$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer File: 98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer (raw, json) Hash identifier: mXrw849BBfFWxdVxL9fuFNE4xhKYMBM3ENlr11w2foo= Subject key identifier: 1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584E11ACAEB30C0D0563BC405100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jun 2026 08:45:11 +0000 Certificate not after: Thu 07 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 198.169.0.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:ac:ae:b3:0c:0d:05:63:bc:40:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 5 08:45:11 2026 GMT Not After : Sep 7 08:45:11 2028 GMT Subject: CN=98e20ef9-13a1-40fd-8c8a-1a1b1f404882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:a8:86:a8:bb:88:6b:8d:37:99:8f:0a:69: e9:5b:b3:d4:b1:0e:e6:5d:3c:04:15:85:30:05:07: 60:82:eb:0b:bf:79:65:05:b8:45:57:be:6b:69:07: 57:c2:e4:a2:54:b9:8e:95:5e:90:35:2c:a4:19:21: cc:de:e6:a0:1e:11:b4:cb:4b:23:3b:7d:08:5f:85: 6d:f7:7c:84:b9:62:47:39:5e:a3:d0:e9:2a:52:cf: b3:61:63:37:55:a5:ac:ce:4d:09:2a:00:e2:47:18: 80:aa:1d:27:68:fe:09:a1:85:d5:cd:dd:0b:2d:84: 18:43:1f:bd:11:c0:80:80:7c:8c:3b:ad:1f:3b:cb: d9:15:83:66:2f:99:65:55:f0:13:ad:25:1a:f5:ad: 89:52:a4:ba:75:d7:ea:3d:94:8e:9f:be:01:c7:a3: 88:64:d7:a9:fd:fe:b2:cf:db:6e:1c:02:09:fd:58: 6a:40:e4:ee:e3:93:a1:2e:0a:36:f8:91:45:5a:e3: 8e:ba:dd:69:ba:4c:31:25:8b:0a:f4:9e:e6:08:95: 73:e6:f5:65:fc:a9:95:93:41:b4:b0:d7:84:b0:ae: fb:90:72:45:7d:23:87:87:4f:86:4e:1d:a9:c7:67: 72:db:97:92:d5:39:c4:b7:66:5b:40:8f:24:3c:1d: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 198.169.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fd:ed:4d:c8:d5:47:97:53:81:77:58:da:a3:fe:a5:1b:c9: 96:22:fd:de:1e:2f:1e:cb:63:88:eb:c6:e6:d2:2e:22:b5:7b: cb:67:f5:1e:67:54:4d:21:22:e5:92:a0:2d:58:11:ad:f1:43: e6:ba:2f:d0:83:41:0b:81:37:2c:aa:31:bd:0c:c1:9a:df:d3: b4:38:e6:4d:6a:cd:70:77:7b:00:f5:fe:37:58:18:74:4e:ec: e7:2a:3a:ef:85:29:cf:1c:2e:51:46:25:aa:b1:4d:51:c3:8f: 5a:ab:6b:b0:e5:5f:94:d9:30:9a:9c:69:e8:c8:89:6e:13:dd: 19:46:3d:24:48:09:84:55:54:48:f1:96:38:db:f2:e2:4a:5f: a9:6d:18:75:29:69:8a:c7:70:9f:66:83:c5:07:3e:28:53:fb: ef:9a:51:d3:64:cd:d2:02:53:9e:a3:d2:f5:11:7d:4c:e7:eb: a9:52:a9:b2:89:42:57:fe:fb:e2:22:f6:5f:e3:0b:c5:2c:52: 5b:a8:bb:8f:4a:ae:3e:19:1e:13:df:7d:7d:3e:1a:7e:e5:f4: 79:b0:79:7f:f5:ef:87:0b:d7:a0:70:24:bd:26:23:be:59:57: b1:e6:31:d4:ca:e5:d5:63:f4:08:a1:06:af:24:ca:54:28:7e: b2:ee:ac:af -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4RrK6zDA0FY7xAUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDYwNTA4NDUxMVoXDTI4MDkwNzA4NDUxMVowLzEtMCsGA1UEAxMk OThlMjBlZjktMTNhMS00MGZkLThjOGEtMWExYjFmNDA0ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb6ohqi7iGuNN5mPCmnpW7PUsQ7mXTwEFYUw BQdggusLv3llBbhFV75raQdXwuSiVLmOlV6QNSykGSHM3uagHhG0y0sjO30IX4Vt 93yEuWJHOV6j0OkqUs+zYWM3VaWszk0JKgDiRxiAqh0naP4JoYXVzd0LLYQYQx+9 EcCAgHyMO60fO8vZFYNmL5llVfATrSUa9a2JUqS6ddfqPZSOn74Bx6OIZNep/f6y z9tuHAIJ/VhqQOTu45OhLgo2+JFFWuOOut1pukwxJYsK9J7mCJVz5vVl/KmVk0G0 sNeEsK77kHJFfSOHh0+GTh2px2dy25eS1TnEt2ZbQI8kPB17tQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBuZL3GXQ/DcXUjvz7ioHG9Wxa3lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 OGUyMGVmOS0xM2ExLTQwZmQtOGM4YS0xYTFiMWY0MDQ4ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzk4ZTIwZWY5LTEzYTEtNDBmZC04 YzhhLTFhMWIxZjQwNDg4Mi85OGUyMGVmOS0xM2ExLTQwZmQtOGM4YS0xYTFiMWY0 MDQ4ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGqQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgP3tTcjVR5dTgXdY2qP+ pRvJliL93h4vHstjiOvG5tIuIrV7y2f1HmdUTSEi5ZKgLVgRrfFD5rov0INBC4E3 LKoxvQzBmt/TtDjmTWrNcHd7APX+N1gYdE7s5yo674UpzxwuUUYlqrFNUcOPWqtr sOVflNkwmpxp6MiJbhPdGUY9JEgJhFVUSPGWONvy4kpfqW0YdSlpisdwn2aDxQc+ KFP775pR02TN0gJTnqPS9RF9TOfrqVKpsolCV/774iL2X+MLxSxSW6i7j0quPhke E999fT4afuX0ebB5f/XvhwvXoHAkvSYjvllXseYx1Mrl1WP0CKEGryTKVCh+su6s rw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:22:56 2026 by rpki-client