$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer File: d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer (raw, json) Hash identifier: 43sIQfFltUR6OFYlcOcNId3sUXQ4oR/DXqIEuHEYKjo= Subject key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E269CCF69CFE594734F42A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 12 Jun 2026 20:45:11 +0000 Certificate not after: Thu 14 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 23.167.40.0/24 IP: 2602:f9cd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:26:9c:cf:69:cf:e5:94:73:4f:42:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 12 20:45:11 2026 GMT Not After : Sep 14 20:45:11 2028 GMT Subject: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:55:25:13:55:de:74:df:fd:dc:9e:b1:d7:9f: b8:f9:c3:b3:77:8c:e5:f7:41:23:a6:12:2f:ee:e8: 4f:55:77:c0:29:fd:dd:9a:74:fe:90:de:70:95:d6: b3:a3:f0:8e:72:90:5d:8a:0a:22:bd:5d:62:04:d6: af:1d:77:e7:8b:9b:94:05:c2:8f:c9:fb:97:b5:85: 49:8d:92:00:66:ae:91:10:16:55:c2:f3:f8:7a:69: 79:8c:cc:87:be:6d:31:31:0f:ed:42:fd:83:26:ff: 6c:ab:af:7f:c8:41:d1:0c:26:ed:6b:8f:17:af:b7: 50:da:58:90:07:50:39:62:27:f6:9c:59:fc:d8:bd: 94:df:a4:e4:a9:93:25:56:28:99:e8:5c:5a:66:b3: 20:d4:0c:83:47:20:e0:23:6f:88:03:5e:5c:3c:65: 63:17:fd:a0:20:02:87:f7:96:21:e1:d1:54:8e:93: b9:40:bf:b1:03:d2:8d:11:ef:c1:ef:1c:3c:3b:23: 9c:ab:23:1b:1b:5b:49:f2:86:dc:70:67:19:59:3b: 60:0a:5d:fe:c2:ec:f0:54:c2:9b:8e:c8:63:6c:f5: 97:b5:30:4b:eb:4d:9b:bf:10:5c:18:89:39:2d:51: 56:b7:26:1a:07:67:9d:09:7f:22:18:f9:20:4a:82: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.167.40.0/24 IPv6: 2602:f9cd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:71:3a:69:d8:ce:29:67:58:bf:70:5d:95:86:f0:2f:fb:9d: 08:63:d8:0a:20:31:07:69:0d:5c:95:54:2c:ce:df:dd:82:7b: 0d:7c:a6:50:8f:b5:a0:23:05:f0:41:aa:f2:9d:1d:6c:59:75: 78:c1:85:d1:38:ed:ad:0b:c2:b5:5f:d7:3a:b7:2a:b7:2e:90: 74:44:a5:05:78:78:16:59:9e:ea:ef:d5:ed:fa:17:37:78:f9: 38:43:2f:00:7f:c1:9a:1f:78:c3:7d:2a:0c:f2:30:a5:0f:b8: be:8e:0e:e1:1b:b8:47:f4:7c:1d:52:24:99:71:52:60:be:69: 1e:63:62:ed:be:cd:8e:23:96:f7:40:b7:4d:ab:4c:3d:58:c8: a6:e8:52:1e:c2:ff:ac:a1:f8:e3:43:f1:80:d9:3d:0f:ff:19: 11:5a:eb:2b:66:62:42:ae:54:92:20:40:93:5a:87:f2:b2:03: b8:ef:fc:be:93:d0:8b:be:f8:fd:bc:0f:86:61:5d:b8:95:85: f9:ad:fb:d6:fd:5b:f6:64:12:f8:c0:9f:c9:ec:c7:d6:9b:f7: ca:9b:0f:04:ea:51:d6:2a:33:6a:3b:c8:94:1a:2c:69:02:b2: ef:b1:91:e7:17:b8:52:2f:1b:41:42:6d:78:df:21:6d:94:e5: a8:ef:9e:c2 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE4mnM9pz+WUc09CqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYxMjIwNDUxMVoXDTI4MDkxNDIwNDUxMVowLzEtMCsGA1UEAxMk ZDViZDM1NzgtM2MwOC00NGQxLTk5ZTItODA4N2ZjNDhmZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFUlE1XedN/93J6x15+4+cOzd4zl90EjphIv 7uhPVXfAKf3dmnT+kN5wldazo/COcpBdigoivV1iBNavHXfni5uUBcKPyfuXtYVJ jZIAZq6REBZVwvP4eml5jMyHvm0xMQ/tQv2DJv9sq69/yEHRDCbta48Xr7dQ2liQ B1A5Yif2nFn82L2U36TkqZMlViiZ6FxaZrMg1AyDRyDgI2+IA15cPGVjF/2gIAKH 95Yh4dFUjpO5QL+xA9KNEe/B7xw8OyOcqyMbG1tJ8obccGcZWTtgCl3+wuzwVMKb jshjbPWXtTBL602bvxBcGIk5LVFWtyYaB2edCX8iGPkgSoJKjQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFJNGC7V09qCccfCxfZztfs0F2gfqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k NWJkMzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3ZmM0OGZmYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Q1YmQzNTc4LTNjMDgtNDRkMS05 OWUyLTgwODdmYzQ4ZmZiMy9kNWJkMzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3ZmM0 OGZmYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpygwDgQCAAIwCAMGACYC+c0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADhxOmnYzilnWL9wXZWG8C/7nQhj2AogMQdpDVyVVCzO392Cew18plCPtaAjBfBB qvKdHWxZdXjBhdE47a0LwrVf1zq3KrcukHREpQV4eBZZnurv1e36Fzd4+ThDLwB/ wZofeMN9KgzyMKUPuL6ODuEbuEf0fB1SJJlxUmC+aR5jYu2+zY4jlvdAt02rTD1Y yKboUh7C/6yh+OND8YDZPQ//GRFa6ytmYkKuVJIgQJNah/KyA7jv/L6T0Iu++P28 D4ZhXbiVhfmt+9b9W/ZkEvjAn8nsx9ab98qbDwTqUdYqM2o7yJQaLGkCsu+xkecX uFIvG0FCbXjfIW2U5ajvnsI= -----END CERTIFICATE-----Generated at Sat Jun 13 17:43:29 2026 by rpki-client