$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da.cer File: 7403d331-bdc4-4424-9467-f0b9ac3da2da.cer (raw, json) Hash identifier: px+UETmDHOsJqKmokSiSHw1n0mBNp2Lo6hh/Aqe/KW8= Subject key identifier: 19:15:EE:0C:D3:1E:B8:F4:CE:0C:D2:3E:DC:47:71:DB:5D:AF:FA:E2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D67D81DFC08E62BE9DDE2D660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/7403d331-bdc4-4424-9467-f0b9ac3da2da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Apr 2026 12:45:17 +0000 Certificate not after: Sat 08 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 192.104.38.0/24 IP: 2620:b7:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:d8:1d:fc:08:e6:2b:e9:dd:e2:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 5 12:45:17 2026 GMT Not After : Jul 8 12:45:17 2028 GMT Subject: CN=7403d331-bdc4-4424-9467-f0b9ac3da2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:14:89:e3:65:76:40:5e:4c:91:1f:53:29: 5d:1e:06:ca:ff:b0:da:ef:de:13:a2:a4:8e:26:9a: a2:01:34:89:87:98:1f:69:49:c4:e2:c0:58:f8:ef: fe:3d:69:86:dd:8e:00:03:09:0f:4d:ff:a9:08:49: 1b:1e:4a:4b:bd:5a:c9:b2:19:f9:5c:b9:33:7e:a5: b0:61:00:31:44:59:6b:24:b3:af:d5:9f:a1:6c:57: dc:bc:58:41:74:ae:38:ca:37:25:79:70:9e:e8:28: 8b:c3:95:d4:43:fa:f8:42:55:5c:36:a6:be:55:4d: f6:48:06:6d:b1:25:29:2a:53:01:92:63:de:b0:c1: 4e:de:e0:3b:45:51:0b:00:db:f1:e8:76:31:d2:28: 50:51:96:d9:8f:eb:ce:d0:e6:27:5c:59:17:a6:78: ff:4a:6d:f2:ae:fe:0a:27:48:b7:75:35:c0:13:fa: 95:bc:53:c2:a6:e2:5b:28:96:08:05:79:29:7a:b4: c3:06:ad:42:6c:85:c3:23:b9:91:64:15:3d:d2:7f: f7:dd:05:eb:cb:5e:eb:9e:3a:80:c6:bc:f5:c6:41: ef:f1:da:7b:b3:5b:45:ee:61:c2:70:e1:05:9c:4f: c1:a6:23:fb:54:4b:dd:f1:ad:ab:7e:93:92:16:fe: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:EE:0C:D3:1E:B8:F4:CE:0C:D2:3E:DC:47:71:DB:5D:AF:FA:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/7403d331-bdc4-4424-9467-f0b9ac3da2da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.104.38.0/24 IPv6: 2620:b7:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9b:2f:a2:95:2d:25:ac:4d:bb:66:5a:98:42:f1:9d:07:91: bd:ff:a9:31:0e:99:f3:c8:79:ce:55:35:dd:fe:c9:17:d8:8d: d9:5e:de:02:16:ce:47:6d:94:e6:3e:db:5e:3f:7f:46:df:88: 58:ea:33:03:2a:3f:02:95:b7:14:5f:fc:c8:90:75:68:6c:e1: 99:8d:a9:c6:87:d7:d5:69:31:ef:40:c7:d8:30:67:b0:db:c4: 55:c5:c0:7b:76:86:5f:7a:b0:83:d2:f3:b6:e0:f6:72:de:46: 7e:fe:a6:ea:44:16:2b:54:37:d9:1e:c3:05:57:7b:2a:60:f2: 11:13:30:41:9e:1b:08:07:73:c5:e2:36:d7:ab:8e:93:48:35: 34:81:e6:15:e6:84:15:87:bb:e0:3c:3e:55:57:0e:ef:e6:9a: fb:12:99:27:bd:1f:7b:2d:c8:97:9e:6d:60:c5:a8:1d:36:31: 76:79:f4:3a:2b:49:28:84:f1:04:e4:cb:f9:72:25:a3:f3:4e: 2c:06:87:6f:1c:66:58:ac:8d:66:e2:07:13:e7:c9:45:eb:13: 46:ef:f6:30:2f:e2:1f:99:b3:c5:70:16:79:f3:b0:44:07:d6: 6a:e9:51:f6:99:85:ed:8e:e5:25:fb:1a:b6:6a:38:9d:f8:e6: 3b:95:bf:bb -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWE1n2B38COYr6d3i1mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDQwNTEyNDUxN1oXDTI4MDcwODEyNDUxN1owLzEtMCsGA1UEAxMk NzQwM2QzMzEtYmRjNC00NDI0LTk0NjctZjBiOWFjM2RhMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihsUieNldkBeTJEfUyldHgbK/7Da794ToqSO JpqiATSJh5gfaUnE4sBY+O/+PWmG3Y4AAwkPTf+pCEkbHkpLvVrJshn5XLkzfqWw YQAxRFlrJLOv1Z+hbFfcvFhBdK44yjcleXCe6CiLw5XUQ/r4QlVcNqa+VU32SAZt sSUpKlMBkmPesMFO3uA7RVELANvx6HYx0ihQUZbZj+vO0OYnXFkXpnj/Sm3yrv4K J0i3dTXAE/qVvFPCpuJbKJYIBXkperTDBq1CbIXDI7mRZBU90n/33QXry17rnjqA xrz1xkHv8dp7s1tF7mHCcOEFnE/BpiP7VEvd8a2rfpOSFv5FHwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFBkV7gzTHrj0zgzSPtxHcdtdr/riMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 NDAzZDMzMS1iZGM0LTQ0MjQtOTQ2Ny1mMGI5YWMzZGEyZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzc0MDNkMzMxLWJkYzQtNDQyNC05 NDY3LWYwYjlhYzNkYTJkYS83NDAzZDMzMS1iZGM0LTQ0MjQtOTQ2Ny1mMGI5YWMz ZGEyZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAaCYwDwQCAAIwCQMHACYgALdAADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQASmy+ilS0lrE27ZlqYQvGdB5G9/6kxDpnzyHnOVTXd/skX2I3ZXt4CFs5HbZTm PtteP39G34hY6jMDKj8ClbcUX/zIkHVobOGZjanGh9fVaTHvQMfYMGew28RVxcB7 doZferCD0vO24PZy3kZ+/qbqRBYrVDfZHsMFV3sqYPIREzBBnhsIB3PF4jbXq46T SDU0geYV5oQVh7vgPD5VVw7v5pr7EpknvR97LciXnm1gxagdNjF2efQ6K0kohPEE 5Mv5ciWj804sBodvHGZYrI1m4gcT58lF6xNG7/YwL+IfmbPFcBZ587BEB9Zq6VH2 mYXtjuUl+xq2ajid+OY7lb+7 -----END CERTIFICATE-----Generated at Fri Apr 17 12:39:09 2026 by rpki-client