$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502.cer File: cd00af7c-48e4-48bb-914f-0c2662c5f502.cer (raw, json) Hash identifier: KS6/TFs3PSFAzXGaKjsyXpWBtDvXcK6rhiMi+ZDy9VM= Subject key identifier: 26:8B:8F:D7:28:2A:7A:0B:B8:A6:6E:95:5C:8D:12:89:F4:8E:9E:1C Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584DFE21E56DF4AB19E243D00B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/cd00af7c-48e4-48bb-914f-0c2662c5f502.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 May 2026 08:45:11 +0000 Certificate not after: Thu 31 Aug 2028 08:45:11 +0000 Subordinate resources: IP: 206.130.88.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:21:e5:6d:f4:ab:19:e2:43:d0:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 29 08:45:11 2026 GMT Not After : Aug 31 08:45:11 2028 GMT Subject: CN=cd00af7c-48e4-48bb-914f-0c2662c5f502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:af:60:ef:d7:34:48:75:c8:c3:cb:41:a0: 7a:f0:e2:df:f0:d6:33:6d:31:fa:6d:ed:35:0a:20: 5a:4e:19:bd:e4:4e:ac:e1:e4:ac:92:ab:1b:18:a0: a8:96:d6:84:3b:86:55:10:42:ab:81:50:08:c4:fb: be:fc:6b:d6:9e:ac:7e:e1:8b:5d:c2:c7:46:32:12: 54:b1:db:4d:ae:16:f7:74:e9:06:60:d1:21:39:6c: 5c:a6:ea:9f:cf:5f:fa:9a:cb:5b:6a:a3:9c:6f:1f: 0e:4f:b7:8a:f6:de:d7:bd:48:75:6b:7c:6b:ec:06: 59:69:17:dc:79:53:f9:65:7c:d1:93:0c:a0:02:e6: bb:dd:f2:6d:35:64:cd:95:6d:63:0b:d4:84:68:74: 8d:e0:05:1e:74:93:16:8e:4e:f6:9a:8e:64:7d:cd: 8c:15:4c:1a:ed:7d:6f:52:36:8c:4f:10:f2:8c:43: 51:cf:fe:f8:0b:ab:0f:ab:01:d7:33:90:f5:b8:fc: 1b:a6:b9:56:a0:5e:38:c5:3c:82:2c:1c:fe:03:56: 0a:55:cc:b8:6f:8c:b0:86:8f:a5:ca:21:40:c2:23: ca:8e:8e:24:58:94:4c:b8:d8:8a:e6:a4:30:30:f8: 8c:a4:d6:c9:0c:c3:ea:6b:f8:a6:a5:76:be:69:a3: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:8F:D7:28:2A:7A:0B:B8:A6:6E:95:5C:8D:12:89:F4:8E:9E:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/cd00af7c-48e4-48bb-914f-0c2662c5f502.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 206.130.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:f9:5e:fc:15:81:81:30:e2:5b:d9:36:fb:5c:0a:1d:2f:28: 1e:f7:f5:01:eb:0d:5f:e0:78:07:e2:99:08:ad:7d:c5:6d:33: bc:e9:63:04:b6:ee:f3:51:49:b9:6a:e9:c9:a2:a2:40:c4:7b: 78:1c:6a:99:2f:7b:f4:62:14:f3:c8:16:82:ea:6d:1e:a2:56: 4f:87:91:7a:1a:21:72:59:88:00:3c:36:d2:47:2a:0f:3d:9a: 8d:c8:75:38:3c:fd:76:a3:92:44:9c:57:2d:4a:35:cb:e4:96: d8:cd:82:f5:b6:eb:9c:d4:bf:2c:d2:9c:c9:c0:b1:6c:da:6f: b5:03:6b:c5:0c:bd:fa:c9:79:09:d9:0d:54:fa:43:65:e1:33: 2f:89:b6:61:e9:90:a4:e3:81:33:2f:51:67:18:94:e6:35:ac: c6:2d:0d:8d:c9:52:41:ce:12:29:5e:96:4a:d7:03:fb:dc:f9: 54:8a:95:a2:de:fb:8b:b7:f3:70:67:8f:d2:9f:c3:66:41:e1: 4f:11:94:c9:26:ac:17:f6:10:bd:b1:c8:7f:c1:3a:37:7f:d2: 5c:96:a5:d8:da:2f:86:5c:69:77:4b:08:5c:16:b1:7d:17:e2: 0a:e5:95:3e:4b:43:61:73:e9:7c:c5:83:ad:48:66:e7:ff:8f: b1:18:9c:ca -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3+IeVt9KsZ4kPQC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDUyOTA4NDUxMVoXDTI4MDgzMTA4NDUxMVowLzEtMCsGA1UEAxMk Y2QwMGFmN2MtNDhlNC00OGJiLTkxNGYtMGMyNjYyYzVmNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ivYO/XNEh1yMPLQaB68OLf8NYzbTH6be01 CiBaThm95E6s4eSskqsbGKColtaEO4ZVEEKrgVAIxPu+/GvWnqx+4YtdwsdGMhJU sdtNrhb3dOkGYNEhOWxcpuqfz1/6mstbaqOcbx8OT7eK9t7XvUh1a3xr7AZZaRfc eVP5ZXzRkwygAua73fJtNWTNlW1jC9SEaHSN4AUedJMWjk72mo5kfc2MFUwa7X1v UjaMTxDyjENRz/74C6sPqwHXM5D1uPwbprlWoF44xTyCLBz+A1YKVcy4b4ywho+l yiFAwiPKjo4kWJRMuNiK5qQwMPiMpNbJDMPqa/impXa+aaO2WQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCaLj9coKnoLuKZulVyNEon0jp4cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9j ZDAwYWY3Yy00OGU0LTQ4YmItOTE0Zi0wYzI2NjJjNWY1MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2NkMDBhZjdjLTQ4ZTQtNDhiYi05 MTRmLTBjMjY2MmM1ZjUwMi9jZDAwYWY3Yy00OGU0LTQ4YmItOTE0Zi0wYzI2NjJj NWY1MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHOglgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAuPle/BWBgTDiW9k2+1wK HS8oHvf1AesNX+B4B+KZCK19xW0zvOljBLbu81FJuWrpyaKiQMR7eBxqmS979GIU 88gWguptHqJWT4eRehohclmIADw20kcqDz2ajch1ODz9dqOSRJxXLUo1y+SW2M2C 9bbrnNS/LNKcycCxbNpvtQNrxQy9+sl5CdkNVPpDZeEzL4m2YemQpOOBMy9RZxiU 5jWsxi0NjclSQc4SKV6WStcD+9z5VIqVot77i7fzcGeP0p/DZkHhTxGUySasF/YQ vbHIf8E6N3/SXJal2Novhlxpd0sIXBaxfRfiCuWVPktDYXPpfMWDrUhm5/+PsRic yg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:53:22 2026 by rpki-client