$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer File: ce440a32-2e1e-4948-9661-7ae2aa059c20.cer (raw, json) Hash identifier: qCE1VMD4I7db+9oZukIZitZ0Jhz/klCcrWnMFBlk2QE= Subject key identifier: 8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E03B742609297AE7020B2BC30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 May 2026 08:45:11 +0000 Certificate not after: Sat 02 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 13319 IP: 104.192.232.0/22 IP: 199.167.116.0/22 IP: 199.246.168.0/23 IP: 209.87.224.0/19 IP: 216.106.96.0/20 IP: 2607:f0b0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:03:b7:42:60:92:97:ae:70:20:b2:bc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 31 08:45:11 2026 GMT Not After : Sep 2 08:45:11 2028 GMT Subject: CN=ce440a32-2e1e-4948-9661-7ae2aa059c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:1c:f1:a8:7f:db:04:d8:33:d7:ae:2b:21: c2:8b:fd:17:88:f4:ec:2e:b6:e0:8d:56:10:42:94: 15:1e:22:98:a7:80:80:8b:db:d6:ca:56:48:e6:90: 14:4d:7c:6f:cc:d2:0f:97:70:b2:ae:37:a4:36:41: 38:6c:9c:64:8a:c3:a5:50:0f:46:a0:a7:c4:31:e6: 1f:e0:a1:ce:c4:1c:89:25:bd:d9:21:30:1f:be:c6: 5f:d6:cb:a6:09:13:87:c1:ab:cf:66:fe:07:2e:a8: 79:c5:bf:ce:dc:e0:70:36:00:60:78:30:0b:03:f7: c6:9c:cd:88:21:2f:93:4c:ab:18:56:c4:43:23:e7: 95:83:17:35:9c:6a:9a:75:19:d3:aa:b4:e1:78:14: 65:d4:d2:fe:6a:60:17:63:96:01:8f:22:50:ac:4d: ed:7f:18:47:ff:2e:b0:9f:34:f9:7c:9b:c4:78:c2: bd:e4:06:60:8b:d8:f1:ff:4d:15:b2:82:d9:79:92: 31:a6:50:5b:74:18:03:96:f0:b8:52:51:14:a9:21: 36:aa:46:c4:93:93:de:07:61:1d:17:ea:9b:2e:cd: fa:5b:13:b1:63:90:5d:03:05:02:0c:5f:17:99:40: da:42:59:78:87:ae:3e:bd:0d:5f:bf:61:07:43:4c: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.192.232.0/22 199.167.116.0/22 199.246.168.0/23 209.87.224.0/19 216.106.96.0/20 IPv6: 2607:f0b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13319 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c7:0a:b0:cc:bc:ac:ea:58:ba:68:8b:f8:bb:4b:ca:62:09: d9:ae:cf:9d:28:4d:42:7e:aa:34:ed:b9:44:8d:fe:6e:25:53: ff:57:45:0d:7e:f4:12:94:58:42:4d:3e:c1:29:18:4f:17:29: d2:a3:3d:7a:b0:f4:c6:99:16:1a:1a:d6:47:0f:bf:06:ca:c0: 07:d1:d9:b0:b5:09:81:35:f9:47:6c:09:f7:cf:c8:19:45:6f: f0:e5:b3:90:c0:63:eb:91:79:72:ef:15:90:7b:9f:97:75:a4: 42:15:7c:66:c5:81:ef:26:5a:8c:c0:db:33:5f:b9:9d:07:d7: 2e:0f:5d:17:c3:6c:d0:ad:36:b3:22:ae:dc:53:e7:bb:42:ed: b6:ff:1b:63:13:cd:aa:6e:3c:f1:65:63:ae:09:7e:65:ac:32: ed:a7:a4:94:ad:01:19:9b:38:c4:c5:2b:7a:53:bb:74:2b:31: 53:e2:8a:6f:4f:bf:d8:fd:49:0d:74:09:9b:a7:74:ee:ef:56: d3:b4:06:25:39:c6:b8:96:79:7d:74:8e:b9:15:68:ae:e4:f7: a6:00:0e:43:df:f5:44:2d:06:81:ad:8e:ea:34:98:f1:b7:61: 16:31:11:27:37:59:73:6c:95:73:84:10:93:7b:60:05:40:61: 8a:36:76:38 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWE4Dt0JgkpeucCCyvDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUzMTA4NDUxMVoXDTI4MDkwMjA4NDUxMVowLzEtMCsGA1UEAxMk Y2U0NDBhMzItMmUxZS00OTQ4LTk2NjEtN2FlMmFhMDU5YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYgc8ah/2wTYM9euKyHCi/0XiPTsLrbgjVYQ QpQVHiKYp4CAi9vWylZI5pAUTXxvzNIPl3CyrjekNkE4bJxkisOlUA9GoKfEMeYf 4KHOxByJJb3ZITAfvsZf1sumCROHwavPZv4HLqh5xb/O3OBwNgBgeDALA/fGnM2I IS+TTKsYVsRDI+eVgxc1nGqadRnTqrTheBRl1NL+amAXY5YBjyJQrE3tfxhH/y6w nzT5fJvEeMK95AZgi9jx/00VsoLZeZIxplBbdBgDlvC4UlEUqSE2qkbEk5PeB2Ed F+qbLs36WxOxY5BdAwUCDF8XmUDaQll4h64+vQ1fv2EHQ0z1IQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFI6lK9AQ8qSCSdkPZLgpLJprWPZVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZTQ0MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUyYWEwNTljMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NlNDQwYTMyLTJlMWUtNDk0OC05 NjYxLTdhZTJhYTA1OWMyMC9jZTQ0MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUyYWEw NTljMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJowOgDBALHp3QDBAHH9qgDBAXRV+ADBATYamAw DQQCAAIwBwMFACYH8LAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICNAcwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAOMcKsMy8rOpYumiL+LtLymIJ2a7PnShNQn6qNO25RI3+biVT/1dFDX70EpRY Qk0+wSkYTxcp0qM9erD0xpkWGhrWRw+/BsrAB9HZsLUJgTX5R2wJ98/IGUVv8OWz kMBj65F5cu8VkHufl3WkQhV8ZsWB7yZajMDbM1+5nQfXLg9dF8Ns0K02syKu3FPn u0Lttv8bYxPNqm488WVjrgl+Zawy7aeklK0BGZs4xMUrelO7dCsxU+KKb0+/2P1J DXQJm6d07u9W07QGJTnGuJZ5fXSOuRVoruT3pgAOQ9/1RC0Gga2O6jSY8bdhFjER JzdZc2yVc4QQk3tgBUBhijZ2OA== -----END CERTIFICATE-----Generated at Sat Jun 13 17:45:45 2026 by rpki-client