$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer File: 749b2153-8fb9-49bc-b117-9e419bd6fddf.cer (raw, json) Hash identifier: bOJbRDTaWfzdMZmDYOyP0iakwUgh0W6PQ6DvkhZnREM= Subject key identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D60DD6789EE2F2CFCC3520900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Apr 2026 00:45:17 +0000 Certificate not after: Thu 06 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 25737 IP: 23.162.8.0/24 IP: 2602:fa1f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:dd:67:89:ee:2f:2c:fc:c3:52:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 3 00:45:17 2026 GMT Not After : Jul 6 00:45:17 2028 GMT Subject: CN=749b2153-8fb9-49bc-b117-9e419bd6fddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:9d:42:89:7a:70:f8:20:0f:b8:9d:37:94: d4:fb:ea:99:97:33:1b:9b:e5:c6:74:44:9a:b5:fa: fb:ca:bb:24:da:3b:31:bd:9b:0b:cd:97:8f:76:f9: 8e:4d:bb:d7:3a:d2:a8:9a:42:ee:d8:33:db:32:36: 44:39:26:2e:f1:a1:04:43:25:d8:16:cb:07:cd:71: 26:5f:6d:4b:24:d8:4b:35:fc:fa:c2:f8:ce:07:d8: e2:40:c1:e1:ff:98:40:ba:da:da:35:36:17:e9:04: e7:e9:3f:5e:1a:db:fe:31:23:8b:ad:49:40:45:8d: c8:60:e4:d8:77:9a:18:b7:5b:41:52:03:41:62:b5: df:c4:92:c7:e0:92:31:0a:f0:34:9f:05:42:de:26: 7f:72:72:50:e8:30:8e:e6:de:17:be:16:b8:0d:4d: ad:4d:62:3d:5a:05:7d:4f:9d:6d:d4:fb:24:bd:58: e4:22:8d:37:78:f0:44:70:01:ce:39:c4:20:2a:99: 54:90:31:80:ce:a8:2d:7e:ff:ec:a0:5a:8f:08:25: 27:fa:a7:28:51:9e:0a:1a:a6:f5:24:55:1f:8f:ae: d9:5d:67:2d:e8:d3:93:62:0b:b9:be:2b:a7:cd:68: fa:00:8a:93:f4:4f:65:6c:16:6d:53:6d:e3:61:bb: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.162.8.0/24 IPv6: 2602:fa1f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25737 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dc:0c:d5:53:21:97:cc:43:5c:00:9d:dc:36:58:ac:f5:80: c5:fc:7a:a8:89:a3:fa:84:05:d4:99:4f:6f:fc:be:81:37:e7: 19:20:8b:57:f9:58:76:0a:08:82:78:bb:51:06:d8:7b:e6:08: 56:58:06:95:74:a5:fe:0e:59:ab:b3:6d:fc:6b:67:15:ff:69: b4:b2:d7:20:8e:af:36:fe:d1:ea:96:62:22:1f:71:3a:00:6c: c8:45:b3:ce:ea:be:72:89:a0:17:d5:ad:47:10:90:f5:84:90: dc:de:63:69:82:cc:66:5e:bf:96:f6:94:a9:74:c9:5c:44:ce: 8d:8d:0d:c3:d2:e9:65:ed:f9:dc:35:59:ce:62:d9:c6:ab:c6: 07:6d:38:96:3b:85:19:c7:ea:10:4b:6c:47:09:e8:96:b7:a6: 6c:b8:e6:b4:5f:a4:70:4d:25:6e:df:ea:1f:4e:02:61:29:5f: 92:f5:68:87:d7:c5:8c:76:25:75:da:7f:2b:7d:ea:40:17:e0: 66:42:ea:bc:81:f2:91:d3:dc:94:b0:a4:ac:0d:fb:bd:4d:7c: f8:2f:3e:94:cb:26:02:64:53:e9:e9:67:f8:79:e5:ae:b2:a2: 3b:6f:3a:de:18:73:59:2c:cf:ab:fa:73:b8:c5:11:d8:be:ac: aa:15:2e:87 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE1g3WeJ7i8s/MNSCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwMzAwNDUxN1oXDTI4MDcwNjAwNDUxN1owLzEtMCsGA1UEAxMk NzQ5YjIxNTMtOGZiOS00OWJjLWIxMTctOWU0MTliZDZmZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoOdQol6cPggD7idN5TU++qZlzMbm+XGdESa tfr7yrsk2jsxvZsLzZePdvmOTbvXOtKomkLu2DPbMjZEOSYu8aEEQyXYFssHzXEm X21LJNhLNfz6wvjOB9jiQMHh/5hAutraNTYX6QTn6T9eGtv+MSOLrUlARY3IYOTY d5oYt1tBUgNBYrXfxJLH4JIxCvA0nwVC3iZ/cnJQ6DCO5t4Xvha4DU2tTWI9WgV9 T51t1PskvVjkIo03ePBEcAHOOcQgKplUkDGAzqgtfv/soFqPCCUn+qcoUZ4KGqb1 JFUfj67ZXWct6NOTYgu5viunzWj6AIqT9E9lbBZtU23jYbv1cwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPtLh/O4r22TEToP9rdoRHKsSbwCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 NDliMjE1My04ZmI5LTQ5YmMtYjExNy05ZTQxOWJkNmZkZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc0OWIyMTUzLThmYjktNDliYy1i MTE3LTllNDE5YmQ2ZmRkZi83NDliMjE1My04ZmI5LTQ5YmMtYjExNy05ZTQxOWJk NmZkZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoggwDgQCAAIwCAMGACYC+h8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmSJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFjcDNVTIZfMQ1wAndw2WKz1gMX8 eqiJo/qEBdSZT2/8voE35xkgi1f5WHYKCIJ4u1EG2HvmCFZYBpV0pf4OWauzbfxr ZxX/abSy1yCOrzb+0eqWYiIfcToAbMhFs87qvnKJoBfVrUcQkPWEkNzeY2mCzGZe v5b2lKl0yVxEzo2NDcPS6WXt+dw1Wc5i2carxgdtOJY7hRnH6hBLbEcJ6Ja3pmy4 5rRfpHBNJW7f6h9OAmEpX5L1aIfXxYx2JXXafyt96kAX4GZC6ryB8pHT3JSwpKwN +71NfPgvPpTLJgJkU+npZ/h55a6yojtvOt4Yc1ksz6v6c7jFEdi+rKoVLoc= -----END CERTIFICATE-----Generated at Fri Apr 17 20:54:27 2026 by rpki-client