$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer File: ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer (raw, json) Hash identifier: ODh5sgKDx+K1w3M44k5fPp5iczKqOXZiM6EmnjCDTXQ= Subject key identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E78F7FE2273549A856A9A0880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jul 2026 08:45:11 +0000 Certificate not after: Sat 14 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 173.0.4.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:f7:fe:22:73:54:9a:85:6a:9a:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 12 08:45:11 2026 GMT Not After : Oct 14 08:45:11 2028 GMT Subject: CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:36:da:f6:74:f1:d0:7b:bd:d7:dc:86:22:82: 6b:2d:01:0c:43:c0:67:36:d4:43:5e:af:a5:ea:92: c4:d8:12:4a:58:4c:7c:61:69:f6:c6:97:a7:d9:f4: 4f:b8:8e:c6:9b:dd:93:28:83:cc:6d:69:69:91:2f: e1:28:61:b3:7f:12:f8:f3:f5:5b:6f:8d:7c:94:80: ab:be:7f:f0:7e:58:a0:76:3e:e0:75:ad:18:fa:2c: 56:a8:5e:68:ab:19:d3:60:07:b7:a9:40:8e:da:2c: b5:a8:1a:da:3e:6e:6d:a4:0a:48:f3:d2:2f:e1:76: 36:86:1d:93:06:93:53:3a:ba:02:60:99:75:6b:45: 6c:34:7a:52:01:f7:bd:98:03:7f:fa:dd:9b:eb:64: 2a:84:2b:2d:df:aa:54:78:64:1e:35:69:55:3b:78: 4f:92:cb:2e:52:ca:9e:47:65:bc:7f:74:1c:86:a3: c6:81:fe:85:d9:11:3e:64:10:25:f5:35:67:56:c4: 2e:14:bf:1d:54:18:78:34:fa:e8:1c:a3:84:8d:4d: 63:5f:69:46:b4:34:c1:80:16:c7:a6:5d:2c:e5:36: 59:1e:49:d1:c1:f9:04:19:33:fe:ae:30:24:e1:14: be:8c:07:a6:2e:9d:92:a7:3f:6d:f6:0a:ea:36:5f: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:15:02:e2:6a:72:44:bd:4f:99:8d:a7:0e:a9:13:b0:a0:a5: f3:4f:58:57:26:5e:c8:30:99:60:1f:57:31:a8:63:e9:3a:8d: f4:fc:0c:d4:a4:10:f4:89:b6:e2:1b:01:dd:99:d0:69:7b:3c: c9:d7:96:c1:09:3f:b1:77:bf:dd:17:c0:e2:7f:31:9b:50:35: 78:72:cb:05:a6:0e:cc:ae:d1:fc:85:5c:bc:ce:69:06:1a:2e: 89:eb:c9:1a:5f:76:5d:6a:99:e6:a5:f9:b8:32:00:15:51:2a: 8b:35:de:93:ae:39:16:5e:a4:f6:c7:8b:12:8d:4f:06:c9:c2: 3b:33:1b:ce:c5:a1:75:7c:33:40:c6:57:4f:4f:24:f6:c3:cf: a9:a3:e9:d1:aa:65:c0:85:57:e1:cb:ef:7f:79:af:aa:e9:7d: 80:e1:78:dc:38:f5:9b:c9:e1:83:66:39:e5:af:4b:51:b6:bb: 21:3e:57:34:40:1f:da:dc:23:6d:1e:32:09:f2:f0:48:ae:72: 39:2f:91:31:3d:20:96:31:81:83:b2:86:c6:40:ba:d8:8b:28: 7a:f8:a5:54:80:2e:0c:c3:96:76:7f:e9:86:76:a2:34:41:c9: dd:c0:b3:d0:95:b5:c8:17:de:34:43:98:26:25:c3:f9:81:7d: c8:c6:40:07 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE549/4ic1SahWqaCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcxMjA4NDUxMVoXDTI4MTAxNDA4NDUxMVowLzEtMCsGA1UEAxMk ZGRiYjlhY2EtYmQ1Ny00ZjQyLWIwNTMtYTkwYWM2MjgyN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjba9nTx0Hu919yGIoJrLQEMQ8BnNtRDXq+l 6pLE2BJKWEx8YWn2xpen2fRPuI7Gm92TKIPMbWlpkS/hKGGzfxL48/Vbb418lICr vn/wfligdj7gda0Y+ixWqF5oqxnTYAe3qUCO2iy1qBraPm5tpApI89Iv4XY2hh2T BpNTOroCYJl1a0VsNHpSAfe9mAN/+t2b62QqhCst36pUeGQeNWlVO3hPkssuUsqe R2W8f3QchqPGgf6F2RE+ZBAl9TVnVsQuFL8dVBh4NProHKOEjU1jX2lGtDTBgBbH pl0s5TZZHknRwfkEGTP+rjAk4RS+jAemLp2Spz9t9grqNl/zaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCKFqupzq9w6bhho6IRtAwfO4FdjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k ZGJiOWFjYS1iZDU3LTRmNDItYjA1My1hOTBhYzYyODI3ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RkYmI5YWNhLWJkNTctNGY0Mi1i MDUzLWE5MGFjNjI4MjdmYi9kZGJiOWFjYS1iZDU3LTRmNDItYjA1My1hOTBhYzYy ODI3ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKtAAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZhUC4mpyRL1PmY2nDqkT sKCl809YVyZeyDCZYB9XMahj6TqN9PwM1KQQ9Im24hsB3ZnQaXs8ydeWwQk/sXe/ 3RfA4n8xm1A1eHLLBaYOzK7R/IVcvM5pBhouievJGl92XWqZ5qX5uDIAFVEqizXe k645Fl6k9seLEo1PBsnCOzMbzsWhdXwzQMZXT08k9sPPqaPp0aplwIVX4cvvf3mv qul9gOF43Dj1m8nhg2Y55a9LUba7IT5XNEAf2twjbR4yCfLwSK5yOS+RMT0gljGB g7KGxkC62IsoevilVIAuDMOWdn/phnaiNEHJ3cCz0JW1yBfeNEOYJiXD+YF9yMZA Bw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:25:25 2026 by rpki-client