$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer File: 307683f0-b7f5-4fe1-b163-a8a0ead77634.cer (raw, json) Hash identifier: 6aduTakeDOvQp3HIZLvEkcmPpf7b0vwUtbIlWnChYt0= Subject key identifier: 80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F5495CF9458AEEDE2DB46A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Sep 2026 00:45:12 +0000 Certificate not after: Mon 01 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 173.214.216.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:95:cf:94:58:ae:ed:e2:db:46:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 29 00:45:12 2026 GMT Not After : Jan 1 01:45:12 2029 GMT Subject: CN=307683f0-b7f5-4fe1-b163-a8a0ead77634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:24:4b:3d:d5:8f:23:66:31:04:c2:c5:b4: 3e:b1:24:1d:2b:18:de:b7:e9:bc:c8:f6:56:5f:f9: 9b:85:d0:aa:97:aa:be:3f:4d:b0:7a:97:70:45:ec: 5c:2f:00:ca:d9:7e:72:92:1a:e4:e5:b4:1e:a1:01: 53:e9:da:43:cb:1b:9e:70:1b:f7:87:dd:39:2d:6c: 81:a4:3f:c3:c9:b4:6a:4a:15:58:0a:7b:b2:27:ca: 6a:8d:4f:c4:a3:89:80:ae:c0:f3:e1:b4:0f:cf:d8: d6:eb:14:02:32:a6:22:24:e6:09:3a:99:24:73:26: f7:ad:a8:6b:17:4f:df:70:96:62:b6:11:8b:5a:33: b0:d2:f4:3a:cc:da:6f:ef:d2:a7:d2:ee:ec:01:7f: 6c:c9:05:82:d3:3b:e8:aa:35:9f:e5:4f:a5:f3:16: 10:44:63:70:83:1a:9c:2d:cd:64:6a:01:5e:a7:47: 2f:de:5a:af:58:a9:0f:b2:58:ae:e5:0a:b1:5c:9c: e4:77:20:ad:57:7e:90:e4:9e:f1:90:53:b1:c4:a7: 5d:73:fd:b0:60:78:0c:cb:88:f6:7f:2e:3d:0a:bc: 1e:93:11:0f:85:29:13:5b:e8:d1:b4:4a:dc:5e:65: df:db:a0:a1:93:84:c7:0e:6f:e3:e7:6c:2c:a8:7c: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.214.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a8:c3:27:9d:3c:41:54:9f:17:03:bd:38:17:21:dc:11:9f: ef:20:16:34:e1:80:b2:20:65:e9:84:14:84:ee:ab:c9:c1:34: de:52:0e:09:af:db:c7:4e:ee:dc:6f:91:62:3e:d3:c2:7b:e2: 1d:17:79:13:69:13:91:c4:4b:03:e5:0d:8c:15:98:bd:2c:dd: fa:4b:32:5b:fe:fc:bd:77:34:c1:58:93:7e:74:cb:cf:b7:51: 13:39:6a:61:01:4d:af:df:34:ff:2c:47:09:37:e8:08:28:58: f2:9a:aa:fd:a6:68:34:d3:d9:c5:29:15:83:31:db:c9:01:4c: 07:27:d0:e7:7a:1d:dd:f6:42:c5:38:3f:54:f5:75:c3:2a:57: a1:c9:2d:45:a4:90:d6:92:3c:b6:ac:cf:a9:01:21:e9:a3:37: 34:e8:d4:1f:9f:24:57:48:c4:b8:ce:43:2d:77:71:e6:f1:47: 8f:93:7c:20:d7:86:6d:20:87:f7:32:68:b8:49:33:a0:fd:d6: 5a:51:41:73:96:52:12:b2:f6:54:7e:8d:db:1f:19:12:49:a1: cb:85:19:4e:ce:52:20:26:b3:66:13:ab:e8:5a:fd:e5:c9:0c: 8e:93:0b:b1:ee:2f:18:95:6a:f4:7a:ff:3e:7b:ea:07:19:c5: 0d:09:54:c2 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9Ulc+UWK7t4ttGpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyOTAwNDUxMloXDTI5MDEwMTAxNDUxMlowLzEtMCsGA1UEAxMk MzA3NjgzZjAtYjdmNS00ZmUxLWIxNjMtYThhMGVhZDc3NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUgkSz3VjyNmMQTCxbQ+sSQdKxjet+m8yPZW X/mbhdCql6q+P02wepdwRexcLwDK2X5ykhrk5bQeoQFT6dpDyxuecBv3h905LWyB pD/DybRqShVYCnuyJ8pqjU/Eo4mArsDz4bQPz9jW6xQCMqYiJOYJOpkkcyb3rahr F0/fcJZithGLWjOw0vQ6zNpv79Kn0u7sAX9syQWC0zvoqjWf5U+l8xYQRGNwgxqc Lc1kagFep0cv3lqvWKkPsliu5QqxXJzkdyCtV36Q5J7xkFOxxKddc/2wYHgMy4j2 fy49CrwekxEPhSkTW+jRtErcXmXf26Chk4THDm/j52wsqHyS0QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFICdapbJ8K5eUGvauticIbgdgcv1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z MDc2ODNmMC1iN2Y1LTRmZTEtYjE2My1hOGEwZWFkNzc2MzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzMwNzY4M2YwLWI3ZjUtNGZlMS1i MTYzLWE4YTBlYWQ3NzYzNC8zMDc2ODNmMC1iN2Y1LTRmZTEtYjE2My1hOGEwZWFk Nzc2MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKt1tgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHqjDJ508QVSfFwO9OBch 3BGf7yAWNOGAsiBl6YQUhO6rycE03lIOCa/bx07u3G+RYj7TwnviHRd5E2kTkcRL A+UNjBWYvSzd+ksyW/78vXc0wViTfnTLz7dREzlqYQFNr980/yxHCTfoCChY8pqq /aZoNNPZxSkVgzHbyQFMByfQ53od3fZCxTg/VPV1wypXocktRaSQ1pI8tqzPqQEh 6aM3NOjUH58kV0jEuM5DLXdx5vFHj5N8INeGbSCH9zJouEkzoP3WWlFBc5ZSErL2 VH6N2x8ZEkmhy4UZTs5SICazZhOr6Fr95ckMjpMLse4vGJVq9Hr/PnvqBxnFDQlU wg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:40:45 2026 by rpki-client