$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer File: 928d2060-10a9-4ea3-becb-9d0ffe02a156.cer (raw, json) Hash identifier: HK3aQ2ICkN6Nyula1tNoeJMc2GYj5kN5vvkPx1PEpDU= Subject key identifier: E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DDA4E2A77EB8666F5ACDF1440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 May 2026 12:45:17 +0000 Certificate not after: Fri 18 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 22953 IP: 2620:60:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:4e:2a:77:eb:86:66:f5:ac:df:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 16 12:45:17 2026 GMT Not After : Aug 18 12:45:17 2028 GMT Subject: CN=928d2060-10a9-4ea3-becb-9d0ffe02a156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:61:ec:21:18:85:5a:17:e9:0b:bf:75:be: f0:29:ee:53:67:19:0d:5a:0b:ff:81:0a:55:6f:a4: 4b:cc:11:f2:41:c9:0c:3a:b1:6e:16:a0:af:97:8f: 01:a7:f3:1d:e1:95:4b:80:7d:ad:42:b2:f4:54:ef: b9:e8:eb:79:c0:77:ef:07:a8:2a:4a:f5:1b:c3:88: c8:f6:b6:9d:73:31:2b:7b:df:bd:f0:6c:f3:10:07: 87:cd:97:47:bf:b0:79:3f:65:27:f2:8a:33:6e:64: f6:82:6b:00:c8:9f:c1:24:73:0e:01:d4:bb:86:66: f9:75:bf:49:68:5d:39:0d:9d:f8:6d:a4:22:d7:95: 9e:13:8e:59:c6:df:02:fd:25:76:91:3a:eb:69:28: eb:ad:4b:7e:aa:69:4f:7d:4e:a8:44:38:7d:0b:e6: 5f:d4:69:e5:2b:bd:ec:7b:90:8b:62:d2:d6:4a:ca: 20:ff:47:85:24:53:e5:50:46:f6:00:a7:98:d5:0f: 06:f8:34:52:83:65:d9:1c:da:81:d5:eb:cb:59:87: 8e:96:a1:dd:db:45:4a:f0:d8:70:5b:4f:b2:0d:8c: 3f:4e:ec:cb:80:17:23:0f:ad:4c:77:f6:9b:0f:70: 06:a1:e3:7d:30:3b:c1:41:59:b3:2a:c4:5a:6f:f9: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2620:60:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22953 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:59:d9:b4:27:ad:4f:72:7c:c4:c8:4c:01:3c:7c:15:75:86: e1:62:8c:b9:0e:bc:8d:3b:16:0f:1b:03:0a:54:d9:3e:62:25: 68:98:e0:e4:e0:3b:fa:0a:31:58:00:3f:0b:b8:0e:ad:36:d4: c5:e4:b8:88:39:27:7a:f3:79:29:f3:57:39:1c:1e:e5:55:78: c6:2b:85:15:d7:9f:42:09:0a:5a:c7:0b:d8:ab:c6:ed:55:29: cc:a8:f1:d8:7e:b7:56:44:41:7f:10:e9:d8:73:76:a6:b5:f4: 6b:01:2d:24:2c:91:f4:df:ce:2c:a9:dc:2d:2b:8f:07:8a:f1: d9:75:29:6a:fc:c7:42:50:9a:e7:63:ec:bd:d5:ad:e2:15:f0: e4:62:09:97:80:10:80:82:98:a2:d7:5c:f5:4f:1e:11:d9:ac: 8c:fa:f0:09:87:35:5b:20:52:92:d6:6c:18:03:b9:9b:eb:1c: 90:af:a5:3a:bc:8f:e1:29:ec:cd:ed:63:de:58:29:32:bb:c4: 39:e6:f3:39:41:a3:c3:d9:b6:99:57:8b:7d:23:a5:7a:20:38: 63:d6:ff:8a:41:db:14:90:9c:ad:30:a9:15:00:4a:3d:ef:65: 0f:da:e6:6b:bc:17:3b:28:61:55:3b:28:e4:c1:b0:b9:fe:18: 3f:a2:49:90 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE3aTip364Zm9azfFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxNjEyNDUxN1oXDTI4MDgxODEyNDUxN1owLzEtMCsGA1UEAxMk OTI4ZDIwNjAtMTBhOS00ZWEzLWJlY2ItOWQwZmZlMDJhMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1h7CEYhVoX6Qu/db7wKe5TZxkNWgv/gQpV b6RLzBHyQckMOrFuFqCvl48Bp/Md4ZVLgH2tQrL0VO+56Ot5wHfvB6gqSvUbw4jI 9radczEre9+98GzzEAeHzZdHv7B5P2Un8oozbmT2gmsAyJ/BJHMOAdS7hmb5db9J aF05DZ34baQi15WeE45Zxt8C/SV2kTrraSjrrUt+qmlPfU6oRDh9C+Zf1GnlK73s e5CLYtLWSsog/0eFJFPlUEb2AKeY1Q8G+DRSg2XZHNqB1evLWYeOlqHd20VK8Nhw W0+yDYw/TuzLgBcjD61Md/abD3AGoeN9MDvBQVmzKsRab/lVuQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFOmiU3ouf4h/W+1GpYtdg0zEH4SkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 MjhkMjA2MC0xMGE5LTRlYTMtYmVjYi05ZDBmZmUwMmExNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzkyOGQyMDYwLTEwYTktNGVhMy1i ZWNiLTlkMGZmZTAyYTE1Ni85MjhkMjA2MC0xMGE5LTRlYTMtYmVjYi05ZDBmZmUw MmExNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIABggAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICWakwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAe1nZtCetT3J8xMhMATx8FXWG4WKMuQ68jTsWDxsDClTZ PmIlaJjg5OA7+goxWAA/C7gOrTbUxeS4iDknevN5KfNXORwe5VV4xiuFFdefQgkK WscL2KvG7VUpzKjx2H63VkRBfxDp2HN2prX0awEtJCyR9N/OLKncLSuPB4rx2XUp avzHQlCa52PsvdWt4hXw5GIJl4AQgIKYotdc9U8eEdmsjPrwCYc1WyBSktZsGAO5 m+sckK+lOryP4Snsze1j3lgpMrvEOebzOUGjw9m2mVeLfSOleiA4Y9b/ikHbFJCc rTCpFQBKPe9lD9rma7wXOyhhVTso5MGwuf4YP6JJkA== -----END CERTIFICATE-----Generated at Sat Jun 13 17:43:29 2026 by rpki-client