$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer File: 00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer (raw, json) Hash identifier: 0nYyZCvhCrSeBPpweqmlX79gAjRTjzFYoHb6sPw1RoI= Subject key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584EA00D90DA2F3C2E08565A5B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jul 2026 08:45:11 +0000 Certificate not after: Sat 28 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 25816 IP: 98.142.112.0/20 IP: 104.254.44.0/22 IP: 192.245.89.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:0d:90:da:2f:3c:2e:08:56:5a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 26 08:45:11 2026 GMT Not After : Oct 28 08:45:11 2028 GMT Subject: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c3:a4:d1:7e:f6:a6:03:d3:a2:9b:ff:f0:bb: 55:8e:d3:d9:13:12:bf:26:4a:f8:91:c6:e9:e1:e8: 54:82:fb:82:13:60:13:33:53:5b:a1:ca:f6:5c:d3: 8e:1a:ba:3f:33:d3:df:66:f5:51:b0:e8:f0:fe:2e: b3:db:3b:66:ac:bc:16:fa:2a:12:70:fb:99:b8:c4: da:a1:c7:6f:f8:cb:7a:9d:9d:8b:5e:cf:a6:77:70: 15:78:e3:64:1d:5e:b2:a8:25:78:f7:fb:85:cd:42: f4:b2:0a:b9:bf:97:de:c8:e5:a8:d6:db:c5:25:8d: a6:5a:07:d9:6b:05:cb:e0:84:04:66:43:51:3f:0c: a5:32:67:bc:c4:a0:2b:19:c4:46:cf:ff:e7:45:5d: f0:21:ca:ab:da:e9:50:72:d2:65:63:db:27:17:32: 34:d3:18:5f:59:1c:cf:9f:20:f4:c1:21:a5:35:2e: da:e5:28:99:49:ab:4d:94:72:43:53:1c:6b:41:e1: 02:ac:4b:92:88:54:16:5d:5f:a7:fa:2d:8a:12:c6: e9:6d:b4:c7:91:32:fb:76:46:1a:f9:bf:b8:09:e1: 74:a0:0a:e4:94:b7:f3:51:27:77:e3:19:41:58:b3: 24:51:01:ca:fe:15:49:04:b8:d7:36:3c:ec:71:78: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 98.142.112.0/20 104.254.44.0/22 192.245.89.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25816 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c0:d2:ab:6c:5d:df:f5:9b:fd:c8:20:ad:84:0c:86:2e:be: b5:c9:13:ad:35:4e:dc:41:00:e1:c6:86:4c:f6:96:a1:1d:36: 63:f0:d7:21:50:fe:69:6d:c7:56:3b:6b:c7:40:16:1d:a0:35: ce:9e:0e:5c:0c:bc:46:68:6e:9a:03:da:92:1d:6f:7b:2d:26: 6d:b5:2f:b4:67:60:1c:fd:4f:0c:44:4c:12:4f:6e:44:c1:cb: 96:f2:83:75:77:15:3d:0d:64:a7:db:01:97:d6:2c:14:d4:b4: a3:67:f1:14:ef:8b:8c:73:27:57:3b:33:c1:eb:b7:49:dd:0c: 88:76:33:8b:81:cd:3c:d1:df:e2:c6:1b:30:90:96:23:7a:ea: 3e:37:9a:09:40:b1:13:e0:8d:77:03:e8:fb:8b:ce:5e:90:39: 5c:6e:f7:f7:83:91:53:c5:31:de:11:90:29:4d:44:42:34:20: 79:2b:70:b7:0e:ac:3b:d9:05:81:f9:21:33:c2:56:ec:c5:ce: fa:35:3a:d1:39:fe:4f:71:54:60:63:e2:0c:02:0f:a1:55:78: e5:df:41:8e:db:74:87:e5:ca:cd:0d:d9:2f:d0:fa:de:15:3d: 9b:76:58:cb:7d:f5:d2:c5:f7:2c:5c:60:6d:be:84:05:1f:c5: 64:73:40:a6 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE6gDZDaLzwuCFZaW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDcyNjA4NDUxMVoXDTI4MTAyODA4NDUxMVowLzEtMCsGA1UEAxMk MDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78Ok0X72pgPTopv/8LtVjtPZExK/Jkr4kcbp 4ehUgvuCE2ATM1Nbocr2XNOOGro/M9PfZvVRsOjw/i6z2ztmrLwW+ioScPuZuMTa ocdv+Mt6nZ2LXs+md3AVeONkHV6yqCV49/uFzUL0sgq5v5feyOWo1tvFJY2mWgfZ awXL4IQEZkNRPwylMme8xKArGcRGz//nRV3wIcqr2ulQctJlY9snFzI00xhfWRzP nyD0wSGlNS7a5SiZSatNlHJDUxxrQeECrEuSiFQWXV+n+i2KEsbpbbTHkTL7dkYa +b+4CeF0oArklLfzUSd34xlBWLMkUQHK/hVJBLjXNjzscXgX4wIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFNeFH6r2FXAhIFdYixzRw7660vR3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w MGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzAwZmI2ZWZlLWRiYzEtNDVhOC1i MjY2LWNhNzJmN2UwNzljMi8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdl MDc5YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARijnADBAJo/iwDBADA9VkwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICZNgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQcDSq2xd3/Wb/cggrYQMhi6+tckTrTVO 3EEA4caGTPaWoR02Y/DXIVD+aW3HVjtrx0AWHaA1zp4OXAy8RmhumgPakh1vey0m bbUvtGdgHP1PDERMEk9uRMHLlvKDdXcVPQ1kp9sBl9YsFNS0o2fxFO+LjHMnVzsz weu3Sd0MiHYzi4HNPNHf4sYbMJCWI3rqPjeaCUCxE+CNdwPo+4vOXpA5XG7394OR U8Ux3hGQKU1EQjQgeStwtw6sO9kFgfkhM8JW7MXO+jU60Tn+T3FUYGPiDAIPoVV4 5d9Bjtt0h+XKzQ3ZL9D63hU9m3ZYy3310sX3LFxgbb6EBR/FZHNApg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:26:06 2026 by rpki-client