$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer File: 443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer (raw, json) Hash identifier: X5d86N+fY/rrgX6rvYXHK/uPKyDBNKz7m6aDT06ycRs= Subject key identifier: 16:91:90:8A:7C:C6:2B:D2:E6:59:62:0F:CD:64:2A:90:A7:21:90:9C Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584DFE21E5477775BDC20B427D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 May 2026 08:45:11 +0000 Certificate not after: Thu 31 Aug 2028 08:45:11 +0000 Subordinate resources: IP: 155.254.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:21:e5:47:77:75:bd:c2:0b:42:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 29 08:45:11 2026 GMT Not After : Aug 31 08:45:11 2028 GMT Subject: CN=443c13af-c88b-4f08-a006-7d4f68f4fbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:70:90:80:68:74:90:27:1b:b4:be:9f:32: c1:6c:a0:ad:8c:67:bd:7c:af:d2:a8:25:88:07:b7: fb:69:4e:f4:95:22:71:a2:e2:4a:d3:f3:c2:4d:b2: 59:6b:05:b6:5f:23:7c:ad:fa:0c:a7:91:96:e3:13: 3a:9e:5e:b0:2e:40:76:2e:a4:07:99:49:5e:7d:90: 89:0e:68:f8:85:b2:94:b3:fa:f0:af:85:48:d4:e1: df:fb:28:21:05:ee:d4:de:3a:60:fe:4b:81:f1:b5: b2:d0:75:7e:8e:db:3a:62:a3:e5:83:c9:fa:3e:ec: 68:d5:04:98:b1:40:4a:5d:8a:f5:53:69:2c:1f:3f: 44:dd:5d:d1:8e:af:73:ca:6c:a8:1d:df:ee:8b:f9: 50:c9:68:9c:51:1d:4a:47:3d:b2:f6:60:72:7b:1e: 4b:a5:df:47:ad:28:be:fa:9b:83:56:4a:10:69:04: a9:6e:69:47:78:7c:7e:31:d9:03:73:eb:c9:0d:55: 01:99:52:a6:ad:db:79:3b:d5:4d:83:e1:79:79:c7: c7:7b:2d:72:73:43:7c:e7:ef:0c:27:13:b2:52:50: 36:7c:9c:d6:03:7a:16:f5:d5:3a:7f:6c:96:cd:2e: 3a:59:85:62:6b:58:78:d7:8f:0f:52:97:eb:32:b1: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:91:90:8A:7C:C6:2B:D2:E6:59:62:0F:CD:64:2A:90:A7:21:90:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 155.254.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:d5:22:af:1b:a0:e2:91:ad:c3:6e:bb:e9:82:43:c3:e4: 93:9b:69:51:60:5f:8b:8f:de:b2:a1:73:25:dc:9e:e3:f9:14: 6f:0b:2c:e3:7f:e6:c4:78:a0:6c:07:c2:1a:99:7f:e8:3c:7f: 1b:91:c4:35:bd:f1:bd:35:da:e2:22:d2:41:d7:3e:75:8f:0c: a1:32:44:3e:e9:0a:b1:16:40:34:b0:fd:d8:31:04:15:bf:f9: 50:7d:19:3e:58:3a:4c:99:b1:46:a7:7a:5c:86:10:37:33:88: e9:b3:e5:4d:49:b0:59:b3:c1:8b:4c:48:88:87:dc:7d:e1:9a: d6:e1:68:1f:ac:87:14:31:bc:64:03:7d:4f:ea:84:1a:12:4f: 8a:d8:dd:74:93:b1:08:b6:ee:c8:28:2c:26:ce:43:05:31:87: df:f5:83:0e:c2:52:a5:f2:33:b6:06:68:25:d4:e1:ed:86:f2: 43:2c:15:25:6d:ee:22:dc:cd:ed:46:f5:66:91:97:88:c0:5c: f6:4e:09:38:92:9f:d3:dd:97:4e:71:7c:85:26:34:a9:45:ce: f5:ad:6c:f3:6f:88:6a:15:c6:71:c1:54:07:50:4d:ea:e8:be: dd:5d:3a:26:28:95:cc:70:f3:7f:7f:55:43:2c:9e:61:a8:1b: 89:7d:24:76 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3+IeVHd3W9wgtCfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDUyOTA4NDUxMVoXDTI4MDgzMTA4NDUxMVowLzEtMCsGA1UEAxMk NDQzYzEzYWYtYzg4Yi00ZjA4LWEwMDYtN2Q0ZjY4ZjRmYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7BwkIBodJAnG7S+nzLBbKCtjGe9fK/SqCWI B7f7aU70lSJxouJK0/PCTbJZawW2XyN8rfoMp5GW4xM6nl6wLkB2LqQHmUlefZCJ Dmj4hbKUs/rwr4VI1OHf+yghBe7U3jpg/kuB8bWy0HV+jts6YqPlg8n6Puxo1QSY sUBKXYr1U2ksHz9E3V3Rjq9zymyoHd/ui/lQyWicUR1KRz2y9mByex5Lpd9HrSi+ +puDVkoQaQSpbmlHeHx+MdkDc+vJDVUBmVKmrdt5O9VNg+F5ecfHey1yc0N85+8M JxOyUlA2fJzWA3oW9dU6f2yWzS46WYVia1h4148PUpfrMrHaCwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBaRkIp8xivS5lliD81kKpCnIZCcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 NDNjMTNhZi1jODhiLTRmMDgtYTAwNi03ZDRmNjhmNGZiYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ0M2MxM2FmLWM4OGItNGYwOC1h MDA2LTdkNGY2OGY0ZmJhZi80NDNjMTNhZi1jODhiLTRmMDgtYTAwNi03ZDRmNjhm NGZiYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKb/ugwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMdPVIq8boOKRrcNuu+mC Q8Pkk5tpUWBfi4/esqFzJdye4/kUbwss43/mxHigbAfCGpl/6Dx/G5HENb3xvTXa 4iLSQdc+dY8MoTJEPukKsRZANLD92DEEFb/5UH0ZPlg6TJmxRqd6XIYQNzOI6bPl TUmwWbPBi0xIiIfcfeGa1uFoH6yHFDG8ZAN9T+qEGhJPitjddJOxCLbuyCgsJs5D BTGH3/WDDsJSpfIztgZoJdTh7YbyQywVJW3uItzN7Ub1ZpGXiMBc9k4JOJKf092X TnF8hSY0qUXO9a1s82+IahXGccFUB1BN6ui+3V06JiiVzHDzf39VQyyeYagbiX0k dg== -----END CERTIFICATE-----Generated at Sat Jun 13 05:55:19 2026 by rpki-client