$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer File: fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer (raw, json) Hash identifier: ulX/rrfzfTI8ytKVzvSKC7yfvmB4XhRCqMmlfJYdsUw= Subject key identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F19F570927CAEA0A464FD0A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 00:45:11 +0000 Certificate not after: Mon 11 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 198.202.18.0/24 IP: 2604:12e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:f5:70:92:7c:ae:a0:a4:64:fd:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 8 00:45:11 2026 GMT Not After : Dec 11 01:45:11 2028 GMT Subject: CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:40:84:2d:c1:5b:21:e1:77:e9:23:1b:fd: 85:dd:77:c0:64:8d:a4:f8:19:df:50:78:66:b4:05: a9:53:de:a7:dd:38:86:7d:17:57:b3:46:be:ed:d2: 40:40:bc:1a:53:e4:60:36:8f:e8:b6:48:d0:24:5a: 61:61:1a:bb:36:ff:fd:00:a3:91:df:50:7b:ec:ce: 17:48:22:44:b4:7b:96:19:fc:fc:76:ea:ce:b4:4f: 7d:18:1e:cc:cf:a9:1f:88:31:81:f7:24:12:24:4a: 99:37:f7:6d:c2:63:dc:79:12:ed:94:4e:6f:e7:e5: 2a:65:16:1c:73:d3:27:cd:7f:c5:a2:c0:84:c9:22: 23:31:d4:5b:c8:fd:77:84:cd:99:e8:95:0c:49:53: fc:d6:30:39:e9:00:94:e9:e9:ff:70:0b:75:60:4f: 7d:86:ec:b9:3a:67:e8:0b:50:d0:3e:8f:22:05:63: 0c:1c:6c:a7:66:ec:0e:4a:28:79:cc:84:a6:50:29: 5b:37:68:60:eb:f8:1c:a7:34:a7:b1:4d:cd:2a:33: 4f:05:a1:76:0c:1b:1a:ac:5c:8e:d6:9b:e2:fc:75: c4:8b:fc:cb:46:4d:fc:ff:de:5a:44:70:e9:0b:53: 17:3a:56:5a:75:cd:bc:d9:6c:4f:cf:6a:fe:93:b0: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.202.18.0/24 IPv6: 2604:12e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:49:d0:d6:3a:b2:04:b2:1f:c3:d3:1d:76:af:3c:26:1b:64: 50:73:6f:54:db:8c:c7:36:dc:3d:14:85:e7:ce:e4:4b:8c:6d: 35:78:89:42:07:62:37:7b:c4:cd:9e:5a:6b:6e:cf:12:89:34: c1:08:2b:1d:1f:7e:53:4e:5a:b2:01:3b:75:92:a9:1b:c6:f3: d5:dd:be:26:e6:17:3f:54:87:71:de:0c:ad:f8:c7:85:2e:22: 2d:8c:60:1d:73:a6:9e:99:69:b1:01:5a:2e:2e:3b:ce:7b:96: f4:b2:4c:94:2f:ad:ca:eb:bd:99:d1:28:d7:48:f1:53:63:27: c3:70:e3:2d:15:ff:a9:50:2f:bb:0f:34:c4:91:65:f7:6e:b1: 55:7d:e5:0a:a9:98:14:31:ba:90:8c:03:b3:63:2c:06:29:1a: e2:5f:64:6e:54:0c:8e:82:ef:76:b3:2a:c6:c6:5b:c9:3d:93: 37:1a:41:2c:12:0d:c2:66:0f:e7:84:f8:5e:88:97:7b:26:a8: 50:65:b9:d2:b2:ae:4a:46:7d:25:88:ce:f5:0f:fd:86:bf:72: 29:24:e1:4d:b5:04:d9:89:e8:d2:9f:49:90:18:f3:5c:71:9e: e5:aa:31:2d:36:95:d0:b4:57:3a:5f:92:e5:ea:4d:c2:c5:a4: e0:6d:db:d2 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE8Z9XCSfK6gpGT9CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwODAwNDUxMVoXDTI4MTIxMTAxNDUxMVowLzEtMCsGA1UEAxMk ZmIwYzZiYjYtYWJmNi00NzRkLTg1NDctMjk3NWVmYWYzNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKhAhC3BWyHhd+kjG/2F3XfAZI2k+BnfUHhm tAWpU96n3TiGfRdXs0a+7dJAQLwaU+RgNo/otkjQJFphYRq7Nv/9AKOR31B77M4X SCJEtHuWGfz8durOtE99GB7Mz6kfiDGB9yQSJEqZN/dtwmPceRLtlE5v5+UqZRYc c9MnzX/FosCEySIjMdRbyP13hM2Z6JUMSVP81jA56QCU6en/cAt1YE99huy5Omfo C1DQPo8iBWMMHGynZuwOSih5zISmUClbN2hg6/gcpzSnsU3NKjNPBaF2DBsarFyO 1pvi/HXEi/zLRk38/95aRHDpC1MXOlZadc282WxPz2r+k7C9yQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFGBQJLC9FwllrTdN0qGRGrtKfGOKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m YjBjNmJiNi1hYmY2LTQ3NGQtODU0Ny0yOTc1ZWZhZjM1ZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZiMGM2YmI2LWFiZjYtNDc0ZC04 NTQ3LTI5NzVlZmFmMzVlNy9mYjBjNmJiNi1hYmY2LTQ3NGQtODU0Ny0yOTc1ZWZh ZjM1ZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADGyhIwDQQCAAIwBwMFACYEEuAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA T0nQ1jqyBLIfw9Mddq88JhtkUHNvVNuMxzbcPRSF587kS4xtNXiJQgdiN3vEzZ5a a27PEok0wQgrHR9+U05asgE7dZKpG8bz1d2+JuYXP1SHcd4MrfjHhS4iLYxgHXOm nplpsQFaLi47znuW9LJMlC+tyuu9mdEo10jxU2Mnw3DjLRX/qVAvuw80xJFl926x VX3lCqmYFDG6kIwDs2MsBika4l9kblQMjoLvdrMqxsZbyT2TNxpBLBINwmYP54T4 XoiXeyaoUGW50rKuSkZ9JYjO9Q/9hr9yKSThTbUE2Yno0p9JkBjzXHGe5aoxLTaV 0LRXOl+S5epNwsWk4G3b0g== -----END CERTIFICATE-----Generated at Sun Sep 20 12:52:04 2026 by rpki-client