$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer File: a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer (raw, json) Hash identifier: EC/Ox59AaQ6tTht7gFIjHDK54X6MrtGxUK449YgX16E= Subject key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584DC12E028C5ABA654CEF313080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 May 2026 12:45:17 +0000 Certificate not after: Wed 09 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 192.245.195.0/24 IP: 199.247.204.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:2e:02:8c:5a:ba:65:4c:ef:31:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 7 12:45:17 2026 GMT Not After : Aug 9 12:45:17 2028 GMT Subject: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:63:e3:fd:a2:ed:97:3b:89:6b:ca:b3:60: 26:f8:9f:26:ef:0f:8e:a0:eb:35:28:a1:00:ab:8c: f4:2c:59:b8:26:94:4c:ce:ed:a4:9d:94:6c:06:ee: 27:9d:ce:fa:46:7f:9c:81:d3:2a:59:54:fe:f4:0e: d9:02:14:fe:5b:f3:07:d9:b5:ba:e1:22:55:8f:c2: 78:e5:1e:40:ca:52:54:3d:00:96:fe:aa:42:5e:5e: 5a:27:f1:d0:39:d1:00:bf:f5:2f:81:ae:e6:84:94: 2a:60:00:a6:ca:9f:d5:88:7a:fd:01:87:b6:01:46: c9:c1:89:aa:f1:2a:53:48:8e:51:d8:cb:b7:9c:3b: 9e:87:c8:73:ae:76:00:d5:04:34:1e:44:eb:8e:7c: 01:a1:37:87:81:05:04:9b:25:cd:82:76:06:2c:3c: 22:5c:31:e8:33:45:3e:ab:52:7f:79:f1:8e:c4:7d: 27:07:55:7b:5d:73:6a:87:d3:0e:90:18:57:d8:c6: ef:e2:89:0b:7f:80:01:55:4d:99:91:66:3a:e1:6c: 30:83:0f:24:db:33:70:3b:47:11:6d:cd:1f:ae:d7: d4:50:7f:a0:c6:5a:d1:5b:3a:53:ed:a6:5e:85:a6: a7:53:47:cb:bd:73:02:2f:3c:46:d6:f3:09:d6:27: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 192.245.195.0/24 199.247.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3d:96:5b:1c:de:fa:4a:0f:f4:af:17:b6:cc:bd:e5:46:03: 70:bb:99:b4:23:eb:ed:56:f6:e1:b3:c4:7b:4d:c2:99:9a:00: 6b:ac:ff:b4:87:16:7a:e0:56:e7:fa:70:65:39:21:71:ed:cb: fd:66:3b:73:40:76:15:03:ad:bc:3e:d7:64:e9:f7:a3:13:61: 4d:c6:c9:d2:2c:a1:41:04:dc:37:6a:bc:c3:98:96:d8:83:4a: ea:dc:6a:f6:4c:01:e2:77:93:87:2b:61:6c:b5:f2:70:1e:9e: 41:cb:35:ab:5d:fb:03:ea:6c:99:92:f8:83:0f:ab:2a:53:3f: d3:02:4f:a6:5f:43:a5:50:2a:d7:51:e2:eb:db:0b:71:23:58: ed:5d:e4:83:64:7d:76:44:16:2b:4a:d4:c4:1a:9d:c1:e0:35: 73:fa:64:06:32:0f:0e:89:e5:ac:4f:e7:12:45:da:22:6d:7e: 88:04:8f:8c:06:15:59:77:af:2d:01:40:be:be:c1:d4:5f:67: 1e:d6:05:4b:96:81:db:0d:e8:01:b2:49:24:68:b2:10:5e:3d: 45:05:1b:9a:8a:cb:df:91:dc:b1:88:d1:5b:b5:2b:da:84:ba: e6:82:7f:09:47:07:9b:a6:a4:23:5e:0b:b3:9f:5b:43:a2:ad: 10:0c:2c:b5 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE3BLgKMWrplTO8xMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDUwNzEyNDUxN1oXDTI4MDgwOTEyNDUxN1owLzEtMCsGA1UEAxMk YTQwZmJlZTctNWRhZS00YTVkLWE3OWItY2Y2MGNkNzNlNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxShj4/2i7Zc7iWvKs2Am+J8m7w+OoOs1KKEA q4z0LFm4JpRMzu2knZRsBu4nnc76Rn+cgdMqWVT+9A7ZAhT+W/MH2bW64SJVj8J4 5R5AylJUPQCW/qpCXl5aJ/HQOdEAv/Uvga7mhJQqYACmyp/ViHr9AYe2AUbJwYmq 8SpTSI5R2Mu3nDueh8hzrnYA1QQ0HkTrjnwBoTeHgQUEmyXNgnYGLDwiXDHoM0U+ q1J/efGOxH0nB1V7XXNqh9MOkBhX2Mbv4okLf4ABVU2ZkWY64Wwwgw8k2zNwO0cR bc0frtfUUH+gxlrRWzpT7aZehaanU0fLvXMCLzxG1vMJ1ifqDwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFHKu1nsvJy1nEm7FsQDS+CUI4ADqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h NDBmYmVlNy01ZGFlLTRhNWQtYTc5Yi1jZjYwY2Q3M2U0OWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2E0MGZiZWU3LTVkYWUtNGE1ZC1h NzliLWNmNjBjZDczZTQ5ZC9hNDBmYmVlNy01ZGFlLTRhNWQtYTc5Yi1jZjYwY2Q3 M2U0OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA9cMDBAHH98wwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiT2WWxze+koP 9K8Xtsy95UYDcLuZtCPr7Vb24bPEe03CmZoAa6z/tIcWeuBW5/pwZTkhce3L/WY7 c0B2FQOtvD7XZOn3oxNhTcbJ0iyhQQTcN2q8w5iW2INK6txq9kwB4neThythbLXy cB6eQcs1q137A+psmZL4gw+rKlM/0wJPpl9DpVAq11Hi69sLcSNY7V3kg2R9dkQW K0rUxBqdweA1c/pkBjIPDonlrE/nEkXaIm1+iASPjAYVWXevLQFAvr7B1F9nHtYF S5aB2w3oAbJJJGiyEF49RQUbmorL35HcsYjRW7Ur2oS65oJ/CUcHm6akI14Ls59b Q6KtEAwstQ== -----END CERTIFICATE-----Generated at Wed May 13 02:23:39 2026 by rpki-client