$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer File: 688165c5-c42e-4c66-a760-e605ebd8b2a3.cer (raw, json) Hash identifier: EP9Qb1nQu/PSfGAD3z2k3DXtUMdvjHShXqgOsPOT9Ek= Subject key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF639037A9B4986D0E2D42AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 12:45:18 +0000 Certificate not after: Mon 28 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 395089 IP: 192.160.102.0/24 IP: 2620:132:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:39:03:7a:9b:49:86:d0:e2:d4:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 26 12:45:18 2026 GMT Not After : Aug 28 12:45:18 2028 GMT Subject: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:94:d1:1e:36:2b:f2:ec:59:69:73:ab:4e:ce: fc:f2:a7:8f:3a:f0:9e:8a:af:7d:2d:8e:c9:4d:c0: 3d:e7:38:7e:05:bd:0d:6b:ad:7f:84:52:cc:e1:86: 1c:6b:aa:f7:c1:fd:59:af:44:a3:a5:1d:ee:2b:f5: 5e:28:a6:af:73:1a:8c:61:1b:27:6f:b2:f5:03:8a: e1:f4:70:f0:d2:3f:f9:25:10:99:c8:15:c9:b8:c4: 0b:a2:8a:79:87:12:c8:6f:4d:74:b5:03:e7:ca:f1: ed:11:28:1b:d8:0b:83:01:3e:54:d0:94:c4:70:32: 51:6f:46:d9:05:ba:5e:56:7b:5d:73:a3:ae:eb:05: 8b:f6:7f:42:2a:45:53:06:3e:27:4e:0f:91:f9:e6: cf:e6:bb:5a:5b:73:f0:24:e7:f6:1e:45:af:06:50: d8:d5:e8:88:50:c0:25:6d:bb:b1:f1:8b:6b:3f:1d: 5a:5a:84:6b:b5:28:71:7e:c1:a5:e7:c5:0e:bb:ac: 55:44:7d:95:81:8d:6d:6d:7c:18:18:8b:cc:31:67: 75:d7:cf:cd:06:d7:13:51:88:7f:25:e5:17:d1:3b: 4e:16:7b:b0:1c:00:bb:d8:0f:16:a2:4a:10:39:c3: 06:3c:a3:39:56:a0:09:f0:fe:c7:fd:bb:18:4c:26: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.160.102.0/24 IPv6: 2620:132:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395089 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:bc:48:97:e2:80:e7:88:c4:bb:36:25:33:9c:02:83:57:80: c9:7f:b2:f4:3f:01:23:9c:82:d2:bb:05:6c:d9:9b:f1:6e:13: 37:19:25:43:53:a2:4b:12:20:d6:94:f0:9a:e6:36:f4:bb:43: bd:f0:51:b2:6e:c0:6a:07:0b:33:d1:1c:48:04:74:76:e2:5f: ca:8f:02:9e:81:f4:6a:c4:33:9b:88:18:1a:1c:41:f6:cf:82: de:eb:d7:ef:34:e0:b0:d2:70:3c:76:62:f3:39:62:fd:7f:9c: c9:af:f7:86:20:3e:0e:ec:34:67:76:29:6c:0e:82:b7:36:a7: a5:46:9a:7e:5c:22:69:88:c0:8f:3c:e5:ad:ec:6a:cf:5b:0c: f7:f4:55:6e:9e:b0:80:48:d1:b1:51:80:ce:16:40:36:9f:59: f3:80:f5:b2:84:ba:c4:fb:d0:34:3f:2a:11:5c:2e:40:20:ce: 89:c0:d1:a4:19:e1:80:24:b2:45:75:9f:4e:48:c9:d8:b1:ec: 65:b6:78:f7:36:3c:2d:26:c4:0f:66:7b:32:a2:e9:8b:94:40: 8c:81:f5:d4:4a:95:9c:ad:a7:7f:a6:9c:4a:dc:b5:d9:d3:49: e8:c7:0c:43:08:f9:ac:a7:81:37:74:c9:a9:1e:39:52:1f:66: bb:ab:a6:ff -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE32OQN6m0mG0OLUKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNjEyNDUxOFoXDTI4MDgyODEyNDUxOFowLzEtMCsGA1UEAxMk Njg4MTY1YzUtYzQyZS00YzY2LWE3NjAtZTYwNWViZDhiMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJTRHjYr8uxZaXOrTs788qePOvCeiq99LY7J TcA95zh+Bb0Na61/hFLM4YYca6r3wf1Zr0SjpR3uK/VeKKavcxqMYRsnb7L1A4rh 9HDw0j/5JRCZyBXJuMQLoop5hxLIb010tQPnyvHtESgb2AuDAT5U0JTEcDJRb0bZ BbpeVntdc6Ou6wWL9n9CKkVTBj4nTg+R+ebP5rtaW3PwJOf2HkWvBlDY1eiIUMAl bbux8YtrPx1aWoRrtShxfsGl58UOu6xVRH2VgY1tbXwYGIvMMWd118/NBtcTUYh/ JeUX0TtOFnuwHAC72A8WokoQOcMGPKM5VqAJ8P7H/bsYTCZlhQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAhSsbhOGUF4CqMQsdZBDOerIrdoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 ODgxNjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1ZWJkOGIyYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY4ODE2NWM1LWM0MmUtNGM2Ni1h NzYwLWU2MDVlYmQ4YjJhMy82ODgxNjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1ZWJk OGIyYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAoGYwDgQCAAIwCAMGACYgATIwMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYHUTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVvEiX4oDniMS7NiUznAKDV4DJ f7L0PwEjnILSuwVs2ZvxbhM3GSVDU6JLEiDWlPCa5jb0u0O98FGybsBqBwsz0RxI BHR24l/KjwKegfRqxDObiBgaHEH2z4Le69fvNOCw0nA8dmLzOWL9f5zJr/eGID4O 7DRndilsDoK3NqelRpp+XCJpiMCPPOWt7GrPWwz39FVunrCASNGxUYDOFkA2n1nz gPWyhLrE+9A0PyoRXC5AIM6JwNGkGeGAJLJFdZ9OSMnYsexltnj3NjwtJsQPZnsy oumLlECMgfXUSpWcrad/ppxK3LXZ00noxwxDCPmsp4E3dMmpHjlSH2a7q6b/ -----END CERTIFICATE-----Generated at Sun Jun 14 01:32:00 2026 by rpki-client