$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer File: 060abe91-ae00-46c9-a9b7-b46f0b295194.cer (raw, json) Hash identifier: 0N111q6xJX4s38CV0uuJ2/W1744faDE68D+j9mbw4nM= Subject key identifier: D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E14775F53F1DF2755EEB0D540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Jun 2026 08:45:12 +0000 Certificate not after: Fri 08 Sep 2028 08:45:12 +0000 Subordinate resources: IP: 192.197.62.0/24 IP: 205.189.2.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:77:5f:53:f1:df:27:55:ee:b0:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 6 08:45:12 2026 GMT Not After : Sep 8 08:45:12 2028 GMT Subject: CN=060abe91-ae00-46c9-a9b7-b46f0b295194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:9d:88:57:24:0f:dc:86:84:29:1c:5a:86: df:e8:a0:f9:ce:3d:59:07:9e:fc:96:79:e8:70:d7: d9:02:bf:4a:59:8e:7c:21:01:36:48:63:71:47:b3: dc:74:6f:93:1f:f0:e3:ad:67:ee:d7:91:e5:35:bd: af:f8:38:d5:8b:8d:86:4e:5e:d9:59:86:78:ff:35: 24:d8:4e:f7:e8:ee:c1:e9:f3:7f:6d:97:22:94:44: 12:82:3d:92:c7:a6:d3:38:8a:7c:9b:4a:7b:cd:d7: 7d:4f:35:3d:aa:74:5a:48:84:a7:2b:60:26:37:86: c4:ee:6c:45:7d:40:7f:e0:0c:16:7f:81:d2:51:c5: 5d:c9:7e:6a:4c:50:1c:dd:b7:61:ff:e2:85:ff:d8: 02:ff:6d:73:b0:f6:04:55:d3:19:a7:e1:d5:b5:7b: bd:70:bd:94:23:33:d7:f1:e6:91:3d:58:94:54:48: 87:37:05:58:93:5e:62:2f:f8:19:91:69:c9:7d:ba: fd:43:3c:32:d0:0e:52:08:41:97:3c:e5:30:33:f4: 55:83:9f:d8:30:b6:0f:82:10:4c:28:f5:11:f6:39: 67:74:30:4c:47:0b:f5:6c:fd:24:9a:29:0c:21:f8: db:54:9f:88:5d:27:d7:13:3b:1e:4a:b7:48:d8:cd: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.62.0/24 205.189.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3c:7c:8b:5b:0f:a8:52:48:08:da:87:3b:0d:c1:36:1c:95: 9e:5b:eb:9a:5b:14:45:33:ba:da:63:ad:51:b2:da:25:40:9a: ec:a7:ac:92:6a:c1:0b:c1:25:fd:62:e2:16:18:3f:0b:67:b4: eb:57:c0:48:31:9f:8d:32:89:c7:99:a5:b6:87:cd:fd:77:c3: 31:c5:3d:22:58:f3:55:ca:b0:1b:b9:bf:67:f3:bb:e4:1a:36: 53:ff:32:d4:cd:88:98:fa:33:33:59:68:a9:49:a2:21:de:bf: 04:b0:9e:cc:60:b6:50:f6:58:75:28:7e:7b:09:9e:0e:4e:c9: c1:48:19:6f:b8:4b:50:d5:4b:55:f1:2c:00:15:c6:9a:cc:1e: f0:a5:7f:e7:0f:35:df:8d:ce:aa:d1:93:71:ce:20:c9:a8:14: 42:63:13:31:23:ed:28:fc:ef:c3:92:9a:32:92:a4:d9:fa:75: bb:e2:6e:6f:eb:13:f6:f2:bb:99:5a:a1:ed:d3:1b:70:b0:90: 9e:42:f1:49:ac:3d:5d:54:56:d9:4a:0d:d4:67:b8:56:4a:35: 2d:82:97:59:8d:34:24:cf:06:c6:0b:28:aa:2a:f8:c3:56:94: 14:89:5f:4a:13:6b:39:46:75:6e:a9:4a:46:ab:98:eb:16:16: a5:a4:ec:08 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE4Ud19T8d8nVe6w1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNjA4NDUxMloXDTI4MDkwODA4NDUxMlowLzEtMCsGA1UEAxMk MDYwYWJlOTEtYWUwMC00NmM5LWE5YjctYjQ2ZjBiMjk1MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1idiFckD9yGhCkcWobf6KD5zj1ZB578lnno cNfZAr9KWY58IQE2SGNxR7PcdG+TH/DjrWfu15HlNb2v+DjVi42GTl7ZWYZ4/zUk 2E736O7B6fN/bZcilEQSgj2Sx6bTOIp8m0p7zdd9TzU9qnRaSISnK2AmN4bE7mxF fUB/4AwWf4HSUcVdyX5qTFAc3bdh/+KF/9gC/21zsPYEVdMZp+HVtXu9cL2UIzPX 8eaRPViUVEiHNwVYk15iL/gZkWnJfbr9Qzwy0A5SCEGXPOUwM/RVg5/YMLYPghBM KPUR9jlndDBMRwv1bP0kmikMIfjbVJ+IXSfXEzseSrdI2M1bYwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFNWD9BjuwuAbWQrYKZsktIAOgt5yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NjBhYmU5MS1hZTAwLTQ2YzktYTliNy1iNDZmMGIyOTUxOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA2MGFiZTkxLWFlMDAtNDZjOS1h OWI3LWI0NmYwYjI5NTE5NC8wNjBhYmU5MS1hZTAwLTQ2YzktYTliNy1iNDZmMGIy OTUxOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAxT4DBAHNvQIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALTx8i1sPqFJI CNqHOw3BNhyVnlvrmlsURTO62mOtUbLaJUCa7KeskmrBC8El/WLiFhg/C2e061fA SDGfjTKJx5mltofN/XfDMcU9IljzVcqwG7m/Z/O75Bo2U/8y1M2ImPozM1loqUmi Id6/BLCezGC2UPZYdSh+ewmeDk7JwUgZb7hLUNVLVfEsABXGmswe8KV/5w81343O qtGTcc4gyagUQmMTMSPtKPzvw5KaMpKk2fp1u+Jub+sT9vK7mVqh7dMbcLCQnkLx Saw9XVRW2UoN1Ge4Vko1LYKXWY00JM8Gxgsoqir4w1aUFIlfShNrOUZ1bqlKRquY 6xYWpaTsCA== -----END CERTIFICATE-----Generated at Sat Jun 13 21:43:09 2026 by rpki-client