$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer File: 14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer (raw, json) Hash identifier: ufZ9hN16qBBoNzdB8kIDv3l5s8gTYYibI0GLWR/9DC8= Subject key identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E18A7640E847E62A569C7DC60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jun 2026 20:45:11 +0000 Certificate not after: Sat 09 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 23.145.248.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:a7:64:0e:84:7e:62:a5:69:c7:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 7 20:45:11 2026 GMT Not After : Sep 9 20:45:11 2028 GMT Subject: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:50:b2:4a:76:d3:62:2f:b7:0e:50:c7:8b: 06:df:2a:78:2d:4c:85:ba:16:93:62:05:f2:8c:c7: 2c:a1:fe:39:5d:0d:4e:20:a3:67:ac:13:df:80:05: 92:d0:06:b8:e2:e0:05:30:2e:ca:90:f4:1c:72:b0: 76:93:82:28:b3:e3:53:5e:98:68:43:d5:c9:43:d6: 71:df:8c:7e:04:25:8a:46:80:cd:ef:07:75:e3:03: 0c:95:cf:ef:78:de:87:68:88:c6:3f:67:3f:1d:f0: dd:04:a9:5a:4b:49:15:ad:2e:e7:a2:b1:33:bc:91: bb:3c:f9:c2:2d:eb:17:c1:fb:06:94:b9:dc:37:14: 73:d3:fc:1e:e0:4c:65:c4:f5:50:71:3b:2b:02:97: 37:a8:e4:04:0a:40:56:60:d7:fc:ae:2d:23:24:c3: ff:a9:ea:2b:5c:ae:7f:5a:0a:71:13:d3:59:32:66: 4d:6e:8d:94:08:47:e6:db:5e:09:2f:3b:bd:81:0f: 2f:ce:a0:b5:ce:48:58:00:d2:df:dd:76:08:9f:01: ec:2d:b9:c0:57:4a:98:b8:67:79:96:c3:07:5f:2a: f8:9e:a3:70:15:ed:77:ec:5e:85:af:c0:a4:d6:15: 0f:7e:79:32:bf:a6:96:72:ef:4b:de:85:14:7a:52: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.145.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d7:13:e0:87:ae:62:0e:70:3f:67:10:e7:f6:cd:61:f4:38: ad:0e:27:81:3e:98:58:2a:fd:0e:67:8c:45:ce:52:81:f1:22: 95:bc:2f:7f:27:e6:41:fa:e1:d3:38:6d:15:5d:c0:21:0d:0f: 8a:8f:c4:c3:44:25:33:5c:19:4d:4c:a9:95:df:af:c9:11:b2: 1c:94:cb:34:c2:57:30:ea:57:cb:62:24:e3:18:52:cb:2e:03: 7b:a1:7a:1a:f4:fe:2d:0b:48:55:47:de:ea:e8:09:be:c2:dd: 8b:09:70:df:97:8f:d0:0c:71:3a:4a:ca:53:90:c2:91:63:d3: 2f:33:3e:3c:09:f9:9f:e8:41:83:f4:62:26:72:39:37:5d:1d: 80:c4:1b:d9:88:a6:22:95:49:38:78:e6:6b:f7:88:42:bd:ed: b6:1d:cc:8b:35:7c:8c:e0:cd:49:93:05:8b:78:82:9f:6b:f9: 98:59:1d:f2:d5:e5:16:28:b4:36:2c:3b:0d:bd:94:d3:70:94: 76:08:5f:6a:d9:dd:6a:d1:33:1b:6e:10:5b:7d:8f:d7:10:db: c5:f4:65:c6:cf:12:d6:f3:5f:e5:37:06:74:6c:ae:34:06:67: 6c:a5:b6:2e:3b:1a:79:53:e6:5f:43:e5:fc:7c:9d:6b:d0:9f: 29:c1:ad:36 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4Yp2QOhH5ipWnH3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNzIwNDUxMVoXDTI4MDkwOTIwNDUxMVowLzEtMCsGA1UEAxMk MTRmNWE4ZTEtM2QxYS00N2E1LWI2YzgtY2Y2YzEyNDJkMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiORQskp202Ivtw5Qx4sG3yp4LUyFuhaTYgXy jMcsof45XQ1OIKNnrBPfgAWS0Aa44uAFMC7KkPQccrB2k4Ios+NTXphoQ9XJQ9Zx 34x+BCWKRoDN7wd14wMMlc/veN6HaIjGP2c/HfDdBKlaS0kVrS7norEzvJG7PPnC LesXwfsGlLncNxRz0/we4ExlxPVQcTsrApc3qOQECkBWYNf8ri0jJMP/qeorXK5/ WgpxE9NZMmZNbo2UCEfm214JLzu9gQ8vzqC1zkhYANLf3XYInwHsLbnAV0qYuGd5 lsMHXyr4nqNwFe137F6Fr8Ck1hUPfnkyv6aWcu9L3oUUelLU4QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK9+dPxwn6u3qmhG6DDS3ZvzCDA6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x NGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0MmQyYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzE0ZjVhOGUxLTNkMWEtNDdhNS1i NmM4LWNmNmMxMjQyZDJhYS8xNGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0 MmQyYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXkfgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEtcT4IeuYg5wP2cQ5/bN YfQ4rQ4ngT6YWCr9DmeMRc5SgfEilbwvfyfmQfrh0zhtFV3AIQ0Pio/Ew0QlM1wZ TUypld+vyRGyHJTLNMJXMOpXy2Ik4xhSyy4De6F6GvT+LQtIVUfe6ugJvsLdiwlw 35eP0AxxOkrKU5DCkWPTLzM+PAn5n+hBg/RiJnI5N10dgMQb2YimIpVJOHjma/eI Qr3tth3MizV8jODNSZMFi3iCn2v5mFkd8tXlFii0Niw7Db2U03CUdghfatndatEz G24QW32P1xDbxfRlxs8S1vNf5TcGdGyuNAZnbKW2LjsaeVPmX0Pl/Hyda9CfKcGt Ng== -----END CERTIFICATE-----Generated at Sat Jun 13 17:43:04 2026 by rpki-client