$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer File: a31515c0-c04f-41e6-958d-172bcd0e21de.cer (raw, json) Hash identifier: 98tkuGtPiD5LstZM7+nhBBr25roMdA+KwKbA7D8NiCs= Subject key identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF639032EBD6D961CD182A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 12:45:18 +0000 Certificate not after: Mon 28 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 131.104.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:39:03:2e:bd:6d:96:1c:d1:82:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 26 12:45:18 2026 GMT Not After : Aug 28 12:45:18 2028 GMT Subject: CN=a31515c0-c04f-41e6-958d-172bcd0e21de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:5c:cc:d3:23:97:80:77:25:02:8b:6b:c6: c4:ed:cc:66:da:eb:f9:33:98:2a:16:95:f8:8e:64: 8c:11:7e:c2:4d:c3:ef:f1:fd:b6:de:e2:aa:20:fe: 3a:92:e3:a1:0a:39:f4:f4:c5:31:fc:4a:af:bf:56: 01:11:8c:80:31:9d:75:69:45:b3:61:f8:e1:ca:45: 46:d2:de:cd:38:78:48:1c:eb:08:db:25:80:6e:83: 3c:c5:ca:1f:f1:5b:10:1b:6c:2a:2a:21:9b:05:ef: 03:95:b7:0b:69:c8:a7:91:86:6b:db:06:35:bb:bc: 45:80:01:c7:d7:c9:be:04:26:3d:6e:2a:ee:99:d0: ee:c3:55:46:b0:9e:95:86:a4:19:64:a5:d5:91:60: bd:a3:95:d5:b8:df:a7:a5:f2:17:e9:ed:9b:80:5e: 9f:4b:14:73:e7:0c:5e:28:00:75:23:ba:94:2f:30: 4d:c0:ff:4d:0b:96:56:c6:5c:ec:df:5e:c5:71:a8: 87:d4:63:1d:da:8e:88:21:cb:8d:3c:a4:d9:98:10: 5d:b7:75:0e:93:62:bf:65:b8:4e:f4:68:99:09:67: 1d:d8:64:d0:a2:67:6a:26:8c:5a:82:2f:a6:7f:f5: 7a:cc:3f:24:6e:4b:6e:ed:df:23:6b:48:ec:8c:47: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 131.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:82:17:7d:b6:8f:2c:6e:98:22:66:62:6d:80:38:07:fa:64: b1:2b:9d:88:f9:0d:99:b1:2e:aa:3e:c1:67:6d:c2:b3:e0:f7: af:47:5b:14:ff:10:4f:71:1c:7d:8a:75:6c:37:d3:42:d8:ca: 7d:b7:fe:67:e2:1c:1e:ec:8b:40:7f:41:20:7c:41:91:db:ef: 9b:9d:70:1b:10:a5:ad:cf:b5:e5:f2:03:15:4f:ad:08:d4:f2: ee:51:91:85:97:97:e8:33:6f:61:3d:ff:07:1f:38:9b:83:30: 8a:89:18:c9:3d:cc:da:b7:1b:4b:30:6f:8d:7c:a0:f0:39:6b: aa:06:eb:05:57:fd:e2:1f:60:48:81:e1:e8:6f:04:89:8b:12: f1:8d:30:12:7d:0a:a0:aa:75:b8:fe:9a:29:c5:f4:6f:a3:ab: 54:17:07:8b:64:d1:62:86:fb:77:29:b1:f6:8d:64:c4:b5:58: 80:5d:b3:04:ea:bc:07:2b:1c:9a:67:dd:1d:51:2c:be:49:36: ac:2e:ff:19:f7:07:54:ad:ae:01:1a:a5:5a:80:64:c3:7a:d0: e0:ac:ee:c6:74:3e:b6:63:1b:64:b6:65:8d:b5:ca:db:38:29: 0d:fe:23:32:54:6a:63:8a:3e:18:27:c5:0b:b6:21:e8:e9:00: 3e:a3:3a:d0 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE32OQMuvW2WHNGCpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNjEyNDUxOFoXDTI4MDgyODEyNDUxOFowLzEtMCsGA1UEAxMk YTMxNTE1YzAtYzA0Zi00MWU2LTk1OGQtMTcyYmNkMGUyMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1czNMjl4B3JQKLa8bE7cxm2uv5M5gqFpX4 jmSMEX7CTcPv8f223uKqIP46kuOhCjn09MUx/Eqvv1YBEYyAMZ11aUWzYfjhykVG 0t7NOHhIHOsI2yWAboM8xcof8VsQG2wqKiGbBe8DlbcLacinkYZr2wY1u7xFgAHH 18m+BCY9birumdDuw1VGsJ6VhqQZZKXVkWC9o5XVuN+npfIX6e2bgF6fSxRz5wxe KAB1I7qULzBNwP9NC5ZWxlzs317FcaiH1GMd2o6IIcuNPKTZmBBdt3UOk2K/ZbhO 9GiZCWcd2GTQomdqJoxagi+mf/V6zD8kbktu7d8ja0jsjEeZswIDAQABo4ID/jCC A/owHQYDVR0OBBYEFDQQBdtRQqpLt+lUVo3SgoIVXPCVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h MzE1MTVjMC1jMDRmLTQxZTYtOTU4ZC0xNzJiY2QwZTIxZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EzMTUxNWMwLWMwNGYtNDFlNi05 NThkLTE3MmJjZDBlMjFkZS9hMzE1MTVjMC1jMDRmLTQxZTYtOTU4ZC0xNzJiY2Qw ZTIxZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCDaDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgghd9to8sbpgiZmJtgDgH +mSxK52I+Q2ZsS6qPsFnbcKz4PevR1sU/xBPcRx9inVsN9NC2Mp9t/5n4hwe7ItA f0EgfEGR2++bnXAbEKWtz7Xl8gMVT60I1PLuUZGFl5foM29hPf8HHzibgzCKiRjJ PczatxtLMG+NfKDwOWuqBusFV/3iH2BIgeHobwSJixLxjTASfQqgqnW4/popxfRv o6tUFweLZNFihvt3KbH2jWTEtViAXbME6rwHKxyaZ90dUSy+STasLv8Z9wdUra4B GqVagGTDetDgrO7GdD62YxtktmWNtcrbOCkN/iMyVGpjij4YJ8ULtiHo6QA+ozrQ -----END CERTIFICATE-----Generated at Sat Jun 13 19:10:04 2026 by rpki-client