$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer File: ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer (raw, json) Hash identifier: wNSn91cqZlexBWpk3GzpCxxSkb+CPTfzSh3dOewPj7k= Subject key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584E226CC99A2AF7A6444C1D3E82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jun 2026 08:45:11 +0000 Certificate not after: Wed 13 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 170.52.20.0 -- 170.52.40.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:22:6c:c9:9a:2a:f7:a6:44:4c:1d:3e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 11 08:45:11 2026 GMT Not After : Sep 13 08:45:11 2028 GMT Subject: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:75:28:11:fd:e0:bf:1d:f2:da:d1:7f:76: 5f:69:ba:78:a7:56:c5:a8:b7:90:b4:5a:0e:9f:83: de:68:4c:2d:2c:fc:15:d7:a8:8f:71:65:68:ef:be: cf:d9:90:37:61:00:f8:c8:ab:ac:62:b1:1b:74:12: 97:18:d6:21:19:b7:b5:e8:34:9a:f4:b6:2a:24:98: 43:51:b8:bc:e7:b7:a2:6f:6a:20:4b:8c:c9:89:7a: 35:f1:51:90:99:b9:41:59:bd:cc:1e:a3:a2:98:7d: 9c:d3:14:7d:e7:3e:79:60:b9:76:6c:65:73:93:9d: 44:f1:1e:0b:d2:fa:45:98:ec:40:e4:6b:95:95:ac: 50:11:c4:71:5e:4a:4b:c3:97:36:d9:ae:2e:f1:68: 0f:10:d1:c2:05:57:5a:5e:13:f6:2c:5f:ef:d8:b0: 94:63:37:81:4d:45:6d:6e:b0:eb:19:c5:7c:18:73: c9:f1:9b:81:4f:46:69:4b:5f:89:81:dc:d5:ff:58: 47:1b:9f:d2:b3:be:7c:ef:fe:c4:d2:b2:fe:e3:13: a9:8c:ce:16:09:fe:71:4f:90:3f:7e:df:63:6a:57: d5:cd:54:6d:74:59:c7:cc:b1:3c:ba:e8:d1:16:71: 59:65:00:c3:ce:35:14:c9:3c:a7:ca:a8:12:85:24: dc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 170.52.20.0-170.52.40.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7e:17:36:5d:93:23:e0:8c:1a:c8:76:77:fe:cf:a9:74:d9: b2:1b:c2:d1:2a:db:b1:15:00:25:0b:ff:39:af:51:79:5b:54: ab:6e:36:eb:ae:e1:22:8a:ae:e7:7c:be:07:13:ce:97:e3:08: 0d:0b:71:60:82:27:13:ff:89:4a:42:c1:6f:ab:d4:79:2a:be: 1e:8f:fa:7f:f9:95:a6:40:16:16:dc:e6:62:0f:49:09:24:0a: 39:c2:5f:ef:88:8f:7b:0b:65:76:31:c4:05:27:07:59:87:af: c2:2a:21:d9:0d:0f:f6:d5:2c:9a:67:34:d6:bf:07:c2:0a:1f: 1a:39:47:d4:e7:78:fd:a5:23:a5:2a:1c:ca:16:ec:f2:0a:28: c7:1d:2d:80:ab:07:46:3b:ae:ff:03:9e:5a:4e:04:36:0b:8b: 3c:19:69:52:82:85:32:01:13:92:f3:e8:31:7c:34:bd:4f:07: a7:06:07:80:4c:03:b7:d5:2b:b0:b1:9f:4e:e5:34:61:c1:f6: 44:f3:c7:c7:48:96:bd:c6:1a:88:2f:28:f5:df:d3:55:a2:67: 5c:f3:e6:fc:99:0d:ce:0f:ed:02:6d:ab:b3:d4:97:f1:a4:2f: cd:c0:d5:f2:14:a8:7d:49:ed:7c:ab:8a:9c:ad:0d:0d:18:cc: 58:c3:c2:47 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE4ibMmaKvemREwdPoIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDYxMTA4NDUxMVoXDTI4MDkxMzA4NDUxMVowLzEtMCsGA1UEAxMk ZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PB1KBH94L8d8trRf3Zfabp4p1bFqLeQtFoO n4PeaEwtLPwV16iPcWVo777P2ZA3YQD4yKusYrEbdBKXGNYhGbe16DSa9LYqJJhD Ubi857eib2ogS4zJiXo18VGQmblBWb3MHqOimH2c0xR95z55YLl2bGVzk51E8R4L 0vpFmOxA5GuVlaxQEcRxXkpLw5c22a4u8WgPENHCBVdaXhP2LF/v2LCUYzeBTUVt brDrGcV8GHPJ8ZuBT0ZpS1+JgdzV/1hHG5/Ss7587/7E0rL+4xOpjM4WCf5xT5A/ ft9jalfVzVRtdFnHzLE8uujRFnFZZQDDzjUUyTynyqgShSTcQwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFBfTgyGnPOYnbQfbonAtG5XC7i8NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l ZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2VlODZiYWIwLWVmN2UtNGUyMy04 NGZlLWJjZDVjZWU4NjliYi9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2Vl ODY5YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAqo0FAMEAKo0KDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSfhc2XZMj 4IwayHZ3/s+pdNmyG8LRKtuxFQAlC/85r1F5W1SrbjbrruEiiq7nfL4HE86X4wgN C3FggicT/4lKQsFvq9R5Kr4ej/p/+ZWmQBYW3OZiD0kJJAo5wl/viI97C2V2McQF JwdZh6/CKiHZDQ/21SyaZzTWvwfCCh8aOUfU53j9pSOlKhzKFuzyCijHHS2AqwdG O67/A55aTgQ2C4s8GWlSgoUyAROS8+gxfDS9TwenBgeATAO31SuwsZ9O5TRhwfZE 88fHSJa9xhqILyj139NVomdc8+b8mQ3OD+0Cbauz1JfxpC/NwNXyFKh9Se18q4qc rQ0NGMxYw8JH -----END CERTIFICATE-----Generated at Sat Jun 13 07:05:23 2026 by rpki-client