$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee.cer File: 55db2859-2229-4006-88d8-ea1e403453ee.cer (raw, json) Hash identifier: KQ2uxZ45vcYvhUgbPF6FkFoHGdMuP534qsX2xw2cRbM= Subject key identifier: 98:39:58:A2:0F:65:F2:52:59:33:AF:FF:BF:69:BC:A0:69:5C:E8:9D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D6242BE8CF76D0EDFF0890900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/55db2859-2229-4006-88d8-ea1e403453ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Apr 2026 12:45:16 +0000 Certificate not after: Thu 06 Jul 2028 12:45:16 +0000 Subordinate resources: AS: 31995 IP: 208.90.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:42:be:8c:f7:6d:0e:df:f0:89:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 3 12:45:16 2026 GMT Not After : Jul 6 12:45:16 2028 GMT Subject: CN=55db2859-2229-4006-88d8-ea1e403453ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:1d:4a:72:82:b4:00:0b:b2:8c:ae:63:ed: da:36:0f:58:ec:db:78:66:03:a9:2c:67:c2:e2:82: 18:34:1e:56:8c:c4:b9:04:83:3e:b1:ae:c7:53:f1: 12:09:1a:6c:0f:d3:d0:25:8f:f1:29:50:09:b6:37: 70:df:a7:8e:00:7e:0e:f9:1c:f0:ce:3a:d3:cf:87: c6:07:a0:d6:9b:62:63:87:f2:78:a0:60:10:ed:50: 30:da:65:8d:b2:48:ab:52:2e:42:02:24:f6:4a:cd: 6a:5b:1c:75:ef:3f:10:18:03:9b:b6:9c:a5:b0:d4: fd:96:fe:be:45:1a:8c:24:4d:b1:79:06:82:a9:02: 52:25:a2:bc:01:20:8b:fa:23:82:62:25:fa:5c:34: 9a:d3:58:52:72:66:41:db:ab:50:48:94:79:06:a8: b8:41:5a:f0:0e:e4:90:96:01:6f:c1:be:07:3d:76: 8a:60:82:47:e6:7a:fb:0f:39:63:c1:bc:fb:cf:a5: 2d:73:dd:ad:a0:23:e7:42:a5:c1:e7:19:f0:85:34: cf:24:0f:bf:c1:ba:3a:e0:37:9d:ed:53:3b:78:23: f4:09:4e:1e:9f:1c:af:5f:a3:bd:e9:d7:e6:42:65: 32:48:fe:63:26:40:2b:20:61:21:bc:e2:18:74:08: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:39:58:A2:0F:65:F2:52:59:33:AF:FF:BF:69:BC:A0:69:5C:E8:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/55db2859-2229-4006-88d8-ea1e403453ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 208.90.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31995 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fc:06:ad:e3:33:7b:47:30:8a:dc:b3:ba:73:7b:bf:76:8c: 5b:28:b8:6f:9f:bf:25:ea:44:f8:e5:e6:bd:5a:f0:10:b7:0c: 87:61:77:06:2c:3c:3a:2c:71:0d:ba:f8:2c:ce:5c:0e:df:b4: 60:c3:c0:e5:fa:e4:07:bf:bd:fa:ce:dc:0e:8f:14:88:e6:6f: d1:89:91:55:7f:ca:98:11:0c:a9:99:21:a4:7b:20:88:91:b1: 74:32:a1:1e:de:3a:67:46:42:ed:a8:12:9c:d8:b2:bd:08:1e: ef:5d:6a:fd:46:3c:38:d3:a6:4f:52:1e:94:fa:6d:b2:32:a6: 70:a7:61:3c:98:ed:6d:45:dd:6c:f2:09:c4:dc:f4:dc:5c:c6: 79:11:f3:91:24:f8:aa:26:97:08:be:d0:36:95:9a:a4:25:06: 11:27:3f:c0:58:c8:2c:3c:34:66:61:ce:15:9a:bc:a7:7d:ca: f0:91:a8:ab:4a:eb:ab:06:0d:80:94:4b:80:07:7f:17:72:91: 12:ec:b5:8a:34:08:5e:1d:86:85:cb:71:eb:bb:06:a5:f1:5c: b8:53:fa:dd:26:38:3a:c5:fb:4a:94:a9:0a:1f:23:dc:1a:ea: d5:5a:e3:53:e7:a4:b5:bb:c3:2a:0d:ad:8a:6e:b0:1f:94:45: 7c:47:f7:42 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE1iQr6M920O3/CJCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwMzEyNDUxNloXDTI4MDcwNjEyNDUxNlowLzEtMCsGA1UEAxMk NTVkYjI4NTktMjIyOS00MDA2LTg4ZDgtZWExZTQwMzQ1M2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcAdSnKCtAALsoyuY+3aNg9Y7Nt4ZgOpLGfC 4oIYNB5WjMS5BIM+sa7HU/ESCRpsD9PQJY/xKVAJtjdw36eOAH4O+RzwzjrTz4fG B6DWm2Jjh/J4oGAQ7VAw2mWNskirUi5CAiT2Ss1qWxx17z8QGAObtpylsNT9lv6+ RRqMJE2xeQaCqQJSJaK8ASCL+iOCYiX6XDSa01hScmZB26tQSJR5Bqi4QVrwDuSQ lgFvwb4HPXaKYIJH5nr7Dzljwbz7z6Utc92toCPnQqXB5xnwhTTPJA+/wbo64Ded 7VM7eCP0CU4enxyvX6O96dfmQmUySP5jJkArIGEhvOIYdAj1wQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJg5WKIPZfJSWTOv/79pvKBpXOidMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 NWRiMjg1OS0yMjI5LTQwMDYtODhkOC1lYTFlNDAzNDUzZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzU1ZGIyODU5LTIyMjktNDAwNi04 OGQ4LWVhMWU0MDM0NTNlZS81NWRiMjg1OS0yMjI5LTQwMDYtODhkOC1lYTFlNDAz NDUzZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQWnQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fPswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAVPwGreMze0cwityzunN7v3aMWyi4b5+/JepE+OXmvVrwELcM h2F3Biw8OixxDbr4LM5cDt+0YMPA5frkB7+9+s7cDo8UiOZv0YmRVX/KmBEMqZkh pHsgiJGxdDKhHt46Z0ZC7agSnNiyvQge711q/UY8ONOmT1IelPptsjKmcKdhPJjt bUXdbPIJxNz03FzGeRHzkST4qiaXCL7QNpWapCUGESc/wFjILDw0ZmHOFZq8p33K 8JGoq0rrqwYNgJRLgAd/F3KREuy1ijQIXh2Ghctx67sGpfFcuFP63SY4OsX7SpSp Ch8j3Brq1VrjU+ektbvDKg2tim6wH5RFfEf3Qg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:14 2026 by rpki-client