$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer File: 2a093e3f-1d9b-4e68-9317-1de77daf9698.cer (raw, json) Hash identifier: lbYmKY28DuXAL+IroHtvJ2CP3NE4CWYUxPmt02W2jvo= Subject key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF36E53AAF1E5626DBE50CCA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 May 2026 12:45:18 +0000 Certificate not after: Sun 27 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 204.114.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:6e:53:aa:f1:e5:62:6d:be:50:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 25 12:45:18 2026 GMT Not After : Aug 27 12:45:18 2028 GMT Subject: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:96:7d:5e:7d:dc:d5:fc:21:45:31:1f:00: 46:b0:b1:aa:7c:cc:01:65:fc:ba:53:bf:86:0d:3e: eb:90:bb:93:e0:5a:4d:51:36:bd:44:be:bf:79:4a: 3b:ab:72:66:98:ab:a2:a9:c4:38:4a:86:29:31:c2: 5d:ae:2d:30:61:2e:52:ae:9d:00:11:c0:04:c6:5f: ed:c5:b7:3a:d7:64:41:2f:f9:96:46:98:73:a8:3a: 74:50:09:51:e7:70:f2:18:60:28:d6:43:3e:5f:29: 5a:fe:a4:61:c2:18:98:fd:59:18:c6:87:db:fe:28: ab:fb:bd:0d:75:d9:18:62:9b:0a:37:5d:3a:59:97: 4e:50:c7:c7:1a:ad:b2:bb:37:e8:30:f1:f6:9d:12: 8f:03:8f:1a:cd:47:2d:a3:a3:66:23:33:c8:d9:15: f2:60:2f:75:d0:82:25:04:a8:4a:b3:e1:ca:31:c4: 50:50:aa:85:f1:2c:fc:1f:af:31:19:36:05:dd:ae: f2:91:39:ac:78:21:9e:7b:ff:e2:38:1d:2b:3e:0d: c8:b5:83:f2:0f:05:14:7d:93:07:31:a0:fa:94:40: 66:28:8b:92:79:20:e2:cc:8c:ba:6e:5a:63:79:1c: 8a:17:0b:83:f3:2a:a1:1d:5d:a1:d2:40:d4:24:3f: e6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.114.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:bb:e0:7f:63:49:df:e2:6c:41:10:0e:2b:c0:d3:cc:cd:94: 72:02:91:53:9f:5e:70:36:1a:95:0c:02:62:5c:ac:56:78:4b: 90:9c:d9:0b:46:c2:de:df:58:8f:eb:f1:bf:47:09:69:6a:b0: 6d:47:10:09:4e:fd:b8:e3:80:ce:c6:8b:f6:6f:da:a1:f5:77: 38:c5:2a:a3:f9:7e:40:a7:63:f1:30:5b:a9:4d:4f:14:8e:0c: f1:77:cc:f7:58:0e:36:ca:32:d0:ae:ab:2e:10:a7:52:c8:c5: 25:5f:70:31:f8:2c:ab:ab:a1:3e:44:86:ab:cb:d4:a1:b7:a5: 8a:b7:dd:fd:82:39:40:cd:6d:7d:df:c4:85:6d:a2:a6:d4:8e: 45:0b:dd:85:2f:10:57:dc:10:01:86:c0:f8:78:60:6a:2e:5c: 5d:08:a6:75:18:f9:f2:93:6d:66:9c:66:59:6b:4d:8e:71:00: ba:e4:1b:df:41:14:7f:71:3c:5d:8a:4f:bb:c7:a9:dc:ea:52: 62:c5:6f:d3:c3:08:67:21:a4:8e:fd:55:08:22:1b:85:91:6d: 97:f9:7b:a3:91:45:f8:f0:22:02:63:5f:3a:5a:d0:7c:d3:2d: 8d:51:5b:77:ac:a8:ee:0a:bc:08:88:a8:73:32:a0:ea:84:4b: 5f:e4:b7:5c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3zblOq8eVibb5QzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNTEyNDUxOFoXDTI4MDgyNzEyNDUxOFowLzEtMCsGA1UEAxMk MmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhymWfV593NX8IUUxHwBGsLGqfMwBZfy6U7+G DT7rkLuT4FpNUTa9RL6/eUo7q3JmmKuiqcQ4SoYpMcJdri0wYS5Srp0AEcAExl/t xbc612RBL/mWRphzqDp0UAlR53DyGGAo1kM+Xyla/qRhwhiY/VkYxofb/iir+70N ddkYYpsKN106WZdOUMfHGq2yuzfoMPH2nRKPA48azUcto6NmIzPI2RXyYC910IIl BKhKs+HKMcRQUKqF8Sz8H68xGTYF3a7ykTmseCGee//iOB0rPg3ItYPyDwUUfZMH MaD6lEBmKIuSeSDizIy6blpjeRyKFwuD8yqhHV2h0kDUJD/mAwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMcNuRBZ9RH8VZFSbHKCwepFRad3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y YTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzJhMDkzZTNmLTFkOWItNGU2OC05 MzE3LTFkZTc3ZGFmOTY5OC8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2Rh Zjk2OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbMckAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAl7vgf2NJ3+JsQRAOK8DT zM2UcgKRU59ecDYalQwCYlysVnhLkJzZC0bC3t9Yj+vxv0cJaWqwbUcQCU79uOOA zsaL9m/aofV3OMUqo/l+QKdj8TBbqU1PFI4M8XfM91gONsoy0K6rLhCnUsjFJV9w Mfgsq6uhPkSGq8vUobelirfd/YI5QM1tfd/EhW2iptSORQvdhS8QV9wQAYbA+Hhg ai5cXQimdRj58pNtZpxmWWtNjnEAuuQb30EUf3E8XYpPu8ep3OpSYsVv08MIZyGk jv1VCCIbhZFtl/l7o5FF+PAiAmNfOlrQfNMtjVFbd6yo7gq8CIioczKg6oRLX+S3 XA== -----END CERTIFICATE-----Generated at Sat Jun 13 17:43:37 2026 by rpki-client