$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer File: 3905609c-39ed-4063-a3a8-68871c079747.cer (raw, json) Hash identifier: fkwGGSVzmAhSFZHKywRzPg4x7ExLlHpaD5qiB4PcYsg= Subject key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E17420DB86EBCFF5C4D12BA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jun 2026 08:45:11 +0000 Certificate not after: Sat 09 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 216.245.146.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:17:42:0d:b8:6e:bc:ff:5c:4d:12:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 7 08:45:11 2026 GMT Not After : Sep 9 08:45:11 2028 GMT Subject: CN=3905609c-39ed-4063-a3a8-68871c079747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:3e:52:dd:89:c4:bb:e3:bb:6b:96:06:04: 73:b3:7c:1b:1c:83:8a:57:95:52:78:9a:25:a0:67: 84:4f:06:cd:65:a3:f8:2e:2f:18:5e:3b:56:64:e3: f3:54:5c:93:b1:e5:f1:8c:f7:3d:73:74:ea:98:0c: 3b:5a:4e:9d:ec:83:d9:b5:ae:7b:60:ea:be:d1:22: c1:9c:12:99:69:01:00:fb:13:a7:07:20:2f:c0:a1: f8:05:79:72:07:c3:33:00:99:17:94:c7:92:fc:9a: 25:2d:61:f6:91:3c:f1:5f:b4:fc:dc:3f:74:fc:6a: 08:f7:bc:12:41:c7:a9:db:0a:37:18:0e:df:40:81: c5:06:b2:8c:59:a8:00:c3:89:55:6c:37:42:9e:c1: 47:79:40:7a:8c:f6:a4:e0:2c:9b:db:64:22:e0:de: ab:b8:17:cd:a4:d6:37:19:9f:69:45:53:fd:fe:67: db:7b:14:91:96:55:39:b6:48:f7:8d:9a:e7:cc:a1: 7e:82:45:dd:46:48:73:77:75:e7:76:a7:99:03:16: 1b:d8:14:f6:dc:76:4c:c5:cd:9b:de:c8:c4:c3:c5: 06:e0:26:5c:b2:ff:28:74:76:2e:5a:3a:61:99:fd: 57:2b:04:73:82:c3:b1:cb:23:c6:5c:96:35:54:a7: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 216.245.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8b:3c:89:6b:42:fd:41:13:08:d3:fd:38:c6:76:c1:a9:2b: 76:3f:3a:90:af:7c:f9:02:50:b6:1f:92:aa:ca:72:8e:cd:fb: d0:1d:be:2d:ac:8c:9b:bc:41:53:64:6e:71:af:30:f6:bb:4a: 16:9e:d7:c9:a5:5c:99:78:50:c4:c6:5f:21:67:a7:52:99:b4: 7c:19:fa:99:ee:84:ff:a5:07:6c:57:44:ea:0e:89:3e:2b:b5: b6:10:a7:d9:1e:84:b3:0e:e9:11:97:de:b5:61:c4:ed:c5:c6: d3:09:fc:e5:61:63:af:57:52:1d:12:1f:08:28:a7:94:6f:42: b3:3b:5f:8a:80:cc:ea:4f:b8:26:90:a1:2c:30:5c:bb:e2:3f: ed:0a:3e:a9:47:d9:6b:f7:be:98:dd:9a:be:e1:9c:00:e2:a7: 05:f9:f0:fd:56:4b:3b:b1:48:ac:bd:2d:6c:b2:84:e3:95:94: 4e:d1:0a:86:a0:14:39:66:2f:83:47:c6:6d:f0:d2:ac:f9:55: 11:ac:24:9a:c9:a0:e9:c1:5b:2e:00:9e:93:0c:c8:15:5f:33: e1:18:29:28:5d:c1:d4:07:96:68:7a:2c:a9:7d:7a:d0:b9:74: 10:54:09:7c:53:02:f7:93:f3:fc:5e:81:74:e7:eb:e7:16:d2: e0:6d:83:dd -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4XQg24brz/XE0SuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNzA4NDUxMVoXDTI4MDkwOTA4NDUxMVowLzEtMCsGA1UEAxMk MzkwNTYwOWMtMzllZC00MDYzLWEzYTgtNjg4NzFjMDc5NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOA+Ut2JxLvju2uWBgRzs3wbHIOKV5VSeJol oGeETwbNZaP4Li8YXjtWZOPzVFyTseXxjPc9c3TqmAw7Wk6d7IPZta57YOq+0SLB nBKZaQEA+xOnByAvwKH4BXlyB8MzAJkXlMeS/JolLWH2kTzxX7T83D90/GoI97wS Qcep2wo3GA7fQIHFBrKMWagAw4lVbDdCnsFHeUB6jPak4Cyb22Qi4N6ruBfNpNY3 GZ9pRVP9/mfbexSRllU5tkj3jZrnzKF+gkXdRkhzd3XndqeZAxYb2BT23HZMxc2b 3sjEw8UG4CZcsv8odHYuWjphmf1XKwRzgsOxyyPGXJY1VKdYoQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLq88QpPpaoIh+H+HeH0JPM+hjXcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z OTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMwNzk3NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM5MDU2MDljLTM5ZWQtNDA2My1h M2E4LTY4ODcxYzA3OTc0Ny8zOTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMw Nzk3NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHY9ZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXIs8iWtC/UETCNP9OMZ2 wakrdj86kK98+QJQth+Sqspyjs370B2+LayMm7xBU2Ruca8w9rtKFp7XyaVcmXhQ xMZfIWenUpm0fBn6me6E/6UHbFdE6g6JPiu1thCn2R6Esw7pEZfetWHE7cXG0wn8 5WFjr1dSHRIfCCinlG9CsztfioDM6k+4JpChLDBcu+I/7Qo+qUfZa/e+mN2avuGc AOKnBfnw/VZLO7FIrL0tbLKE45WUTtEKhqAUOWYvg0fGbfDSrPlVEawkmsmg6cFb LgCekwzIFV8z4RgpKF3B1AeWaHosqX160Ll0EFQJfFMC95Pz/F6BdOfr5xbS4G2D 3Q== -----END CERTIFICATE-----Generated at Sat Jun 13 20:52:20 2026 by rpki-client