$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer File: 7da3df33-ad97-4a08-81e8-054f28d035ed.cer (raw, json) Hash identifier: 7Qc7eZbKKQYZSkUl+RKgoIHAV1RnU9kSfcclYKZ+Gjs= Subject key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E94E2D591CFBCB59076CF5700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jul 2026 08:45:11 +0000 Certificate not after: Tue 24 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 199.253.128.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:e2:d5:91:cf:bc:b5:90:76:cf:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 22 08:45:11 2026 GMT Not After : Oct 24 08:45:11 2028 GMT Subject: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:ef:23:b3:6d:bc:31:a1:b5:42:79:2d:3f: 85:3f:5c:25:25:25:d3:13:53:94:76:00:e7:94:a2: 70:bd:05:ad:08:b3:48:03:dc:0e:04:82:e9:c6:af: 79:09:83:de:5a:40:f3:e7:5c:da:a2:cf:75:68:8e: b0:ea:65:fd:63:66:32:65:22:c5:f0:27:cf:66:31: f0:f9:31:79:ad:8d:5c:96:49:4a:03:94:7f:1d:3a: f0:99:28:69:d5:be:6e:04:51:ee:7e:06:78:15:8f: 56:66:9e:80:d2:0e:a5:c3:95:14:26:a0:bc:71:7d: 8c:ea:30:bd:5b:de:0a:f5:78:73:a2:00:79:3e:18: 97:f4:ce:d5:b7:59:dc:62:d5:ce:c8:cd:ef:0f:98: 54:bb:a5:a9:e7:14:ca:8a:97:02:19:b1:f9:4b:eb: 03:97:2f:ce:25:9b:76:50:ec:c9:9f:eb:60:db:8a: 05:a1:b3:d6:9a:7e:7a:65:d6:6f:cb:50:df:49:da: fc:91:5e:04:b1:0a:86:6c:95:5a:8e:aa:d6:6d:ff: b1:b2:2e:e8:9b:30:ad:b3:f9:ab:76:b0:af:23:88: ba:ec:98:da:74:6e:80:a1:9b:43:60:82:c1:7f:12: 13:95:7f:bb:06:59:4f:f1:ab:ad:80:a7:5f:a8:0d: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f1:bc:39:1e:23:c3:e5:d6:63:31:b8:e8:d8:c3:6a:d1:2f: 19:09:fc:c2:1f:69:f8:2e:f4:6a:ae:ad:59:88:1b:bd:be:3a: 51:fd:88:82:a3:aa:bf:9a:8f:fc:87:9b:c0:e0:c9:67:d7:61: 3b:30:a3:66:11:b6:ef:6f:8f:99:2d:17:80:84:92:86:61:67: a6:6d:91:43:f6:19:aa:01:e9:59:e2:af:d3:89:de:64:29:17: c1:e6:d8:38:83:b8:c9:c2:bd:68:36:7d:2d:87:12:38:0b:d0: 7b:5e:4e:ee:18:b1:23:62:12:6f:06:48:69:7b:47:35:d6:02: f6:c6:23:b3:f9:7f:20:be:6f:c0:2b:cb:a7:64:30:4a:5c:99: 01:77:6c:4e:d2:ca:5d:41:1b:ab:f0:e0:7e:c8:3e:37:e6:86: bf:ff:cc:70:0e:60:54:71:8d:dd:13:58:94:f6:0e:ab:15:39: b6:18:e0:d8:eb:f4:e5:14:5b:75:08:7c:f9:4d:73:13:2a:6f: 18:68:52:d4:a4:7e:61:6a:93:db:be:b7:fb:5f:77:77:5a:e2: b1:70:21:f1:73:60:01:a4:4e:59:9f:5a:89:da:68:de:c8:ed: 4d:1e:ca:1e:61:8f:18:4b:54:b1:3f:c0:3d:3e:a4:c2:cb:2e: 61:4c:a4:0a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE6U4tWRz7y1kHbPVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcyMjA4NDUxMVoXDTI4MTAyNDA4NDUxMVowLzEtMCsGA1UEAxMk N2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAzNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FLvI7NtvDGhtUJ5LT+FP1wlJSXTE1OUdgDn lKJwvQWtCLNIA9wOBILpxq95CYPeWkDz51zaos91aI6w6mX9Y2YyZSLF8CfPZjHw +TF5rY1clklKA5R/HTrwmShp1b5uBFHufgZ4FY9WZp6A0g6lw5UUJqC8cX2M6jC9 W94K9XhzogB5PhiX9M7Vt1ncYtXOyM3vD5hUu6Wp5xTKipcCGbH5S+sDly/OJZt2 UOzJn+tg24oFobPWmn56ZdZvy1DfSdr8kV4EsQqGbJVajqrWbf+xsi7omzCts/mr drCvI4i67JjadG6AoZtDYILBfxITlX+7BllP8autgKdfqA3qswIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJveKa+lCeh1UHXgRfMpL7EOZIhfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzdkYTNkZjMzLWFkOTctNGEwOC04 MWU4LTA1NGYyOGQwMzVlZC83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhk MDM1ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPH/YAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdvG8OR4jw+XWYzG46NjD atEvGQn8wh9p+C70aq6tWYgbvb46Uf2IgqOqv5qP/IebwODJZ9dhOzCjZhG272+P mS0XgISShmFnpm2RQ/YZqgHpWeKv04neZCkXwebYOIO4ycK9aDZ9LYcSOAvQe15O 7hixI2ISbwZIaXtHNdYC9sYjs/l/IL5vwCvLp2QwSlyZAXdsTtLKXUEbq/Dgfsg+ N+aGv//McA5gVHGN3RNYlPYOqxU5thjg2Ov05RRbdQh8+U1zEypvGGhS1KR+YWqT 2763+193d1risXAh8XNgAaROWZ9aidpo3sjtTR7KHmGPGEtUsT/APT6kwssuYUyk Cg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:17:46 2026 by rpki-client