$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.cer File: be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.cer (raw, json) Hash identifier: 0H1kQf1lk6T4QFGq+QePU2IV19KYKFWDcOorRH2yEjY= Subject key identifier: CA:7E:20:30:C2:33:74:06:1A:99:76:50:EC:22:FC:E1:1A:39:61:C9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E6F329AC8EF23B8C453F12E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 20:45:12 +0000 Certificate not after: Tue 10 Oct 2028 20:45:12 +0000 Subordinate resources: IP: 205.236.174.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:32:9a:c8:ef:23:b8:c4:53:f1:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 8 20:45:12 2026 GMT Not After : Oct 10 20:45:12 2028 GMT Subject: CN=be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:b1:e7:03:0a:17:b3:da:38:a4:e0:8a:c7: b4:78:5a:63:58:73:2a:0f:c6:7f:7f:3a:f7:85:a1: cd:9c:c2:67:d3:00:c4:61:9a:b1:00:84:87:23:e3: a9:26:cf:7d:39:8d:75:5b:ca:34:8c:02:7e:af:8f: c4:c8:a0:4c:d0:5b:75:79:69:10:58:7a:f4:e4:ec: 76:6a:84:50:30:55:2b:1f:e8:9e:a8:0a:09:c7:a8: 32:b9:4a:08:10:10:d4:7d:d0:71:0f:a5:e8:b4:db: 39:e4:a8:46:9b:27:b5:0e:db:fd:22:a0:1a:90:61: 20:71:e2:3b:7a:2f:ee:df:6a:7a:bc:50:59:03:dd: 68:29:ba:dc:4d:6d:bb:bd:04:f1:56:7a:e3:04:d4: 71:10:d3:f3:0e:93:f0:40:e3:53:0a:03:39:55:4e: 62:03:8c:6d:23:c7:75:b4:65:8c:54:fd:86:57:21: 74:48:c6:39:39:91:27:20:aa:6f:6e:77:b1:91:d1: cf:3f:13:3f:12:56:d5:be:6a:56:30:63:4f:48:69: 1a:af:db:bf:80:e6:b4:14:1a:99:c9:81:b3:b5:67: 36:3f:95:5b:2f:0b:ca:dc:c5:b6:f7:b9:bb:9d:08: be:97:fc:93:59:ce:9c:95:ee:99:4f:e9:1b:81:d8: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:20:30:C2:33:74:06:1A:99:76:50:EC:22:FC:E1:1A:39:61:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 205.236.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:85:2c:e3:9e:59:58:55:9e:22:ed:15:c5:57:33:13:31:6c: 19:64:35:06:4a:4f:34:57:e3:c8:9d:69:81:37:d2:27:9d:49: 13:7d:90:a1:73:5b:6d:9a:98:c0:d6:04:aa:1b:7b:68:37:b8: 93:95:6e:c7:ef:f7:c7:3a:a3:df:ff:a0:c7:0e:8d:e3:88:2f: 2e:ae:f3:f1:70:db:f9:a0:bb:b0:79:c7:64:8e:7d:e9:e7:8d: d9:0d:c4:7e:95:dd:07:c7:3f:d3:9f:9f:b6:6d:da:94:55:8b: 16:8a:a7:a7:d0:d3:eb:67:b7:8a:9d:a7:f6:65:31:99:5b:d7: 5c:4e:67:6a:3b:56:08:00:f5:be:fb:f9:cd:14:9f:ed:70:16: 4f:84:25:28:e6:52:ef:d4:5c:65:52:e7:22:07:f9:10:75:df: 5b:a1:d2:9e:4e:68:55:eb:c6:c5:fe:d3:5e:01:d3:ad:d8:d7: ad:1e:71:0e:7c:d5:5b:93:00:4a:e8:81:f3:e4:ac:20:0b:ff: f3:f6:11:c8:88:64:e8:52:85:d8:08:6a:48:0a:83:ed:b8:3f: cc:00:2f:d1:bb:d0:40:d7:e2:df:ae:23:95:1b:4c:82:a3:98: 06:d0:c6:e3:fd:10:23:bd:ac:2b:6e:4b:4b:36:ba:f4:56:4b: b9:26:66:9a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5vMprI7yO4xFPxLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcwODIwNDUxMloXDTI4MTAxMDIwNDUxMlowLzEtMCsGA1UEAxMk YmU1ZjI0MGYtZTlmNy00M2FiLWI1ZGYtNWFiN2ZlOGQ0N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWOx5wMKF7PaOKTgise0eFpjWHMqD8Z/fzr3 haHNnMJn0wDEYZqxAISHI+OpJs99OY11W8o0jAJ+r4/EyKBM0Ft1eWkQWHr05Ox2 aoRQMFUrH+ieqAoJx6gyuUoIEBDUfdBxD6XotNs55KhGmye1Dtv9IqAakGEgceI7 ei/u32p6vFBZA91oKbrcTW27vQTxVnrjBNRxENPzDpPwQONTCgM5VU5iA4xtI8d1 tGWMVP2GVyF0SMY5OZEnIKpvbnexkdHPPxM/ElbVvmpWMGNPSGkar9u/gOa0FBqZ yYGztWc2P5VbLwvK3MW297m7nQi+l/yTWc6cle6ZT+kbgdhTewIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMp+IDDCM3QGGpl2UOwi/OEaOWHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i ZTVmMjQwZi1lOWY3LTQzYWItYjVkZi01YWI3ZmU4ZDQ3YWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JlNWYyNDBmLWU5ZjctNDNhYi1i NWRmLTVhYjdmZThkNDdhZC9iZTVmMjQwZi1lOWY3LTQzYWItYjVkZi01YWI3ZmU4 ZDQ3YWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN7K4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUoUs455ZWFWeIu0VxVcz EzFsGWQ1BkpPNFfjyJ1pgTfSJ51JE32QoXNbbZqYwNYEqht7aDe4k5Vux+/3xzqj 3/+gxw6N44gvLq7z8XDb+aC7sHnHZI596eeN2Q3EfpXdB8c/05+ftm3alFWLFoqn p9DT62e3ip2n9mUxmVvXXE5najtWCAD1vvv5zRSf7XAWT4QlKOZS79RcZVLnIgf5 EHXfW6HSnk5oVevGxf7TXgHTrdjXrR5xDnzVW5MASuiB8+SsIAv/8/YRyIhk6FKF 2AhqSAqD7bg/zAAv0bvQQNfi364jlRtMgqOYBtDG4/0QI72sK25LSza69FZLuSZm mg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:14:16 2026 by rpki-client