$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.cer File: ad467892-ee45-4d8d-a2c3-40f7fb414bf2.cer (raw, json) Hash identifier: nANYZIeW4Ll50qKqN4ujdPY1ELr5HbhkZpYAbxgbjsA= Subject key identifier: 09:9A:4B:FC:C5:C5:F5:D2:EB:7D:36:18:AB:B3:1B:9D:90:43:51:02 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E14775F632693DD4E5539A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Jun 2026 08:45:12 +0000 Certificate not after: Fri 08 Sep 2028 08:45:12 +0000 Subordinate resources: IP: 206.123.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:77:5f:63:26:93:dd:4e:55:39:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 6 08:45:12 2026 GMT Not After : Sep 8 08:45:12 2028 GMT Subject: CN=ad467892-ee45-4d8d-a2c3-40f7fb414bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:52:1e:f2:c2:1b:a1:70:cf:3c:14:c6:89: 8e:dd:9f:4d:01:e2:e8:33:e4:af:00:fc:c1:3b:a7: 52:d4:6c:49:6c:b1:9e:ad:d4:05:4e:74:0e:00:df: 11:36:bc:dc:91:ba:fd:db:b7:ab:0d:13:6e:c1:26: 8e:67:cf:15:5c:9c:3d:aa:ad:cf:7e:fd:8d:a2:15: b2:03:d8:1f:a8:84:1d:72:58:21:7e:4d:fd:33:f1: d1:64:08:2b:c8:65:d0:4b:6f:0f:92:8f:46:32:7b: 6d:c2:8d:71:7c:33:4b:02:37:54:a0:3a:64:c9:6a: 4e:43:79:ea:59:10:53:31:2a:4f:e1:c7:38:85:9f: 61:7b:ad:de:88:30:11:20:34:a4:ad:7c:d5:78:41: 96:6a:c9:47:14:2e:07:8b:8a:2a:e8:4b:d0:9f:9f: 03:ae:84:b3:e3:88:d0:49:fd:32:82:1f:e5:d9:27: a3:0b:60:d2:d6:0b:64:5e:dd:83:c4:ed:0e:72:22: ff:f8:0f:57:0d:6d:9a:bc:40:2e:c9:73:70:2e:e4: 54:00:8f:a5:4e:87:01:7a:8f:32:40:57:4e:e6:18: 33:b2:12:5e:46:50:22:f0:3b:b1:31:b3:10:b3:99: 58:24:64:90:0d:9a:4d:0c:a1:47:f2:10:1a:b6:f4: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9A:4B:FC:C5:C5:F5:D2:EB:7D:36:18:AB:B3:1B:9D:90:43:51:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 206.123.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:62:a0:f7:4f:fd:39:5c:53:90:d3:c2:4a:37:7c:34:0b:cd: ad:35:e4:b1:04:3a:31:8b:52:1f:1d:15:83:df:41:9a:c1:05: 77:da:13:be:65:5f:7f:f0:c5:dd:01:f7:d6:f2:58:1a:60:85: d6:d4:ad:f9:22:bc:7c:20:cb:38:75:48:be:e8:ed:76:88:84: c5:53:ab:9c:1b:d0:9e:90:da:3a:3c:6d:0b:2f:b4:94:ef:a2: c1:19:ba:d2:0c:4c:61:53:d7:1e:69:17:70:28:91:db:a9:e2: 90:0e:99:77:72:25:44:d7:8c:85:26:81:46:d2:7a:e0:98:9b: 4c:74:8e:d4:3b:e3:a6:87:bc:2e:2c:c6:ad:70:61:e6:de:86: ea:5d:5a:9f:8b:ff:09:cf:09:cf:db:53:96:2e:df:69:17:3f: ad:07:c9:c9:d2:48:2b:cb:9e:d6:6f:d4:aa:e9:63:b1:1a:a4: da:ea:d4:8f:05:32:fd:67:65:90:df:4e:f0:27:11:8f:47:d0: ab:7a:26:c7:55:ba:99:61:c9:6f:b5:80:09:1c:a8:aa:79:0f: ef:38:e7:6e:51:89:22:a2:88:07:ad:48:91:12:cb:c5:c4:b2: 9d:56:31:c4:b9:76:f5:49:86:9c:47:7b:bd:35:15:82:2a:8b: 57:ee:f4:bd -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4Ud19jJpPdTlU5pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNjA4NDUxMloXDTI4MDkwODA4NDUxMlowLzEtMCsGA1UEAxMk YWQ0Njc4OTItZWU0NS00ZDhkLWEyYzMtNDBmN2ZiNDE0YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmlSHvLCG6FwzzwUxomO3Z9NAeLoM+SvAPzB O6dS1GxJbLGerdQFTnQOAN8RNrzckbr927erDRNuwSaOZ88VXJw9qq3Pfv2NohWy A9gfqIQdclghfk39M/HRZAgryGXQS28Pko9GMnttwo1xfDNLAjdUoDpkyWpOQ3nq WRBTMSpP4cc4hZ9he63eiDARIDSkrXzVeEGWaslHFC4Hi4oq6EvQn58DroSz44jQ Sf0ygh/l2SejC2DS1gtkXt2DxO0OciL/+A9XDW2avEAuyXNwLuRUAI+lTocBeo8y QFdO5hgzshJeRlAi8DuxMbMQs5lYJGSQDZpNDKFH8hAatvSEAwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAmaS/zFxfXS6302GKuzG52QQ1ECMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h ZDQ2Nzg5Mi1lZTQ1LTRkOGQtYTJjMy00MGY3ZmI0MTRiZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FkNDY3ODkyLWVlNDUtNGQ4ZC1h MmMzLTQwZjdmYjQxNGJmMi9hZDQ2Nzg5Mi1lZTQ1LTRkOGQtYTJjMy00MGY3ZmI0 MTRiZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXOe6AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEWKg90/9OVxTkNPCSjd8 NAvNrTXksQQ6MYtSHx0Vg99BmsEFd9oTvmVff/DF3QH31vJYGmCF1tSt+SK8fCDL OHVIvujtdoiExVOrnBvQnpDaOjxtCy+0lO+iwRm60gxMYVPXHmkXcCiR26nikA6Z d3IlRNeMhSaBRtJ64JibTHSO1Dvjpoe8LizGrXBh5t6G6l1an4v/Cc8Jz9tTli7f aRc/rQfJydJIK8ue1m/UquljsRqk2urUjwUy/WdlkN9O8CcRj0fQq3omx1W6mWHJ b7WACRyoqnkP7zjnblGJIqKIB61IkRLLxcSynVYxxLl29UmGnEd7vTUVgiqLV+70 vQ== -----END CERTIFICATE-----Generated at Sat Jun 13 17:43:10 2026 by rpki-client