$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer File: 960156d9-d41c-43da-b054-170189dcb5bc.cer (raw, json) Hash identifier: GQlxNFAK3NcCjjl9WnO4eQJZ8dSl2UH3bjOVxAFoU4Q= Subject key identifier: F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E6C67E9E6FC827324CF8C7B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 20:45:11 +0000 Certificate not after: Mon 09 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 129.110.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:67:e9:e6:fc:82:73:24:cf:8c:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 7 20:45:11 2026 GMT Not After : Oct 9 20:45:11 2028 GMT Subject: CN=960156d9-d41c-43da-b054-170189dcb5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:cf:37:97:b8:51:b1:e2:11:97:01:b2:86: fd:98:fb:48:61:86:d8:95:8e:12:2e:b2:05:db:a5: 3e:3c:51:bc:86:51:1f:b3:19:26:57:e3:50:1a:28: 0a:71:6b:60:15:df:95:de:d0:8b:9d:b8:a9:f2:bd: eb:f8:55:20:ca:82:7f:bf:ba:49:e1:a4:f0:22:10: d2:36:a6:24:72:f1:4a:c3:eb:b8:56:29:b3:04:61: cd:e5:8c:6a:c5:10:f6:c2:c5:97:5b:a5:70:1e:08: b2:97:84:bd:65:cb:6c:85:d6:81:8f:3d:6a:9e:81: 38:af:3e:34:96:87:51:a0:45:6f:d0:5e:e9:1d:34: 28:c9:72:d6:6c:72:44:1d:9e:88:16:be:cc:d2:c7: 33:30:a1:7a:6d:4d:10:58:a6:55:52:1b:da:ed:3e: d5:bc:dd:d9:76:a4:54:14:b5:fa:e8:48:5d:d4:88: 4d:e3:f4:f0:f5:a9:76:53:ab:a1:4d:26:98:71:04: 5a:c9:8e:71:3f:da:e3:fc:43:e8:10:ab:ab:07:83: a3:e4:7d:30:0e:ae:96:6b:23:20:0f:09:3c:ca:92: 8a:9b:02:a8:50:b6:95:5f:71:3e:4c:41:66:ae:0a: de:92:c7:8e:24:72:38:ee:90:15:d4:0a:bb:3a:93: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 129.110.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c7:12:fd:2f:48:51:a0:00:bc:d1:f2:a7:ee:70:69:47:1c: e8:f7:4c:7a:81:4a:23:68:47:8d:d8:96:04:b3:0a:6f:38:30: 40:7c:53:55:85:2b:e6:23:27:17:84:9d:82:62:33:ee:fa:b8: 17:91:83:ad:0c:08:55:d3:f9:8b:2a:05:66:a9:10:48:08:21: 36:d2:e1:33:5a:69:4e:76:eb:59:fb:f9:39:d9:54:da:7a:7c: d8:2f:35:86:4e:ae:76:27:13:ea:b2:da:19:1d:ee:a8:88:bb: 3d:20:ca:37:ce:e3:42:65:de:af:a8:b5:70:05:f4:c3:b7:9b: a0:40:50:78:1d:7f:f5:f9:ca:66:5c:fd:3c:82:15:77:14:d7: 0a:36:18:12:29:57:87:ef:3a:be:d5:2a:e8:a2:cb:f2:c8:3c: b5:7b:63:8a:f5:59:80:d3:de:8d:ec:bc:af:16:1c:ce:53:c1: f3:cf:5b:d7:16:fe:21:57:75:a7:a4:4d:c9:5b:71:a1:02:91: 6b:68:b8:04:16:bd:29:47:d4:48:80:16:6f:42:e8:b2:39:a9: c1:49:3c:1e:f9:9a:07:55:fc:02:6b:a0:d7:ce:cc:a4:7f:a8: 5f:8c:38:a8:ac:3e:c5:4a:59:3c:2c:fb:2e:87:b6:ab:7c:d2: 42:48:ea:37 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE5sZ+nm/IJzJM+Me4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwNzIwNDUxMVoXDTI4MTAwOTIwNDUxMVowLzEtMCsGA1UEAxMk OTYwMTU2ZDktZDQxYy00M2RhLWIwNTQtMTcwMTg5ZGNiNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkTPN5e4UbHiEZcBsob9mPtIYYbYlY4SLrIF 26U+PFG8hlEfsxkmV+NQGigKcWtgFd+V3tCLnbip8r3r+FUgyoJ/v7pJ4aTwIhDS NqYkcvFKw+u4VimzBGHN5YxqxRD2wsWXW6VwHgiyl4S9ZctshdaBjz1qnoE4rz40 lodRoEVv0F7pHTQoyXLWbHJEHZ6IFr7M0sczMKF6bU0QWKZVUhva7T7VvN3ZdqRU FLX66Ehd1IhN4/Tw9al2U6uhTSaYcQRayY5xP9rj/EPoEKurB4Oj5H0wDq6WayMg Dwk8ypKKmwKoULaVX3E+TEFmrgrekseOJHI47pAV1Aq7OpPPdwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFPlaTCOhbh6KAz4NEuNZfNhXhs7eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 NjAxNTZkOS1kNDFjLTQzZGEtYjA1NC0xNzAxODlkY2I1YmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzk2MDE1NmQ5LWQ0MWMtNDNkYS1i MDU0LTE3MDE4OWRjYjViYy85NjAxNTZkOS1kNDFjLTQzZGEtYjA1NC0xNzAxODlk Y2I1YmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCBbjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3xxL9L0hRoAC80fKn7nBp Rxzo90x6gUojaEeN2JYEswpvODBAfFNVhSvmIycXhJ2CYjPu+rgXkYOtDAhV0/mL KgVmqRBICCE20uEzWmlOdutZ+/k52VTaenzYLzWGTq52JxPqstoZHe6oiLs9IMo3 zuNCZd6vqLVwBfTDt5ugQFB4HX/1+cpmXP08ghV3FNcKNhgSKVeH7zq+1Sroosvy yDy1e2OK9VmA096N7LyvFhzOU8Hzz1vXFv4hV3WnpE3JW3GhApFraLgEFr0pR9RI gBZvQuiyOanBSTwe+ZoHVfwCa6DXzsykf6hfjDiorD7FSlk8LPsuh7arfNJCSOo3 -----END CERTIFICATE-----Generated at Fri Jul 24 03:15:06 2026 by rpki-client