$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer File: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer (raw, json) Hash identifier: Imu7Rr1Qy/Lab9nmP05jp6nJqBUv2SPQq2z9wusTF6Y= Subject key identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E17420DE2B53A71B1C4C0E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jun 2026 08:45:11 +0000 Certificate not after: Sat 09 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 14573 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:17:42:0d:e2:b5:3a:71:b1:c4:c0:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 7 08:45:11 2026 GMT Not After : Sep 9 08:45:11 2028 GMT Subject: CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:79:b1:f0:49:48:b1:2b:c8:93:04:74:d8: d7:91:09:78:ee:be:78:fb:49:bf:39:28:45:c8:a7: 49:24:8a:cb:f5:84:59:58:bf:0e:19:fe:7f:4d:bb: ed:02:ce:b7:84:ae:69:a7:f9:72:7e:06:a5:bf:4e: dc:72:56:8b:b1:2f:b7:85:43:ab:95:10:9f:58:2a: 8b:43:2d:23:45:bd:49:12:34:b2:40:9c:bf:15:72: df:5c:be:8a:36:16:59:ee:e1:93:17:01:12:0c:0f: de:0a:4f:d6:46:b8:54:ca:1b:d2:6a:ec:fd:8f:a4: a8:5d:49:d1:c4:50:8b:f0:90:2d:3f:18:ac:35:f4: 32:00:f9:ef:83:32:5d:78:af:8b:1b:82:b0:f5:00: 57:81:ba:81:12:17:37:96:01:51:ed:79:f7:00:26: e0:82:f6:29:ce:b3:7c:8a:43:25:a4:de:70:2c:d6: b4:32:da:77:9f:f3:89:37:ed:06:46:8d:14:28:ea: bc:73:0f:03:41:6d:98:02:46:da:58:cf:37:37:78: 32:ad:39:74:c0:cb:b4:d7:c7:a0:69:99:4e:c9:ca: df:82:ff:18:36:d0:03:be:df:4b:37:82:a2:d7:f3: c1:d3:bd:7c:b3:0e:4a:26:e0:72:da:ef:4e:37:ed: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14573 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5d:b8:4a:7b:13:3f:90:48:ef:d8:a6:30:12:ae:ec:57:25: 51:e2:19:3b:46:9c:75:99:29:96:3b:e3:25:b7:2a:3e:40:28: 13:39:07:6c:5f:36:ef:34:6c:30:f0:fc:23:43:68:ac:c7:18: c6:a4:81:a7:92:5f:7d:68:d4:04:df:97:7e:5c:8f:1b:0e:59: 0e:6b:58:61:a9:d1:da:f5:24:59:12:dd:92:67:ea:97:88:71: bf:6b:9c:9b:ab:1d:5e:71:57:d7:ad:a2:cc:5b:c6:1a:fd:15: 08:7a:7b:62:2a:66:5c:e6:56:a0:e1:a7:b3:e9:69:14:e1:d4: 32:b8:dc:f6:32:30:d0:61:bf:47:37:55:12:dd:6b:27:1d:d1: f2:a7:3f:73:39:35:1d:46:87:ae:87:01:86:38:35:a2:f0:f0: 28:c3:12:aa:68:91:dd:17:09:c2:31:d1:34:13:ad:5b:bf:b4: e4:a4:68:30:c7:85:a7:20:b4:78:e6:af:a1:96:06:87:30:a9: d2:8a:37:ca:0f:c2:00:8f:84:f6:ae:2e:d8:d9:75:9f:47:67: e6:8c:3b:e6:3b:c6:4b:be:7e:91:cc:1d:cc:47:23:b7:4b:da: 9a:31:42:ca:5e:14:06:76:0c:86:78:4d:6a:ce:ca:11:91:5e: 20:b4:7e:15 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE4XQg3itTpxscTA5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNzA4NDUxMVoXDTI4MDkwOTA4NDUxMVowLzEtMCsGA1UEAxMk MjFiZDBhN2QtNmQ4OS00MzhmLWJhOGEtOGNlMTYxZTk3ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJ5sfBJSLEryJMEdNjXkQl47r54+0m/OShF yKdJJIrL9YRZWL8OGf5/TbvtAs63hK5pp/lyfgalv07cclaLsS+3hUOrlRCfWCqL Qy0jRb1JEjSyQJy/FXLfXL6KNhZZ7uGTFwESDA/eCk/WRrhUyhvSauz9j6SoXUnR xFCL8JAtPxisNfQyAPnvgzJdeK+LG4Kw9QBXgbqBEhc3lgFR7Xn3ACbggvYpzrN8 ikMlpN5wLNa0Mtp3n/OJN+0GRo0UKOq8cw8DQW2YAkbaWM83N3gyrTl0wMu018eg aZlOycrfgv8YNtADvt9LN4Ki1/PB0718sw5KJuBy2u9ON+0vJQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFG+F9MerCuyBotT3TRQFoPTBV3mMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y MWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFlOTdkMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIxYmQwYTdkLTZkODktNDM4Zi1i YThhLThjZTE2MWU5N2QzOS8yMWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFl OTdkMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOO0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT124SnsTP5BI79imMBKu7FclUeIZ O0acdZkpljvjJbcqPkAoEzkHbF827zRsMPD8I0NorMcYxqSBp5JffWjUBN+XflyP Gw5ZDmtYYanR2vUkWRLdkmfql4hxv2ucm6sdXnFX162izFvGGv0VCHp7YipmXOZW oOGns+lpFOHUMrjc9jIw0GG/RzdVEt1rJx3R8qc/czk1HUaHrocBhjg1ovDwKMMS qmiR3RcJwjHRNBOtW7+05KRoMMeFpyC0eOavoZYGhzCp0oo3yg/CAI+E9q4u2Nl1 n0dn5ow75jvGS75+kcwdzEcjt0vamjFCyl4UBnYMhnhNas7KEZFeILR+FQ== -----END CERTIFICATE-----Generated at Sat Jun 13 17:44:23 2026 by rpki-client