$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5.cer File: 211939ae-b8ba-4aba-a3aa-2491062ac9b5.cer (raw, json) Hash identifier: V9eEEfH94051g7F8EAi2bQxcj3kbO7YpzC0i9QOWN7A= Subject key identifier: 7D:2F:41:96:29:85:4C:DF:5B:A6:BC:AC:E3:96:FC:EC:D1:26:31:10 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DCC58BE10564F02FB141AAF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/211939ae-b8ba-4aba-a3aa-2491062ac9b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 12:45:17 +0000 Certificate not after: Sun 13 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 204.239.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:58:be:10:56:4f:02:fb:14:1a:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 11 12:45:17 2026 GMT Not After : Aug 13 12:45:17 2028 GMT Subject: CN=211939ae-b8ba-4aba-a3aa-2491062ac9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:6b:e8:99:1e:ce:19:2b:65:94:8a:ce:13: b2:9d:5c:a5:ef:0e:7c:72:9a:af:fa:13:3a:ab:07: c1:9f:9f:1b:ff:57:92:bb:0e:57:00:7a:79:af:a3: d3:25:b5:85:1a:3d:b4:2f:f2:28:ce:60:b2:24:cb: f9:97:76:ce:01:55:94:e2:97:55:02:4b:e3:9e:18: e3:fb:c0:2f:ef:d0:9c:ee:c9:93:a0:d8:e1:af:90: e7:e8:53:b1:34:f3:2b:d7:da:d6:2e:46:50:b0:42: 7b:55:3c:cf:0b:a5:64:58:9f:bd:9d:ee:e7:cb:da: d9:81:e5:75:79:3d:cb:97:b4:40:74:60:e8:d1:dd: 3e:f8:a4:17:64:3b:8e:75:60:6f:36:dc:b3:21:48: 45:47:42:b5:6f:bc:9f:ee:a0:02:05:9f:cb:25:b5: ea:6c:2e:dd:9e:62:bd:78:56:9a:46:dc:fe:2d:4a: 32:a7:a1:e8:c3:19:d9:cc:d8:aa:6d:f1:5f:5e:bc: 03:cc:ec:08:2c:9b:3e:e1:1d:5e:39:ce:ec:80:be: 5d:ed:29:0e:e2:20:f4:aa:b5:6b:ff:89:4b:4b:03: d8:69:c7:c1:52:be:98:4c:ea:f7:48:4e:98:52:7a: dc:5b:4d:8a:70:ab:16:87:f1:50:fb:bc:1a:e7:8e: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:41:96:29:85:4C:DF:5B:A6:BC:AC:E3:96:FC:EC:D1:26:31:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/211939ae-b8ba-4aba-a3aa-2491062ac9b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 204.239.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fe:81:a2:bb:55:46:67:69:9f:c4:ac:20:6d:cf:89:57:e0: 6a:95:7e:fd:79:fd:8b:c2:8c:e8:71:3b:67:da:26:03:86:f7: 54:ec:a1:cd:67:69:63:27:3b:b4:10:cb:39:65:56:68:90:0b: f1:e7:83:24:c3:7f:1a:5d:a0:18:02:93:5a:6e:0a:23:52:dd: 1c:49:e4:02:b5:ac:27:eb:87:f3:e5:f4:b1:82:7c:b3:fc:03: e0:3b:25:f7:f8:30:34:3e:95:5b:7e:73:4f:ce:bb:0c:8e:4d: e0:71:f2:e9:65:07:3b:fb:8c:25:06:4f:e4:90:c2:8f:99:47: 7d:0b:16:ac:17:2f:62:2f:e1:13:bf:98:d8:b2:9e:e6:65:bb: 5b:06:5c:54:28:74:97:33:81:f1:06:f9:57:b5:67:5b:c4:cf: e7:72:c5:83:7b:33:7a:b5:f6:99:14:20:35:63:f2:a4:9b:98: bc:8b:0f:70:3f:5b:ae:83:09:e8:06:01:4b:ae:13:0a:af:3e: f2:b4:93:09:4e:71:dc:2a:2a:b7:fa:36:7c:d4:4c:f8:cb:fc: 24:9c:5e:47:a6:76:b5:48:e4:22:1d:90:8e:c4:57:e9:6c:56: 67:03:51:7d:59:f7:93:c4:c6:09:f6:1b:cb:83:ae:b1:8a:3d: 25:c9:c8:36 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3MWL4QVk8C+xQarwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDUxMTEyNDUxN1oXDTI4MDgxMzEyNDUxN1owLzEtMCsGA1UEAxMk MjExOTM5YWUtYjhiYS00YWJhLWEzYWEtMjQ5MTA2MmFjOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTJr6JkezhkrZZSKzhOynVyl7w58cpqv+hM6 qwfBn58b/1eSuw5XAHp5r6PTJbWFGj20L/IozmCyJMv5l3bOAVWU4pdVAkvjnhjj +8Av79Cc7smToNjhr5Dn6FOxNPMr19rWLkZQsEJ7VTzPC6VkWJ+9ne7ny9rZgeV1 eT3Ll7RAdGDo0d0++KQXZDuOdWBvNtyzIUhFR0K1b7yf7qACBZ/LJbXqbC7dnmK9 eFaaRtz+LUoyp6HowxnZzNiqbfFfXrwDzOwILJs+4R1eOc7sgL5d7SkO4iD0qrVr /4lLSwPYacfBUr6YTOr3SE6YUnrcW02KcKsWh/FQ+7wa546A+QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFH0vQZYphUzfW6a8rOOW/OzRJjEQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MTE5MzlhZS1iOGJhLTRhYmEtYTNhYS0yNDkxMDYyYWM5YjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIxMTkzOWFlLWI4YmEtNGFiYS1h M2FhLTI0OTEwNjJhYzliNS8yMTE5MzlhZS1iOGJhLTRhYmEtYTNhYS0yNDkxMDYy YWM5YjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATM7zAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEv6BortVRmdpn8SsIG3P iVfgapV+/Xn9i8KM6HE7Z9omA4b3VOyhzWdpYyc7tBDLOWVWaJAL8eeDJMN/Gl2g GAKTWm4KI1LdHEnkArWsJ+uH8+X0sYJ8s/wD4Dsl9/gwND6VW35zT867DI5N4HHy 6WUHO/uMJQZP5JDCj5lHfQsWrBcvYi/hE7+Y2LKe5mW7WwZcVCh0lzOB8Qb5V7Vn W8TP53LFg3szerX2mRQgNWPypJuYvIsPcD9broMJ6AYBS64TCq8+8rSTCU5x3Coq t/o2fNRM+Mv8JJxeR6Z2tUjkIh2QjsRX6WxWZwNRfVn3k8TGCfYby4OusYo9JcnI Ng== -----END CERTIFICATE-----Generated at Wed May 13 05:19:59 2026 by rpki-client