$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer File: 0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer (raw, json) Hash identifier: otgSeRBP7ndYDdktB4NmJHxKwz04WqOuChf8J5y/Hmk= Subject key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E7D280484F4F7806075ACBF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jul 2026 20:45:11 +0000 Certificate not after: Sun 15 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 204.235.48.0 -- 204.235.59.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7d:28:04:84:f4:f7:80:60:75:ac:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 13 20:45:11 2026 GMT Not After : Oct 15 20:45:11 2028 GMT Subject: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:e2:5d:48:fa:78:ee:83:4a:55:c9:5a:02: 29:14:41:0d:f2:06:e5:3c:15:d6:e2:b2:0e:ce:8b: ae:47:96:d2:95:c0:d4:7a:49:76:fb:5a:fe:de:ac: 75:5f:75:77:79:c5:de:cb:b0:51:40:fa:c0:ce:49: 64:f1:6e:17:fe:0b:91:46:7d:e6:3f:f8:ad:6c:2a: 77:7c:4b:05:47:4a:53:04:d6:02:e4:db:fb:a5:d8: 33:2c:83:f7:bc:75:3a:79:8b:f5:f0:dc:92:d9:62: 69:6c:cd:61:a2:50:25:11:26:84:4b:0e:b2:bc:60: 93:cc:c5:a1:b3:8d:14:65:71:7d:0e:c8:55:08:3a: aa:2b:48:4a:0b:c2:94:83:8a:fe:44:90:8d:34:ac: d7:9c:4b:7a:b8:77:da:dd:04:bc:bb:c1:ff:bb:90: 2c:70:a8:58:02:e5:b8:2a:d5:98:0a:81:e0:b6:30: 6c:66:1c:42:03:57:7b:26:fd:f7:28:ab:e1:7e:6e: 4f:ef:51:e8:be:96:75:5f:27:5e:73:4c:17:ab:9b: b2:92:d2:62:97:3e:f4:bc:b3:a8:c0:29:07:c8:e3: 90:55:f0:2f:ed:a3:5a:63:58:c1:5c:77:37:ab:26: ae:a2:0e:ba:ed:53:d2:57:13:09:50:9b:62:8d:b1: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.235.48.0-204.235.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3b:a4:22:60:f5:2a:b5:1c:62:d8:7b:54:d0:ce:5d:3f:0b: 90:20:24:48:55:e4:73:42:0a:bf:f0:c9:bc:de:83:b4:73:9d: 74:b1:86:63:bd:a0:29:13:78:23:ef:38:9e:55:c5:05:4f:d1: 7b:fb:e7:48:d9:52:3f:d5:56:6f:1d:08:2a:42:25:4a:6f:e8: b7:f9:41:47:33:12:84:07:27:81:eb:23:75:26:f5:94:7f:25: cd:6a:89:3a:d9:38:ea:ee:68:48:78:37:b8:15:e7:af:6d:f1: fc:46:5d:f6:0f:47:d0:a4:dc:00:92:05:b4:37:4f:05:56:3e: 12:e3:dc:4e:aa:42:c9:3e:6b:99:fd:9b:c3:e4:29:97:a2:07: e6:ab:2b:59:b7:17:95:9f:98:d1:28:0a:8f:93:7d:ad:22:c9: 89:8e:20:0c:5d:77:11:72:2e:04:56:8a:fa:2d:bf:4e:3e:e6: e3:72:27:c3:c9:02:74:b3:fd:91:88:3a:67:08:a3:3c:f8:25: 63:fc:06:9e:42:3b:6d:78:06:e1:80:21:4a:38:55:96:f9:a8: 65:37:ca:96:97:11:cb:7e:4d:48:a7:2e:61:41:94:c7:2a:b3: 08:d7:0e:bf:50:11:39:34:e7:ae:6b:58:9e:01:7b:ee:c5:82: 4f:38:a3:0e -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE59KASE9PeAYHWsvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxMzIwNDUxMVoXDTI4MTAxNTIwNDUxMVowLzEtMCsGA1UEAxMk MGZiNDhjZTUtMjFhMy00YjYwLTliY2YtZjFlMGQ2YTQwMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBHiXUj6eO6DSlXJWgIpFEEN8gblPBXW4rIO zouuR5bSlcDUekl2+1r+3qx1X3V3ecXey7BRQPrAzklk8W4X/guRRn3mP/itbCp3 fEsFR0pTBNYC5Nv7pdgzLIP3vHU6eYv18NyS2WJpbM1holAlESaESw6yvGCTzMWh s40UZXF9DshVCDqqK0hKC8KUg4r+RJCNNKzXnEt6uHfa3QS8u8H/u5AscKhYAuW4 KtWYCoHgtjBsZhxCA1d7Jv33KKvhfm5P71HovpZ1Xydec0wXq5uyktJilz70vLOo wCkHyOOQVfAv7aNaY1jBXHc3qyauog667VPSVxMJUJtijbGxrQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFEnkXCf1egpf3Mia3+cmv6JbBQ3lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w ZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZhNDAzMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzBmYjQ4Y2U1LTIxYTMtNGI2MC05 YmNmLWYxZTBkNmE0MDMxNy8wZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZh NDAzMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBMzrMAMEAszrODBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDO6QiYPUq tRxi2HtU0M5dPwuQICRIVeRzQgq/8Mm83oO0c510sYZjvaApE3gj7zieVcUFT9F7 ++dI2VI/1VZvHQgqQiVKb+i3+UFHMxKEByeB6yN1JvWUfyXNaok62Tjq7mhIeDe4 FeevbfH8Rl32D0fQpNwAkgW0N08FVj4S49xOqkLJPmuZ/ZvD5CmXogfmqytZtxeV n5jRKAqPk32tIsmJjiAMXXcRci4EVor6Lb9OPubjcifDyQJ0s/2RiDpnCKM8+CVj /AaeQjtteAbhgCFKOFWW+ahlN8qWlxHLfk1Ipy5hQZTHKrMI1w6/UBE5NOeua1ie AXvuxYJPOKMO -----END CERTIFICATE-----Generated at Thu Jul 23 20:21:45 2026 by rpki-client