$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a.cer File: 288ee328-9ed3-44ed-907d-3fcb48d9e58a.cer (raw, json) Hash identifier: GMWKFXUini1AO9id9MMyckxszxlm/M6IyKXz0kLgLcs= Subject key identifier: DE:72:DC:AD:5D:53:59:3A:80:0E:5C:7B:BC:E6:AF:26:33:91:92:BA Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E20736F697C73CD9B969ABCB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/288ee328-9ed3-44ed-907d-3fcb48d9e58a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Jun 2026 15:46:58 +0000 Certificate not after: Tue 12 Sep 2028 15:46:58 +0000 Subordinate resources: AS: 402216 IP: 23.156.180.0/24 IP: 2602:f3f4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:20:73:6f:69:7c:73:cd:9b:96:9a:bc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 10 15:46:58 2026 GMT Not After : Sep 12 15:46:58 2028 GMT Subject: CN=288ee328-9ed3-44ed-907d-3fcb48d9e58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:8c:85:7c:cb:a2:d3:ec:b1:c5:90:50:d7: 6c:1c:c1:9a:45:a4:5a:7c:05:cf:ac:9a:e6:13:6b: 71:a6:6b:d5:93:f8:01:6a:79:6b:5e:46:b0:35:a7: cb:b9:e3:40:83:f8:78:b5:83:3a:69:c3:ab:8a:ba: 3d:cc:e4:09:e4:71:d8:b0:53:20:2e:55:88:70:4c: 3b:b4:c2:80:a4:62:07:ee:bf:2e:10:4e:81:55:9b: ea:44:48:8d:6d:53:53:cb:3c:b1:80:31:14:51:af: 88:16:f6:4c:33:39:16:26:60:81:fc:a2:ff:31:a6: d4:82:d3:3c:4f:d1:e1:e7:82:ce:27:d0:d9:32:c6: 9f:5a:2a:1d:4c:a3:50:d2:11:4d:9f:4a:df:44:0c: c0:92:70:21:d7:ca:1d:52:c9:8a:e1:91:69:a5:e4: dd:e3:63:b4:76:d6:e5:eb:b2:56:1e:74:ae:ef:97: 67:08:b8:b0:ca:ef:c3:0e:f9:b5:0d:28:49:cf:33: 98:f9:56:bc:44:10:8d:f9:00:1a:74:fa:92:16:da: 8f:2c:96:55:fc:2e:78:d8:32:8b:1b:73:e0:57:59: 8a:82:c6:16:d5:63:25:e8:bf:fa:30:be:d8:a6:f1: d6:e0:37:58:21:dd:8e:8d:25:e8:da:4f:d5:88:03: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:72:DC:AD:5D:53:59:3A:80:0E:5C:7B:BC:E6:AF:26:33:91:92:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/288ee328-9ed3-44ed-907d-3fcb48d9e58a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.156.180.0/24 IPv6: 2602:f3f4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402216 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:10:47:0a:db:90:05:f6:67:f2:03:17:c5:05:47:85:29:fc: 09:92:6e:e0:d3:39:d4:e7:c1:18:03:12:9f:22:14:7b:c6:5b: c2:7a:4e:2e:f2:b6:9b:46:21:b6:11:a1:1a:98:0f:d8:0d:2c: ce:e3:39:0c:b5:9c:b4:09:b1:07:41:ec:8e:bc:36:15:86:4a: b4:e6:36:cc:34:4f:7e:0c:62:ae:b0:48:b6:85:fa:7c:88:65: 42:e9:08:45:2c:48:95:96:1b:1d:4c:5f:ec:4a:2a:68:69:00: bd:1c:f5:ce:de:7a:51:8f:6d:36:0f:1e:6d:a6:ea:ac:15:1c: d7:e0:60:d0:32:39:f7:a8:6e:bf:71:61:a9:45:3e:3a:67:1f: 91:d1:6f:e8:91:3b:42:ec:0d:40:12:ba:d1:ea:4f:64:f6:bf: a1:95:28:7f:6d:2b:c4:64:70:f4:d3:82:2e:d0:48:a5:69:32: 5f:c3:0a:1f:48:b7:7b:cd:80:c9:91:fe:2b:16:7d:46:c6:93: 68:7d:e3:03:01:3b:3d:31:3f:e2:25:de:05:a5:56:a6:35:1c: 48:cb:26:1d:e3:cf:b1:d0:da:e7:e9:f0:82:ff:11:49:f6:59: 81:16:2a:1b:52:86:ab:19:89:01:ef:2d:00:8c:37:21:f3:d4: c0:27:3a:d1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE4gc29pfHPNm5aavLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYxMDE1NDY1OFoXDTI4MDkxMjE1NDY1OFowLzEtMCsGA1UEAxMk Mjg4ZWUzMjgtOWVkMy00NGVkLTkwN2QtM2ZjYjQ4ZDllNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+mMhXzLotPsscWQUNdsHMGaRaRafAXPrJrm E2txpmvVk/gBanlrXkawNafLueNAg/h4tYM6acOriro9zOQJ5HHYsFMgLlWIcEw7 tMKApGIH7r8uEE6BVZvqREiNbVNTyzyxgDEUUa+IFvZMMzkWJmCB/KL/MabUgtM8 T9Hh54LOJ9DZMsafWiodTKNQ0hFNn0rfRAzAknAh18odUsmK4ZFppeTd42O0dtbl 67JWHnSu75dnCLiwyu/DDvm1DShJzzOY+Va8RBCN+QAadPqSFtqPLJZV/C542DKL G3PgV1mKgsYW1WMl6L/6ML7YpvHW4DdYId2OjSXo2k/ViAMHBwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN5y3K1dU1k6gA5ce7zmryYzkZK6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y ODhlZTMyOC05ZWQzLTQ0ZWQtOTA3ZC0zZmNiNDhkOWU1OGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI4OGVlMzI4LTllZDMtNDRlZC05 MDdkLTNmY2I0OGQ5ZTU4YS8yODhlZTMyOC05ZWQzLTQ0ZWQtOTA3ZC0zZmNiNDhk OWU1OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnLQwDgQCAAIwCAMGACYC8/QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxEEcK25AF9mfyAxfFBUeFKfwJ km7g0znU58EYAxKfIhR7xlvCek4u8rabRiG2EaEamA/YDSzO4zkMtZy0CbEHQeyO vDYVhkq05jbMNE9+DGKusEi2hfp8iGVC6QhFLEiVlhsdTF/sSipoaQC9HPXO3npR j202Dx5tpuqsFRzX4GDQMjn3qG6/cWGpRT46Zx+R0W/okTtC7A1AErrR6k9k9r+h lSh/bSvEZHD004Iu0EilaTJfwwofSLd7zYDJkf4rFn1GxpNofeMDATs9MT/iJd4F pVamNRxIyyYd48+x0Nrn6fCC/xFJ9lmBFiobUoarGYkB7y0AjDch89TAJzrR -----END CERTIFICATE-----Generated at Sat Jun 13 17:39:01 2026 by rpki-client