$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.cer File: 1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.cer (raw, json) Hash identifier: YFJCY+nxd9GQJJ/o94X3JIX15UGOt/IM7CcdPZWW1uA= Subject key identifier: 63:E3:52:4F:21:0C:83:3D:D3:63:4B:A9:07:B0:61:AA:0F:11:93:61 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F172AC30653F9E56376B09B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Sep 2026 00:45:12 +0000 Certificate not after: Sun 10 Dec 2028 01:45:12 +0000 Subordinate resources: IP: 141.161.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:2a:c3:06:53:f9:e5:63:76:b0:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 7 00:45:12 2026 GMT Not After : Dec 10 01:45:12 2028 GMT Subject: CN=1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:a2:17:dd:6a:0b:ab:8b:8e:2e:4e:75:90: e1:28:53:47:61:1e:0d:67:c3:b5:c4:67:27:20:3d: 05:28:5f:88:ef:fa:2d:80:03:21:66:6d:3d:51:26: a4:6f:1e:94:1f:95:a0:18:64:f0:5b:68:aa:38:c4: c5:11:8a:0b:4e:60:93:c0:21:ae:fd:c0:e6:09:26: 30:49:e0:ae:3a:f6:77:c1:58:56:a9:08:4b:e6:c9: 66:5f:5d:de:82:a9:4b:ca:fc:b7:07:3f:ca:95:59: c2:8a:30:5b:2f:dd:89:a2:fd:c8:68:a9:f8:66:ec: 10:98:e7:95:9b:68:53:ac:45:83:9f:51:c7:cc:05: aa:8c:f1:18:02:b1:06:1b:d9:67:7f:95:12:38:51: 33:0d:a2:17:7e:31:cf:3c:9a:1f:d8:79:ca:6e:6b: 8b:61:6b:f5:44:75:67:a0:75:64:71:ef:80:97:68: 24:00:c8:06:b5:b5:9c:af:c6:69:90:5c:cd:f2:0b: 2a:b8:4b:79:18:f7:ad:4c:e2:5e:b2:bd:29:53:46: d4:e5:49:d8:e3:7a:ad:73:1a:16:c0:43:6a:e9:bb: dd:f7:f8:e4:fa:89:2e:1e:31:bc:9c:78:93:f8:9b: ef:2d:3e:9b:e0:17:71:23:1c:0b:47:73:aa:1f:04: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:52:4F:21:0C:83:3D:D3:63:4B:A9:07:B0:61:AA:0F:11:93:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 141.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ae:eb:b4:31:cb:a1:18:ca:72:de:f2:8a:fd:5a:cc:cf:44: 4f:0b:a1:07:d7:42:c0:91:27:4a:a2:96:c5:f0:73:a2:32:59: 8b:ea:9a:e0:84:49:cf:b1:15:9b:fb:6e:0c:6d:d5:91:d8:63: 58:a4:91:c1:99:37:01:62:69:0f:0a:6b:c1:f9:84:22:96:1c: 40:8d:a0:9c:1a:24:c6:5e:e3:35:8f:21:19:b0:3f:cb:1d:ac: 36:56:fd:25:2c:15:01:93:8c:65:eb:a8:1d:55:f4:fc:de:88: 74:57:45:1a:5b:4d:af:6f:06:6f:10:5d:a3:a6:92:a9:24:57: 85:a6:11:37:95:e5:a1:88:95:5b:ee:32:8c:2a:ad:2e:b6:aa: 9e:00:d9:b6:14:c8:3b:16:62:0b:40:5e:af:94:89:6e:ce:54: f1:93:fe:3a:62:a9:e5:f9:1c:2f:7b:3f:57:1c:50:68:d5:45: 5a:7a:bb:71:56:b7:9b:78:60:01:2e:32:14:1d:dd:aa:ea:12: d7:de:95:dc:4d:17:28:37:0c:ad:76:ee:d2:27:eb:15:4f:ce: 98:e5:09:f1:d8:92:5c:84:e0:dc:a8:a4:9d:3a:34:7c:ab:a4: 31:69:2f:68:19:99:5c:b5:fb:d7:38:09:40:fd:d3:a6:50:51: 9b:49:1e:5c -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE8XKsMGU/nlY3awm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwNzAwNDUxMloXDTI4MTIxMDAxNDUxMlowLzEtMCsGA1UEAxMk MWNmNzU2NGItYzZiYy00Yjc4LTljNTEtZTViNTJlYmQ4MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hmiF91qC6uLji5OdZDhKFNHYR4NZ8O1xGcn ID0FKF+I7/otgAMhZm09USakbx6UH5WgGGTwW2iqOMTFEYoLTmCTwCGu/cDmCSYw SeCuOvZ3wVhWqQhL5slmX13egqlLyvy3Bz/KlVnCijBbL92Jov3IaKn4ZuwQmOeV m2hTrEWDn1HHzAWqjPEYArEGG9lnf5USOFEzDaIXfjHPPJof2HnKbmuLYWv1RHVn oHVkce+Al2gkAMgGtbWcr8ZpkFzN8gsquEt5GPetTOJesr0pU0bU5UnY43qtcxoW wENq6bvd9/jk+okuHjG8nHiT+JvvLT6b4BdxIxwLR3OqHwQJbQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFGPjUk8hDIM902NLqQewYaoPEZNhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x Y2Y3NTY0Yi1jNmJjLTRiNzgtOWM1MS1lNWI1MmViZDgyYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFjZjc1NjRiLWM2YmMtNGI3OC05 YzUxLWU1YjUyZWJkODJhYi8xY2Y3NTY0Yi1jNmJjLTRiNzgtOWM1MS1lNWI1MmVi ZDgyYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCNoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7ruu0McuhGMpy3vKK/VrM z0RPC6EH10LAkSdKopbF8HOiMlmL6prghEnPsRWb+24MbdWR2GNYpJHBmTcBYmkP CmvB+YQilhxAjaCcGiTGXuM1jyEZsD/LHaw2Vv0lLBUBk4xl66gdVfT83oh0V0Ua W02vbwZvEF2jppKpJFeFphE3leWhiJVb7jKMKq0utqqeANm2FMg7FmILQF6vlIlu zlTxk/46Yqnl+Rwvez9XHFBo1UVaertxVrebeGABLjIUHd2q6hLX3pXcTRcoNwyt du7SJ+sVT86Y5Qnx2JJchODcqKSdOjR8q6QxaS9oGZlctfvXOAlA/dOmUFGbSR5c -----END CERTIFICATE-----Generated at Tue Sep 22 13:12:55 2026 by rpki-client