$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de.cer File: 1307cbfa-a030-43a2-b7be-5e4c646687de.cer (raw, json) Hash identifier: B2HUBdF3FnToW3hG1+EPMDjhz65sYwZklOO/ud3/v5c= Subject key identifier: F4:F9:71:54:94:96:C9:86:17:D9:50:0F:50:84:72:94:3B:29:58:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D4BED52500AC4A9C7264505E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/1307cbfa-a030-43a2-b7be-5e4c646687de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 12:45:22 +0000 Certificate not after: Wed 28 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 205.235.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:ed:52:50:0a:c4:a9:c7:26:45:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 26 12:45:22 2026 GMT Not After : Jun 28 12:45:22 2028 GMT Subject: CN=1307cbfa-a030-43a2-b7be-5e4c646687de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:d9:68:64:25:42:49:c5:1b:89:b6:37:1b: 1d:37:9f:f4:a0:1b:f4:a8:48:d4:6d:a1:37:3e:ac: ca:1e:25:37:c5:1c:e7:ec:5a:e9:93:11:36:8a:cc: 31:32:a5:14:85:66:56:6c:7b:f2:cb:c2:ab:50:85: a1:09:87:b6:a9:ce:1a:f3:14:79:d7:3d:5a:6a:41: 3a:01:79:21:f5:18:76:7d:fe:f4:f3:f3:1e:e5:07: 49:d6:66:63:42:f2:9b:2c:86:a5:0c:a2:27:d3:55: 7f:82:a1:a7:61:ab:d5:28:c4:88:8a:93:5a:90:26: c8:83:de:cc:69:7d:31:93:a9:ae:7b:cc:9b:1f:3c: 3a:f1:ab:d4:26:6d:06:8e:b3:9d:85:49:18:ac:f1: 5a:bc:86:8c:cb:cc:69:5b:fb:35:e6:f4:2b:3a:c4: 7f:41:2d:3d:58:5e:87:b6:d0:45:86:34:1a:0d:94: a4:42:2a:62:a0:fb:dc:41:5c:66:ad:d4:87:5a:25: 79:8a:f8:51:a4:c9:5d:70:ed:27:90:06:25:cb:b1: 55:d8:c0:3c:dd:30:4f:d6:31:3d:93:5f:d2:cc:97: 33:17:07:ac:61:6c:87:44:8d:87:59:8b:59:c1:b6: bf:fb:34:3c:58:f3:4f:fd:fc:61:e5:84:2a:9e:45: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F9:71:54:94:96:C9:86:17:D9:50:0F:50:84:72:94:3B:29:58:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/1307cbfa-a030-43a2-b7be-5e4c646687de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 205.235.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ee:8a:a1:16:55:0c:b8:4d:f9:50:c3:c6:f5:16:3f:20:98: 70:9f:55:be:54:c3:62:5b:40:93:87:14:3a:8c:7b:13:7f:30: 51:eb:c0:30:4c:f8:0a:f1:d3:e6:d4:62:d2:40:27:78:1a:70: 05:4c:7a:a4:54:63:8b:8d:c0:9c:a4:14:2f:5b:08:23:68:c4: 9e:ef:41:31:3d:ee:f7:a7:26:95:39:3c:7b:03:47:22:6d:82: 15:b6:58:41:b0:d7:07:3b:62:49:a6:77:e3:b3:af:92:22:ee: 7f:b9:2e:10:93:aa:63:83:cf:14:0c:d9:39:7b:6b:7b:6a:d7: 22:9e:a2:db:bc:81:4a:0f:4b:db:88:13:ff:90:3d:f9:68:4f: 01:f8:35:b0:8a:df:80:4c:bb:6f:d3:ae:cf:55:5d:98:50:5f: 87:3f:ee:59:5f:72:ef:e3:b7:03:ab:83:d1:07:ee:1c:01:d1: d1:80:69:63:48:0d:1d:c6:7c:f4:ce:fe:80:81:64:57:1a:87: 62:9e:f8:b7:88:b1:74:a7:4c:01:36:1d:c5:27:6e:c8:4e:c8: 30:41:43:41:64:ef:2f:22:a0:4c:5f:81:00:d0:8f:cf:2d:dc: 49:72:2d:15:4e:22:22:42:5e:76:d0:8b:2b:04:7a:03:dd:c6: 86:95:cd:99 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1L7VJQCsSpxyZFBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMyNjEyNDUyMloXDTI4MDYyODEyNDUyMlowLzEtMCsGA1UEAxMk MTMwN2NiZmEtYTAzMC00M2EyLWI3YmUtNWU0YzY0NjY4N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrbZaGQlQknFG4m2NxsdN5/0oBv0qEjUbaE3 PqzKHiU3xRzn7FrpkxE2iswxMqUUhWZWbHvyy8KrUIWhCYe2qc4a8xR51z1aakE6 AXkh9Rh2ff708/Me5QdJ1mZjQvKbLIalDKIn01V/gqGnYavVKMSIipNakCbIg97M aX0xk6mue8ybHzw68avUJm0GjrOdhUkYrPFavIaMy8xpW/s15vQrOsR/QS09WF6H ttBFhjQaDZSkQipioPvcQVxmrdSHWiV5ivhRpMldcO0nkAYly7FV2MA83TBP1jE9 k1/SzJczFwesYWyHRI2HWYtZwba/+zQ8WPNP/fxh5YQqnkUoSwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPT5cVSUlsmGF9lQD1CEcpQ7KVjwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x MzA3Y2JmYS1hMDMwLTQzYTItYjdiZS01ZTRjNjQ2Njg3ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzEzMDdjYmZhLWEwMzAtNDNhMi1i N2JlLTVlNGM2NDY2ODdkZS8xMzA3Y2JmYS1hMDMwLTQzYTItYjdiZS01ZTRjNjQ2 Njg3ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATN63AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkO6KoRZVDLhN+VDDxvUW PyCYcJ9VvlTDYltAk4cUOox7E38wUevAMEz4CvHT5tRi0kAneBpwBUx6pFRji43A nKQUL1sII2jEnu9BMT3u96cmlTk8ewNHIm2CFbZYQbDXBztiSaZ347OvkiLuf7ku EJOqY4PPFAzZOXtre2rXIp6i27yBSg9L24gT/5A9+WhPAfg1sIrfgEy7b9Ouz1Vd mFBfhz/uWV9y7+O3A6uD0QfuHAHR0YBpY0gNHcZ89M7+gIFkVxqHYp74t4ixdKdM ATYdxSduyE7IMEFDQWTvLyKgTF+BANCPzy3cSXItFU4iIkJedtCLKwR6A93GhpXN mQ== -----END CERTIFICATE-----Generated at Sun Apr 19 13:33:14 2026 by rpki-client