8f:24:37:98:8f:bf:34:94:d3:f5:f3:49:40:27:65:85:e4: 23:d5:e8:fe:71:34:83:20:96:21:3e:56:98:3c:84:26:89:47: 99:f4:b8:01:8f:31:72:aa:a9:3e:83:2d:b7:bc:3d:35:35:22: 02:d4:04:15 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWE2XTcDBFLzvR0vm2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDQyMjEyNDUxOFoXDTI4MDcyNTEyNDUxOFowLzEtMCsGA1UEAxMk NzdiNTY0MjgtOWI1Mi00MTZmLWIyNzktYmJhZTE0NDIyZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIDFJRHpjv2VtuRCdzciXP6BdgXpRS8Q39mE kfCRaoqEziEkNBIuoed90+nIlZ/4ezmBHvQUv2Tu7OYCPxqKP3zZ6D5bZj0VynI1 nvCnDEowWe99TTI/PW753cNayBUalq1RCKDURph0EIj4oAdp4jXkUZBVFVBoTZlh BeXUCtMt4yYEibZaJzLQ8q+L3zVfjk7y7WjVG68+S4BAK0o0JnXo8Ynq+nEA5/a1 wEW0SX0gf0VzbgoPd3xjQd1dOn1cBlL3bX/RCP2rfSmCw05IJvv9OJF2127IV7RF 4MxZXkr7F+6HxEymAQdlvigKbJ30XPVHxdFC2b7HM3UiEXWYlQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFA2k66zDQrmbEtXaalVow0+62iq/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 N2I1NjQyOC05YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc3YjU2NDI4LTliNTItNDE2Zi1i Mjc5LWJiYWUxNDQyMmRlMi83N2I1NjQyOC05YjUyLTQxNmYtYjI3OS1iYmFlMTQ0 MjJkZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAdgfwAwDwQCAAIwCQMHBCYgAQjQADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBwWD7/Yri7u9Gr5k5c/Ui6yBOj2OK1g8AmNkOMTiBL4BJSUABx26nVN28XHo73 FraL4SOM/iFnx6ahsZgYPNw44wx+5kCKJPt5VZDX97ZP8C/xIpDrYzddCjjyRrdO FpXrJa1Nh5M1LIVOj6DACLn+S2nALI8pSJKAW85yEsHcwnkQ5WtyQFbWYQh2KVJd EH7IDtUCRjChGax5oboKdge4EzOaVtjOVvDZYTGY0/ixldywKhr7wJ0kmylADjZj SdeYc8+wmi+sjyQ3mI+/NJTT9fNJQCdlheQj1ej+cTSDIJYhPlaYPIQmiUeZ9LgB jzFyqqk+gy23vD01NSIC1AQV -----END CERTIFICATE-----Generated at Wed May 13 06:18:06 2026 by rpki-client