$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer File: b12072dc-8b29-49de-800e-2439a1f4bf97.cer (raw, json) Hash identifier: m06oEF2Si3BcfWqwpJuJR0/I9etSqFQEyzQcwVTnxSs= Subject key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF36E5483468314DF68B5FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 May 2026 12:45:18 +0000 Certificate not after: Sun 27 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 399737 IP: 23.165.8.0/24 IP: 2602:f9dc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:6e:54:83:46:83:14:df:68:b5:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 25 12:45:18 2026 GMT Not After : Aug 27 12:45:18 2028 GMT Subject: CN=b12072dc-8b29-49de-800e-2439a1f4bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:c1:b6:fb:31:b9:b8:54:d9:42:e3:4d:8a: 80:4f:59:8d:5f:1a:3c:d8:7e:9b:0b:b3:b6:ad:a5: 9d:0d:6c:50:41:3e:2a:10:46:81:e2:6a:d9:36:58: e5:28:1b:3e:7f:59:16:68:90:b7:92:bd:d0:f9:f2: 56:f8:1c:16:30:37:b4:34:8b:f3:5f:3a:11:f9:3d: 41:aa:d7:bb:c1:ca:e0:ba:38:8b:de:99:fc:46:7c: a1:5b:6f:1d:db:8f:08:82:83:13:4c:4a:6f:62:fa: 44:93:ed:90:7f:9a:07:92:69:44:cd:19:ae:6f:d3: c7:1d:a5:7b:82:3e:b7:30:2f:0c:3f:3c:b8:99:5e: 5b:33:a5:f0:24:e2:49:76:5a:f0:d2:a1:48:d7:38: 23:18:de:77:ec:b8:45:d5:92:76:2a:bd:6a:f2:81: 86:3e:8c:b4:61:61:ff:02:f4:4c:0f:a2:a9:ba:93: 4c:c7:50:d0:ee:fc:a0:06:51:b1:03:b4:73:aa:14: 73:90:33:88:90:e6:97:f6:bd:02:66:c8:7c:a6:24: a8:57:05:a3:e1:b8:53:19:1e:2c:0c:d2:94:9b:35: 47:ad:8c:cf:06:a9:b2:14:97:4c:af:65:84:93:7c: 1d:5a:e9:c1:b6:ae:2b:8a:84:72:d1:fc:1d:b4:a4: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.8.0/24 IPv6: 2602:f9dc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399737 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ea:1d:03:97:18:f8:18:77:62:4b:50:08:87:6f:d1:d0:83: 5d:ff:6b:50:f8:f9:f5:9d:da:54:58:b5:48:d4:7f:f3:85:5d: f1:9c:fc:05:3b:f9:9a:a7:cd:0e:fd:15:0e:bf:ae:f1:19:72: 38:01:29:94:97:f8:2a:5a:4b:5c:55:39:22:86:b4:93:06:0b: a2:e3:dd:21:22:e2:18:3d:e5:1c:86:0d:5c:77:9f:66:d3:0b: 25:f8:f8:b0:30:77:7c:32:22:43:f7:45:83:00:97:86:97:3e: 4e:1b:51:86:9b:7d:c8:3b:f9:b5:fe:46:6f:44:ea:59:91:08: 25:e4:c8:85:ba:f2:c0:ef:b1:07:e5:ae:c6:59:0a:19:f7:00: 07:b1:0b:68:03:d0:33:9b:0f:8f:3f:db:97:26:44:df:9a:b5: d1:aa:04:e8:2a:91:4c:48:81:23:1f:f5:75:88:21:98:fb:a3: 8e:92:6a:e0:26:0f:be:c5:b9:f4:54:ed:b5:4a:e9:a4:85:e0: 07:e3:54:27:80:26:09:a9:46:e9:fc:db:d8:fb:ab:87:73:f3: 56:9d:61:f2:6b:61:42:8a:f7:df:51:e7:61:9c:49:65:01:98: 6a:2c:40:81:a8:c5:d5:d9:c3:5f:41:59:34:dc:fe:36:b1:24: 2f:20:fa:18 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3zblSDRoMU32i1/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNTEyNDUxOFoXDTI4MDgyNzEyNDUxOFowLzEtMCsGA1UEAxMk YjEyMDcyZGMtOGIyOS00OWRlLTgwMGUtMjQzOWExZjRiZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+nBtvsxubhU2ULjTYqAT1mNXxo82H6bC7O2 raWdDWxQQT4qEEaB4mrZNljlKBs+f1kWaJC3kr3Q+fJW+BwWMDe0NIvzXzoR+T1B qte7wcrgujiL3pn8RnyhW28d248IgoMTTEpvYvpEk+2Qf5oHkmlEzRmub9PHHaV7 gj63MC8MPzy4mV5bM6XwJOJJdlrw0qFI1zgjGN537LhF1ZJ2Kr1q8oGGPoy0YWH/ AvRMD6KpupNMx1DQ7vygBlGxA7RzqhRzkDOIkOaX9r0CZsh8piSoVwWj4bhTGR4s DNKUmzVHrYzPBqmyFJdMr2WEk3wdWunBtq4rioRy0fwdtKR01QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG2xM7lKuFEKfUkncKRhV305WvRmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i MTIwNzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5YTFmNGJmOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2IxMjA3MmRjLThiMjktNDlkZS04 MDBlLTI0MzlhMWY0YmY5Ny9iMTIwNzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5YTFm NGJmOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpQgwDgQCAAIwCAMGACYC+dwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYZeTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBK6h0Dlxj4GHdiS1AIh2/R0INd /2tQ+Pn1ndpUWLVI1H/zhV3xnPwFO/map80O/RUOv67xGXI4ASmUl/gqWktcVTki hrSTBgui490hIuIYPeUchg1cd59m0wsl+PiwMHd8MiJD90WDAJeGlz5OG1GGm33I O/m1/kZvROpZkQgl5MiFuvLA77EH5a7GWQoZ9wAHsQtoA9Azmw+PP9uXJkTfmrXR qgToKpFMSIEjH/V1iCGY+6OOkmrgJg++xbn0VO21SumkheAH41QngCYJqUbp/NvY +6uHc/NWnWHya2FCivffUedhnEllAZhqLECBqMXV2cNfQVk03P42sSQvIPoY -----END CERTIFICATE-----Generated at Sat Jun 13 17:44:51 2026 by rpki-client