$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer File: c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer (raw, json) Hash identifier: A9TBbyhSGdW7INz5Y9KD+Hnve0VGphkjEl5Z6rwNLOE= Subject key identifier: 15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF0A3A36BA494D04FE4BA6E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 May 2026 12:45:17 +0000 Certificate not after: Sat 26 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 54669 IP: 192.92.17.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:a3:a3:6b:a4:94:d0:4f:e4:ba:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 24 12:45:17 2026 GMT Not After : Aug 26 12:45:17 2028 GMT Subject: CN=c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:d0:40:85:9c:a4:2e:a7:a8:31:26:bc:65: bf:b9:f2:26:e8:13:3e:12:e9:39:e4:ad:43:eb:ea: 05:d0:6a:4b:74:44:db:9b:d2:ca:cc:7f:7a:7e:ef: f8:21:aa:b5:26:a7:7e:db:0a:1b:bb:5e:1a:af:7f: fc:fb:cd:c2:22:fc:7f:24:9f:55:99:8e:df:a8:eb: 02:26:74:a2:26:d2:4f:d4:30:f1:02:e1:ce:3b:ed: e5:3c:29:b1:77:19:51:39:a5:70:6d:17:be:5c:d9: 8a:76:23:ce:60:13:40:68:ea:7d:aa:3c:a7:48:02: 1e:49:1a:2e:62:db:6a:25:6e:e1:11:9b:4b:61:03: 89:12:72:13:28:1b:47:f5:4d:4f:e6:9f:31:66:5d: b6:3c:ce:ef:d1:5b:96:a0:0d:01:86:0e:e8:6e:94: d1:f8:1d:f9:94:d8:31:cf:7f:cf:28:44:7b:50:f3: 22:03:c5:51:75:09:17:e7:4d:e5:38:eb:6c:8f:3e: 3f:28:c8:32:90:97:f9:a3:0b:ae:d2:d7:91:51:66: 2e:89:bd:d9:13:f6:13:92:a7:bf:13:44:f5:07:36: f0:e8:1c:36:f3:7b:8e:4e:35:8e:55:d9:74:bb:b6: c7:b7:c7:95:bf:df:6e:fe:60:ef:99:6d:f8:bb:f4: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.92.17.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54669 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e3:d3:ee:65:22:41:83:c2:c8:d9:d5:eb:83:19:25:50:25: f7:f1:89:0f:31:11:fa:5a:63:3e:72:5a:5b:29:0d:cd:ac:78: 04:1b:2a:6b:0b:df:5a:cd:1d:d3:0a:4f:f2:09:c4:45:b3:12: 40:e0:e6:55:3f:2b:8d:36:b1:02:a6:d7:6c:00:51:1a:ce:84: 26:f4:23:62:ac:46:c5:57:97:87:9f:1f:9e:5c:47:c5:5e:2f: 83:0c:df:f7:29:cc:8c:14:34:f8:ae:8f:1b:db:47:fe:a9:a2: 2e:51:4d:12:76:d7:31:aa:c4:46:81:b9:17:ff:b9:61:2c:71: f1:9a:f7:d7:65:32:b6:bd:61:41:78:ff:6a:d4:75:75:5d:5e: 1f:cc:d6:fa:fe:80:83:f4:05:f3:6a:c2:ef:08:1e:e2:da:94: b8:1e:98:01:0a:a1:71:67:12:e7:18:1e:99:28:73:3e:df:6f: 13:31:6f:84:65:10:7b:74:44:4a:51:fe:61:f0:61:2f:1f:9f: 76:db:5b:67:cf:1b:38:94:3d:2d:77:06:af:6a:14:b5:e1:a0: a4:0b:35:29:52:19:c6:5a:2d:37:df:40:73:70:4d:27:2e:63: a0:75:45:bc:8e:f7:56:d8:32:0c:d7:82:d2:a4:56:8c:ff:fd: bb:40:25:f2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3wo6NrpJTQT+S6boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNDEyNDUxN1oXDTI4MDgyNjEyNDUxN1owLzEtMCsGA1UEAxMk YzAwZTlkMWYtMjAxZS00MWVkLThjMmEtNDJhNWNlNDFjNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH7QQIWcpC6nqDEmvGW/ufIm6BM+Euk55K1D 6+oF0GpLdETbm9LKzH96fu/4Iaq1Jqd+2wobu14ar3/8+83CIvx/JJ9VmY7fqOsC JnSiJtJP1DDxAuHOO+3lPCmxdxlROaVwbRe+XNmKdiPOYBNAaOp9qjynSAIeSRou YttqJW7hEZtLYQOJEnITKBtH9U1P5p8xZl22PM7v0VuWoA0Bhg7obpTR+B35lNgx z3/PKER7UPMiA8VRdQkX503lOOtsjz4/KMgykJf5owuu0teRUWYuib3ZE/YTkqe/ E0T1Bzbw6Bw283uOTjWOVdl0u7bHt8eVv99u/mDvmW34u/Qe0QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBXAzdMKfW2mfi3Nkeq0tvlisgnyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j MDBlOWQxZi0yMDFlLTQxZWQtOGMyYS00MmE1Y2U0MWM0ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2MwMGU5ZDFmLTIwMWUtNDFlZC04 YzJhLTQyYTVjZTQxYzRlZS9jMDBlOWQxZi0yMDFlLTQxZWQtOGMyYS00MmE1Y2U0 MWM0ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAXBEwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANWNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG3j0+5lIkGDwsjZ1euDGSVQJffxiQ8xEfpaYz5yWlspDc2s eAQbKmsL31rNHdMKT/IJxEWzEkDg5lU/K402sQKm12wAURrOhCb0I2KsRsVXl4ef H55cR8VeL4MM3/cpzIwUNPiujxvbR/6poi5RTRJ21zGqxEaBuRf/uWEscfGa99dl Mra9YUF4/2rUdXVdXh/M1vr+gIP0BfNqwu8IHuLalLgemAEKoXFnEucYHpkocz7f bxMxb4RlEHt0REpR/mHwYS8fn3bbW2fPGziUPS13Bq9qFLXhoKQLNSlSGcZaLTff QHNwTScuY6B1RbyO91bYMgzXgtKkVoz//btAJfI= -----END CERTIFICATE-----Generated at Sat Jun 13 17:43:52 2026 by rpki-client