$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer File: 88842878-1050-4df7-822b-ea8ec25db83d.cer (raw, json) Hash identifier: R1AnpzgLqbp8JxBOIy+m2DZeCs9iuyW3FPBGUeU+SXY= Subject key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584EA00D9107B6332A0BB494AE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jul 2026 08:45:11 +0000 Certificate not after: Sat 28 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 2495 IP: 164.113.0.0/16 IP: 198.248.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:0d:91:07:b6:33:2a:0b:b4:94:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 26 08:45:11 2026 GMT Not After : Oct 28 08:45:11 2028 GMT Subject: CN=88842878-1050-4df7-822b-ea8ec25db83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:d4:3b:88:65:8e:c3:01:6a:8c:db:d7:37: f5:d0:e0:a8:ab:48:96:04:fd:e3:6d:61:89:ef:b6: 0f:c4:60:18:e8:7a:39:f8:e5:6b:ed:08:93:3b:61: 8e:d6:6b:9c:fa:e5:2f:f7:e9:6a:34:74:1d:af:29: c0:84:2c:0c:1a:90:de:05:28:1f:77:b9:16:ae:03: ae:a1:59:62:ba:00:16:69:a3:0c:93:79:c6:c4:2d: 91:1a:39:72:7a:18:4a:89:f5:c5:ab:b5:e2:8d:fc: ec:4c:d6:5e:8f:67:1e:55:07:89:13:67:34:d3:6e: 7f:8d:0d:27:e6:23:da:60:c2:55:40:cb:1e:7f:7f: 42:85:f8:64:b9:d0:72:94:ab:7e:62:5a:4d:af:25: 0a:2e:54:8a:e4:33:c5:93:0a:22:d4:30:e1:e9:a6: 41:9f:0d:01:93:47:6e:39:0a:7a:0e:d9:9e:ff:a6: aa:10:e0:97:10:de:19:0c:5d:90:9a:d1:52:da:9c: 70:15:e4:5b:6e:43:89:72:61:39:f7:aa:ef:46:a7: 06:5a:15:d3:c8:e5:07:ee:a7:3e:5a:26:0a:c4:2f: f7:37:c4:79:b0:e0:3d:f1:7e:55:dc:e2:d0:f6:52: 57:d0:e8:cd:0c:98:c2:95:49:b0:4d:12:cd:c8:58: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 164.113.0.0/16 198.248.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2495 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8a:75:7b:bc:98:82:94:22:db:6a:b8:cc:a3:81:a1:42:d0: 66:da:04:ca:59:51:49:c5:8d:3a:72:6a:35:75:e7:9c:8b:c5: 86:27:7a:2e:a3:6d:92:fc:ff:2f:b5:b2:96:12:d6:d0:69:dc: 9f:96:53:9d:9e:27:13:c7:65:d8:7b:24:a9:61:80:87:3c:84: 49:8f:8c:2e:4c:69:2c:34:f9:10:24:78:e3:60:64:f6:cf:78: a0:67:49:e4:4a:4f:14:14:4f:24:71:62:2c:3c:4a:0f:16:47: df:e8:8b:bc:34:bc:cc:34:b0:a6:74:61:16:00:8c:52:12:c1: 80:41:06:d6:dc:4d:eb:49:ce:eb:b7:66:83:cf:57:6f:fb:d1: 31:04:30:7c:1d:93:59:ab:05:64:a0:03:e6:8b:1b:e7:c6:5b: 28:9c:67:8a:60:8f:30:a9:4d:43:83:0e:4e:3e:03:25:9b:bd: df:49:22:38:68:bb:73:6c:00:9a:f4:28:aa:8d:b4:8b:47:d7: 32:58:dd:a6:ea:66:02:b9:ed:68:93:a6:09:b9:8d:47:b3:dc: c4:66:11:a7:37:01:8a:91:db:56:98:0d:2f:8b:a0:4e:f1:7e: 8d:83:8b:de:f7:0d:70:ae:37:58:b0:39:aa:2f:f2:c8:bd:b1: 24:14:aa:fb -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE6gDZEHtjMqC7SUrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcyNjA4NDUxMVoXDTI4MTAyODA4NDUxMVowLzEtMCsGA1UEAxMk ODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRiODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXzUO4hljsMBaozb1zf10OCoq0iWBP3jbWGJ 77YPxGAY6Ho5+OVr7QiTO2GO1muc+uUv9+lqNHQdrynAhCwMGpDeBSgfd7kWrgOu oVliugAWaaMMk3nGxC2RGjlyehhKifXFq7XijfzsTNZej2ceVQeJE2c0025/jQ0n 5iPaYMJVQMsef39ChfhkudBylKt+YlpNryUKLlSK5DPFkwoi1DDh6aZBnw0Bk0du OQp6Dtme/6aqEOCXEN4ZDF2QmtFS2pxwFeRbbkOJcmE596rvRqcGWhXTyOUH7qc+ WiYKxC/3N8R5sOA98X5V3OLQ9lJX0OjNDJjClUmwTRLNyFhihQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFAr0L2kg8arXbWc8hpoEyIAerX2ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg4ODQyODc4LTEwNTAtNGRmNy04 MjJiLWVhOGVjMjVkYjgzZC84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1 ZGI4M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCkcQMDAMb4MBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAgm/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAJ2KdXu8mIKUIttquMyjgaFC0GbaBMpZUUnFjTpyajV1 55yLxYYnei6jbZL8/y+1spYS1tBp3J+WU52eJxPHZdh7JKlhgIc8hEmPjC5MaSw0 +RAkeONgZPbPeKBnSeRKTxQUTyRxYiw8Sg8WR9/oi7w0vMw0sKZ0YRYAjFISwYBB BtbcTetJzuu3ZoPPV2/70TEEMHwdk1mrBWSgA+aLG+fGWyicZ4pgjzCpTUODDk4+ AyWbvd9JIjhou3NsAJr0KKqNtItH1zJY3abqZgK57WiTpgm5jUez3MRmEac3AYqR 21aYDS+LoE7xfo2Di973DXCuN1iwOaov8si9sSQUqvs= -----END CERTIFICATE-----Generated at Tue Jul 28 16:06:00 2026 by rpki-client