$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer File: a58da523-4991-493a-95ce-ff1c2b97244a.cer (raw, json) Hash identifier: 4fuU+0VCKCiBpzhwMT87CejSsEQceydN7a5tjsBu/jM= Subject key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EA172E954E4DD46E0E7FA3DA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jul 2026 20:45:11 +0000 Certificate not after: Sat 28 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 18753 IP: 199.34.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:72:e9:54:e4:dd:46:e0:e7:fa:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 26 20:45:11 2026 GMT Not After : Oct 28 20:45:11 2028 GMT Subject: CN=a58da523-4991-493a-95ce-ff1c2b97244a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:17:12:40:41:c8:7a:b4:c8:cb:62:33:77: 53:6a:8d:39:f2:20:76:1b:d4:11:b3:37:53:05:d9: ab:03:ab:98:55:4a:d4:c6:a5:ec:1b:df:99:eb:71: 9a:4d:33:2d:ce:90:92:f2:24:69:ff:52:d1:7f:d2: db:50:9f:85:0a:ee:13:7e:8e:7a:8c:81:48:39:76: 4f:0e:02:44:96:f9:0a:b3:4f:e1:50:bf:17:36:d7: 53:47:b1:49:1c:b0:b3:dd:53:7e:5a:48:a8:01:69: ef:9b:0c:50:69:fe:71:ba:a8:6d:79:98:b7:c0:01: ea:74:6a:c2:d4:24:5a:d9:5e:ff:06:90:1e:c5:f2: d7:d0:27:b1:14:b6:0e:1d:18:86:10:e9:ee:7b:9d: b9:e6:e3:91:18:5f:58:ae:b0:2e:60:e8:ec:d7:56: 44:c2:ab:72:16:d3:16:c6:08:78:13:78:b4:cc:52: 41:29:e4:42:9b:e9:a2:71:f3:12:35:d3:a6:40:7d: e0:7c:f5:5d:14:53:8c:6a:0a:89:23:04:c3:ce:05: 43:5c:56:d1:4a:d1:8e:b1:bd:58:63:9a:05:e6:10: 92:0a:89:96:91:79:95:4c:d6:ed:5a:e0:03:ce:e9: 6d:55:fb:11:d8:02:1a:48:79:bd:a9:96:36:13:7c: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.34.97.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18753 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8a:f9:ce:00:e2:87:7c:c4:ba:df:cc:fa:ae:9f:87:58:40: 97:68:b4:d1:7c:0c:4c:de:0a:46:31:31:c3:82:d3:28:e6:f7: 18:cd:ad:50:b8:83:f8:17:76:54:67:df:3a:55:d9:0e:7b:d4: b0:47:bf:09:ff:18:b5:50:4e:c9:43:e4:6f:e0:25:db:c1:f2: 56:64:89:3a:cd:86:eb:c3:e9:e3:16:7a:4d:b1:92:5f:cd:38: ca:4c:84:03:e3:52:a9:65:2c:35:37:fe:7e:47:23:5d:b9:0e: a9:c8:05:ec:eb:65:ac:d4:21:ad:90:8b:35:94:30:d9:44:56: 71:51:00:27:ab:82:dd:e1:ce:5b:55:cc:c5:b2:34:ee:02:9d: 8d:5c:25:5b:86:04:5b:a2:fd:75:09:4a:8c:88:dd:86:38:4c: 64:6b:28:bc:ec:97:83:54:f6:3d:6c:b1:5e:d3:e7:53:52:dc: a0:71:15:d2:78:98:5c:93:62:83:cd:b7:fb:95:f7:3b:67:72: c0:4f:83:8f:d6:12:93:50:d1:ed:b4:79:4d:ec:6f:5a:81:45: b0:6e:19:c6:22:67:de:cc:a3:06:62:81:8e:93:54:4e:fc:52: f2:f2:4c:f1:4c:e5:a9:56:b0:c7:49:2b:6b:30:f3:36:ce:27: 0b:e0:4d:1d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE6hculU5N1G4Of6PaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyNjIwNDUxMVoXDTI4MTAyODIwNDUxMVowLzEtMCsGA1UEAxMk YTU4ZGE1MjMtNDk5MS00OTNhLTk1Y2UtZmYxYzJiOTcyNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxMXEkBByHq0yMtiM3dTao058iB2G9QRszdT BdmrA6uYVUrUxqXsG9+Z63GaTTMtzpCS8iRp/1LRf9LbUJ+FCu4Tfo56jIFIOXZP DgJElvkKs0/hUL8XNtdTR7FJHLCz3VN+WkioAWnvmwxQaf5xuqhteZi3wAHqdGrC 1CRa2V7/BpAexfLX0CexFLYOHRiGEOnue5255uORGF9YrrAuYOjs11ZEwqtyFtMW xgh4E3i0zFJBKeRCm+micfMSNdOmQH3gfPVdFFOMagqJIwTDzgVDXFbRStGOsb1Y Y5oF5hCSComWkXmVTNbtWuADzultVfsR2AIaSHm9qZY2E3wIHwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHDMYrJTEVzqF2NM1kfnQFvzXAIKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h NThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5NzI0NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E1OGRhNTIzLTQ5OTEtNDkzYS05 NWNlLWZmMWMyYjk3MjQ0YS9hNThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5 NzI0NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHImEwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SUEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAMor5zgDih3zEut/M+q6fh1hAl2i00XwMTN4KRjExw4LTKOb3 GM2tULiD+Bd2VGffOlXZDnvUsEe/Cf8YtVBOyUPkb+Al28HyVmSJOs2G68Pp4xZ6 TbGSX804ykyEA+NSqWUsNTf+fkcjXbkOqcgF7OtlrNQhrZCLNZQw2URWcVEAJ6uC 3eHOW1XMxbI07gKdjVwlW4YEW6L9dQlKjIjdhjhMZGsovOyXg1T2PWyxXtPnU1Lc oHEV0niYXJNig823+5X3O2dywE+Dj9YSk1DR7bR5TexvWoFFsG4ZxiJn3syjBmKB jpNUTvxS8vJM8UzlqVawx0krazDzNs4nC+BNHQ== -----END CERTIFICATE-----Generated at Tue Jul 28 16:08:12 2026 by rpki-client