$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer File: 6ec5d668-721f-4186-82e6-1391fb7784bb.cer (raw, json) Hash identifier: 5mwC+pIF/oa9vbG6rrlNglf3M8wHu9k1H6HFUkew2n4= Subject key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E54AD1A09B290E5DD2F4F1220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jun 2026 08:45:11 +0000 Certificate not after: Sun 01 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 172.81.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:ad:1a:09:b2:90:e5:dd:2f:4f:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 29 08:45:11 2026 GMT Not After : Oct 1 08:45:11 2028 GMT Subject: CN=6ec5d668-721f-4186-82e6-1391fb7784bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:db:01:09:46:ae:9b:50:d6:38:ac:e5:8f: 0d:43:1b:83:f3:70:35:b3:c8:08:de:65:4d:04:c1: 25:21:a8:d3:c1:cc:b4:80:be:fb:4d:a8:57:63:7e: 8d:da:a2:76:92:90:bd:05:2e:21:b9:76:a3:09:85: 3f:d0:0d:8a:2e:94:25:5a:ad:be:e3:86:76:ef:0a: 1d:d7:cf:99:67:dc:3a:91:12:fd:1f:a3:11:5f:0f: 0f:d0:78:d4:1f:52:53:0f:c9:28:de:9a:51:0a:8c: 6f:80:e4:37:87:5f:ca:d5:5c:22:79:3f:9f:d2:03: fb:ec:cc:2b:4d:9f:93:71:bb:1b:ee:f6:6c:01:78: a6:2f:96:8b:4e:e9:98:ad:d2:3f:2d:45:a4:2c:ed: 59:2d:23:87:53:44:d1:53:e7:ed:59:7b:6b:36:a5: 98:0a:96:f5:90:2b:e9:06:aa:fd:12:de:2e:7e:43: af:0a:dd:3f:7c:55:d8:ea:ca:32:09:91:04:c2:7e: c8:45:61:d1:59:ac:24:ce:85:08:9d:6a:13:61:4d: 00:a1:44:64:ee:ab:d4:c6:9e:13:bd:8e:33:99:96: d5:59:c1:73:9d:32:e0:d6:fb:fa:b5:8f:a7:3a:3b: ed:25:31:34:96:91:13:ea:60:40:59:07:3b:d0:38: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 172.81.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:79:42:ce:7f:e4:4e:45:6f:e1:05:7c:08:53:55:0e:d0:31: b0:b1:a5:4c:10:4e:eb:64:f6:9e:6f:4e:05:8a:b8:43:df:72: 9c:ae:cd:e7:0a:11:c2:a6:d9:46:06:1e:66:5a:61:d7:d9:b9: 1e:b3:ec:31:1b:01:f8:3e:2a:9b:05:c9:56:dc:05:0b:5f:bf: de:b9:e9:55:af:4e:67:6a:c8:ae:9c:ea:da:58:69:fe:2d:c1: 8b:01:41:34:d0:9a:d2:03:79:7b:e2:4e:0e:28:df:3e:c9:84: 82:1a:f0:9f:a5:ea:1e:08:bb:1d:db:b8:f1:99:85:1e:9d:c6: 1d:fa:6b:47:73:f4:38:8d:c0:89:ab:24:d2:80:34:94:db:6b: 72:16:cc:17:98:eb:db:bf:99:f0:5b:04:1c:39:9d:9c:49:1a: 34:da:70:c8:dc:89:8e:d0:b8:9c:5d:30:98:97:29:34:3f:81: f4:4c:99:26:71:6e:ca:6a:e6:3e:ef:fb:71:f4:48:bb:0b:e4: 5d:1e:a9:7b:74:d5:ff:9c:88:5c:a7:91:4f:a4:eb:47:27:e2: 6d:ef:ac:55:ef:11:40:2a:7f:c2:c5:c9:c9:89:ab:cf:b1:a0: 30:60:e0:08:6f:a0:66:b1:e9:c0:90:64:80:9d:b4:fa:36:46: ae:ec:50:32 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5UrRoJspDl3S9PEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYyOTA4NDUxMVoXDTI4MTAwMTA4NDUxMVowLzEtMCsGA1UEAxMk NmVjNWQ2NjgtNzIxZi00MTg2LTgyZTYtMTM5MWZiNzc4NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DbAQlGrptQ1jis5Y8NQxuD83A1s8gI3mVN BMElIajTwcy0gL77TahXY36N2qJ2kpC9BS4huXajCYU/0A2KLpQlWq2+44Z27wod 18+ZZ9w6kRL9H6MRXw8P0HjUH1JTD8ko3ppRCoxvgOQ3h1/K1VwieT+f0gP77Mwr TZ+Tcbsb7vZsAXimL5aLTumYrdI/LUWkLO1ZLSOHU0TRU+ftWXtrNqWYCpb1kCvp Bqr9Et4ufkOvCt0/fFXY6soyCZEEwn7IRWHRWawkzoUInWoTYU0AoURk7qvUxp4T vY4zmZbVWcFznTLg1vv6tY+nOjvtJTE0lpET6mBAWQc70DjKPQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFH0rxeZOpHow8gH3N0f700e3FGMkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 ZWM1ZDY2OC03MjFmLTQxODYtODJlNi0xMzkxZmI3Nzg0YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZlYzVkNjY4LTcyMWYtNDE4Ni04 MmU2LTEzOTFmYjc3ODRiYi82ZWM1ZDY2OC03MjFmLTQxODYtODJlNi0xMzkxZmI3 Nzg0YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKsUZAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ3lCzn/kTkVv4QV8CFNV DtAxsLGlTBBO62T2nm9OBYq4Q99ynK7N5woRwqbZRgYeZlph19m5HrPsMRsB+D4q mwXJVtwFC1+/3rnpVa9OZ2rIrpzq2lhp/i3BiwFBNNCa0gN5e+JODijfPsmEghrw n6XqHgi7Hdu48ZmFHp3GHfprR3P0OI3Aiask0oA0lNtrchbMF5jr27+Z8FsEHDmd nEkaNNpwyNyJjtC4nF0wmJcpND+B9EyZJnFuymrmPu/7cfRIuwvkXR6pe3TV/5yI XKeRT6TrRyfibe+sVe8RQCp/wsXJyYmrz7GgMGDgCG+gZrHpwJBkgJ20+jZGruxQ Mg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:40 2026 by rpki-client