$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c275d19a-07e3-49c5-8623-164cdd5d57ab.cer File: c275d19a-07e3-49c5-8623-164cdd5d57ab.cer (raw, json) Hash identifier: 5a98g9pC4/gy4/w2XffHYBflbym/LKy+e2f6imHcmfU= Subject key identifier: A7:A3:54:42:21:7A:B1:AA:09:03:92:72:08:0F:DB:2A:12:4C:19:3C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E7F4E81C62EFC9093C6014080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c275d19a-07e3-49c5-8623-164cdd5d57ab/c275d19a-07e3-49c5-8623-164cdd5d57ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c275d19a-07e3-49c5-8623-164cdd5d57ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jul 2026 15:14:21 +0000 Certificate not after: Mon 16 Oct 2028 15:14:21 +0000 Subordinate resources: IP: 216.69.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:4e:81:c6:2e:fc:90:93:c6:01:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jul 14 15:14:21 2026 GMT Not After : Oct 16 15:14:21 2028 GMT Subject: CN=c275d19a-07e3-49c5-8623-164cdd5d57ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:bf:d2:9b:2e:79:44:5b:6b:62:10:eb:63: 22:7a:07:6c:87:19:8b:f7:87:7b:35:5c:f4:fe:95: 8b:b4:6a:3d:67:c8:6c:e6:7c:90:a3:0b:68:f5:2c: 43:81:25:3f:bf:64:d7:f2:18:bf:79:2e:83:47:b4: 3f:90:07:91:3e:09:01:dd:ad:98:2b:91:de:a9:5e: eb:53:b2:39:03:67:08:7f:28:69:22:03:b6:c1:70: 57:25:1c:ab:50:72:f9:d8:f0:86:5e:8f:ae:06:fe: 64:b6:df:3c:b6:2d:a9:f0:53:e6:27:dc:c6:f8:4d: 8c:78:ef:35:28:a0:60:07:51:0b:8f:9b:13:8a:84: 98:a7:96:ad:31:24:2e:12:1e:76:12:6f:dd:1e:db: ac:80:75:e7:34:96:59:0a:9c:a2:15:ca:28:9b:6a: ae:da:c2:4c:48:99:a1:77:0a:2f:70:d9:80:87:7d: 27:44:e7:fa:ed:b2:38:b2:fa:9d:88:ce:37:1a:8b: dd:c5:1b:16:b1:bc:b6:5d:4a:50:a6:37:ef:99:98: d1:4e:db:10:5d:2d:98:5b:10:6e:53:d6:00:f7:4f: d6:e3:f9:6a:79:61:3d:49:f1:6b:6f:8f:cf:c7:ba: 5d:0f:d2:50:ed:5a:6c:13:1b:d3:d8:01:e2:16:21: f7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:54:42:21:7A:B1:AA:09:03:92:72:08:0F:DB:2A:12:4C:19:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c275d19a-07e3-49c5-8623-164cdd5d57ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c275d19a-07e3-49c5-8623-164cdd5d57ab/c275d19a-07e3-49c5-8623-164cdd5d57ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 216.69.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2e:38:6b:81:33:4e:1c:a0:35:2a:71:f4:dc:86:0a:de:51: c9:9f:66:03:da:c0:eb:4a:0c:e5:11:f4:93:ec:72:76:5e:47: b9:c7:e3:70:0d:e9:2b:3d:e3:1a:38:04:59:79:dc:9a:3a:b6: 76:e1:b1:15:2a:cd:6b:94:a4:ed:47:d3:a0:1c:5d:03:16:22: 81:6b:f1:16:64:3a:17:6e:dc:fb:48:43:5c:d7:59:1a:b7:b9: 22:90:23:1a:13:aa:6d:ed:d3:b0:b2:01:57:76:0e:6b:51:26: b0:89:28:e4:05:b9:5a:b2:89:19:05:cd:0b:ff:27:1b:ea:39: 5f:d3:7b:d7:7c:d0:9e:9f:c7:bf:9a:43:c2:55:e8:43:94:6f: 24:ef:a1:25:93:e3:12:36:b9:63:15:f1:04:68:e4:3a:6b:b6: 6e:a3:d4:54:d8:c4:0d:8f:f8:20:4f:d4:b7:2f:58:5a:32:a1: c2:81:3a:2e:51:f9:89:ac:96:79:51:37:2a:b9:65:8c:50:b8: 86:ea:4e:ba:5d:04:fe:8a:52:c7:ce:e4:d9:6a:fc:0b:f8:13: d3:59:e3:85:65:54:b2:65:6e:ba:76:e9:8c:41:12:45:1f:dd: be:e2:c7:28:36:20:70:8a:5d:45:d6:fe:e0:d6:42:64:e6:36: 56:48:16:9c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5/ToHGLvyQk8YBQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDcxNDE1MTQyMVoXDTI4MTAxNjE1MTQyMVowLzEtMCsGA1UEAxMk YzI3NWQxOWEtMDdlMy00OWM1LTg2MjMtMTY0Y2RkNWQ1N2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoim/0psueURba2IQ62MiegdshxmL94d7NVz0 /pWLtGo9Z8hs5nyQowto9SxDgSU/v2TX8hi/eS6DR7Q/kAeRPgkB3a2YK5HeqV7r U7I5A2cIfyhpIgO2wXBXJRyrUHL52PCGXo+uBv5ktt88ti2p8FPmJ9zG+E2MeO81 KKBgB1ELj5sTioSYp5atMSQuEh52Em/dHtusgHXnNJZZCpyiFcoom2qu2sJMSJmh dwovcNmAh30nROf67bI4svqdiM43GovdxRsWsby2XUpQpjfvmZjRTtsQXS2YWxBu U9YA90/W4/lqeWE9SfFrb4/Px7pdD9JQ7VpsExvT2AHiFiH3tQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKejVEIherGqCQOScggP2yoSTBk8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j Mjc1ZDE5YS0wN2UzLTQ5YzUtODYyMy0xNjRjZGQ1ZDU3YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2MyNzVkMTlhLTA3ZTMtNDljNS04 NjIzLTE2NGNkZDVkNTdhYi9jMjc1ZDE5YS0wN2UzLTQ5YzUtODYyMy0xNjRjZGQ1 ZDU3YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATYRWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAS44a4EzThygNSpx9NyG Ct5RyZ9mA9rA60oM5RH0k+xydl5HucfjcA3pKz3jGjgEWXncmjq2duGxFSrNa5Sk 7UfToBxdAxYigWvxFmQ6F27c+0hDXNdZGre5IpAjGhOqbe3TsLIBV3YOa1EmsIko 5AW5WrKJGQXNC/8nG+o5X9N713zQnp/Hv5pDwlXoQ5RvJO+hJZPjEja5YxXxBGjk Omu2bqPUVNjEDY/4IE/Uty9YWjKhwoE6LlH5iayWeVE3KrlljFC4hupOul0E/opS x87k2Wr8C/gT01njhWVUsmVuunbpjEESRR/dvuLHKDYgcIpdRdb+4NZCZOY2VkgW nA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:08:39 2026 by rpki-client