$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer File: ac717083-6970-4d32-8573-0bfa89700c9e.cer (raw, json) Hash identifier: LJDjb8rFTmbe8Ds0dD56rrBT8q18z1vrR/cb9VyE59s= Subject key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D7B62E990912EC6C1A791E7A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Apr 2026 12:45:18 +0000 Certificate not after: Sat 15 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 802 IP: 130.63.0.0/16 IP: 192.75.18.0/24 IP: 198.96.32.0/21 IP: 199.212.64.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:62:e9:90:91:2e:c6:c1:a7:91:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 12 12:45:18 2026 GMT Not After : Jul 15 12:45:18 2028 GMT Subject: CN=ac717083-6970-4d32-8573-0bfa89700c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:7c:c4:e4:fa:18:52:81:50:26:7c:5b:67: cb:c2:69:79:41:08:10:98:3d:66:b1:0f:53:a6:39: 66:a6:2f:d2:cf:ff:07:1c:cf:00:70:62:ae:db:1a: 4f:20:0f:74:7e:ff:7c:07:8a:15:64:42:3a:9b:d1: ab:06:f9:05:4c:1c:f7:14:74:bf:b8:79:d7:9a:07: cd:84:94:f9:f2:04:3e:52:1a:cc:4a:34:5e:d4:e8: 96:c8:58:c9:ec:13:be:20:eb:83:13:e3:dc:82:36: a9:3b:5e:c5:0e:cb:f2:e1:d5:ed:84:d2:3a:2a:df: 28:48:eb:bc:3f:76:96:64:8b:89:8e:92:05:e3:58: d3:8b:05:fd:fa:20:2b:74:a1:ad:a9:64:9f:55:26: 8e:13:d5:ae:e1:ab:e9:7b:9c:6f:45:75:59:72:51: cb:68:6b:53:b6:cc:8b:47:a3:80:13:e1:63:bf:99: 1a:e8:aa:07:99:9d:60:54:a0:1e:b9:19:43:64:67: f7:dd:56:f6:8b:c5:f0:80:8a:72:23:0f:8c:e1:78: 27:14:5d:73:3e:de:f3:91:9f:be:e6:a9:3c:cb:e3: 36:3a:b0:b0:88:f4:0d:83:07:72:5c:6a:01:ab:4c: ac:01:19:75:99:88:00:4f:0c:67:cd:ef:b6:5c:f9: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 130.63.0.0/16 192.75.18.0/24 198.96.32.0/21 199.212.64.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 802 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fd:f9:09:57:29:9b:be:da:2c:78:f2:4e:88:cb:5b:5a:91: 5d:4d:14:02:5d:1d:9b:00:ad:f0:99:1e:2a:71:b6:38:6c:59: 2c:46:5b:6a:9d:a1:ea:f8:64:b0:83:30:31:4f:42:d4:c3:dd: b0:a1:51:88:af:9a:dc:4f:dd:6b:8b:f1:ea:42:13:e4:af:dc: 74:4d:43:e6:28:df:f6:ce:87:80:37:f2:d8:8e:6c:64:a9:d6: b2:0c:57:73:7f:11:74:00:ae:1d:0a:31:45:32:15:b5:72:0f: d9:8c:0d:33:da:64:43:d3:7d:36:cf:b3:c2:93:76:af:56:8c: bc:b2:c2:09:c9:78:c2:8a:81:13:11:76:36:18:8d:ac:73:52: f3:bd:7a:c4:22:a3:36:09:02:83:ef:04:57:1c:15:ec:74:63: 1d:74:23:56:0b:34:bf:65:1d:c6:f3:6d:88:1b:6e:b9:21:d3: bb:e6:5a:92:d3:aa:11:71:c6:d8:f0:a6:f5:de:35:f1:bd:67: f0:34:eb:14:4e:2a:41:d3:a2:93:f5:ef:a7:9b:4d:a5:6c:cc: d3:7a:5a:11:6a:be:a1:0d:7f:a2:c7:99:55:dd:e9:4b:4e:4f: 33:d4:4a:47:97:e9:0b:e9:83:b5:b2:78:17:b6:be:4c:0c:37: aa:9f:51:f1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE17YumQkS7GwaeR56AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxMjEyNDUxOFoXDTI4MDcxNTEyNDUxOFowLzEtMCsGA1UEAxMk YWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAwYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Z8xOT6GFKBUCZ8W2fLwml5QQgQmD1msQ9T pjlmpi/Sz/8HHM8AcGKu2xpPIA90fv98B4oVZEI6m9GrBvkFTBz3FHS/uHnXmgfN hJT58gQ+UhrMSjRe1OiWyFjJ7BO+IOuDE+PcgjapO17FDsvy4dXthNI6Kt8oSOu8 P3aWZIuJjpIF41jTiwX9+iArdKGtqWSfVSaOE9Wu4avpe5xvRXVZclHLaGtTtsyL R6OAE+Fjv5ka6KoHmZ1gVKAeuRlDZGf33Vb2i8XwgIpyIw+M4XgnFF1zPt7zkZ++ 5qk8y+M2OrCwiPQNgwdyXGoBq0ysARl1mYgATwxnze+2XPmYpwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCBfs+p45elHCsVWrur1beA9nv2tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h YzcxNzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FjNzE3MDgzLTY5NzAtNGQzMi04 NTczLTBiZmE4OTcwMGM5ZS9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZhODk3 MDBjOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCCPwMEAMBLEgMEA8ZgIAMEBMfUQDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIDIjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+/fkJVymbvtosePJOiMtbWpFd TRQCXR2bAK3wmR4qcbY4bFksRltqnaHq+GSwgzAxT0LUw92woVGIr5rcT91ri/Hq QhPkr9x0TUPmKN/2zoeAN/LYjmxkqdayDFdzfxF0AK4dCjFFMhW1cg/ZjA0z2mRD 0302z7PCk3avVoy8ssIJyXjCioETEXY2GI2sc1LzvXrEIqM2CQKD7wRXHBXsdGMd dCNWCzS/ZR3G822IG265IdO75lqS06oRccbY8Kb13jXxvWfwNOsUTipB06KT9e+n m02lbMzTeloRar6hDX+ix5lV3elLTk8z1EpHl+kL6YO1sngXtr5MDDeqn1Hx -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:51 2026 by rpki-client