$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer File: bb49c202-f644-4fa6-8a36-084312761f72.cer (raw, json) Hash identifier: fr50IoN2I6I8Z64tycNdHMgdiHuxucqT5cseGTAOMwM= Subject key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F3FA5B03DF4FDC76329412280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 12:45:13 +0000 Certificate not after: Sun 24 Dec 2028 13:45:13 +0000 Subordinate resources: IP: 69.12.25.0/24 IP: 104.245.232.0/21 IP: 172.98.208.0/21 IP: 2605:dd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:a5:b0:3d:f4:fd:c7:63:29:41:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 21 12:45:13 2026 GMT Not After : Dec 24 13:45:13 2028 GMT Subject: CN=bb49c202-f644-4fa6-8a36-084312761f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:3c:44:ff:a7:3c:43:ad:fd:2b:e3:4e:8a: 6a:f7:90:63:ef:69:8f:a9:06:77:f7:82:0b:4d:02: b5:d5:72:91:60:fc:be:ea:74:9b:38:47:14:35:a5: 44:32:95:4c:46:23:16:c2:57:96:b3:70:c4:61:c1: 24:63:f2:d7:93:52:f9:9d:e0:9b:da:d0:1f:1a:f9: e4:8f:5a:54:12:84:45:32:8a:87:9a:e6:77:08:5c: 1e:c7:33:9e:6f:44:a1:84:7f:42:32:67:49:8a:cf: 6b:0d:29:6a:d9:35:45:d4:77:a0:67:8e:3b:cb:51: 7e:da:db:11:30:fb:ad:00:56:8b:98:93:d2:0f:e1: 10:c4:d3:44:df:6f:17:ab:c3:fb:e8:ac:0f:58:5a: 65:e6:60:cd:9c:76:9d:ec:b9:73:d9:45:92:40:8c: d5:90:b1:53:c4:5d:06:68:df:d9:a1:fe:0a:8c:48: de:61:58:6f:7d:8a:2a:08:e1:c9:7f:6d:b7:61:df: f7:05:58:35:3c:b6:1f:3a:5f:87:99:07:8f:c2:3e: 6d:26:23:38:70:7f:7d:52:53:fe:af:6a:07:86:01: d6:70:ff:b2:a2:62:22:57:b1:99:d0:c1:29:e9:b0: 26:da:b5:a4:69:1e:91:7c:e4:b1:e9:36:15:08:fc: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 69.12.25.0/24 104.245.232.0/21 172.98.208.0/21 IPv6: 2605:dd80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:0a:d6:27:ac:e4:be:84:b8:21:b2:48:ad:f1:54:ed:bf:28: c9:c3:db:19:10:99:c8:ec:33:2c:88:d0:1a:f5:1c:b1:7a:2e: 24:4d:fc:6f:05:ce:86:c1:22:36:00:e7:13:28:27:bb:6d:90: b7:0b:fb:d5:7c:e7:ed:31:3c:5b:75:87:1b:a3:49:be:8e:df: c1:af:2b:32:f8:e7:38:5c:22:ad:33:b9:d9:94:17:d1:b3:db: 7f:d2:4e:13:aa:93:7e:be:28:4e:f3:0d:73:9a:29:d5:04:d8: 1e:a8:46:c4:99:27:df:1a:3f:32:8d:58:c5:f6:b0:c9:57:9b: 0d:4a:a8:4a:fc:66:a4:32:dc:33:bf:ab:6f:44:31:ad:14:02: ed:b3:48:ed:57:49:65:fb:6a:60:d5:07:9f:f3:61:89:64:61: 2a:94:da:e0:f5:27:5d:13:de:7a:f9:ac:86:97:87:40:a1:e8: 97:53:ec:e4:3e:bc:73:fa:de:a8:2d:ab:07:92:f5:1c:ad:27: 38:77:86:bd:e3:c3:40:93:9f:53:65:21:9f:fe:da:54:a9:9c: ea:c6:ed:05:3c:98:4c:3c:4b:c5:13:1e:2a:e9:80:a5:f6:86: b9:f1:d8:9e:12:00:d9:07:f5:fd:f7:3b:30:64:2b:ae:6b:af: 76:83:32:6a -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE8/pbA99P3HYylBIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkyMTEyNDUxM1oXDTI4MTIyNDEzNDUxM1owLzEtMCsGA1UEAxMk YmI0OWMyMDItZjY0NC00ZmE2LThhMzYtMDg0MzEyNzYxZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgA8RP+nPEOt/SvjTopq95Bj72mPqQZ394IL TQK11XKRYPy+6nSbOEcUNaVEMpVMRiMWwleWs3DEYcEkY/LXk1L5neCb2tAfGvnk j1pUEoRFMoqHmuZ3CFwexzOeb0ShhH9CMmdJis9rDSlq2TVF1HegZ447y1F+2tsR MPutAFaLmJPSD+EQxNNE328Xq8P76KwPWFpl5mDNnHad7Llz2UWSQIzVkLFTxF0G aN/Zof4KjEjeYVhvfYoqCOHJf223Yd/3BVg1PLYfOl+HmQePwj5tJiM4cH99UlP+ r2oHhgHWcP+yomIiV7GZ0MEp6bAm2rWkaR6RfOSx6TYVCPwBYQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFM+zJ3xRCZeQNrP7z7KMhsCr8GuoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i YjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3NjFmNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2JiNDljMjAyLWY2NDQtNGZhNi04 YTM2LTA4NDMxMjc2MWY3Mi9iYjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3 NjFmNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBABFDBkDBANo9egDBAOsYtAwDQQCAAIwBwMFACYF 3YAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdQrWJ6zkvoS4IbJIrfFU7b8oycPbGRCZyOwzLIjQGvUcsXou JE38bwXOhsEiNgDnEygnu22Qtwv71Xzn7TE8W3WHG6NJvo7fwa8rMvjnOFwirTO5 2ZQX0bPbf9JOE6qTfr4oTvMNc5op1QTYHqhGxJkn3xo/Mo1YxfawyVebDUqoSvxm pDLcM7+rb0QxrRQC7bNI7VdJZftqYNUHn/NhiWRhKpTa4PUnXRPeevmshpeHQKHo l1Ps5D68c/reqC2rB5L1HK0nOHeGvePDQJOfU2Uhn/7aVKmc6sbtBTyYTDxLxRMe KumApfaGufHYnhIA2Qf1/fc7MGQrrmuvdoMyag== -----END CERTIFICATE-----Generated at Tue Sep 22 13:41:22 2026 by rpki-client