$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.cer File: 184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.cer (raw, json) Hash identifier: cH2VPD6HX2ZDbsaFGz67r+zHNN1t6iw81QStgVNBnsQ= Subject key identifier: AF:E2:DF:1C:03:20:CA:50:2C:59:6C:22:B4:F9:17:F7:75:D4:12:88 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F0C0006171DFD46D865F19380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Sep 2026 00:45:12 +0000 Certificate not after: Wed 06 Dec 2028 01:45:12 +0000 Subordinate resources: IP: 173.244.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:00:06:17:1d:fd:46:d8:65:f1:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 3 00:45:12 2026 GMT Not After : Dec 6 01:45:12 2028 GMT Subject: CN=184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:a8:65:4d:af:4f:68:8c:80:d5:47:36:85: 48:c6:1f:bb:c2:23:3c:17:92:81:b7:eb:27:67:26: af:06:a2:c8:ab:1c:0b:02:b5:03:6f:09:1e:0e:37: d7:d9:ce:a8:d4:74:21:65:de:20:79:a5:4c:1a:68: ae:e0:84:98:86:63:47:f0:6a:9b:61:f3:1d:55:cb: 4b:f7:b9:38:d4:26:da:80:32:3b:17:21:c1:71:8f: 71:a5:68:4d:9e:85:c6:5c:46:46:ce:10:06:04:60: e2:a8:c0:a4:43:64:04:1d:3c:07:4a:2b:06:33:7b: 24:65:24:a8:ce:5f:9a:32:7d:3f:c0:b8:a2:23:b1: 9d:01:cf:d4:48:09:3e:b4:2d:24:22:b8:18:22:8d: 22:e1:76:d7:57:f7:07:62:86:da:ba:2a:07:bf:65: 95:40:be:61:77:39:fb:97:f8:f7:19:8f:71:75:b6: a0:1e:66:ff:c0:d3:78:ee:7e:c8:35:7b:de:fd:6c: 61:cb:2d:6f:fc:fc:39:b3:d5:86:5c:e1:0d:0f:6d: f7:6e:f2:88:b1:b8:2c:cb:9c:cf:6c:d8:d0:3f:88: 3e:47:39:2f:0f:38:e4:36:7e:9a:4f:3e:81:a9:39: 52:94:c6:3a:bd:ab:43:be:8f:d1:4e:05:4a:15:09: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E2:DF:1C:03:20:CA:50:2C:59:6C:22:B4:F9:17:F7:75:D4:12:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207/184a5a3c-5c7c-4d8d-8fed-ef2d7d63c207.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.244.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cf:dd:36:16:65:9f:ae:d0:bb:20:6a:8e:e0:49:78:3b:2c: 06:57:94:37:de:99:75:f6:d2:5a:ea:47:87:72:f2:f4:82:f0: 55:bc:81:d1:35:cb:ae:59:76:06:7a:6e:f9:b2:20:13:42:6f: 2b:03:7b:63:68:03:eb:3a:25:d6:55:37:91:d6:f0:b7:cd:a8: f5:e2:bd:50:08:2e:a7:de:42:aa:af:d1:a2:17:06:9d:8a:22: 42:63:a4:60:a4:77:59:ca:8e:69:f4:1a:42:a3:e4:97:e7:a3: ee:48:e7:b3:d2:e7:cd:10:ce:a5:79:04:96:d6:a3:c3:0f:b9: 7a:2f:46:5f:2a:49:97:83:8a:01:49:33:01:4e:9b:7e:95:cd: 13:a3:8f:91:45:3a:fe:53:81:67:57:53:7e:ab:4a:cb:50:74: ce:96:35:39:ff:6b:c6:d8:fa:42:e1:df:a1:c2:83:64:12:ea: 2d:44:9f:ad:ff:46:76:a0:80:68:5a:87:c2:92:ab:30:5f:f5: 9f:2f:bc:c5:65:8b:26:86:1f:ec:2e:9b:2f:3e:3f:56:0e:4c: 77:35:fd:1e:ae:45:ce:0f:e5:79:fe:82:7d:04:b7:f3:89:92: 4f:d6:f8:17:09:0d:e2:be:a0:ee:df:80:fd:c7:67:5a:f9:41: 96:1d:6a:86 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE8MAAYXHf1G2GXxk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwMzAwNDUxMloXDTI4MTIwNjAxNDUxMlowLzEtMCsGA1UEAxMk MTg0YTVhM2MtNWM3Yy00ZDhkLThmZWQtZWYyZDdkNjNjMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhuoZU2vT2iMgNVHNoVIxh+7wiM8F5KBt+sn ZyavBqLIqxwLArUDbwkeDjfX2c6o1HQhZd4geaVMGmiu4ISYhmNH8GqbYfMdVctL 97k41CbagDI7FyHBcY9xpWhNnoXGXEZGzhAGBGDiqMCkQ2QEHTwHSisGM3skZSSo zl+aMn0/wLiiI7GdAc/USAk+tC0kIrgYIo0i4XbXV/cHYobauioHv2WVQL5hdzn7 l/j3GY9xdbagHmb/wNN47n7INXve/Wxhyy1v/Pw5s9WGXOEND233bvKIsbgsy5zP bNjQP4g+RzkvDzjkNn6aTz6BqTlSlMY6vatDvo/RTgVKFQmJCQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK/i3xwDIMpQLFlsIrT5F/d11BKIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x ODRhNWEzYy01YzdjLTRkOGQtOGZlZC1lZjJkN2Q2M2MyMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzE4NGE1YTNjLTVjN2MtNGQ4ZC04 ZmVkLWVmMmQ3ZDYzYzIwNy8xODRhNWEzYy01YzdjLTRkOGQtOGZlZC1lZjJkN2Q2 M2MyMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASt9GAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOc/dNhZln67QuyBqjuBJ eDssBleUN96ZdfbSWupHh3Ly9ILwVbyB0TXLrll2Bnpu+bIgE0JvKwN7Y2gD6zol 1lU3kdbwt82o9eK9UAgup95Cqq/RohcGnYoiQmOkYKR3WcqOafQaQqPkl+ej7kjn s9LnzRDOpXkEltajww+5ei9GXypJl4OKAUkzAU6bfpXNE6OPkUU6/lOBZ1dTfqtK y1B0zpY1Of9rxtj6QuHfocKDZBLqLUSfrf9GdqCAaFqHwpKrMF/1ny+8xWWLJoYf 7C6bLz4/Vg5MdzX9Hq5Fzg/lef6CfQS384mST9b4FwkN4r6g7t+A/cdnWvlBlh1q hg== -----END CERTIFICATE-----Generated at Wed Sep 23 10:05:54 2026 by rpki-client