$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer File: 4dfb879f-7966-496a-b35e-d766981846ee.cer (raw, json) Hash identifier: vZe6dZvhtj56iLd5mJMNhNN1oL5+V8ti6wNve5l/4fA= Subject key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E3B8CF1DDA194F29FDA879C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Jun 2026 08:45:11 +0000 Certificate not after: Fri 22 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 199.60.119.0 -- 199.60.120.255 IP: 199.60.226.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:8c:f1:dd:a1:94:f2:9f:da:87:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 20 08:45:11 2026 GMT Not After : Sep 22 08:45:11 2028 GMT Subject: CN=4dfb879f-7966-496a-b35e-d766981846ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:b6:b3:27:c9:ab:9b:54:1d:15:7c:c7:08: 69:a0:ce:f9:be:9d:4b:28:be:55:f9:ac:f9:30:d7: 95:14:40:01:47:a4:11:79:9b:7a:a3:6b:62:f9:11: a7:72:f8:ae:20:85:24:85:74:f5:a9:0f:df:9e:6e: 90:64:7c:86:ed:c1:04:b2:09:c1:3e:85:b4:11:07: b6:19:f8:2c:da:a6:0c:c9:b3:b6:27:4a:29:24:11: c4:a7:72:fd:fc:2c:3c:aa:f8:37:f6:7c:00:ec:41: d9:1e:b0:93:8c:be:dc:52:05:19:c0:97:ef:83:73: 3b:8a:91:d6:f2:39:0f:7f:80:22:40:b8:16:f0:63: da:4a:23:84:16:de:59:e6:f8:ef:a1:75:6a:35:60: be:df:3b:63:ec:06:6a:22:96:ca:cc:6e:c5:aa:e9: a5:a2:c3:f9:51:1c:7f:5a:5c:5b:79:57:cc:dc:e1: 06:6e:c0:b7:f2:c1:9b:b7:e1:a3:6b:f4:b7:45:b8: 86:9e:b0:3c:f6:01:59:57:f2:ad:2a:c3:5a:e1:1b: 10:d3:f0:67:cc:92:4b:61:5d:93:0a:03:e6:c4:59: 09:4b:4a:52:f8:af:f5:c4:4e:07:19:9f:e6:4e:3d: ed:ca:e4:20:23:e5:b2:8c:4e:6c:c3:91:31:14:d9: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.60.119.0-199.60.120.255 199.60.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d7:3f:9f:55:d9:d8:8c:ca:57:4f:bf:5c:36:50:37:42:66: 30:5b:6d:bb:44:d0:f4:ce:dc:92:10:72:41:f5:f5:0e:d7:8c: 13:d3:e7:bb:db:e4:00:a5:91:e6:52:6a:a0:8c:14:12:02:44: 79:d8:69:bc:6d:18:35:b7:25:1e:0e:7f:33:15:64:3d:f2:3c: f5:8f:eb:c5:b1:1a:80:e0:ec:97:44:35:ca:21:de:51:3d:d3: ae:59:75:c1:6b:c5:2d:b6:71:59:29:80:ba:1e:42:52:f6:64: 0c:0e:f9:be:f2:7b:12:c6:30:ce:e9:62:ae:e0:3d:72:b4:c0: 3b:f2:ac:76:5b:5d:72:81:18:70:a2:01:60:90:e5:a0:fd:fc: 0e:69:c1:37:d4:40:b8:6e:98:fd:35:fb:7d:ba:57:d2:b1:f9: c7:7c:36:de:d2:15:2c:1d:3c:d5:63:dc:9c:3f:ca:9c:e5:a8: fd:18:48:d5:54:e8:cf:47:db:9e:f3:4a:62:cf:03:22:f5:b9: 88:18:e5:3b:40:01:b7:52:79:0d:c5:dd:c9:7c:1c:6c:4a:2f: 8b:a7:83:58:35:4d:40:4c:2d:91:32:39:f3:ff:a8:51:09:92: ba:45:f6:a1:56:72:66:73:60:09:e2:ee:87:75:e8:44:c2:af: 3b:10:4d:5a -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWE47jPHdoZTyn9qHnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDYyMDA4NDUxMVoXDTI4MDkyMjA4NDUxMVowLzEtMCsGA1UEAxMk NGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RC2syfJq5tUHRV8xwhpoM75vp1LKL5V+az5 MNeVFEABR6QReZt6o2ti+RGncviuIIUkhXT1qQ/fnm6QZHyG7cEEsgnBPoW0EQe2 Gfgs2qYMybO2J0opJBHEp3L9/Cw8qvg39nwA7EHZHrCTjL7cUgUZwJfvg3M7ipHW 8jkPf4AiQLgW8GPaSiOEFt5Z5vjvoXVqNWC+3ztj7AZqIpbKzG7FqumlosP5URx/ WlxbeVfM3OEGbsC38sGbt+Gja/S3RbiGnrA89gFZV/KtKsNa4RsQ0/BnzJJLYV2T CgPmxFkJS0pS+K/1xE4HGZ/mTj3tyuQgI+WyjE5sw5ExFNnrBQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFEegiZFsf0dT+7go/0NNlsUPAqUdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzRkZmI4NzlmLTc5NjYtNDk2YS1i MzVlLWQ3NjY5ODE4NDZlZS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgx ODQ2ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAMc8dwMEAMc8eAMEAcc84jBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCx 1z+fVdnYjMpXT79cNlA3QmYwW227RND0ztySEHJB9fUO14wT0+e72+QApZHmUmqg jBQSAkR52Gm8bRg1tyUeDn8zFWQ98jz1j+vFsRqA4OyXRDXKId5RPdOuWXXBa8Ut tnFZKYC6HkJS9mQMDvm+8nsSxjDO6WKu4D1ytMA78qx2W11ygRhwogFgkOWg/fwO acE31EC4bpj9Nft9ulfSsfnHfDbe0hUsHTzVY9ycP8qc5aj9GEjVVOjPR9ue80pi zwMi9bmIGOU7QAG3UnkNxd3JfBxsSi+Lp4NYNU1ATC2RMjnz/6hRCZK6RfahVnJm c2AJ4u6HdehEwq87EE1a -----END CERTIFICATE-----Generated at Thu Jul 23 21:42:28 2026 by rpki-client