$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e.cer File: 4b309bb0-253a-43d9-a33b-3be17a27116e.cer (raw, json) Hash identifier: W9ega4UIEdYtX9KqjYyB/GB3sGUU9uAQjBm1JesIADo= Subject key identifier: D8:A4:1C:06:49:1B:37:83:1C:A2:EB:FB:AA:BE:70:59:C8:42:43:7E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D6D6D7DC15437EDDC726CBA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/4b309bb0-253a-43d9-a33b-3be17a27116e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Apr 2026 12:45:18 +0000 Certificate not after: Mon 10 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 46744 IP: 2620:1e:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:6d:7d:c1:54:37:ed:dc:72:6c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 7 12:45:18 2026 GMT Not After : Jul 10 12:45:18 2028 GMT Subject: CN=4b309bb0-253a-43d9-a33b-3be17a27116e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:27:57:c1:c4:14:07:f6:99:25:5c:20:54: a8:13:ef:ad:c3:13:9e:cd:ff:56:ab:b3:80:c8:88: 0d:61:1e:6b:6a:e4:31:21:a5:be:3f:c0:03:75:0a: a6:60:05:d4:08:3c:eb:12:1c:be:18:c7:1e:c5:69: 95:58:38:e4:14:50:2a:a4:cd:7c:dd:d2:80:a2:23: b7:b3:9c:e1:4a:c1:65:14:23:e5:6d:ca:b1:76:f3: cb:c2:b4:5d:55:40:df:a2:50:c4:d2:07:05:12:db: 56:fd:df:af:ba:bd:2c:fa:36:07:7d:ed:d1:6c:4c: 16:6e:0a:92:f7:f0:5b:f2:3a:37:e4:ae:af:9a:cc: ef:0b:6e:9d:5a:86:d0:e9:8c:38:db:12:a8:88:11: cc:29:71:56:e3:d2:69:cc:fe:ec:1b:85:17:2b:62: 8c:7b:ab:22:d5:e2:ad:a3:10:cc:45:36:bb:f0:77: 1d:4a:51:9f:d2:71:29:bf:b5:39:a2:24:33:7b:34: 21:c5:7f:db:5f:1f:43:a3:f3:27:b8:bb:18:73:a2: ce:a3:b2:04:c7:e5:b3:b3:83:42:30:55:24:a2:bb: 78:d8:33:8b:c6:24:6c:14:ce:a7:f2:67:bc:cb:44: 19:e7:e0:02:b5:f9:58:af:68:ef:27:99:01:ec:75: 0f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A4:1C:06:49:1B:37:83:1C:A2:EB:FB:AA:BE:70:59:C8:42:43:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/4b309bb0-253a-43d9-a33b-3be17a27116e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2620:1e:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46744 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e6:d0:ea:d5:96:ad:99:ea:14:ff:82:56:9e:34:bb:1b:a2: ad:6f:c3:7f:b2:5e:a1:3d:25:84:a9:9c:7f:15:aa:3d:18:60: 43:b6:7a:cf:f3:69:a3:a0:44:f4:08:6e:e3:39:b3:9d:0f:ad: 29:5c:29:1a:0b:5c:40:b1:f9:b3:36:93:25:78:a5:f1:87:8c: 98:05:42:14:d3:53:02:d9:8a:d9:4c:58:b7:e2:08:33:b0:43: e2:5c:38:c1:a9:8b:1a:2a:97:a7:d5:81:6d:ed:a2:09:7d:ce: 8e:db:00:80:dc:be:c1:87:0d:25:c5:cd:05:b6:2b:fe:c4:47: 60:97:a7:08:d4:4a:a7:52:40:88:30:37:5f:10:e4:39:57:40: 68:0c:e3:2b:57:6b:83:43:a8:e3:d2:b0:cc:e9:88:bb:f5:b8: 55:9f:f9:2e:d7:7a:7c:39:95:f6:67:22:0c:34:08:1d:27:5c: a6:9d:67:e7:28:77:98:e5:08:ca:73:2c:98:cb:b7:bb:3e:0b: 76:6a:e5:9b:3e:d6:a5:88:13:ec:a8:41:04:e8:5f:4a:e6:83: e3:c6:40:1a:3e:33:8a:e2:f9:cc:c2:c3:cc:59:e3:6a:b8:00: 59:b3:0b:31:0f:50:c2:d6:be:11:89:c2:71:04:3f:05:71:43: 87:e9:c4:e3 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE1tbX3BVDft3HJsugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwNzEyNDUxOFoXDTI4MDcxMDEyNDUxOFowLzEtMCsGA1UEAxMk NGIzMDliYjAtMjUzYS00M2Q5LWEzM2ItM2JlMTdhMjcxMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zknV8HEFAf2mSVcIFSoE++twxOezf9Wq7OA yIgNYR5rauQxIaW+P8ADdQqmYAXUCDzrEhy+GMcexWmVWDjkFFAqpM183dKAoiO3 s5zhSsFlFCPlbcqxdvPLwrRdVUDfolDE0gcFEttW/d+vur0s+jYHfe3RbEwWbgqS 9/Bb8jo35K6vmszvC26dWobQ6Yw42xKoiBHMKXFW49JpzP7sG4UXK2KMe6si1eKt oxDMRTa78HcdSlGf0nEpv7U5oiQzezQhxX/bXx9Do/MnuLsYc6LOo7IEx+Wzs4NC MFUkort42DOLxiRsFM6n8me8y0QZ5+ACtflYr2jvJ5kB7HUPuwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFNikHAZJGzeDHKLr+6q+cFnIQkN+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 YjMwOWJiMC0yNTNhLTQzZDktYTMzYi0zYmUxN2EyNzExNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzRiMzA5YmIwLTI1M2EtNDNkOS1h MzNiLTNiZTE3YTI3MTE2ZS80YjMwOWJiMC0yNTNhLTQzZDktYTMzYi0zYmUxN2Ey NzExNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAewAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDALaYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAJHm0OrVlq2Z6hT/glaeNLsboq1vw3+yXqE9JYSpnH8V qj0YYEO2es/zaaOgRPQIbuM5s50PrSlcKRoLXECx+bM2kyV4pfGHjJgFQhTTUwLZ itlMWLfiCDOwQ+JcOMGpixoql6fVgW3togl9zo7bAIDcvsGHDSXFzQW2K/7ER2CX pwjUSqdSQIgwN18Q5DlXQGgM4ytXa4NDqOPSsMzpiLv1uFWf+S7Xenw5lfZnIgw0 CB0nXKadZ+cod5jlCMpzLJjLt7s+C3Zq5Zs+1qWIE+yoQQToX0rmg+PGQBo+M4ri +czCw8xZ42q4AFmzCzEPUMLWvhGJwnEEPwVxQ4fpxOM= -----END CERTIFICATE-----Generated at Fri Apr 17 10:30:31 2026 by rpki-client