$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer File: b58f33d9-1d10-4d07-ae57-7b91ec651785.cer (raw, json) Hash identifier: Jdj6BFlEp5r8sk7pGlG9l5BBiX1NQ/42gz61e+IFrfI= Subject key identifier: D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D14356B44C1B2208FE5D94240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 13:45:22 +0000 Certificate not after: Thu 08 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 199.184.207.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:35:6b:44:c1:b2:20:8f:e5:d9:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 6 13:45:22 2026 GMT Not After : Jun 8 12:45:22 2028 GMT Subject: CN=b58f33d9-1d10-4d07-ae57-7b91ec651785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:77:ad:e6:51:fb:66:b2:e6:a6:f6:69:a6:07: 9e:58:52:c8:6b:8f:d2:53:7e:4a:e2:a2:61:5a:2b: 52:c6:89:ea:f6:fb:d5:8f:17:f9:94:d4:8e:79:48: 35:3a:38:b8:15:9c:da:a7:22:5a:8c:bc:e8:92:7d: 1c:c2:e0:40:f5:f0:3e:f0:ac:db:25:bc:d6:ea:c3: 82:4a:f8:e6:cd:96:35:9a:dc:be:65:86:a0:58:ae: 15:59:86:91:19:36:c0:5e:03:e9:98:31:1a:fc:a7: 6b:61:9d:27:c2:84:d8:7c:e7:14:d9:15:b0:ae:0b: 03:01:b4:d0:f3:d6:b3:3b:19:f8:95:d7:25:aa:9c: 2d:a5:3f:36:55:b1:bd:ae:5c:5e:cd:af:22:87:8c: 37:ba:21:f1:04:02:79:d5:11:ae:c1:9f:7f:ce:45: 4a:c7:b6:9e:ad:c1:65:9c:3b:c3:aa:39:05:5a:28: 4f:d6:9f:09:7b:7f:12:46:31:55:92:37:af:75:4f: 40:25:31:4f:ad:9d:83:4a:7f:f7:f9:21:ca:84:e9: 9f:84:b5:85:f6:e9:2c:62:5f:0d:1d:f2:31:60:b7: 98:01:1c:95:94:bf:26:5d:ca:d4:b5:75:8a:33:12: f4:7d:ad:8d:19:a5:bf:39:97:86:e5:02:17:14:c9: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.184.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:93:1d:2e:a7:82:54:d3:14:c1:50:79:1a:31:5e:67:54:7c: 2d:a7:30:42:7e:2d:60:e6:9c:af:0c:a3:87:4f:29:16:42:57: 15:0c:15:84:8b:0b:7c:d3:7a:18:7b:e9:f2:65:f0:0a:5c:34: a1:a9:fc:f1:8d:92:b2:85:c0:de:eb:48:60:84:eb:52:27:a1: 78:d2:e4:46:24:89:55:35:20:6a:eb:c7:6c:45:6f:b7:be:48: 65:ed:cc:47:60:45:a7:ea:e6:c1:e5:75:95:a5:df:60:27:d4: fb:c1:1c:b6:7b:a2:92:12:ed:86:ef:b0:1e:02:7c:03:7b:4e: 24:ed:ea:6d:1c:e3:74:30:11:00:af:e3:bd:66:f1:f9:ca:0d: 98:3f:2d:61:29:16:90:5d:9a:86:f2:49:d8:04:20:af:87:08: 85:86:82:d6:05:06:09:49:92:60:1d:1b:41:95:64:9c:52:5d: f2:c3:fc:06:67:30:64:dc:a9:7d:65:9d:d8:e2:50:b3:09:4a: b6:bb:00:e7:c7:02:77:be:e4:9e:2b:84:a5:20:26:20:b9:83: 23:85:6a:54:db:2e:1a:0a:cd:d8:41:3b:db:7a:3f:65:62:98: be:65:aa:17:76:45:8b:77:5a:01:52:d8:e3:c4:96:ce:d8:11: 88:f5:fe:53 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0UNWtEwbIgj+XZQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMwNjEzNDUyMloXDTI4MDYwODEyNDUyMlowLzEtMCsGA1UEAxMk YjU4ZjMzZDktMWQxMC00ZDA3LWFlNTctN2I5MWVjNjUxNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHet5lH7ZrLmpvZppgeeWFLIa4/SU35K4qJh WitSxonq9vvVjxf5lNSOeUg1Oji4FZzapyJajLzokn0cwuBA9fA+8KzbJbzW6sOC SvjmzZY1mty+ZYagWK4VWYaRGTbAXgPpmDEa/KdrYZ0nwoTYfOcU2RWwrgsDAbTQ 89azOxn4ldclqpwtpT82VbG9rlxeza8ih4w3uiHxBAJ51RGuwZ9/zkVKx7aercFl nDvDqjkFWihP1p8Je38SRjFVkjevdU9AJTFPrZ2DSn/3+SHKhOmfhLWF9uksYl8N HfIxYLeYARyVlL8mXcrUtXWKMxL0fa2NGaW/OZeG5QIXFMktRQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNZ6B2tHtcR6OUenrjUdrWedevO6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i NThmMzNkOS0xZDEwLTRkMDctYWU1Ny03YjkxZWM2NTE3ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I1OGYzM2Q5LTFkMTAtNGQwNy1h ZTU3LTdiOTFlYzY1MTc4NS9iNThmMzNkOS0xZDEwLTRkMDctYWU1Ny03YjkxZWM2 NTE3ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHuM8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHJMdLqeCVNMUwVB5GjFe Z1R8LacwQn4tYOacrwyjh08pFkJXFQwVhIsLfNN6GHvp8mXwClw0oan88Y2SsoXA 3utIYITrUieheNLkRiSJVTUgauvHbEVvt75IZe3MR2BFp+rmweV1laXfYCfU+8Ec tnuikhLthu+wHgJ8A3tOJO3qbRzjdDARAK/jvWbx+coNmD8tYSkWkF2ahvJJ2AQg r4cIhYaC1gUGCUmSYB0bQZVknFJd8sP8BmcwZNypfWWd2OJQswlKtrsA58cCd77k niuEpSAmILmDI4VqVNsuGgrN2EE723o/ZWKYvmWqF3ZFi3daAVLY48SWztgRiPX+ Uw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:23:59 2026 by rpki-client