$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer File: 391a6c01-da6c-449a-9b50-ba54fb84039a.cer (raw, json) Hash identifier: EIRlS9DCEJkayFhD2fQVSMgruFenQPn58/SwbmmNeok= Subject key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E18A7644807012A2969C26000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jun 2026 20:45:11 +0000 Certificate not after: Sat 09 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 23.145.232.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:a7:64:48:07:01:2a:29:69:c2:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 7 20:45:11 2026 GMT Not After : Sep 9 20:45:11 2028 GMT Subject: CN=391a6c01-da6c-449a-9b50-ba54fb84039a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:cb:53:78:90:21:40:1a:ea:1c:63:ff:6b: 0b:9f:6a:fa:5b:38:26:31:54:36:4d:36:c7:06:ca: 34:48:7b:5e:cb:48:b9:27:23:c2:5d:3f:ce:0a:d8: 92:20:0d:03:b7:3c:83:80:d4:47:36:d4:9d:0b:88: 78:3f:2d:f8:36:d4:c6:da:e7:55:89:34:63:1b:17: 9f:3e:08:2f:da:81:53:d4:01:93:0f:ff:fe:e4:3f: e2:61:71:18:79:e0:31:cf:71:01:67:ca:4d:f4:31: 45:bd:d9:5e:19:18:9a:14:38:34:cd:f7:55:24:e0: d7:59:6a:ba:56:99:7f:39:b0:ee:85:ad:91:ea:5e: bc:4c:79:4e:36:c1:cc:3b:40:7a:3f:a2:cd:93:b8: b9:ee:ad:9f:cb:75:d8:b0:ae:7b:df:4d:a4:eb:4e: a4:00:28:2e:5e:e1:21:5f:75:2f:a8:6a:6c:d3:8e: 0b:22:75:5c:c8:6d:54:4a:7a:5e:90:0b:95:20:a0: 65:b2:64:46:96:2e:6d:81:b5:ec:4e:64:20:72:d9: 49:ae:30:94:c1:3a:10:cf:16:ef:3b:f4:f6:c9:17: d9:94:34:b6:66:72:a1:01:51:a1:18:38:b6:7d:23: 95:2d:a3:fb:a7:4b:16:b3:ee:90:ee:3c:e2:c9:f1: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.145.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:be:3b:aa:0a:6c:47:d1:a9:63:73:8f:29:b7:e2:e6:11:e3: 67:8b:cf:52:4f:4c:43:3f:96:4f:7b:ab:61:84:ee:95:32:71: e1:27:5c:a5:a7:0c:6e:92:f4:c9:a4:2f:ec:65:66:4c:37:39: 85:e5:38:21:74:ec:8a:37:3c:c7:26:f2:9c:b2:c7:dc:a5:ab: 47:ad:a6:93:f7:1e:13:0b:10:c1:39:d2:ca:d2:b0:b7:34:77: 56:38:4a:ef:b0:e1:06:96:ca:ff:b3:87:39:01:d8:af:a9:bc: 21:1f:15:05:40:c8:b0:4f:be:0f:b6:6a:8b:bf:87:5f:aa:b0: 18:41:e7:e7:aa:09:62:28:6e:73:20:a3:97:65:22:5d:3d:a8: 1d:34:1c:5e:71:a9:1e:b9:65:2b:57:69:be:b4:5b:3d:7d:18: 57:dd:1a:54:a0:e9:68:a8:d0:01:fd:a3:f6:0a:4f:4b:9d:1c: 08:ec:ba:ef:e6:61:0c:33:cf:8a:8b:0b:f7:c1:71:ae:d5:ed: 50:19:97:13:2e:50:e8:37:5f:ad:f8:f6:36:1b:6a:06:3d:cc: b9:4c:a2:a6:42:ee:42:9b:18:16:c2:3d:43:c1:fd:ec:95:fb: e7:0d:e5:1f:49:86:d7:72:b0:53:09:34:61:a0:df:24:22:2b: c5:2c:0d:d2 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4Yp2RIBwEqKWnCYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNzIwNDUxMVoXDTI4MDkwOTIwNDUxMVowLzEtMCsGA1UEAxMk MzkxYTZjMDEtZGE2Yy00NDlhLTliNTAtYmE1NGZiODQwMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngrLU3iQIUAa6hxj/2sLn2r6WzgmMVQ2TTbH Bso0SHtey0i5JyPCXT/OCtiSIA0DtzyDgNRHNtSdC4h4Py34NtTG2udViTRjGxef Pggv2oFT1AGTD//+5D/iYXEYeeAxz3EBZ8pN9DFFvdleGRiaFDg0zfdVJODXWWq6 Vpl/ObDuha2R6l68THlONsHMO0B6P6LNk7i57q2fy3XYsK57302k606kACguXuEh X3UvqGps044LInVcyG1USnpekAuVIKBlsmRGli5tgbXsTmQgctlJrjCUwToQzxbv O/T2yRfZlDS2ZnKhAVGhGDi2fSOVLaP7p0sWs+6Q7jziyfGASwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNNji8+Z0H5ggSlP0QGLYWuCbmB4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z OTFhNmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0ZmI4NDAzOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM5MWE2YzAxLWRhNmMtNDQ5YS05 YjUwLWJhNTRmYjg0MDM5YS8zOTFhNmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0ZmI4 NDAzOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXkegwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAY747qgpsR9GpY3OPKbfi 5hHjZ4vPUk9MQz+WT3urYYTulTJx4SdcpacMbpL0yaQv7GVmTDc5heU4IXTsijc8 xybynLLH3KWrR62mk/ceEwsQwTnSytKwtzR3VjhK77DhBpbK/7OHOQHYr6m8IR8V BUDIsE++D7Zqi7+HX6qwGEHn56oJYihucyCjl2UiXT2oHTQcXnGpHrllK1dpvrRb PX0YV90aVKDpaKjQAf2j9gpPS50cCOy67+ZhDDPPiosL98FxrtXtUBmXEy5Q6Ddf rfj2NhtqBj3MuUyipkLuQpsYFsI9Q8H97JX75w3lH0mG13KwUwk0YaDfJCIrxSwN 0g== -----END CERTIFICATE-----Generated at Sat Jun 13 18:57:33 2026 by rpki-client