$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer File: bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer (raw, json) Hash identifier: 0+J8z+7BlhvtxXpH0EuZGqF21zkKtSFVhyiYsA99aww= Subject key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF36E54552D9E9EA3E17B3F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 May 2026 12:45:18 +0000 Certificate not after: Sun 27 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 54088 IP: 199.233.102.0/24 IP: 204.90.92.0/24 IP: 205.159.43.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:6e:54:55:2d:9e:9e:a3:e1:7b:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 25 12:45:18 2026 GMT Not After : Aug 27 12:45:18 2028 GMT Subject: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:74:0c:9d:60:12:41:f9:51:1e:2e:6a:d4: 27:ed:e4:fb:d5:80:56:bc:51:9a:5b:40:eb:bc:e3: 24:16:27:b6:c0:de:40:20:06:56:91:ba:5b:65:97: 24:48:6e:2a:b4:ff:5c:dc:39:0a:a5:4e:ea:f8:a0: 19:2e:ba:4a:24:42:d1:55:ba:4b:a5:99:96:72:ac: cd:61:17:89:e5:63:8b:97:49:b0:5b:c9:dc:02:10: 3d:3c:e2:44:0c:a0:22:e7:48:19:d8:97:55:d5:df: 11:49:da:24:5b:20:91:89:4b:b4:29:6f:42:b5:e3: 2c:6e:85:db:00:28:97:79:b9:9f:4a:4f:3e:aa:64: 88:54:aa:ee:6d:33:bc:86:53:07:6a:6b:0d:f2:ba: e1:87:7a:d0:ec:41:ff:35:3b:57:f0:07:20:f8:97: 9e:8a:39:c9:d0:4f:95:86:de:54:4c:1f:40:4a:53: 1c:c6:45:de:45:29:d2:6a:78:78:05:96:d9:58:6c: 1c:ec:50:68:c6:76:66:81:4d:ac:00:96:e2:97:bb: 9c:d4:4a:03:d6:80:66:6d:37:9f:9a:2f:cf:6c:b0: 0d:2a:09:87:33:35:1a:2e:5f:ba:ed:32:20:61:f9: c4:30:80:4f:c2:bb:a3:7e:74:4c:4a:e2:ae:ef:4a: a4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.233.102.0/24 204.90.92.0/24 205.159.43.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:86:90:6d:31:54:ac:28:96:6e:c8:ed:40:70:b9:ef:b2:46: d1:17:14:cf:9e:be:55:5f:d8:41:a0:d7:f5:09:8d:20:60:42: 18:ff:25:a9:f9:20:99:18:44:b7:dd:05:e1:9a:f0:4c:b1:23: 19:ab:f7:29:28:81:f8:40:82:d5:98:0c:ee:19:ac:70:94:87: eb:e3:05:72:2e:bc:e2:bb:2e:e4:e1:a6:30:f9:6c:d0:83:cf: a2:80:ab:d3:26:c0:9d:34:43:c5:cb:9d:00:b5:30:da:08:96: 31:30:9f:91:c6:9c:b8:55:16:a5:ba:68:cc:9f:fe:f9:74:40: 55:e2:4b:93:07:9a:49:01:d5:c5:b9:0f:5d:f1:35:ae:01:94: 21:e2:a0:74:7e:4c:f1:44:90:85:3d:a9:ce:71:2b:fe:e6:38: ce:c2:c5:59:f8:e6:69:90:25:17:af:aa:32:8b:18:d5:7b:1c: 53:f1:d1:b5:fa:84:c5:19:e9:f2:20:4e:bc:1d:56:e1:55:1f: 6a:8a:73:01:1b:e9:5e:4b:07:d5:f4:b0:98:7d:ac:f9:c8:b1: 78:8e:2f:21:1b:7a:cc:6f:13:90:84:78:35:75:1c:b5:69:a0: 42:8a:87:7f:e1:7f:32:de:7b:21:ba:26:88:06:e1:c9:aa:92: 5c:8e:91:72 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE3zblRVLZ6eo+F7P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNTEyNDUxOFoXDTI4MDgyNzEyNDUxOFowLzEtMCsGA1UEAxMk YmM5MGNhOWUtNjQxMi00YmQ2LTg2MjEtZWVhZjQ0OTMwYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNF0DJ1gEkH5UR4uatQn7eT71YBWvFGaW0Dr vOMkFie2wN5AIAZWkbpbZZckSG4qtP9c3DkKpU7q+KAZLrpKJELRVbpLpZmWcqzN YReJ5WOLl0mwW8ncAhA9POJEDKAi50gZ2JdV1d8RSdokWyCRiUu0KW9CteMsboXb ACiXebmfSk8+qmSIVKrubTO8hlMHamsN8rrhh3rQ7EH/NTtX8Acg+JeeijnJ0E+V ht5UTB9ASlMcxkXeRSnSanh4BZbZWGwc7FBoxnZmgU2sAJbil7uc1EoD1oBmbTef mi/PbLANKgmHMzUaLl+67TIgYfnEMIBPwrujfnRMSuKu70qkcQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFGdYIG8mFg4XXhZC8JP/J8hOt4lnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i YzkwY2E5ZS02NDEyLTRiZDYtODYyMS1lZWFmNDQ5MzBiMWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2JjOTBjYTllLTY0MTItNGJkNi04 NjIxLWVlYWY0NDkzMGIxZi9iYzkwY2E5ZS02NDEyLTRiZDYtODYyMS1lZWFmNDQ5 MzBiMWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADH6WYDBADMWlwDBADNnyswGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDANNIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEaGkG0xVKwolm7I7UBwue+yRtEXFM+e vlVf2EGg1/UJjSBgQhj/Jan5IJkYRLfdBeGa8EyxIxmr9ykogfhAgtWYDO4ZrHCU h+vjBXIuvOK7LuThpjD5bNCDz6KAq9MmwJ00Q8XLnQC1MNoIljEwn5HGnLhVFqW6 aMyf/vl0QFXiS5MHmkkB1cW5D13xNa4BlCHioHR+TPFEkIU9qc5xK/7mOM7CxVn4 5mmQJRevqjKLGNV7HFPx0bX6hMUZ6fIgTrwdVuFVH2qKcwEb6V5LB9X0sJh9rPnI sXiOLyEbesxvE5CEeDV1HLVpoEKKh3/hfzLeeyG6JogG4cmqklyOkXI= -----END CERTIFICATE-----Generated at Sat Jun 13 07:23:06 2026 by rpki-client