$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813.cer File: 63b90d45-1618-4bc2-936a-bb30c3c87813.cer (raw, json) Hash identifier: 5vyIG5UaipeA4w/UG/uoPgcVX4w3DyVUfjW2ERBPVdg= Subject key identifier: EA:72:CA:FC:82:D8:96:D5:52:07:9A:A1:5B:3F:63:EE:8B:1B:61:95 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CFDDFF1EF84E5D7C9E2FCEB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/63b90d45-1618-4bc2-936a-bb30c3c87813.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 13:45:22 +0000 Certificate not after: Wed 31 May 2028 12:45:22 +0000 Subordinate resources: IP: 192.188.81.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:df:f1:ef:84:e5:d7:c9:e2:fc:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 26 13:45:22 2026 GMT Not After : May 31 12:45:22 2028 GMT Subject: CN=63b90d45-1618-4bc2-936a-bb30c3c87813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:08:0a:d9:7f:7f:2f:f5:d2:7d:16:73:29: ae:16:41:a7:ba:59:b6:5b:38:1f:14:e4:cf:02:85: ca:e6:01:37:c9:3d:ca:bd:60:e1:01:1e:7a:2f:0c: a4:00:76:26:04:85:8b:a0:07:a5:50:dd:69:bc:51: 11:f6:10:c1:90:1b:d6:b6:b4:ed:7d:6d:c5:93:bd: a2:15:ca:50:ec:dd:3b:78:2d:b3:30:20:82:e4:db: c1:23:12:91:8c:d5:e2:a4:43:1b:1f:e7:23:e9:7d: 78:20:07:c6:d9:df:7f:f6:53:dd:53:29:0c:af:bd: 4e:68:b8:58:bf:ae:db:0b:b8:b9:2f:9e:7b:84:72: de:76:68:80:76:20:f4:d6:ca:5b:ae:c1:1d:9c:c5: fe:76:a2:da:71:f2:6c:65:7f:4b:ec:0b:b5:f7:1d: a7:b7:12:90:68:63:43:30:92:ab:c0:cd:11:1c:63: 98:a6:41:39:3b:3d:77:88:21:e9:02:aa:e1:ae:cf: 99:13:5a:42:93:6b:c5:3a:e8:d0:ba:7e:ab:ac:d3: 4a:30:21:c4:2d:04:1e:f2:fd:f7:19:73:d7:4c:1c: bb:90:42:e0:c4:69:18:4a:e6:9a:5a:ce:e1:c9:38: c3:90:6d:1b:05:e0:35:ae:ac:5a:bb:f6:54:f9:fa: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:CA:FC:82:D8:96:D5:52:07:9A:A1:5B:3F:63:EE:8B:1B:61:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/63b90d45-1618-4bc2-936a-bb30c3c87813.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.188.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:52:26:fa:93:53:f3:a0:58:64:df:02:91:74:b2:9a:87:50: f8:5f:d7:07:51:0b:66:0c:a0:87:09:1a:d6:c2:3d:e0:ca:27: bb:98:a3:96:5c:4a:a6:66:49:4b:cc:63:f1:c0:bc:6e:65:60: d3:c0:76:92:c3:d6:65:29:64:3d:1e:aa:65:ad:d6:f2:2c:f1: d2:e5:7b:1e:ee:d7:d1:05:ee:c5:de:2b:83:d0:69:e0:56:e2: 7d:ba:0e:e4:95:08:cd:ed:a0:46:48:b3:a2:8d:34:f8:03:c9: 54:ce:69:b9:9d:19:cb:00:6d:14:fb:ee:d4:a6:c3:8f:a6:6e: 67:8d:4a:72:ba:e7:5f:bd:b7:6d:71:94:bf:53:ff:46:e3:9d: bf:a4:3d:9e:8e:f5:f9:a5:8c:c6:73:3a:ea:81:d4:eb:0b:3b: 37:18:20:39:5d:93:16:08:73:37:44:6e:ed:ed:0a:c6:b5:e4: 25:0d:54:cd:1b:5c:7e:92:81:b7:41:f2:84:8a:6e:ce:03:4e: f6:1f:8d:3a:0e:65:c3:61:6e:51:5e:8d:93:ae:fd:8d:ed:1e: d1:87:5f:4f:68:10:64:31:07:e5:97:0f:9a:fc:3e:c8:f9:ae: a2:55:55:3e:04:fb:74:6f:83:ee:53:52:ec:b5:03:08:20:d1: 8a:91:d6:36 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEz93/HvhOXXyeL864AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDIyNjEzNDUyMloXDTI4MDUzMTEyNDUyMlowLzEtMCsGA1UEAxMk NjNiOTBkNDUtMTYxOC00YmMyLTkzNmEtYmIzMGMzYzg3ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp0ICtl/fy/10n0WcymuFkGnulm2WzgfFOTP AoXK5gE3yT3KvWDhAR56LwykAHYmBIWLoAelUN1pvFER9hDBkBvWtrTtfW3Fk72i FcpQ7N07eC2zMCCC5NvBIxKRjNXipEMbH+cj6X14IAfG2d9/9lPdUykMr71OaLhY v67bC7i5L557hHLedmiAdiD01spbrsEdnMX+dqLacfJsZX9L7Au19x2ntxKQaGND MJKrwM0RHGOYpkE5Oz13iCHpAqrhrs+ZE1pCk2vFOujQun6rrNNKMCHELQQe8v33 GXPXTBy7kELgxGkYSuaaWs7hyTjDkG0bBeA1rqxau/ZU+fqNhQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOpyyvyC2JbVUgeaoVs/Y+6LG2GVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 M2I5MGQ0NS0xNjE4LTRiYzItOTM2YS1iYjMwYzNjODc4MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYzYjkwZDQ1LTE2MTgtNGJjMi05 MzZhLWJiMzBjM2M4NzgxMy82M2I5MGQ0NS0xNjE4LTRiYzItOTM2YS1iYjMwYzNj ODc4MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAvFEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATVIm+pNT86BYZN8CkXSy modQ+F/XB1ELZgyghwka1sI94Monu5ijllxKpmZJS8xj8cC8bmVg08B2ksPWZSlk PR6qZa3W8izx0uV7Hu7X0QXuxd4rg9Bp4FbifboO5JUIze2gRkizoo00+APJVM5p uZ0ZywBtFPvu1KbDj6ZuZ41KcrrnX723bXGUv1P/RuOdv6Q9no71+aWMxnM66oHU 6ws7NxggOV2TFghzN0Ru7e0KxrXkJQ1UzRtcfpKBt0HyhIpuzgNO9h+NOg5lw2Fu UV6Nk679je0e0YdfT2gQZDEH5ZcPmvw+yPmuolVVPgT7dG+D7lNS7LUDCCDRipHW Ng== -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:37 2026 by rpki-client