$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807.cer File: c019befc-7c35-411f-a118-9d2c05733807.cer (raw, json) Hash identifier: Ths2+TiADJ/gGlUIQ7L268fZLJxjs9zpCy0ZdIjx9IA= Subject key identifier: 6D:C6:97:EA:A7:EE:27:77:9D:FD:0E:EE:DF:6E:DE:26:53:3B:A7:26 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584E0FD4B6597D325844E28BEC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/c019befc-7c35-411f-a118-9d2c05733807.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jun 2026 16:54:14 +0000 Certificate not after: Sat 01 Apr 2028 00:45:23 +0000 Subordinate resources: IP: 174.34.231.0/24 IP: 174.34.235.0/24 IP: 174.128.200.0/22 IP: 2604:340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0f:d4:b6:59:7d:32:58:44:e2:8b:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 4 16:54:14 2026 GMT Not After : Apr 1 00:45:23 2028 GMT Subject: CN=c019befc-7c35-411f-a118-9d2c05733807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:6c:78:72:09:a3:ae:7b:26:49:76:f7:16: 4e:2b:64:3c:e8:6f:49:09:2a:f6:d5:b9:6b:89:e4: 36:37:3d:03:4b:4b:bf:04:ab:38:5c:a3:88:30:23: a7:51:ae:a1:47:c2:68:a0:58:3b:49:40:96:e2:6e: 72:31:c5:e7:c8:e4:31:87:39:ea:70:6b:12:dd:74: 6c:dc:7f:dc:5e:08:c1:bd:cd:cc:81:e6:f1:8d:24: 11:a4:6a:81:f6:a4:d6:25:5f:69:43:ba:13:d1:39: 61:ab:c5:09:dd:50:5c:d8:3a:39:da:f4:a9:7c:04: 57:25:b7:17:de:46:e5:57:c7:33:67:58:e8:ed:e6: 29:a8:d6:8b:5a:38:90:14:78:cb:1c:ee:99:e4:9e: e0:02:b0:b0:c8:bb:a7:a7:5f:d3:a7:0e:cd:06:13: e2:79:76:26:be:16:81:f3:91:02:ff:8c:3c:30:67: d2:da:a4:b3:db:fb:a3:cc:0f:aa:d9:99:a3:82:36: 27:51:09:1c:9e:9d:f5:70:0e:9f:0e:c9:35:13:4d: c0:2a:cc:3f:aa:0d:35:dd:3d:9a:9d:d0:18:c2:72: 64:5e:0a:47:77:dd:45:69:a9:ca:8d:58:c6:74:81: e7:80:d8:04:32:72:93:6f:b0:ae:b1:73:29:31:4e: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:97:EA:A7:EE:27:77:9D:FD:0E:EE:DF:6E:DE:26:53:3B:A7:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/c019befc-7c35-411f-a118-9d2c05733807.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 174.34.231.0/24 174.34.235.0/24 174.128.200.0/22 IPv6: 2604:340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:83:1c:50:46:35:79:e4:d5:f8:04:e5:4c:ff:f5:66:46:f3: 02:e2:af:80:15:48:1a:6d:e6:33:58:fb:89:3f:1c:6a:26:82: 12:b6:45:c9:67:af:8b:4d:ac:6d:79:4b:6a:2a:b1:ef:a9:50: f8:0b:fe:d0:6f:83:00:37:31:f5:30:12:08:15:05:74:f7:c4: ad:c5:fa:bf:d5:7a:31:7d:d4:24:02:12:b8:7c:68:57:25:0a: 34:f8:6e:90:fe:e6:d9:50:a5:87:ff:d8:18:f0:32:ae:be:c7: 4f:1b:25:e3:0a:6a:db:d2:1c:88:17:2f:e7:1f:95:46:e4:47: d1:61:12:7b:f5:38:3e:da:d2:bf:0d:ef:98:8f:34:51:95:37: 15:b1:57:83:70:82:ca:d7:44:06:c6:bf:8b:b2:5f:f2:c5:8c: 12:55:2f:fb:d5:4f:2c:53:5a:d9:33:24:86:19:2e:3c:db:28: 0b:0c:43:03:bb:0f:ff:1f:e5:27:93:f1:d7:11:8c:c3:78:06: 67:cf:3f:fc:58:99:f7:4e:53:ee:15:ac:2a:b9:be:79:88:e7: 64:20:bd:b8:19:bc:37:da:1a:c7:72:de:ef:09:b4:09:e1:d3: 00:f2:38:c8:5b:a7:33:f0:94:60:d8:65:ab:cd:36:ce:62:c7: 0f:5f:9f:3e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE4P1LZZfTJYROKL7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDYwNDE2NTQxNFoXDTI4MDQwMTAwNDUyM1owLzEtMCsGA1UEAxMk YzAxOWJlZmMtN2MzNS00MTFmLWExMTgtOWQyYzA1NzMzODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF1seHIJo657Jkl29xZOK2Q86G9JCSr21blr ieQ2Nz0DS0u/BKs4XKOIMCOnUa6hR8JooFg7SUCW4m5yMcXnyOQxhznqcGsS3XRs 3H/cXgjBvc3MgebxjSQRpGqB9qTWJV9pQ7oT0Tlhq8UJ3VBc2Do52vSpfARXJbcX 3kblV8czZ1jo7eYpqNaLWjiQFHjLHO6Z5J7gArCwyLunp1/Tpw7NBhPieXYmvhaB 85EC/4w8MGfS2qSz2/ujzA+q2ZmjgjYnUQkcnp31cA6fDsk1E03AKsw/qg013T2a ndAYwnJkXgpHd91FaanKjVjGdIHngNgEMnKTb7CusXMpMU6gzQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFG3Gl+qn7id3nf0O7t9u3iZTO6cmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j MDE5YmVmYy03YzM1LTQxMWYtYTExOC05ZDJjMDU3MzM4MDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2MwMTliZWZjLTdjMzUtNDExZi1h MTE4LTlkMmMwNTczMzgwNy9jMDE5YmVmYy03YzM1LTQxMWYtYTExOC05ZDJjMDU3 MzM4MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBACuIucDBACuIusDBAKugMgwDQQCAAIwBwMFACYE A0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAZYMcUEY1eeTV+ATlTP/1ZkbzAuKvgBVIGm3mM1j7iT8caiaC ErZFyWevi02sbXlLaiqx76lQ+Av+0G+DADcx9TASCBUFdPfErcX6v9V6MX3UJAIS uHxoVyUKNPhukP7m2VClh//YGPAyrr7HTxsl4wpq29IciBcv5x+VRuRH0WESe/U4 PtrSvw3vmI80UZU3FbFXg3CCytdEBsa/i7Jf8sWMElUv+9VPLFNa2TMkhhkuPNso CwxDA7sP/x/lJ5Px1xGMw3gGZ88//FiZ905T7hWsKrm+eYjnZCC9uBm8N9oax3Le 7wm0CeHTAPI4yFunM/CUYNhlq802zmLHD1+fPg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:09:38 2026 by rpki-client