$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer File: 8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer (raw, json) Hash identifier: vnYF6Ant4uGlszf50GSxZu10e24fhIlrMrtYlfYS5Ec= Subject key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E23D220D37C0ED2B99F6F0700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jun 2026 20:45:11 +0000 Certificate not after: Wed 13 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 19415 IP: 23.166.248.0/24 IP: 2602:f9d3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:23:d2:20:d3:7c:0e:d2:b9:9f:6f:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 11 20:45:11 2026 GMT Not After : Sep 13 20:45:11 2028 GMT Subject: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:5b:74:8b:bb:3f:90:05:f2:17:d1:b8:74: fb:ce:18:95:57:30:07:58:3b:ae:2b:54:a0:7e:d5: 1a:15:3b:e4:62:88:11:9d:81:97:03:3c:e1:8c:db: d0:d7:05:e2:8f:b8:5d:a8:ac:83:63:e9:fb:64:98: 01:3c:61:da:9f:47:60:a7:41:50:e3:33:6d:16:91: 39:ad:a4:74:d4:0d:92:e5:ac:42:67:98:a6:77:bc: 6a:fe:50:13:fe:52:50:7e:de:46:5a:94:8c:09:3a: 30:10:7d:32:93:71:6b:97:2f:d1:73:22:b8:16:5b: 3a:30:ab:ec:60:71:69:d6:34:7c:a0:1b:cd:38:6d: ee:c2:8d:77:3b:9d:96:cc:b9:a2:aa:9f:34:2b:ee: 65:41:22:b2:7e:1a:2a:4f:ae:90:09:19:a8:be:3e: 3a:93:0f:06:b9:55:3a:37:ac:e8:d4:1c:b4:8c:12: d2:dc:d4:8d:2d:2b:25:1f:d0:c6:b3:6f:32:70:dc: 16:d3:fe:46:2c:57:c1:02:e7:ce:d4:a3:ff:ec:c9: eb:c2:a5:93:dc:3f:96:7c:12:dd:97:30:b2:a7:83: 9b:94:97:37:e2:13:9c:b8:62:21:2b:4c:2d:22:9c: df:3c:29:4c:eb:6b:96:f3:25:e5:71:c6:0a:cb:bd: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.166.248.0/24 IPv6: 2602:f9d3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19415 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:31:c7:b6:e3:ef:75:f2:cf:06:12:7d:bd:a5:53:c2:68:e0: 79:30:99:c5:16:5e:20:7f:b8:64:27:fd:f5:1a:f9:8d:5d:a6: a4:a2:8b:c6:5d:46:8b:31:eb:47:4a:40:b8:3f:86:0d:e0:09: 61:2c:8e:16:fb:50:32:57:40:41:36:07:12:fb:bb:93:b6:d4: ea:c5:6e:2e:a3:63:c7:40:dd:7f:31:27:85:24:43:2f:bd:df: b3:7b:8e:27:70:bd:1a:88:b0:78:bb:29:5b:da:fd:30:b1:92: bc:7a:17:39:0b:2c:00:76:03:1d:55:d2:b3:14:46:d9:af:77: c1:8e:96:97:89:64:a3:7b:88:2c:0f:9a:49:cb:43:87:2c:93: cf:c8:e7:0d:ff:df:f0:9f:2f:36:32:56:23:74:88:00:fa:b2: a9:e2:66:bd:5e:a1:3f:93:b4:67:a4:52:e8:e2:8c:86:79:45: 8a:91:7a:eb:b3:51:3e:18:7c:96:6a:53:f9:25:55:e1:b5:9b: 03:f8:b7:c7:20:8c:16:d9:32:65:9b:84:2b:9e:12:68:ce:76: 41:3f:54:e3:6c:b1:13:72:70:aa:ad:ea:63:dd:3b:69:1e:fe: ba:55:14:1a:11:dd:d2:b2:2d:55:53:39:0d:c7:02:eb:a3:93: ca:6d:72:fe -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE4j0iDTfA7SuZ9vBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYxMTIwNDUxMVoXDTI4MDkxMzIwNDUxMVowLzEtMCsGA1UEAxMk OGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZmMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+1bdIu7P5AF8hfRuHT7zhiVVzAHWDuuK1Sg ftUaFTvkYogRnYGXAzzhjNvQ1wXij7hdqKyDY+n7ZJgBPGHan0dgp0FQ4zNtFpE5 raR01A2S5axCZ5imd7xq/lAT/lJQft5GWpSMCTowEH0yk3Frly/RcyK4Fls6MKvs YHFp1jR8oBvNOG3uwo13O52WzLmiqp80K+5lQSKyfhoqT66QCRmovj46kw8GuVU6 N6zo1By0jBLS3NSNLSslH9DGs28ycNwW0/5GLFfBAufO1KP/7MnrwqWT3D+WfBLd lzCyp4OblJc34hOcuGIhK0wtIpzfPClM62uW8yXlccYKy72nuQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFO1+zX7vruymTPXtsETKxAL92kPBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhmNmIyM2IxLWMxOTctNGRiMi1i NGQ0LWE4MWFkY2Q2ZjBlNS84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNk NmYwZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpvgwDgQCAAIwCAMGACYC+dMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkvXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGIxx7bj73XyzwYSfb2lU8Jo4Hkw mcUWXiB/uGQn/fUa+Y1dpqSii8ZdRosx60dKQLg/hg3gCWEsjhb7UDJXQEE2BxL7 u5O21OrFbi6jY8dA3X8xJ4UkQy+937N7jidwvRqIsHi7KVva/TCxkrx6FzkLLAB2 Ax1V0rMURtmvd8GOlpeJZKN7iCwPmknLQ4csk8/I5w3/3/CfLzYyViN0iAD6sqni Zr1eoT+TtGekUujijIZ5RYqReuuzUT4YfJZqU/klVeG1mwP4t8cgjBbZMmWbhCue EmjOdkE/VONssRNycKqt6mPdO2ke/rpVFBoR3dKyLVVTOQ3HAuujk8ptcv4= -----END CERTIFICATE-----Generated at Sat Jun 13 17:43:33 2026 by rpki-client