$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer File: 66580030-eaac-4617-b624-3b0a2974a04d.cer (raw, json) Hash identifier: eAZghlfWbCEkqM59b+CWhEDIN65r4kyqH0U8VDuKXls= Subject key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584E9A7833749EBDA5B22625F800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jul 2026 08:45:11 +0000 Certificate not after: Thu 26 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 199.30.216.0/22 IP: 2607:4440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:78:33:74:9e:bd:a5:b2:26:25:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 24 08:45:11 2026 GMT Not After : Oct 26 08:45:11 2028 GMT Subject: CN=66580030-eaac-4617-b624-3b0a2974a04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:8b:37:49:59:97:f6:39:21:69:46:ac:30: 14:f2:3d:43:41:96:2f:ff:77:dd:d3:8f:14:59:d7: 76:8f:82:6d:43:4e:67:1a:ca:46:20:66:61:9f:c7: 93:70:db:ef:2c:03:7c:9e:de:a2:9c:f2:c4:cf:f4: 26:f6:56:c3:a2:4a:ac:3e:76:0e:cc:21:dd:69:d7: 99:7f:7f:3a:fb:d8:07:3d:42:10:48:40:e0:83:9d: f0:9f:fb:a9:fb:ba:38:62:21:64:af:dd:9f:e5:2e: 03:a8:e8:f6:46:f1:db:92:55:cf:cf:86:bf:fe:95: e1:4a:13:8b:9c:03:08:25:52:7f:ad:ac:ea:c7:ab: 96:b9:f8:75:1f:bb:18:26:ac:fa:33:0b:ba:5a:9a: 26:f0:2b:29:8c:57:39:75:18:81:e9:7e:9b:9c:bd: 53:71:41:a6:ae:f4:75:7b:8b:0a:92:8c:ca:e2:9b: 83:b8:cf:39:57:8b:b3:65:0d:1e:7c:f7:da:30:b4: 95:9d:8b:d0:e1:ce:8e:95:8d:0b:1b:7e:53:e2:27: e8:0e:3b:8f:dc:58:70:b5:4d:16:1a:2f:66:9f:a7: 1d:f2:55:49:6f:97:9f:ff:cc:9f:05:b1:5b:2f:c8: 7e:46:73:e7:d3:9f:2d:98:77:85:a0:72:a8:04:08: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.30.216.0/22 IPv6: 2607:4440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1f:02:91:a9:f8:77:20:12:da:c1:a8:06:aa:f8:4f:92:fe: 7e:8b:63:d6:b8:0f:69:ef:95:c7:c1:e1:16:b8:ec:5b:be:1e: 9f:fa:03:41:f9:63:65:5f:91:f9:61:b6:3e:1a:c8:b1:b1:90: 35:95:d5:11:d5:be:8f:d5:ec:9b:20:a7:bf:93:94:60:49:0c: cc:4a:f5:98:8f:7e:b1:e4:78:f8:53:df:d7:d9:7b:bb:69:4e: fc:a5:f2:fe:7d:e7:55:b5:48:04:ca:22:55:93:98:f6:a6:b7: 5b:11:48:bd:b6:c8:2d:0a:1c:2f:f0:73:6c:a4:3d:72:42:d3: 1c:25:27:8e:fb:c8:54:bf:95:60:0a:a9:62:a9:ff:85:5a:74: 73:4e:38:fb:0a:3f:1c:83:27:52:9c:af:da:fe:3b:4d:23:ce: e8:c0:bb:ae:4b:d7:21:3f:3e:b9:3a:ea:cb:8c:50:e0:2f:de: f9:65:80:e9:ec:08:56:e4:81:04:fb:78:5c:b1:dd:b2:f1:eb: 5a:7f:4b:1a:ac:14:f5:28:31:8b:c4:54:0f:30:c6:e7:29:7c: 92:47:2d:11:a4:70:7e:fc:fa:ea:98:1d:80:1d:34:87:fe:5d: 1d:5b:20:49:0d:59:85:03:f3:d3:4b:52:9f:36:fd:a5:5b:20: 5f:f9:cd:1e -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE6aeDN0nr2lsiYl+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDcyNDA4NDUxMVoXDTI4MTAyNjA4NDUxMVowLzEtMCsGA1UEAxMk NjY1ODAwMzAtZWFhYy00NjE3LWI2MjQtM2IwYTI5NzRhMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqaLN0lZl/Y5IWlGrDAU8j1DQZYv/3fd048U Wdd2j4JtQ05nGspGIGZhn8eTcNvvLAN8nt6inPLEz/Qm9lbDokqsPnYOzCHdadeZ f386+9gHPUIQSEDgg53wn/up+7o4YiFkr92f5S4DqOj2RvHbklXPz4a//pXhShOL nAMIJVJ/razqx6uWufh1H7sYJqz6Mwu6Wpom8CspjFc5dRiB6X6bnL1TcUGmrvR1 e4sKkozK4puDuM85V4uzZQ0efPfaMLSVnYvQ4c6OlY0LG35T4ifoDjuP3FhwtU0W Gi9mn6cd8lVJb5ef/8yfBbFbL8h+RnPn058tmHeFoHKoBAiz1QIDAQABo4IEDjCC BAowHQYDVR0OBBYEFHy0nn1k2pwFv8hy9BV4tX4LMylJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 NjU4MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBhMjk3NGEwNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY2NTgwMDMwLWVhYWMtNDYxNy1i NjI0LTNiMGEyOTc0YTA0ZC82NjU4MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBhMjk3 NGEwNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALHHtgwDQQCAAIwBwMFACYHREAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Sx8Ckan4dyAS2sGoBqr4T5L+fotj1rgPae+Vx8HhFrjsW74en/oDQfljZV+R+WG2 PhrIsbGQNZXVEdW+j9XsmyCnv5OUYEkMzEr1mI9+seR4+FPf19l7u2lO/KXy/n3n VbVIBMoiVZOY9qa3WxFIvbbILQocL/BzbKQ9ckLTHCUnjvvIVL+VYAqpYqn/hVp0 c044+wo/HIMnUpyv2v47TSPO6MC7rkvXIT8+uTrqy4xQ4C/e+WWA6ewIVuSBBPt4 XLHdsvHrWn9LGqwU9Sgxi8RUDzDG5yl8kkctEaRwfvz66pgdgB00h/5dHVsgSQ1Z hQPz00tSnzb9pVsgX/nNHg== -----END CERTIFICATE-----Generated at Tue Jul 28 17:20:11 2026 by rpki-client