$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a10591f-1113-4aab-bb46-c3b1421bcd7f.cer File: 7a10591f-1113-4aab-bb46-c3b1421bcd7f.cer (raw, json) Hash identifier: 6rA0RZ9xK9k113YgETvm+f3d7N4n1XnZzFLrg2wtESY= Subject key identifier: A2:1D:F0:84:78:1F:3D:DA:E0:24:15:F3:FB:81:D3:3C:A5:3C:C1:A7 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1E8E775B5C9143081BAEEF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a10591f-1113-4aab-bb46-c3b1421bcd7f/7a10591f-1113-4aab-bb46-c3b1421bcd7f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a10591f-1113-4aab-bb46-c3b1421bcd7f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 16:16:45 +0000 Certificate not after: Tue 12 Dec 2028 17:16:45 +0000 Subordinate resources: AS: 394471 IP: 66.97.184.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:8e:77:5b:5c:91:43:08:1b:ae:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 16:16:45 2026 GMT Not After : Dec 12 17:16:45 2028 GMT Subject: CN=7a10591f-1113-4aab-bb46-c3b1421bcd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:77:fe:78:c8:b4:63:20:44:dd:e0:18:b9:78: f2:f2:da:27:31:88:11:ac:76:ca:0f:da:e0:7d:97: ea:e6:d7:67:93:83:d1:cf:27:54:24:e2:ef:ef:99: 49:9c:9d:a6:2c:ca:e7:a3:b3:70:11:0f:f7:14:04: da:f8:f4:c4:c9:68:eb:f3:58:2c:fc:a4:7f:de:ac: 24:93:dd:47:c9:11:1f:44:65:f8:13:90:61:98:64: ba:84:de:52:fa:c9:d3:6d:47:95:0d:9c:bd:f8:22: 79:10:1b:18:8a:11:dd:83:12:86:c2:5c:02:42:ba: b9:4e:98:2b:43:a6:43:e6:a9:94:43:02:be:35:ac: e3:04:d7:af:11:14:7e:07:fa:0c:c8:df:90:7f:fc: 3d:6c:54:1b:5e:ba:7b:d3:8a:fe:c4:ec:5a:32:9c: 28:1f:8d:f5:f6:30:dd:42:5d:2b:3a:a3:cc:cd:30: b1:e0:a1:72:51:6c:8d:25:5c:4d:6a:0f:de:41:48: 41:f2:e1:8b:cf:d6:21:c4:b6:ee:c3:aa:40:73:0f: 98:08:3c:af:50:eb:10:1f:97:f0:23:33:96:92:b5: 5b:94:74:a5:1d:8a:0e:f5:48:8c:1c:5b:28:27:66: b7:c5:ef:d5:31:92:c1:06:dd:b0:dc:6a:e8:16:ec: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1D:F0:84:78:1F:3D:DA:E0:24:15:F3:FB:81:D3:3C:A5:3C:C1:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a10591f-1113-4aab-bb46-c3b1421bcd7f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a10591f-1113-4aab-bb46-c3b1421bcd7f/7a10591f-1113-4aab-bb46-c3b1421bcd7f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.97.184.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394471 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0f:ce:0c:a0:3d:41:d4:5c:3e:03:d0:dc:42:58:2c:ad:24: a1:4c:0f:c7:e8:0e:d5:6d:bb:ed:32:3c:b0:27:12:cf:95:61: 43:23:c8:ee:e4:86:2d:74:84:b3:bc:cb:12:b4:94:89:17:8c: 1e:11:c1:42:b7:c8:aa:92:ac:5a:ba:59:ee:c7:92:44:3a:93: 3b:ff:27:7a:e9:a3:0d:24:6a:aa:37:c0:14:39:5a:25:90:8e: 42:0d:67:ef:48:0f:85:5c:95:40:19:8e:dd:10:9b:ab:d9:09: 39:4f:75:1a:57:db:6a:f0:cd:6c:47:58:45:4b:c5:e5:d8:7d: 22:99:dc:f1:66:d4:cb:5d:d6:6f:b9:91:15:a4:e5:48:dd:86: e5:78:5c:36:5c:52:18:7b:9f:f6:9e:78:ee:5c:51:13:1f:29: 62:d5:10:36:27:82:27:6f:1c:31:56:e6:97:d0:35:53:3a:33: 78:f2:27:5c:c3:14:7e:59:bc:c2:da:38:bd:01:17:23:4b:57: c7:fa:c1:51:29:7a:96:48:01:64:cd:09:b2:5a:74:74:08:67: 45:4f:1d:25:cb:40:b7:f5:ba:72:a9:7e:cf:5b:f9:10:25:2a: e2:35:37:3b:e1:da:e1:78:c6:2e:b7:07:b9:10:d9:94:6b:fb: 00:82:20:52 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE8ejndbXJFDCBuu74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTE2MTY0NVoXDTI4MTIxMjE3MTY0NVowLzEtMCsGA1UEAxMk N2ExMDU5MWYtMTExMy00YWFiLWJiNDYtYzNiMTQyMWJjZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Hf+eMi0YyBE3eAYuXjy8tonMYgRrHbKD9rg fZfq5tdnk4PRzydUJOLv75lJnJ2mLMrno7NwEQ/3FATa+PTEyWjr81gs/KR/3qwk k91HyREfRGX4E5BhmGS6hN5S+snTbUeVDZy9+CJ5EBsYihHdgxKGwlwCQrq5Tpgr Q6ZD5qmUQwK+NazjBNevERR+B/oMyN+Qf/w9bFQbXrp704r+xOxaMpwoH4319jDd Ql0rOqPMzTCx4KFyUWyNJVxNag/eQUhB8uGLz9YhxLbuw6pAcw+YCDyvUOsQH5fw IzOWkrVblHSlHYoO9UiMHFsoJ2a3xe/VMZLBBt2w3GroFuxizwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKId8IR4Hz3a4CQV8/uB0zylPMGnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 YTEwNTkxZi0xMTEzLTRhYWItYmI0Ni1jM2IxNDIxYmNkN2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzdhMTA1OTFmLTExMTMtNGFhYi1i YjQ2LWMzYjE0MjFiY2Q3Zi83YTEwNTkxZi0xMTEzLTRhYWItYmI0Ni1jM2IxNDIx YmNkN2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJCYbgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgTnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIUPzgygPUHUXD4D0NxCWCytJKFMD8foDtVtu+0yPLAnEs+V YUMjyO7khi10hLO8yxK0lIkXjB4RwUK3yKqSrFq6We7HkkQ6kzv/J3rpow0kaqo3 wBQ5WiWQjkINZ+9ID4VclUAZjt0Qm6vZCTlPdRpX22rwzWxHWEVLxeXYfSKZ3PFm 1Mtd1m+5kRWk5UjdhuV4XDZcUhh7n/aeeO5cURMfKWLVEDYngidvHDFW5pfQNVM6 M3jyJ1zDFH5ZvMLaOL0BFyNLV8f6wVEpepZIAWTNCbJadHQIZ0VPHSXLQLf1unKp fs9b+RAlKuI1Nzvh2uF4xi63B7kQ2ZRr+wCCIFI= -----END CERTIFICATE-----Generated at Mon Sep 21 06:41:05 2026 by rpki-client