$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer File: d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer (raw, json) Hash identifier: wOwoLDInSdS8wwHrXQnKZkcb5J2pF3Vumw/jq2pknyk= Subject key identifier: 58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D5F73943335BE078238612F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 12:36:15 +0000 Certificate not after: Mon 28 Jun 2027 12:45:34 +0000 Subordinate resources: AS: 400428 IP: 23.155.148.0/24 IP: 172.81.148.0/22 IP: 2605:8f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:73:94:33:35:be:07:82:38:61:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 2 12:36:15 2026 GMT Not After : Jun 28 12:45:34 2027 GMT Subject: CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:c9:8f:37:36:73:03:72:8b:f0:37:f4:14: 9f:b3:6c:03:b8:db:9f:e2:e0:d8:66:0e:ee:b3:bc: ab:93:42:1a:29:35:70:15:1d:71:24:88:9d:52:da: b1:53:34:b7:90:75:97:08:dc:ae:98:04:4c:d5:bc: a1:4f:a4:9c:aa:3e:68:54:ba:12:68:44:66:8a:b1: 15:2d:6f:51:44:a0:de:ee:8a:95:2c:4c:35:9c:30: 3f:6d:da:de:f1:9c:9e:b7:68:bb:85:2b:47:95:7e: 23:60:f3:fc:8d:49:f4:0d:6b:4c:a1:dd:c1:17:31: 7f:0e:60:d4:7c:f9:aa:d4:7f:46:f7:c7:83:1f:18: 51:6c:95:9c:d0:48:7b:56:d1:9a:69:fd:84:17:35: f8:e2:79:6a:9b:cf:f8:82:3c:7a:05:f4:30:33:ef: f0:20:5e:a2:8e:34:81:c0:7c:cf:85:20:e4:eb:98: f8:24:a7:72:78:6f:91:ea:4e:89:fd:29:9a:c6:25: d8:2e:b4:9e:a1:cc:fb:72:8b:f6:f8:72:e1:67:7d: 53:97:4d:63:25:7e:3f:77:d9:5b:d4:58:ba:58:ad: e0:22:8f:77:5f:3a:52:8d:ea:ae:b9:e9:6e:75:01: c8:6e:34:46:67:b6:1c:d1:83:22:d8:2b:f5:26:1c: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.155.148.0/24 172.81.148.0/22 IPv6: 2605:8f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400428 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:56:c8:6f:80:6f:48:d4:db:b5:d5:24:1f:c4:9c:01:3c:15: 76:f2:73:64:15:7e:dc:6d:09:f6:13:04:ba:e8:0f:b8:29:92: bb:17:29:4b:41:8d:43:e0:81:b1:3a:75:06:b4:37:d8:aa:c6: a7:78:f7:08:1a:07:9e:b6:4e:e7:b2:76:08:28:b0:fd:d0:c7: bd:da:ec:91:8f:a2:40:a5:a6:a5:4c:2f:4f:5e:c1:00:fd:00: 1c:c1:ff:cd:08:6a:af:b2:d8:07:00:95:ff:86:7c:24:17:c5: e6:6d:b6:6f:fa:d3:13:77:e1:ef:66:4f:72:8a:ed:4f:54:7f: 3e:08:d2:5b:2b:31:04:ee:6f:f9:cc:5e:49:9d:6c:a1:67:b5: 79:d4:90:f4:89:aa:9d:27:cb:e5:99:73:38:4b:5a:0b:60:5c: 7a:e5:e8:1d:39:ba:4f:b9:d8:34:eb:f2:3f:92:4e:b1:32:ed: db:eb:ee:15:47:a8:e0:a2:fd:5d:c2:80:6f:61:dd:98:78:2c: 3b:b0:79:d7:f9:6c:31:a3:cf:55:bb:3f:50:4d:1d:e9:75:8e: 54:d2:f9:73:e6:87:a0:a0:c8:eb:45:72:79:a8:bd:ef:cb:a9: d7:09:30:68:4e:b0:11:e0:5c:f6:67:27:86:a6:d1:58:8c:b7: fd:c5:0e:b1 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE1fc5QzNb4HgjhhLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwMjEyMzYxNVoXDTI3MDYyODEyNDUzNFowLzEtMCsGA1UEAxMk ZDFiMzRmYmEtOGQxYy00ZGRjLWFhYjQtYWFiMzA4NjJmNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwfJjzc2cwNyi/A39BSfs2wDuNuf4uDYZg7u s7yrk0IaKTVwFR1xJIidUtqxUzS3kHWXCNyumARM1byhT6Scqj5oVLoSaERmirEV LW9RRKDe7oqVLEw1nDA/bdre8Zyet2i7hStHlX4jYPP8jUn0DWtMod3BFzF/DmDU fPmq1H9G98eDHxhRbJWc0Eh7VtGaaf2EFzX44nlqm8/4gjx6BfQwM+/wIF6ijjSB wHzPhSDk65j4JKdyeG+R6k6J/SmaxiXYLrSeocz7cov2+HLhZ31Tl01jJX4/d9lb 1Fi6WK3gIo93XzpSjequueludQHIbjRGZ7Yc0YMi2Cv1JhyWGQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFjrdn639iR7TXnDI9ooRTGOl+2wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MWIzNGZiYS04ZDFjLTRkZGMtYWFiNC1hYWIzMDg2MmY2NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QxYjM0ZmJhLThkMWMtNGRkYy1h YWI0LWFhYjMwODYyZjY3Ni9kMWIzNGZiYS04ZDFjLTRkZGMtYWFiNC1hYWIzMDg2 MmY2NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXm5QDBAKsUZQwDQQCAAIwBwMFACYFjwAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH5WyG+Ab0jU27XVJB/E nAE8FXbyc2QVftxtCfYTBLroD7gpkrsXKUtBjUPggbE6dQa0N9iqxqd49wgaB562 TueydggosP3Qx73a7JGPokClpqVML09ewQD9ABzB/80Iaq+y2AcAlf+GfCQXxeZt tm/60xN34e9mT3KK7U9Ufz4I0lsrMQTub/nMXkmdbKFntXnUkPSJqp0ny+WZczhL WgtgXHrl6B05uk+52DTr8j+STrEy7dvr7hVHqOCi/V3CgG9h3Zh4LDuwedf5bDGj z1W7P1BNHel1jlTS+XPmh6CgyOtFcnmove/LqdcJMGhOsBHgXPZnJ4am0ViMt/3F DrE= -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:03 2026 by rpki-client