$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer File: 1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer (raw, json) Hash identifier: RfZ1ExDx4lnFZSJ8+SUHMW578aVS3z7IT+i1dSAg1bk= Subject key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E18A7645B8A56187AC71A5580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jun 2026 20:45:11 +0000 Certificate not after: Sat 09 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 23.145.136.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:a7:64:5b:8a:56:18:7a:c7:1a:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 7 20:45:11 2026 GMT Not After : Sep 9 20:45:11 2028 GMT Subject: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:90:89:aa:16:0a:82:0b:15:07:81:3b:7e:d0: d1:82:a4:90:6f:a2:fb:7f:4c:31:e7:f6:3c:74:d0: 43:66:bf:a1:89:8f:48:b0:58:f4:82:0b:a9:7b:74: 39:f4:ab:cd:83:22:4e:e3:9d:b8:9c:35:22:e1:91: 78:6e:bf:74:7d:46:21:42:b8:b9:51:b5:88:a5:9d: 2f:3c:48:06:f6:e6:c6:18:7a:f1:0c:ac:86:0c:9e: 65:1e:f5:74:a6:76:87:6a:06:88:35:3c:3f:ee:2f: 60:b6:69:df:5b:25:3d:37:56:80:a3:34:5e:96:5f: a1:8d:bf:94:df:0c:3d:86:d1:68:10:f9:c1:80:e1: 99:7e:6f:c6:2c:2a:8f:38:0e:ef:e3:b3:11:f5:61: 09:fd:57:42:c3:48:e4:47:bf:db:fd:11:79:e2:85: 5f:4a:89:f3:c2:c2:bf:0f:a2:9e:f2:26:ac:84:1f: c7:59:d1:a8:52:60:9f:40:46:9d:23:9e:cc:d3:f5: ab:af:e2:c3:2f:62:e9:fc:a9:7f:ee:6a:0f:c1:0b: 8f:fc:a2:57:1d:d4:51:ec:bd:69:e9:09:5e:5e:f4: 57:14:63:75:08:04:e4:ad:ed:1a:b7:f9:38:1a:f8: 5c:29:21:f3:c4:02:15:a9:73:e9:0e:63:90:40:85: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f5:e3:27:bf:51:69:f5:d6:15:1b:b8:7f:d3:a9:d2:ac:27: 45:11:8c:6c:02:bf:87:33:82:09:55:d4:ef:e3:4b:b6:32:f9: 35:9c:8f:7e:1d:fa:cc:95:b9:ce:6f:bc:7e:8b:64:b5:5f:ed: 0a:c3:80:b5:ce:63:b0:fe:02:86:cd:50:c1:d7:1e:42:67:a6: 93:c4:48:a2:d7:88:7e:a0:da:06:58:da:bb:49:42:c1:ed:d7: 94:b5:71:a8:09:72:e1:84:95:ed:8c:9d:6c:a9:7b:56:bc:ec: 89:44:b3:84:cb:27:4b:28:1b:65:09:f9:43:57:f6:d6:40:a9: 46:c4:42:65:96:98:58:13:bb:8f:73:c1:32:99:4d:14:5a:97: 3f:2f:e6:31:24:55:bc:c2:ef:ab:c6:46:ea:27:08:dc:3b:e7: b6:ab:62:0a:58:f2:7e:3e:7d:c8:e7:16:b7:12:c6:09:b4:eb: 9d:bc:df:71:9d:3c:89:68:26:5b:20:7c:54:db:9a:a6:48:ba: 5b:5e:c9:cd:b0:9c:f0:ec:ad:bc:d2:03:0b:22:58:c4:79:47: a1:ee:a4:16:5d:c9:72:83:84:7b:25:df:f7:1f:ee:b2:81:b0: 7c:56:4f:f4:bf:4f:e2:87:b5:67:ef:b5:06:39:6a:08:6e:25: 88:40:02:2d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4Yp2RbilYYescaVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNzIwNDUxMVoXDTI4MDkwOTIwNDUxMVowLzEtMCsGA1UEAxMk MWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZCJqhYKggsVB4E7ftDRgqSQb6L7f0wx5/Y8 dNBDZr+hiY9IsFj0ggupe3Q59KvNgyJO4524nDUi4ZF4br90fUYhQri5UbWIpZ0v PEgG9ubGGHrxDKyGDJ5lHvV0pnaHagaINTw/7i9gtmnfWyU9N1aAozRell+hjb+U 3ww9htFoEPnBgOGZfm/GLCqPOA7v47MR9WEJ/VdCw0jkR7/b/RF54oVfSonzwsK/ D6Ke8iashB/HWdGoUmCfQEadI57M0/Wrr+LDL2Lp/Kl/7moPwQuP/KJXHdRR7L1p 6QleXvRXFGN1CATkre0at/k4GvhcKSHzxAIVqXPpDmOQQIVz/QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDzDFkeMsSbtD6ljKaIBboW6kJqJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x YjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFiOWJmMmY0LWM4MzEtNGYxZS1h MmQ1LWQ3ZmM0MDUzNWM4Zi8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1 MzVjOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXkYgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAF/XjJ79RafXWFRu4f9Op 0qwnRRGMbAK/hzOCCVXU7+NLtjL5NZyPfh36zJW5zm+8fotktV/tCsOAtc5jsP4C hs1QwdceQmemk8RIoteIfqDaBljau0lCwe3XlLVxqAly4YSV7YydbKl7VrzsiUSz hMsnSygbZQn5Q1f21kCpRsRCZZaYWBO7j3PBMplNFFqXPy/mMSRVvMLvq8ZG6icI 3DvntqtiCljyfj59yOcWtxLGCbTrnbzfcZ08iWgmWyB8VNuapki6W17JzbCc8Oyt vNIDCyJYxHlHoe6kFl3JcoOEeyXf9x/usoGwfFZP9L9P4oe1Z++1BjlqCG4liEAC LQ== -----END CERTIFICATE-----Generated at Sat Jun 13 11:18:24 2026 by rpki-client