$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer File: d16114d0-9aed-42a2-956d-441c06a82e37.cer (raw, json) Hash identifier: g5u6HkOBRLQz8eg7eVwMb9hWtNyiuGojqrRCOt4Pp54= Subject key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E7D2804753B11104485B0CD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jul 2026 20:45:11 +0000 Certificate not after: Sun 15 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 104.245.240.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7d:28:04:75:3b:11:10:44:85:b0:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 13 20:45:11 2026 GMT Not After : Oct 15 20:45:11 2028 GMT Subject: CN=d16114d0-9aed-42a2-956d-441c06a82e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:4d:5c:d1:dd:51:9a:a3:2f:a2:29:1f:16: 8c:93:53:17:71:e4:71:67:7a:8f:9b:ff:48:02:07: 6b:8f:a8:d6:b7:f4:8e:77:57:ba:4a:a5:d4:de:68: 60:5b:75:69:6d:30:da:cf:36:1f:e3:27:84:ff:3e: 6b:01:6e:74:43:2b:35:dd:2d:8e:db:0d:f9:99:c7: 21:72:48:77:12:c9:0d:ee:a9:cf:85:ca:dc:3e:54: d7:f1:fd:d8:a1:06:66:9e:d6:4f:73:e4:35:86:8a: 63:5b:b2:f6:9f:2d:2c:b6:83:72:24:a4:46:07:ef: be:4a:53:08:74:72:3d:6a:a0:25:83:79:d1:f9:dd: df:a0:8d:f5:53:a5:9d:e9:28:87:ee:7b:75:70:30: e7:0e:d6:5b:72:32:61:ae:7c:4a:79:88:86:d0:e9: 1a:af:e9:5a:13:aa:2a:b6:8a:a7:06:61:08:89:b1: 83:6c:1c:7e:f2:41:48:ba:77:04:9a:72:8f:84:67: 7c:e0:08:aa:5a:9a:d4:08:52:fa:ba:23:44:2b:ee: 1c:cf:96:6d:43:dc:dc:ab:1b:af:c1:fd:ae:88:9a: fd:81:c7:96:d2:e8:70:a9:90:a9:94:28:5d:cd:61: dc:ce:0e:2c:40:36:9f:15:a8:45:fd:fe:9f:24:c4: 29:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.245.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b2:7b:cb:8e:41:99:ad:4b:9d:33:e3:e9:d4:05:d2:ea:fe: 0b:dd:c0:45:40:4f:46:6a:5e:12:09:8c:92:57:08:31:26:83: 61:88:bb:3a:34:55:18:ff:9f:f2:3f:46:37:3a:90:35:f9:e9: 72:b0:fb:05:7e:37:0a:c0:22:d4:de:08:e2:b4:f2:2d:be:60: 6f:4d:c2:07:77:ca:b9:99:de:21:90:db:56:e8:c5:3c:4d:1b: 4b:a4:86:ab:29:86:39:76:40:04:e8:83:0f:b1:c1:70:78:e3: 51:dc:80:df:1e:ac:b2:d1:87:15:14:9e:9d:25:7e:0f:c1:af: 80:ed:0b:28:45:04:f4:c0:eb:0c:ff:fd:b0:a3:8d:fb:31:9e: d3:b6:09:ce:66:d2:6e:75:ee:80:cb:9f:9b:0b:cd:c2:1c:f3: 5c:e1:49:fe:3c:4f:e2:48:1e:bd:92:fc:a4:a7:f0:81:2a:1f: 3b:9b:0b:8a:7b:87:68:08:41:74:64:03:e2:bf:44:53:7c:bb: 06:2e:51:87:de:20:ac:85:9e:b5:4d:b1:d8:0b:80:59:34:27: a5:05:b2:e0:95:c1:af:43:95:44:3c:8e:cf:20:11:d2:23:9b: 5d:12:6c:72:c8:c2:b7:c5:9a:dc:be:b8:df:27:b1:c6:5b:8d: d5:2f:ea:b1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE59KAR1OxEQRIWwzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxMzIwNDUxMVoXDTI4MTAxNTIwNDUxMVowLzEtMCsGA1UEAxMk ZDE2MTE0ZDAtOWFlZC00MmEyLTk1NmQtNDQxYzA2YTgyZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprRNXNHdUZqjL6IpHxaMk1MXceRxZ3qPm/9I Agdrj6jWt/SOd1e6SqXU3mhgW3VpbTDazzYf4yeE/z5rAW50Qys13S2O2w35mcch ckh3EskN7qnPhcrcPlTX8f3YoQZmntZPc+Q1hopjW7L2ny0stoNyJKRGB+++SlMI dHI9aqAlg3nR+d3foI31U6Wd6SiH7nt1cDDnDtZbcjJhrnxKeYiG0Okar+laE6oq toqnBmEIibGDbBx+8kFIuncEmnKPhGd84AiqWprUCFL6uiNEK+4cz5ZtQ9zcqxuv wf2uiJr9gceW0uhwqZCplChdzWHczg4sQDafFahF/f6fJMQpVwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMexJ37wWiuPS1en8tMQo9RnwzmKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MTYxMTRkMC05YWVkLTQyYTItOTU2ZC00NDFjMDZhODJlMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QxNjExNGQwLTlhZWQtNDJhMi05 NTZkLTQ0MWMwNmE4MmUzNy9kMTYxMTRkMC05YWVkLTQyYTItOTU2ZC00NDFjMDZh ODJlMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo9fAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALrJ7y45Bma1LnTPj6dQF 0ur+C93ARUBPRmpeEgmMklcIMSaDYYi7OjRVGP+f8j9GNzqQNfnpcrD7BX43CsAi 1N4I4rTyLb5gb03CB3fKuZneIZDbVujFPE0bS6SGqymGOXZABOiDD7HBcHjjUdyA 3x6sstGHFRSenSV+D8GvgO0LKEUE9MDrDP/9sKON+zGe07YJzmbSbnXugMufmwvN whzzXOFJ/jxP4kgevZL8pKfwgSofO5sLinuHaAhBdGQD4r9EU3y7Bi5Rh94grIWe tU2x2AuAWTQnpQWy4JXBr0OVRDyOzyAR0iObXRJscsjCt8Wa3L643yexxluN1S/q sQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:08:52 2026 by rpki-client