$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer File: 1ff04835-864a-40da-a12f-dcad0faabb8c.cer (raw, json) Hash identifier: TO7nz0HeA22HEdB7ZcjH41wFVVCcANaYwVM+ZMvXlCs= Subject key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EA172E91FC7D2074B5CAA3CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jul 2026 20:45:11 +0000 Certificate not after: Sat 28 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 104.152.88.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:72:e9:1f:c7:d2:07:4b:5c:aa:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 26 20:45:11 2026 GMT Not After : Oct 28 20:45:11 2028 GMT Subject: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:d6:f2:02:93:67:db:d8:3b:f6:f1:3a:ed: 29:ab:a0:bd:fb:4b:10:45:56:16:2a:be:72:86:b7: 3c:08:3d:26:d4:ff:17:10:3d:b9:0e:c3:f4:97:bf: 81:96:f7:08:ac:8d:7d:f7:60:5f:cd:f4:d5:d9:58: 23:b1:f6:48:05:b0:48:2a:d0:fb:8d:95:df:1f:c9: b9:a7:0c:3c:d6:68:a6:eb:8e:52:c7:5f:1e:52:a1: 1d:d6:fa:e5:80:cb:7e:59:e9:34:dd:03:a8:af:8d: 8c:db:b2:9f:a3:c0:9d:65:5a:b8:77:8f:d8:d4:b3: 4c:59:76:85:d0:cb:75:d5:80:df:a3:06:e6:55:ec: 2d:fa:37:a5:5d:6c:58:26:57:74:bf:4f:2b:e4:0e: a1:2e:55:ee:2e:f4:a4:2c:74:e2:f8:6e:13:48:41: 3d:3e:3c:ff:40:93:52:51:8b:3c:1b:7c:76:1e:fc: 36:b1:6c:bb:32:01:4e:b3:c8:93:34:b9:0a:6b:c7: 65:66:89:85:60:71:1a:80:95:b3:4e:32:f3:79:6a: b2:f4:50:9c:e7:79:73:6a:26:7f:53:3f:fb:09:a4: 2f:7d:0c:77:5d:ad:84:ea:76:ca:34:d8:4a:67:84: 97:88:19:a0:fa:ff:8d:45:6c:7d:b3:81:00:27:cf: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.152.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:55:55:98:6a:84:ab:93:80:89:c8:c9:b8:b9:91:c6:02:62: 6a:71:2f:7f:6c:fd:eb:9f:e2:43:83:a7:a2:0b:2d:c3:75:3c: 2d:ba:70:75:54:38:e7:4e:2a:34:34:b0:6b:5c:ec:eb:6d:9b: 2d:67:3d:25:24:ad:c3:80:61:12:3a:a6:e9:8f:1b:ff:55:f1: fb:c1:60:85:69:90:f4:35:af:0b:bd:48:c5:3d:c0:ef:ba:fa: c5:49:4e:c0:12:d2:4b:c1:bd:a3:04:e1:72:f2:da:c7:23:70: cb:41:b1:5f:9d:e1:18:68:34:2e:d2:df:ae:5e:ca:6f:12:5b: 45:82:d9:f3:18:38:bf:a9:75:ee:76:38:2a:db:36:13:e7:9c: ff:d5:b7:72:27:c0:ef:ee:0e:6f:f6:12:3a:4a:e7:3b:18:48: 8d:25:31:28:00:34:05:6b:cb:ac:ee:e1:3a:1f:dd:78:86:c8: 76:2b:1c:f0:46:f4:c8:d1:d1:ee:e2:52:bf:d2:8d:e8:ee:32: 0b:4d:6f:14:c5:3c:c4:19:00:cc:25:b7:d4:66:4d:c7:d0:af: 0a:82:8d:37:9c:45:bd:6a:36:47:b8:a4:97:87:d4:b7:03:90: bf:e1:6d:ff:53:d7:0d:a7:43:00:50:c0:67:5a:08:80:0f:f5: 2e:b0:d4:10 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE6hcukfx9IHS1yqPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyNjIwNDUxMVoXDTI4MTAyODIwNDUxMVowLzEtMCsGA1UEAxMk MWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFiYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG/W8gKTZ9vYO/bxOu0pq6C9+0sQRVYWKr5y hrc8CD0m1P8XED25DsP0l7+BlvcIrI1992BfzfTV2VgjsfZIBbBIKtD7jZXfH8m5 pww81mim645Sx18eUqEd1vrlgMt+Wek03QOor42M27Kfo8CdZVq4d4/Y1LNMWXaF 0Mt11YDfowbmVewt+jelXWxYJld0v08r5A6hLlXuLvSkLHTi+G4TSEE9Pjz/QJNS UYs8G3x2Hvw2sWy7MgFOs8iTNLkKa8dlZomFYHEagJWzTjLzeWqy9FCc53lzaiZ/ Uz/7CaQvfQx3Xa2E6nbKNNhKZ4SXiBmg+v+NRWx9s4EAJ8+QpQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHMP7lS8ctHOKpw0fce/IFb08puEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x ZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFmZjA0ODM1LTg2NGEtNDBkYS1h MTJmLWRjYWQwZmFhYmI4Yy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZh YWJiOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJomFgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJ1VVmGqEq5OAicjJuLmR xgJianEvf2z965/iQ4Onogstw3U8LbpwdVQ4504qNDSwa1zs622bLWc9JSStw4Bh Ejqm6Y8b/1Xx+8FghWmQ9DWvC71IxT3A77r6xUlOwBLSS8G9owThcvLaxyNwy0Gx X53hGGg0LtLfrl7KbxJbRYLZ8xg4v6l17nY4Kts2E+ec/9W3cifA7+4Ob/YSOkrn OxhIjSUxKAA0BWvLrO7hOh/deIbIdisc8Eb0yNHR7uJSv9KN6O4yC01vFMU8xBkA zCW31GZNx9CvCoKNN5xFvWo2R7ikl4fUtwOQv+Ft/1PXDadDAFDAZ1oIgA/1LrDU EA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:48:13 2026 by rpki-client