$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer File: 7875058f-5363-4bbc-9de7-bfd669c88bd9.cer (raw, json) Hash identifier: muNBowhtIZvQn18ESTQjwhS5XZ2ykBF0GNR7JB/zqhQ= Subject key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D80F8475C11CBC152235BB100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Apr 2026 12:45:18 +0000 Certificate not after: Mon 17 Jul 2028 12:45:18 +0000 Subordinate resources: IP: 137.155.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:f8:47:5c:11:cb:c1:52:23:5b:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 14 12:45:18 2026 GMT Not After : Jul 17 12:45:18 2028 GMT Subject: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:1b:71:28:78:a8:89:61:2e:a8:61:f3:bd: bb:9e:55:39:e7:c3:d1:ce:f1:3b:cd:9b:12:bc:67: 07:e5:6d:44:4f:3d:25:a8:31:a7:3d:28:47:4f:2b: 36:d7:3c:87:bb:80:3a:a0:7e:54:af:25:0f:b8:bc: 33:3a:22:84:89:b0:4b:bc:b3:6e:f7:89:b7:b3:4f: 6b:31:b5:bd:a8:05:27:66:3a:ad:12:b6:0c:e8:b0: b3:df:52:bd:b6:81:2e:a0:bf:8b:cc:94:1d:de:fe: f9:6d:23:2d:bc:7a:58:31:43:8b:10:19:e1:dd:6d: 24:6a:8c:d2:5f:a8:e8:bc:17:94:02:57:33:d4:3e: 49:72:27:2b:68:ef:99:f3:c2:9b:c8:b1:6a:45:93: c3:db:09:e3:27:4c:f9:6b:7f:09:f2:7b:8a:ea:80: 92:6a:44:df:52:e7:da:27:32:63:d7:b1:af:8b:c7: ce:43:79:fc:09:74:b7:b2:a8:e6:60:6a:30:74:9b: a5:27:90:39:7e:df:c5:87:d2:bc:f0:ec:fc:10:52: 20:b7:4e:e5:eb:6c:2e:e5:33:fe:93:0b:b8:9a:f6: fa:9f:0f:ab:26:d0:54:e6:1c:cb:45:a9:68:be:b6: a1:ad:5d:56:f6:ea:13:81:5b:41:8f:6c:b6:15:d0: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 137.155.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:15:00:11:0a:2c:b7:91:c2:2b:69:d9:cd:a6:f1:e4:be:05: b6:83:60:03:cf:62:aa:fc:9f:a4:12:da:dd:a8:d4:05:a4:2c: f2:fa:8d:17:0d:9d:54:82:40:ce:cb:01:cc:a0:19:2c:73:ff: 32:72:47:76:ad:d0:a8:28:f2:db:30:2c:9b:11:e8:5f:21:ec: 25:bc:c2:2d:df:40:20:cb:c2:ab:62:94:71:ab:b3:e1:e0:89: fc:d9:e7:2c:eb:5e:69:59:1c:f7:ab:22:d1:70:5a:29:f1:90: 76:b8:be:7c:96:e9:1f:7b:63:2c:f9:3c:d2:2a:31:8b:db:31: 36:65:8b:65:8b:40:80:fd:5f:ac:0e:cc:9e:9c:3d:83:a7:ae: 4a:73:43:18:37:e1:d9:28:ff:28:67:a4:eb:17:17:a4:ff:86: ee:d8:9f:42:ce:71:17:4d:4b:ce:75:30:71:b7:fe:53:6d:5a: 40:d5:a8:4a:0a:db:55:57:e7:fa:84:be:cf:74:ff:10:63:35: a8:0c:ba:0d:3d:30:bc:51:e9:b8:26:9b:af:e4:f1:28:01:bd: 68:c4:b5:66:13:21:a6:73:12:54:69:6f:15:f5:d3:2b:df:c8: 6d:99:36:46:04:75:ac:7d:e2:3d:d1:f9:6c:98:07:89:6c:a9: e0:3b:d9:74 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE2A+EdcEcvBUiNbsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxNDEyNDUxOFoXDTI4MDcxNzEyNDUxOFowLzEtMCsGA1UEAxMk Nzg3NTA1OGYtNTM2My00YmJjLTlkZTctYmZkNjY5Yzg4YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ8bcSh4qIlhLqhh8727nlU558PRzvE7zZsS vGcH5W1ETz0lqDGnPShHTys21zyHu4A6oH5UryUPuLwzOiKEibBLvLNu94m3s09r MbW9qAUnZjqtErYM6LCz31K9toEuoL+LzJQd3v75bSMtvHpYMUOLEBnh3W0kaozS X6jovBeUAlcz1D5JcicraO+Z88KbyLFqRZPD2wnjJ0z5a38J8nuK6oCSakTfUufa JzJj17Gvi8fOQ3n8CXS3sqjmYGowdJulJ5A5ft/Fh9K88Oz8EFIgt07l62wu5TP+ kwu4mvb6nw+rJtBU5hzLRalovrahrV1W9uoTgVtBj2y2FdDKYwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFGD4WZp5VjdNReAC7VjAjRkYW6wDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2NjljODhiZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc4NzUwNThmLTUzNjMtNGJiYy05 ZGU3LWJmZDY2OWM4OGJkOS83ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2Njlj ODhiZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJmzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaFQARCiy3kcIradnNpvHk vgW2g2ADz2Kq/J+kEtrdqNQFpCzy+o0XDZ1UgkDOywHMoBksc/8yckd2rdCoKPLb MCybEehfIewlvMIt30Agy8KrYpRxq7Ph4In82ecs615pWRz3qyLRcFop8ZB2uL58 lukfe2Ms+TzSKjGL2zE2ZYtli0CA/V+sDsyenD2Dp65Kc0MYN+HZKP8oZ6TrFxek /4bu2J9CznEXTUvOdTBxt/5TbVpA1ahKCttVV+f6hL7PdP8QYzWoDLoNPTC8Uem4 Jpuv5PEoAb1oxLVmEyGmcxJUaW8V9dMr38htmTZGBHWsfeI90flsmAeJbKngO9l0 -----END CERTIFICATE-----Generated at Fri Apr 17 01:30:08 2026 by rpki-client