$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer File: 05a654f5-4306-42f8-a547-0a21265d5db2.cer (raw, json) Hash identifier: 87Kjj4fTlH0ComMIwW7+eL/CQwV56HAIrs+uNwIh6OA= Subject key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D650D6FA642901EF99F98A700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Apr 2026 12:45:17 +0000 Certificate not after: Fri 07 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 1766 IP: 131.126.0.0/16 IP: 144.201.0.0/16 IP: 146.156.0.0/16 IP: 147.195.0.0/16 IP: 150.127.0.0/16 IP: 158.21.0.0 -- 158.22.255.255 IP: 158.25.0.0 -- 158.35.255.255 IP: 158.55.0.0/16 IP: 159.70.0.0/16 IP: 159.129.0.0/16 IP: 159.131.0.0/16 IP: 192.65.173.0/24 IP: 192.67.48.0/24 IP: 192.83.106.0/24 IP: 192.104.83.0/24 IP: 198.43.0.0/16 IP: 2620:140::/38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:0d:6f:a6:42:90:1e:f9:9f:98:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 4 12:45:17 2026 GMT Not After : Jul 7 12:45:17 2028 GMT Subject: CN=05a654f5-4306-42f8-a547-0a21265d5db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:7b:e6:5f:59:f4:49:eb:64:69:b1:a3:d4: b5:4f:57:17:f1:e0:7c:ae:55:11:b9:a9:44:10:56: 09:3a:d2:9c:aa:02:49:ad:4c:aa:d0:36:d2:d0:6e: 2e:56:7a:18:c0:21:89:b3:f0:c7:dc:22:b0:ac:c4: 04:4f:d1:3b:0d:e0:a9:b8:ee:39:5d:b2:b3:e4:b6: 5f:fe:6c:ae:90:fa:d0:f8:4a:bc:92:5d:d0:aa:ed: 2d:43:d2:46:a8:e9:fd:5d:f4:a0:88:e4:de:ee:ce: 15:f8:4a:11:15:7d:47:a0:74:1f:41:1b:c9:5b:ec: ec:0b:15:5c:15:e0:07:b7:37:ff:a2:40:50:9c:3e: 79:bf:24:1c:af:ed:ae:06:cd:fc:4f:2c:03:a1:24: 6c:10:d6:d8:ab:28:91:73:f9:ea:37:33:02:4d:44: c9:4d:d9:a6:fa:1b:d3:33:e4:8a:f5:3e:51:82:5d: d4:47:5c:39:e3:62:94:a8:28:05:77:fc:e1:3c:67: 7e:01:50:74:22:e0:37:e5:15:a1:73:07:76:10:9f: 60:e8:bd:99:9f:c6:b5:ac:b5:c2:54:9b:c1:9d:41: 6e:5a:4f:08:a8:0b:bc:39:5e:76:15:0c:11:cc:7c: 1b:6c:5a:23:9e:6a:c9:19:07:2d:e7:d7:62:fe:87: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 131.126.0.0/16 144.201.0.0/16 146.156.0.0/16 147.195.0.0/16 150.127.0.0/16 158.21.0.0-158.22.255.255 158.25.0.0-158.35.255.255 158.55.0.0/16 159.70.0.0/16 159.129.0.0/16 159.131.0.0/16 192.65.173.0/24 192.67.48.0/24 192.83.106.0/24 192.104.83.0/24 198.43.0.0/16 IPv6: 2620:140::/38 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:45:76:3d:73:43:1a:fc:ab:a8:1f:3b:5d:97:bc:7f:e8:65: d8:71:42:d8:6e:fb:68:8b:86:fc:1a:c6:4a:94:52:d2:b8:ab: 3e:19:b1:b6:3d:ad:cf:9a:f0:5a:e3:2e:1f:b6:92:4d:59:97: f6:34:f2:59:2f:02:3f:4d:81:48:91:e4:91:0b:3f:9e:d1:a6: 2a:80:d5:07:4c:0c:33:ef:31:9b:58:8a:dd:a2:f8:65:6e:ee: 07:1a:ba:1d:1c:e0:c5:e5:d9:cb:3e:47:ae:be:9e:c3:7f:da: c4:9a:e7:93:42:92:7f:2b:51:47:35:6a:26:d8:32:ec:c9:60: 6a:62:7f:b0:59:00:92:ab:ff:0a:05:b5:2f:45:b8:72:37:bd: 55:3b:f6:60:e5:91:d5:09:88:d8:9e:6d:ef:27:63:e5:73:01: ff:6c:70:cc:76:d0:98:ff:cd:07:1b:f1:7a:f5:8b:34:13:7f: f7:c9:7b:67:28:1f:c4:af:6a:d3:b7:8f:8f:ab:8a:ef:f9:ab: 9a:fa:fa:67:b0:30:21:2f:8f:09:73:3f:e7:4b:a3:7c:27:0c: bf:8f:a1:22:9f:48:e0:87:d3:a5:d7:56:ad:31:e9:69:27:eb: 12:13:27:94:36:21:32:60:5d:21:e4:0f:9c:e4:0c:36:1b:cd: f9:c9:ff:b1 -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWE1lDW+mQpAe+Z+YpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwNDEyNDUxN1oXDTI4MDcwNzEyNDUxN1owLzEtMCsGA1UEAxMk MDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVt75l9Z9EnrZGmxo9S1T1cX8eB8rlURualE EFYJOtKcqgJJrUyq0DbS0G4uVnoYwCGJs/DH3CKwrMQET9E7DeCpuO45XbKz5LZf /myukPrQ+Eq8kl3Qqu0tQ9JGqOn9XfSgiOTe7s4V+EoRFX1HoHQfQRvJW+zsCxVc FeAHtzf/okBQnD55vyQcr+2uBs38TywDoSRsENbYqyiRc/nqNzMCTUTJTdmm+hvT M+SK9T5Rgl3UR1w542KUqCgFd/zhPGd+AVB0IuA35RWhcwd2EJ9g6L2Zn8a1rLXC VJvBnUFuWk8IqAu8OV52FQwRzHwbbFojnmrJGQct59di/ofHfQIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFHKmdXN3dv5L5+A55YXdj8L6f91jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA1YTY1NGY1LTQzMDYtNDJmOC1h NTQ3LTBhMjEyNjVkNWRiMi8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1 ZDVkYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwgYsGCCsGAQUF BwEHAQH/BHwwejBoBAIAATBiAwMAg34DAwCQyQMDAJKcAwMAk8MDAwCWfzAKAwMA nhUDAwCeFjAKAwMAnhkDAwKeIAMDAJ43AwMAn0YDAwCfgQMDAJ+DAwQAwEGtAwQA wEMwAwQAwFNqAwQAwGhTAwMAxiswDgQCAAIwCAMGAiYgAUAAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAgbmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIdFdj1zQxr8q6gfO12XvH/oZdhxQthu +2iLhvwaxkqUUtK4qz4ZsbY9rc+a8FrjLh+2kk1Zl/Y08lkvAj9NgUiR5JELP57R piqA1QdMDDPvMZtYit2i+GVu7gcauh0c4MXl2cs+R66+nsN/2sSa55NCkn8rUUc1 aibYMuzJYGpif7BZAJKr/woFtS9FuHI3vVU79mDlkdUJiNiebe8nY+VzAf9scMx2 0Jj/zQcb8Xr1izQTf/fJe2coH8SvatO3j4+riu/5q5r6+mewMCEvjwlzP+dLo3wn DL+PoSKfSOCH06XXVq0x6Wkn6xITJ5Q2ITJgXSHkD5zkDDYbzfnJ/7E= -----END CERTIFICATE-----Generated at Fri Apr 17 16:43:38 2026 by rpki-client