$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer File: d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer (raw, json) Hash identifier: uN4VrFWE9xN0usp9B6qpx1A2mDS6qWppQX3ulsuZU4o= Subject key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Authority key identifier: 47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82 Certificate issuer: /CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785 Certificate serial: 010D0C9F4328584E6DCD4194D6690B4DCE466380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 08:45:11 +0000 Certificate not after: Tue 10 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 64.52.14.0/24 IP: 147.189.152.0/23 IP: 173.249.188.0/22 IP: 176.103.218.0/24 IP: 199.7.252.0/22 IP: 216.211.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:cd:41:94:d6:69:0b:4d:ce:46:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785 Validity Not Before: Jul 8 08:45:11 2026 GMT Not After : Oct 10 08:45:11 2028 GMT Subject: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:ae:ee:75:a5:73:ed:71:81:c3:f5:a2:d4: b1:37:ac:92:a2:83:df:a9:5b:09:df:ce:df:46:dd: 26:c1:8a:64:d8:a1:0b:13:91:39:05:ca:d1:72:d2: 6a:57:7a:e7:e9:9f:59:03:77:97:39:d7:28:b7:32: 00:63:c1:1f:82:3c:ba:90:f9:81:ae:7a:0b:d1:a0: 89:80:e7:88:6d:0b:77:cf:b9:2b:99:90:52:5a:b3: 75:df:bb:37:e1:99:1b:cb:ae:dc:a9:d5:fe:47:3f: 26:e9:a8:db:06:d4:bf:26:38:c7:3c:97:b8:87:f6: 6b:5a:e5:7a:d2:31:ae:3b:89:f7:31:b2:71:53:71: 2e:06:fd:dc:10:3d:dd:3d:80:c7:90:1a:04:16:ac: 3c:6d:3c:99:ff:f2:59:8a:d9:d2:5d:c0:1c:f1:ed: 82:6e:f2:65:bc:1a:4e:a7:73:a6:ca:84:c4:6b:df: 81:3a:36:16:30:ad:22:ba:1a:8f:e4:a4:b5:e2:e5: 9a:12:d4:e2:47:d8:4d:65:30:62:70:af:24:6b:bc: 83:78:92:23:f0:c2:a0:c6:60:19:3d:99:94:de:b0: da:91:66:33:4a:d2:21:6d:83:6d:88:b4:f9:23:e2: 0c:5a:d0:82:df:cf:4a:23:d0:51:e2:62:4e:50:f4: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl X509v3 Authority Key Identifier: keyid:47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer sbgp-ipAddrBlock: critical IPv4: 64.52.14.0/24 147.189.152.0/23 173.249.188.0/22 176.103.218.0/24 199.7.252.0/22 216.211.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:31:df:47:bc:d7:b0:02:22:27:08:88:f7:3a:72:9e:47:38: 32:34:ce:4b:c6:26:96:8b:67:6e:f3:47:fa:4c:b7:76:33:30: 11:ce:53:12:d9:8f:a3:cf:17:51:4f:95:d6:06:db:8d:2c:9a: 1f:77:51:aa:ba:f4:e2:f6:0c:08:9f:25:25:88:ae:85:6b:d0: ea:d2:7a:22:1f:d8:1d:9a:2a:f0:c4:75:12:fc:18:56:19:5a: 51:47:22:70:c8:ba:82:83:e7:2e:a1:6d:d4:21:fb:28:84:2c: 9b:c3:fc:a6:38:5e:f9:2c:a5:5a:df:c2:78:35:08:ab:cf:45: 20:7b:ad:4d:18:81:a3:b9:be:14:2f:5b:21:81:61:e3:20:98: 59:52:b0:97:32:9a:71:c1:48:b0:f2:22:a4:90:38:9c:71:7b: db:d9:aa:7f:0d:75:f1:8a:bf:68:48:c1:c2:2f:db:3b:16:ae: 41:d6:4d:d8:09:e8:1a:d9:f1:45:0b:97:de:56:90:43:5b:bf: 20:ce:18:d0:1d:06:d7:de:f1:30:ad:16:9c:38:5f:bc:45:0a: 1c:6c:33:be:59:7e:25:87:87:46:65:6a:7f:fd:11:85:7c:30: 03:53:fa:db:49:47:c0:16:0d:94:65:6c:38:b1:41:f3:c7:ca: fa:58:e8:ff -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWE5tzUGU1mkLTc5GY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNmE5YTUtNmU3Yy00NjMzLWE0YzMtMjRhZDFiN2Yw Nzg1MB4XDTI2MDcwODA4NDUxMVoXDTI4MTAxMDA4NDUxMVowPTE7MDkGA1UEAxMy ZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJlYTMwMjU5NzdiYTk2YzMx NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5R67udaVz7XGBw/Wi 1LE3rJKig9+pWwnfzt9G3SbBimTYoQsTkTkFytFy0mpXeufpn1kDd5c51yi3MgBj wR+CPLqQ+YGuegvRoImA54htC3fPuSuZkFJas3XfuzfhmRvLrtyp1f5HPybpqNsG 1L8mOMc8l7iH9mta5XrSMa47ifcxsnFTcS4G/dwQPd09gMeQGgQWrDxtPJn/8lmK 2dJdwBzx7YJu8mW8Gk6nc6bKhMRr34E6NhYwrSK6Go/kpLXi5ZoS1OJH2E1lMGJw ryRrvIN4kiPwwqDGYBk9mZTesNqRZjNK0iFtg22ItPkj4gxa0ILfz0oj0FHiYk5Q 9NnPAgMBAAGjggPDMIIDvzAdBgNVHQ4EFgQUHpJwl/lhzWLGhCIRIGeRWFaI6msw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4Y2VhMmFjNjAxOGRjYzYx YjQyNjUxZDYvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4Y2VhMmFjNjAxOGRjYzYxYjQyNjUxZDYv MC8xRTkyNzA5N0Y5NjFDRDYyQzY4NDIyMTEyMDY3OTE1ODU2ODhFQTZCLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1 Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMz LTI0YWQxYjdmMDc4NS80MDE2YTlhNS02ZTdjLTQ2MzMtYTRjMy0yNGFkMWI3ZjA3 ODUuY3JsMB8GA1UdIwQYMBaAFEdIQhXMWIG6sjZkxX+xuGGVeTuCMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt OGY2Yy1kNmM5MWIwYjg0MTUvNDAxNmE5YTUtNmU3Yy00NjMzLWE0YzMtMjRhZDFi N2YwNzg1LmNlcjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAEA0DgMEAZO9 mAMEAq35vAMEALBn2gMEAscH/AMEAtjT0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCMd9HvNewAiInCIj3 OnKeRzgyNM5LxiaWi2du80f6TLd2MzARzlMS2Y+jzxdRT5XWBtuNLJofd1GquvTi 9gwInyUliK6Fa9Dq0noiH9gdmirwxHUS/BhWGVpRRyJwyLqCg+cuoW3UIfsohCyb w/ymOF75LKVa38J4NQirz0Uge61NGIGjub4UL1shgWHjIJhZUrCXMppxwUiw8iKk kDiccXvb2ap/DXXxir9oSMHCL9s7Fq5B1k3YCega2fFFC5feVpBDW78gzhjQHQbX 3vEwrRacOF+8RQocbDO+WX4lh4dGZWp//RGFfDADU/rbSUfAFg2UZWw4sUHzx8r6 WOj/ -----END CERTIFICATE-----Generated at Fri Jul 24 00:53:42 2026 by rpki-client