$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/62d1417f-0c2c-4322-9afa-45bae56340b8.cer File: 62d1417f-0c2c-4322-9afa-45bae56340b8.cer (raw, json) Hash identifier: TgVpX5P3I2FAQXImE4Q4THSpOw209i0Kg34eDpVd8KA= Subject key identifier: 86:1D:74:8F:15:FA:B9:27:18:3B:53:E0:EE:AA:AC:71:A1:BF:9A:81 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584DF0A3A2EA97E1B75A573FE340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/62d1417f-0c2c-4322-9afa-45bae56340b8/62d1417f-0c2c-4322-9afa-45bae56340b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/62d1417f-0c2c-4322-9afa-45bae56340b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 May 2026 12:45:17 +0000 Certificate not after: Sat 26 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 204.19.241.0/24 IP: 2602:fbc5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:a3:a2:ea:97:e1:b7:5a:57:3f:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 24 12:45:17 2026 GMT Not After : Aug 26 12:45:17 2028 GMT Subject: CN=62d1417f-0c2c-4322-9afa-45bae56340b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:47:69:ed:e3:6b:7b:f5:a1:a2:e4:ae:04: 98:ee:45:47:9e:90:c0:cb:a1:6b:68:54:fc:66:92: 85:40:09:8e:44:51:25:03:37:7f:ad:a0:82:c0:68: 5d:a8:8f:16:16:26:5f:58:1f:43:44:d4:32:b3:5b: ee:b5:43:4a:51:52:2b:d2:12:f9:e5:e9:99:b2:7c: 7b:6d:3c:9f:dd:89:fe:ae:ec:57:88:19:94:26:35: 18:ce:cb:4e:a8:21:b0:c2:41:77:f5:82:7d:a6:9a: df:c3:93:43:76:b6:88:f6:b1:50:04:8c:38:63:b6: 2f:0c:03:7b:b8:9b:22:6d:e9:c5:82:6b:80:66:6d: 03:93:2b:db:fe:2c:00:f4:67:28:e9:aa:c8:b8:39: c8:03:24:4d:a1:9f:3a:61:f0:6e:9d:85:dc:f6:18: 01:b3:a4:a4:4b:7b:f6:9b:a6:3b:a6:9f:8f:88:c2: 29:9c:ca:99:a9:fe:8e:50:ca:ad:29:42:d5:03:6f: a0:2a:69:e3:6a:d4:f6:7d:89:d6:2d:0e:32:e9:36: 59:c9:df:ee:77:e8:ee:dd:e3:8d:15:39:b6:1d:b9: 39:a0:e5:5d:b6:60:69:29:b8:49:1b:0d:d0:70:54: 73:7d:f4:fc:13:a5:6e:a6:f6:8a:6c:88:6d:d8:30: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:74:8F:15:FA:B9:27:18:3B:53:E0:EE:AA:AC:71:A1:BF:9A:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/62d1417f-0c2c-4322-9afa-45bae56340b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/62d1417f-0c2c-4322-9afa-45bae56340b8/62d1417f-0c2c-4322-9afa-45bae56340b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 204.19.241.0/24 IPv6: 2602:fbc5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ea:27:e9:aa:4f:cf:b4:7c:4d:75:3e:45:f7:58:fc:d8:c1: be:c4:e0:e5:8b:dc:ad:bd:f2:20:5d:ab:a1:95:ae:ce:e1:4b: 2b:a9:e0:5c:cb:9a:68:8d:7c:a7:a7:48:19:b5:ae:99:c7:a8: 79:41:3c:fc:36:9e:5e:c5:b9:a3:06:47:ab:28:7a:5e:47:dc: 11:c2:4e:a3:b4:0b:9d:dc:9d:24:f3:65:28:06:63:9d:47:d5: df:0e:ca:30:b9:08:f9:1b:fd:71:b2:9e:95:0c:21:ca:f4:05: c1:cb:32:33:df:68:60:b4:17:5f:20:60:96:a7:a8:2d:90:7a: a8:be:00:40:9c:2d:1e:ce:d7:99:e8:04:9a:a9:5b:37:b5:77: d7:b9:54:e4:93:3b:5d:3d:ca:d5:94:7b:32:1f:bd:11:c6:20: 09:b5:2b:02:51:17:8d:a7:a3:a7:5e:0f:86:bf:e7:c0:c6:92: 4e:9f:83:87:05:06:ba:21:0e:2e:67:8f:5a:ad:5b:c2:8e:ae: f7:c1:0b:f2:f6:e8:49:11:74:43:87:e1:c7:8b:1b:ef:3d:04: 85:31:42:8b:2e:10:5b:05:d5:2a:82:c2:c5:de:01:1f:fb:06: 34:d6:c6:36:72:83:3a:18:90:fd:76:7f:73:37:26:20:5e:2a: df:49:56:f9 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3wo6Lql+G3Wlc/40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDUyNDEyNDUxN1oXDTI4MDgyNjEyNDUxN1owLzEtMCsGA1UEAxMk NjJkMTQxN2YtMGMyYy00MzIyLTlhZmEtNDViYWU1NjM0MGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL9Hae3ja3v1oaLkrgSY7kVHnpDAy6FraFT8 ZpKFQAmORFElAzd/raCCwGhdqI8WFiZfWB9DRNQys1vutUNKUVIr0hL55emZsnx7 bTyf3Yn+ruxXiBmUJjUYzstOqCGwwkF39YJ9pprfw5NDdraI9rFQBIw4Y7YvDAN7 uJsibenFgmuAZm0Dkyvb/iwA9Gco6arIuDnIAyRNoZ86YfBunYXc9hgBs6SkS3v2 m6Y7pp+PiMIpnMqZqf6OUMqtKULVA2+gKmnjatT2fYnWLQ4y6TZZyd/ud+ju3eON FTm2Hbk5oOVdtmBpKbhJGw3QcFRzffT8E6VupvaKbIht2DDFKQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFIYddI8V+rknGDtT4O6qrHGhv5qBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MmQxNDE3Zi0wYzJjLTQzMjItOWFmYS00NWJhZTU2MzQwYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYyZDE0MTdmLTBjMmMtNDMyMi05 YWZhLTQ1YmFlNTYzNDBiOC82MmQxNDE3Zi0wYzJjLTQzMjItOWFmYS00NWJhZTU2 MzQwYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADME/EwDgQCAAIwCAMGACYC+8UAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACPqJ+mqT8+0fE11PkX3WPzYwb7E4OWL3K298iBdq6GVrs7hSyup4FzLmmiNfKen SBm1rpnHqHlBPPw2nl7FuaMGR6soel5H3BHCTqO0C53cnSTzZSgGY51H1d8OyjC5 CPkb/XGynpUMIcr0BcHLMjPfaGC0F18gYJanqC2Qeqi+AECcLR7O15noBJqpWze1 d9e5VOSTO109ytWUezIfvRHGIAm1KwJRF42no6deD4a/58DGkk6fg4cFBrohDi5n j1qtW8KOrvfBC/L26EkRdEOH4ceLG+89BIUxQosuEFsF1SqCwsXeAR/7BjTWxjZy gzoYkP12f3M3JiBeKt9JVvk= -----END CERTIFICATE-----Generated at Sat Jun 13 08:52:41 2026 by rpki-client