$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8.cer File: b8ba88a1-c986-4f64-b72e-2e108d6945b8.cer (raw, json) Hash identifier: cmAXOmeEtk0UacluL6BTY8xEIfv5RtT1TqgVSeLLcHQ= Subject key identifier: FA:AF:71:1E:33:3A:05:99:FB:64:F5:69:3B:0A:00:D8:14:80:FA:B7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D789838D6B80384BEE1F1B940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/b8ba88a1-c986-4f64-b72e-2e108d6945b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Apr 2026 12:45:17 +0000 Certificate not after: Fri 14 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 16575 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:78:98:38:d6:b8:03:84:be:e1:f1:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 11 12:45:17 2026 GMT Not After : Jul 14 12:45:17 2028 GMT Subject: CN=b8ba88a1-c986-4f64-b72e-2e108d6945b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:a4:db:bd:ac:f3:6e:bd:43:75:c2:0f:69: a1:ad:16:d7:d1:fe:de:4e:72:82:3f:90:0e:29:77: 72:6a:99:6a:cf:1b:03:fe:a7:a7:4d:04:ba:16:c5: 17:b8:2b:7c:e8:09:11:dc:c0:8f:0c:b6:07:9d:cd: 81:8a:31:33:29:42:81:6f:5d:4e:1c:52:fc:55:30: 14:96:bc:73:8d:e8:72:b9:c0:7c:52:74:39:c3:2d: 4e:88:f6:5a:a7:58:27:bc:4b:68:80:96:f1:00:e4: 30:69:5a:01:c7:b3:4e:cc:02:41:0f:d1:47:43:51: 31:b2:f7:5f:e0:fe:8c:22:6d:c1:a5:31:40:29:3a: 7a:80:83:54:d2:49:d9:f5:7c:b2:05:57:96:d6:52: 63:02:9a:73:89:10:22:fd:f5:af:46:bb:b1:0b:bb: 2a:43:a2:e2:38:97:6a:17:f7:31:69:17:10:09:66: 6e:09:b8:be:c2:c5:fb:8d:0b:5e:71:6b:1f:03:79: 5b:51:23:9b:d4:5d:17:3b:2e:3c:f4:fb:2f:4d:93: 32:0b:42:d9:54:18:75:85:97:58:a9:92:1e:2e:dc: 7b:63:15:49:49:7b:6c:02:89:04:c9:e0:c5:df:e8: e7:c4:db:7b:86:9a:5b:01:19:10:30:61:1f:bb:c7: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AF:71:1E:33:3A:05:99:FB:64:F5:69:3B:0A:00:D8:14:80:FA:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/b8ba88a1-c986-4f64-b72e-2e108d6945b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 16575 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fe:99:25:2e:09:1d:93:ac:53:0d:af:a7:58:ce:d4:35:3b: a4:c0:79:6c:74:d3:fe:2a:99:aa:52:f6:ca:4a:88:de:e2:18: 41:db:d9:5d:ef:ec:41:df:3f:e5:78:12:7b:3d:98:eb:d1:8e: 89:44:bc:1c:d7:83:7f:e6:2e:60:09:25:60:ce:05:fc:da:36: 65:67:d8:b7:bd:9e:ae:66:98:a4:09:a3:da:80:07:95:e0:3e: ca:77:cd:1b:56:45:db:b0:c2:02:40:ac:d3:d7:5d:f8:79:e6: b2:d6:96:c7:2e:0c:e7:27:5e:d2:ff:c8:97:18:97:6c:cc:b4: 92:16:a2:07:ef:3d:91:07:44:83:b8:45:87:83:f9:e6:d6:e3: 57:89:1b:b1:8a:29:81:8e:a2:7b:1a:17:cb:a3:3e:54:22:ef: 49:0a:40:cd:24:1f:cf:66:bf:1d:15:d2:1d:ad:7b:6e:f9:d8: 7b:da:8c:c1:93:55:28:f9:83:5d:77:b2:e5:69:40:32:4c:47: 3c:22:7c:e6:31:11:f8:f7:26:20:0e:44:11:92:c6:1d:ba:2d: 14:1c:d9:9a:89:e2:c1:d4:45:2d:5b:a0:0a:06:03:a9:74:fa: d6:a9:d5:f3:ba:9d:e3:21:8a:7c:86:3d:2a:8c:bc:88:68:a0: 98:61:dd:e3 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE14mDjWuAOEvuHxuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxMTEyNDUxN1oXDTI4MDcxNDEyNDUxN1owLzEtMCsGA1UEAxMk YjhiYTg4YTEtYzk4Ni00ZjY0LWI3MmUtMmUxMDhkNjk0NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHSk272s8269Q3XCD2mhrRbX0f7eTnKCP5AO KXdyaplqzxsD/qenTQS6FsUXuCt86AkR3MCPDLYHnc2BijEzKUKBb11OHFL8VTAU lrxzjehyucB8UnQ5wy1OiPZap1gnvEtogJbxAOQwaVoBx7NOzAJBD9FHQ1Exsvdf 4P6MIm3BpTFAKTp6gINU0knZ9XyyBVeW1lJjAppziRAi/fWvRruxC7sqQ6LiOJdq F/cxaRcQCWZuCbi+wsX7jQtecWsfA3lbUSOb1F0XOy489PsvTZMyC0LZVBh1hZdY qZIeLtx7YxVJSXtsAokEyeDF3+jnxNt7hppbARkQMGEfu8fE7QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPqvcR4zOgWZ+2T1aTsKANgUgPq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i OGJhODhhMS1jOTg2LTRmNjQtYjcyZS0yZTEwOGQ2OTQ1YjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I4YmE4OGExLWM5ODYtNGY2NC1i NzJlLTJlMTA4ZDY5NDViOC9iOGJhODhhMS1jOTg2LTRmNjQtYjcyZS0yZTEwOGQ2 OTQ1YjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQL8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWv6ZJS4JHZOsUw2vp1jO1DU7pMB5 bHTT/iqZqlL2ykqI3uIYQdvZXe/sQd8/5XgSez2Y69GOiUS8HNeDf+YuYAklYM4F /No2ZWfYt72ermaYpAmj2oAHleA+ynfNG1ZF27DCAkCs09dd+HnmstaWxy4M5yde 0v/IlxiXbMy0khaiB+89kQdEg7hFh4P55tbjV4kbsYopgY6iexoXy6M+VCLvSQpA zSQfz2a/HRXSHa17bvnYe9qMwZNVKPmDXXey5WlAMkxHPCJ85jER+PcmIA5EEZLG HbotFBzZmoniwdRFLVugCgYDqXT61qnV87qd4yGKfIY9Koy8iGigmGHd4w== -----END CERTIFICATE-----Generated at Fri Apr 17 05:06:51 2026 by rpki-client