$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer File: 791fee1c-1b1f-448c-8937-9a315eb8e9de.cer (raw, json) Hash identifier: eyayCNovuDhZsU22HNSh0CZuIBexDw/nYvVYLCBR49Y= Subject key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E1A0CBDD3711D0CA9406F9980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Jun 2026 08:45:12 +0000 Certificate not after: Sun 10 Sep 2028 08:45:12 +0000 Subordinate resources: IP: 192.197.225.0 -- 192.197.226.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:0c:bd:d3:71:1d:0c:a9:40:6f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 8 08:45:12 2026 GMT Not After : Sep 10 08:45:12 2028 GMT Subject: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:63:b7:8b:50:c3:85:67:3b:61:17:d8:e7: f5:fc:f8:d9:34:9d:0f:1b:64:56:75:8f:8e:dd:4b: b6:85:27:7b:bb:93:b0:f1:4a:35:06:43:8f:5a:10: f0:95:0c:d7:c0:4f:4f:ef:e4:60:1a:db:47:53:67: 61:71:02:fa:e3:fb:0e:0e:c5:e5:68:b6:18:b1:fa: 3c:10:20:88:1d:ad:6e:f4:de:15:64:0c:3b:c1:de: 05:75:72:1d:06:4f:f0:54:27:96:aa:a8:dd:b3:67: 1d:4a:90:ae:b8:43:84:1e:01:23:1a:9a:b1:60:c5: a5:d6:fd:01:4f:7a:69:a3:5c:c2:40:b7:c2:dc:4d: 46:f6:cb:6f:7a:aa:a6:b4:6c:96:c5:f6:89:30:e3: 75:db:14:eb:b6:8e:e0:4d:33:10:8c:2c:38:4d:4f: 2f:77:53:fa:13:06:a8:52:9e:d4:52:60:ba:0e:c4: 19:a0:7f:92:ab:16:48:7f:e2:5a:2a:38:40:02:6a: 85:68:d1:96:96:f0:2c:e2:f2:bc:da:72:f1:49:46: 40:5f:e4:ab:54:d2:c7:d1:ec:6b:51:14:07:19:5b: 73:aa:dc:12:43:7a:cc:86:d1:18:c8:21:3b:8b:b3: 99:91:e2:2d:ec:59:dd:95:8d:3e:2c:45:d4:1a:9a: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.225.0-192.197.226.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:67:f7:cd:60:e7:9e:06:1e:86:89:76:fe:76:00:2f:7a:04: 2e:24:75:f0:8f:20:90:cb:34:78:92:12:39:c1:47:2e:4d:89: 28:97:15:73:d7:16:94:94:24:c3:65:c4:3d:ac:2f:53:41:ff: 23:28:e9:9f:25:30:55:85:ba:00:ea:8b:90:9b:e3:3f:4b:ca: 81:81:6d:12:97:74:e1:51:dc:73:b7:6e:b6:cb:88:58:cd:85: cb:8b:a3:93:c3:05:13:6a:cb:d9:58:dc:a9:de:b8:79:3f:5a: 48:63:37:2f:3f:0b:98:0d:69:03:da:0f:67:17:af:35:c5:38: 9b:8f:94:25:d4:86:47:01:12:92:61:92:08:64:16:b2:39:8a: 21:cf:f2:2d:d2:4a:50:82:c9:fe:89:22:86:ba:f4:f0:cb:4c: 13:e1:b9:2f:cb:4e:75:4b:c5:ac:3a:a9:86:22:f1:0a:4f:18: 5a:16:38:14:0a:29:c7:2a:4f:94:5f:ba:0f:56:a8:46:2f:e1: 75:05:a9:f1:4c:c4:9c:f5:80:ce:2e:32:2f:e0:73:50:5b:00: 58:6c:6a:80:34:27:51:b7:00:ce:74:ed:4e:61:04:f9:57:ff: b4:46:a2:d1:bc:08:f3:79:70:fa:6b:0e:34:e5:bf:bd:1a:74: 58:61:7a:9d -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE4aDL3TcR0MqUBvmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwODA4NDUxMloXDTI4MDkxMDA4NDUxMlowLzEtMCsGA1UEAxMk NzkxZmVlMWMtMWIxZi00NDhjLTg5MzctOWEzMTVlYjhlOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsRjt4tQw4VnO2EX2Of1/PjZNJ0PG2RWdY+O 3Uu2hSd7u5Ow8Uo1BkOPWhDwlQzXwE9P7+RgGttHU2dhcQL64/sODsXlaLYYsfo8 ECCIHa1u9N4VZAw7wd4FdXIdBk/wVCeWqqjds2cdSpCuuEOEHgEjGpqxYMWl1v0B T3ppo1zCQLfC3E1G9stveqqmtGyWxfaJMON12xTrto7gTTMQjCw4TU8vd1P6Ewao Up7UUmC6DsQZoH+SqxZIf+JaKjhAAmqFaNGWlvAs4vK82nLxSUZAX+SrVNLH0exr URQHGVtzqtwSQ3rMhtEYyCE7i7OZkeIt7FndlY0+LEXUGpo6HQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFLpPK24r6OneEhrkv2Mwf2PDoDvSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWViOGU5ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc5MWZlZTFjLTFiMWYtNDQ4Yy04 OTM3LTlhMzE1ZWI4ZTlkZS83OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWVi OGU5ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMDF4QMEAMDF4jBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPZ/fNYOee Bh6GiXb+dgAvegQuJHXwjyCQyzR4khI5wUcuTYkolxVz1xaUlCTDZcQ9rC9TQf8j KOmfJTBVhboA6ouQm+M/S8qBgW0Sl3ThUdxzt262y4hYzYXLi6OTwwUTasvZWNyp 3rh5P1pIYzcvPwuYDWkD2g9nF681xTibj5Ql1IZHARKSYZIIZBayOYohz/It0kpQ gsn+iSKGuvTwy0wT4bkvy051S8WsOqmGIvEKTxhaFjgUCinHKk+UX7oPVqhGL+F1 BanxTMSc9YDOLjIv4HNQWwBYbGqANCdRtwDOdO1OYQT5V/+0RqLRvAjzeXD6aw40 5b+9GnRYYXqd -----END CERTIFICATE-----Generated at Sat Jun 13 17:44:47 2026 by rpki-client