$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer File: f3280fa0-3649-4902-978e-e7711edc5a33.cer (raw, json) Hash identifier: S0gZEtc7D93v6TllyRMF3OANzwnSR8JaAt2WDFjKeCw= Subject key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E89B818F020F7A4D756DB6800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Jul 2026 08:45:11 +0000 Certificate not after: Fri 20 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 141.195.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:b8:18:f0:20:f7:a4:d7:56:db:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 18 08:45:11 2026 GMT Not After : Oct 20 08:45:11 2028 GMT Subject: CN=f3280fa0-3649-4902-978e-e7711edc5a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:02:a9:d3:11:7a:a6:36:cb:5e:06:4e:03: e2:b1:18:a8:0f:70:06:6d:a5:de:f3:ae:f9:a3:55: af:98:60:66:1b:71:f3:6f:ce:89:d5:53:67:03:8c: ad:6c:57:b8:13:c1:72:0d:b1:da:c1:47:ad:c0:67: 64:1c:9c:5d:b7:f0:8d:37:8c:03:01:38:ed:e6:cd: e1:bd:2f:60:a4:42:c8:31:fd:d3:f6:a0:83:02:af: 19:f6:67:35:2b:e2:ef:07:11:54:d3:57:c9:f5:e8: 9d:54:ce:c5:e9:0d:53:3b:f7:15:fb:bc:84:8f:ab: 8a:30:56:7d:a0:f1:e9:ad:64:5b:c5:5b:06:b3:4f: f5:2f:92:9a:7e:95:5a:2a:4b:65:0d:83:1a:d3:6d: 0c:30:cf:1d:8d:d7:25:43:1d:d2:74:61:bb:4c:ef: bb:85:62:30:95:fc:90:1a:3f:58:25:f4:71:4f:6d: 02:70:44:b7:fa:75:21:cc:9a:8a:a5:0c:e2:b0:98: 96:de:23:c4:b2:4f:f0:5d:20:22:16:4e:4e:dd:bc: 1a:0a:b3:b5:37:31:d2:98:74:a1:bb:7a:52:b6:71: f2:16:9a:23:50:de:3b:02:8c:08:f6:1c:b0:b0:7b: cb:80:b4:12:35:7b:2c:24:91:fc:91:2c:89:f4:b1: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 141.195.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d3:0d:45:63:da:4c:89:7c:63:6f:1e:49:5d:49:e9:69:5c: 67:ab:a3:90:41:04:70:c8:e3:03:3a:34:62:6b:1a:27:c9:84: 94:b4:98:af:d3:56:a0:03:4c:a3:30:03:3e:61:5a:5f:c6:42: 7c:58:80:24:66:b5:c8:1f:3a:92:85:38:fc:40:bf:87:ef:03: 33:bf:cf:4a:b9:f4:a1:b3:fb:1c:69:74:f7:0f:59:b3:ad:1e: 5e:f4:06:03:4d:f5:00:ea:ae:09:0d:7d:12:84:5e:89:11:6f: 2e:31:dc:74:15:93:3d:38:ce:aa:bf:dd:cd:cd:18:72:9a:45: 95:88:a8:c9:2b:eb:d0:28:a1:e4:cc:38:f4:f3:32:da:06:73: 88:81:a8:81:99:cc:e6:c7:c8:37:6c:c5:7a:37:47:5a:a2:a8: 4d:38:41:eb:b2:77:c2:51:fc:72:78:6d:91:ec:56:15:ef:a6: f5:7a:81:af:c5:94:3e:0c:b4:6d:01:71:9c:d4:cb:0a:73:f9: 34:65:72:9b:4d:c6:77:97:5b:c8:b9:13:9c:49:e8:52:8a:0a: 5d:88:94:f6:99:8b:bf:3e:ff:ab:bc:89:70:4a:95:c1:50:35: 5a:f7:38:1f:5c:10:bf:b7:36:69:81:95:0f:35:19:18:0a:8f: da:6f:ac:fb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE6JuBjwIPek11bbaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxODA4NDUxMVoXDTI4MTAyMDA4NDUxMVowLzEtMCsGA1UEAxMk ZjMyODBmYTAtMzY0OS00OTAyLTk3OGUtZTc3MTFlZGM1YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZYCqdMReqY2y14GTgPisRioD3AGbaXe8675 o1WvmGBmG3Hzb86J1VNnA4ytbFe4E8FyDbHawUetwGdkHJxdt/CNN4wDATjt5s3h vS9gpELIMf3T9qCDAq8Z9mc1K+LvBxFU01fJ9eidVM7F6Q1TO/cV+7yEj6uKMFZ9 oPHprWRbxVsGs0/1L5KafpVaKktlDYMa020MMM8djdclQx3SdGG7TO+7hWIwlfyQ Gj9YJfRxT20CcES3+nUhzJqKpQzisJiW3iPEsk/wXSAiFk5O3bwaCrO1NzHSmHSh u3pStnHyFpojUN47AowI9hywsHvLgLQSNXssJJH8kSyJ9LEjOQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCqAWPrdj4I7cqoDCLELar1P0nMmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVkYzVhMzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YzMjgwZmEwLTM2NDktNDkwMi05 NzhlLWU3NzExZWRjNWEzMy9mMzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVk YzVhMzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKNw2QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALdMNRWPaTIl8Y28eSV1J 6WlcZ6ujkEEEcMjjAzo0YmsaJ8mElLSYr9NWoANMozADPmFaX8ZCfFiAJGa1yB86 koU4/EC/h+8DM7/PSrn0obP7HGl09w9Zs60eXvQGA031AOquCQ19EoReiRFvLjHc dBWTPTjOqr/dzc0YcppFlYioySvr0Cih5Mw49PMy2gZziIGogZnM5sfIN2zFejdH WqKoTThB67J3wlH8cnhtkexWFe+m9XqBr8WUPgy0bQFxnNTLCnP5NGVym03Gd5db yLkTnEnoUooKXYiU9pmLvz7/q7yJcEqVwVA1Wvc4H1wQv7c2aYGVDzUZGAqP2m+s +w== -----END CERTIFICATE-----Generated at Fri Jul 24 10:15:16 2026 by rpki-client