$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer File: 44c9f20f-94d3-45ab-b941-cca94fba4981.cer (raw, json) Hash identifier: 5/d2j6zIXIOedMcLIEdC+QWlVXKGa35StKkOoXyX2+w= Subject key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E6B0290B1C77A1D1267BBB600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 08:45:10 +0000 Certificate not after: Mon 09 Oct 2028 08:45:10 +0000 Subordinate resources: IP: 170.194.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:02:90:b1:c7:7a:1d:12:67:bb:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 7 08:45:10 2026 GMT Not After : Oct 9 08:45:10 2028 GMT Subject: CN=44c9f20f-94d3-45ab-b941-cca94fba4981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:6b:2b:73:bf:48:a0:19:1a:70:84:4c:f9: d7:42:48:88:33:de:21:b8:3b:6e:0f:32:60:ff:b8: d3:0a:08:a0:29:09:bf:c1:93:49:18:c3:82:55:5c: de:1d:72:d7:d9:32:fc:79:46:9d:67:92:0b:57:8b: b4:8c:f9:b3:ba:f3:d6:22:e4:88:df:0f:5c:45:a9: 6d:8a:b5:f3:b1:3e:51:2b:af:5e:db:62:e0:d9:b1: 0f:58:2b:a5:ad:b7:01:e3:21:ff:a4:71:84:b1:e1: c7:52:57:f1:ae:4f:21:e2:10:e2:17:4a:ed:72:98: 6f:2d:0d:36:47:6a:89:a0:51:cd:d0:0e:0a:d3:33: 56:a5:14:30:f5:d2:b5:f2:de:18:f1:40:57:f9:d4: 93:52:de:81:a0:60:11:a0:3d:ef:c6:58:de:84:c2: 2f:71:81:da:df:6c:9b:64:ea:ca:17:80:2b:2d:8a: 5c:4e:14:bf:f7:9d:80:ac:d4:b2:41:61:7d:fe:9c: 95:e3:ea:8b:81:0a:b7:89:f8:69:6b:32:ce:80:9a: 5e:6d:a3:fe:1b:63:f7:4b:e6:3b:87:6a:f1:38:aa: f8:b1:16:be:44:84:82:3d:93:8a:35:b9:18:10:86: e8:5a:b8:14:aa:18:f2:4c:72:94:2b:e1:0e:54:c1: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 170.194.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ea:7b:1b:0d:35:b1:8c:bc:79:08:37:44:98:43:e4:0d:1b: 99:b6:53:b1:d6:fd:ec:ec:2d:29:6e:aa:c4:d9:09:ca:30:40: f2:30:6e:6b:0d:5d:fc:01:41:61:ea:be:d7:1b:11:aa:8c:5b: 81:6f:29:ea:71:3a:77:5e:ce:74:ee:7f:9d:f1:16:be:63:b7: c4:fc:24:90:e9:c0:b7:77:41:12:58:da:6a:f7:61:a9:23:2e: 76:89:08:91:27:23:d9:72:ac:7e:1d:ea:e0:26:8c:7d:55:49: 0c:a4:ec:c9:c1:95:38:a9:9a:cd:b5:63:51:dc:37:38:17:48: 42:e8:7e:3e:c9:df:2a:5c:e6:38:5b:65:b4:04:02:fe:55:8e: 9a:12:65:05:e4:6e:36:29:04:2f:4a:d8:ac:62:a7:87:dd:c9: a3:5a:24:6d:84:3c:89:61:bb:78:8b:32:f5:ca:91:75:47:4f: 20:48:38:46:72:75:e6:69:b1:e2:6b:e5:d0:a2:ff:89:cf:4b: 88:8b:26:12:d1:9d:3f:4d:f0:29:ef:37:5f:7c:79:43:cd:f1: 6f:88:bd:22:bd:b4:cd:c1:ab:41:53:3e:24:3d:c2:0b:12:e4: fb:97:f4:7a:13:77:02:93:cf:5e:e8:bc:01:73:11:b3:4f:01: 7e:e7:ff:e1 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE5rApCxx3odEme7tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwNzA4NDUxMFoXDTI4MTAwOTA4NDUxMFowLzEtMCsGA1UEAxMk NDRjOWYyMGYtOTRkMy00NWFiLWI5NDEtY2NhOTRmYmE0OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpFrK3O/SKAZGnCETPnXQkiIM94huDtuDzJg /7jTCgigKQm/wZNJGMOCVVzeHXLX2TL8eUadZ5ILV4u0jPmzuvPWIuSI3w9cRalt irXzsT5RK69e22Lg2bEPWCulrbcB4yH/pHGEseHHUlfxrk8h4hDiF0rtcphvLQ02 R2qJoFHN0A4K0zNWpRQw9dK18t4Y8UBX+dSTUt6BoGARoD3vxljehMIvcYHa32yb ZOrKF4ArLYpcThS/952ArNSyQWF9/pyV4+qLgQq3ifhpazLOgJpebaP+G2P3S+Y7 h2rxOKr4sRa+RISCPZOKNbkYEIboWrgUqhjyTHKUK+EOVMHCKwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFAP29hxCTMdSjd0FAn299Nj9B6OHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 NGM5ZjIwZi05NGQzLTQ1YWItYjk0MS1jY2E5NGZiYTQ5ODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ0YzlmMjBmLTk0ZDMtNDVhYi1i OTQxLWNjYTk0ZmJhNDk4MS80NGM5ZjIwZi05NGQzLTQ1YWItYjk0MS1jY2E5NGZi YTQ5ODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqwjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBT6nsbDTWxjLx5CDdEmEPk DRuZtlOx1v3s7C0pbqrE2QnKMEDyMG5rDV38AUFh6r7XGxGqjFuBbynqcTp3Xs50 7n+d8Ra+Y7fE/CSQ6cC3d0ESWNpq92GpIy52iQiRJyPZcqx+HergJox9VUkMpOzJ wZU4qZrNtWNR3Dc4F0hC6H4+yd8qXOY4W2W0BAL+VY6aEmUF5G42KQQvStisYqeH 3cmjWiRthDyJYbt4izL1ypF1R08gSDhGcnXmabHia+XQov+Jz0uIiyYS0Z0/TfAp 7zdffHlDzfFviL0ivbTNwatBUz4kPcILEuT7l/R6E3cCk89e6LwBcxGzTwF+5//h -----END CERTIFICATE-----Generated at Thu Jul 23 20:21:52 2026 by rpki-client