$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer File: e8abcb36-7d75-4654-a098-d032ddf03d8a.cer (raw, json) Hash identifier: ssLUBoVQQ1QuaKr+w/lVlIH8U3fnSLYVvZhhx0aEg6g= Subject key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DDA4E2AC576808924F0A0E280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 May 2026 12:45:17 +0000 Certificate not after: Fri 18 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 161.199.250.0/23 IP: 174.34.225.0/24 IP: 192.84.231.0/24 IP: 216.120.142.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:4e:2a:c5:76:80:89:24:f0:a0:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 16 12:45:17 2026 GMT Not After : Aug 18 12:45:17 2028 GMT Subject: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:24:36:a7:61:c7:3d:a6:6c:fd:ed:13:f5: 72:85:76:ac:e4:15:4b:d6:0d:d3:24:ac:b0:e7:ca: 53:38:b7:3a:bf:c2:50:09:00:41:fa:94:cb:e0:f7: a9:b3:ae:8f:68:da:54:55:fc:34:af:28:29:2e:4f: a9:e7:e7:4e:c4:7c:ae:47:6a:de:ae:3e:41:02:22: 89:5a:ff:cd:8a:d6:79:50:a4:d4:36:c0:4c:91:de: eb:1e:0a:5d:11:3c:d2:b3:71:da:76:58:49:5b:e2: 5a:14:96:18:bd:f9:76:2f:ee:c3:97:f2:20:1d:cc: c0:93:3c:83:ca:bf:f5:c6:4d:e5:9e:f8:8a:43:54: eb:e1:08:b5:b1:65:a4:1d:7d:01:c0:d2:f0:45:7d: f8:ed:17:fb:0f:79:24:e2:24:1a:a2:c8:c0:9b:c3: c7:d5:10:49:4a:98:c9:0f:dc:b9:af:9e:f0:e9:18: 40:f7:9f:f5:09:eb:32:cc:bb:a2:99:5b:b3:ce:d7: 1f:ba:53:9b:9c:1f:1a:90:db:67:98:07:a0:db:24: 37:a1:be:81:d4:a1:1e:c7:fc:52:1d:ff:05:2a:7a: 4e:d1:1b:47:22:a2:9c:c2:fb:f1:3d:83:17:7a:7e: d6:48:ca:37:c2:92:e1:82:d4:47:29:e6:a6:62:d4: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 161.199.250.0/23 174.34.225.0/24 192.84.231.0/24 216.120.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1f:ed:9c:fe:6b:4b:d4:5e:2e:bb:1d:d2:2e:77:d8:27:20: 01:0a:f5:88:1d:3e:03:5b:b1:e2:84:0e:41:7d:9b:2e:9d:b9: a0:3e:db:31:e9:07:23:ce:5c:2b:1f:35:22:de:7f:51:c3:bc: 92:ef:86:96:58:1a:db:c1:3c:ec:21:9e:9d:ff:9c:23:54:c0: 51:82:a3:0f:cd:3a:fa:60:23:f5:7b:a0:26:92:be:7d:da:2d: a6:1c:59:5b:f4:4e:79:19:bf:16:f5:5f:b5:1d:c9:78:ec:bd: 12:03:63:e0:88:2f:1b:a6:0d:d8:93:fb:d4:b1:73:5c:30:c6: 77:75:6c:d4:15:b6:b0:d5:55:a7:05:81:de:00:8d:a2:fd:0d: de:a6:29:92:99:86:aa:b2:47:02:b0:50:f2:b0:e4:e0:02:ed: 7d:d1:d9:50:14:e8:d4:07:22:d6:7c:3a:a9:0d:b1:98:83:f5: 76:39:12:59:9e:87:45:2c:a2:dd:83:64:19:74:da:83:fc:9f: 6f:68:9f:a8:67:20:59:d0:7d:54:ca:c6:1b:88:66:87:52:e8: f7:da:e1:fe:52:0c:80:bf:9e:1c:2f:5a:65:f3:c2:ae:91:a5: 5c:e1:b3:20:fd:ee:08:ee:17:92:f6:20:8e:f2:35:dc:02:ed: 5d:6c:3a:51 -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWE3aTirFdoCJJPCg4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDUxNjEyNDUxN1oXDTI4MDgxODEyNDUxN1owLzEtMCsGA1UEAxMk ZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAzZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwUkNqdhxz2mbP3tE/VyhXas5BVL1g3TJKyw 58pTOLc6v8JQCQBB+pTL4Peps66PaNpUVfw0rygpLk+p5+dOxHyuR2rerj5BAiKJ Wv/NitZ5UKTUNsBMkd7rHgpdETzSs3HadlhJW+JaFJYYvfl2L+7Dl/IgHczAkzyD yr/1xk3lnviKQ1Tr4Qi1sWWkHX0BwNLwRX347Rf7D3kk4iQaosjAm8PH1RBJSpjJ D9y5r57w6RhA95/1CesyzLuimVuzztcfulObnB8akNtnmAeg2yQ3ob6B1KEex/xS Hf8FKnpO0RtHIqKcwvvxPYMXen7WSMo3wpLhgtRHKeamYtT7XQIDAQABo4IEETCC BA0wHQYDVR0OBBYEFOUimw7u9OaoaNUTBrKZneONWBwfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l OGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U4YWJjYjM2LTdkNzUtNDY1NC1h MDk4LWQwMzJkZGYwM2Q4YS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRm MDNkOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAGhx/oDBACuIuEDBADAVOcDBADYeI4wVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAGR/tnP5rS9ReLrsd0i532CcgAQr1iB0+A1ux4oQOQX2bLp25oD7bMekHI85c Kx81It5/UcO8ku+Gllga28E87CGenf+cI1TAUYKjD806+mAj9XugJpK+fdotphxZ W/ROeRm/FvVftR3JeOy9EgNj4IgvG6YN2JP71LFzXDDGd3Vs1BW2sNVVpwWB3gCN ov0N3qYpkpmGqrJHArBQ8rDk4ALtfdHZUBTo1Aci1nw6qQ2xmIP1djkSWZ6HRSyi 3YNkGXTag/yfb2ifqGcgWdB9VMrGG4hmh1Lo99rh/lIMgL+eHC9aZfPCrpGlXOGz IP3uCO4XkvYgjvI13ALtXWw6UQ== -----END CERTIFICATE-----Generated at Sat Jun 13 05:49:32 2026 by rpki-client