$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer File: dc3a2d18-b171-46fa-8693-0080d77f0579.cer (raw, json) Hash identifier: 1oHWl+poQyn9e/YIIxL2i3MX3IRc5jpm85qE6TNcJN4= Subject key identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D7B62E9487EF117B062301980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Apr 2026 12:45:18 +0000 Certificate not after: Sat 15 Jul 2028 12:45:18 +0000 Subordinate resources: IP: 142.132.0.0/17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:62:e9:48:7e:f1:17:b0:62:30:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 12 12:45:18 2026 GMT Not After : Jul 15 12:45:18 2028 GMT Subject: CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:d6:35:ae:ed:5d:d7:f7:a9:45:cd:b1:ac: a5:ec:22:e3:34:6c:c4:ac:1e:fe:1d:f0:d5:2f:f4: ec:d7:65:ef:6c:d3:4d:33:51:bf:96:16:2e:f6:07: 77:d0:46:ed:8e:38:66:ec:63:85:82:1e:d6:69:21: d6:62:56:e5:b6:20:37:9b:dc:04:56:5b:87:67:01: 98:7f:92:23:57:04:88:3d:4a:ec:51:ca:17:85:51: a4:db:90:26:fa:b3:98:e2:bb:0d:7a:d8:e9:30:c5: 9c:59:8e:24:c4:1c:6c:c2:7c:b4:74:a8:ba:1a:dc: 08:7a:49:6c:72:15:d0:32:83:73:1b:d6:06:90:58: d8:43:32:95:2c:de:9b:6d:60:81:5a:f2:69:c1:7f: dc:91:a8:41:d8:58:c6:44:83:d2:20:03:31:95:69: 08:ed:9b:e1:bc:7b:dd:79:4f:98:d1:a2:0b:6c:d9: d6:02:2e:d0:0d:fa:f2:0b:a6:71:3d:2e:35:04:51: 83:c3:22:40:6b:84:8b:af:d6:9f:ce:e5:8c:35:b1: 94:8a:56:2a:90:03:46:cb:b1:6a:e3:b4:66:16:d3: 35:87:a3:a5:cf:16:75:af:eb:11:45:5d:8b:cb:9d: 4e:e3:44:b1:02:5f:56:94:f5:91:fb:af:44:56:a8: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.132.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:55:e1:f2:ed:77:48:23:eb:73:cb:ae:23:2a:4c:9d:2b:6d: 92:40:8d:22:73:63:1d:b7:b3:e1:9b:f3:b0:73:83:12:01:66: 4c:c1:24:2f:fa:25:99:62:e9:9d:ba:86:b9:a6:72:38:15:da: 6f:76:15:c1:19:0b:5b:fa:b7:ac:22:af:60:4c:63:62:34:90: 2a:2c:8f:11:12:ed:35:1b:90:60:00:75:aa:e4:eb:89:52:b5: b5:2c:cc:fa:22:aa:de:41:1e:36:85:5f:86:44:88:f3:65:55: 95:bc:3a:b3:44:56:ce:13:14:83:25:b0:b6:c0:61:1d:52:7e: fa:66:c1:64:00:6c:d4:17:f3:a2:98:fd:94:73:3c:74:4a:b2: 7c:03:46:13:0c:99:91:63:b0:d2:56:6a:e9:84:b7:a7:52:a6: a5:7d:1b:60:27:b8:19:7d:d2:a5:6b:68:79:95:dd:fa:85:bb: b0:a1:2d:3c:a6:50:26:25:af:9e:4b:3b:33:88:a1:9c:34:56: 87:8c:c7:0e:ba:68:17:23:84:16:d2:c7:01:33:85:4c:c1:33: 48:22:15:ff:cc:85:4b:79:0a:37:6d:af:de:9c:fe:e3:67:ee: 28:08:4f:be:36:e0:35:0a:5b:af:82:ef:8f:86:69:3e:57:2e: ad:23:d7:e0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE17YulIfvEXsGIwGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxMjEyNDUxOFoXDTI4MDcxNTEyNDUxOFowLzEtMCsGA1UEAxMk ZGMzYTJkMTgtYjE3MS00NmZhLTg2OTMtMDA4MGQ3N2YwNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+rWNa7tXdf3qUXNsayl7CLjNGzErB7+HfDV L/Ts12XvbNNNM1G/lhYu9gd30Ebtjjhm7GOFgh7WaSHWYlbltiA3m9wEVluHZwGY f5IjVwSIPUrsUcoXhVGk25Am+rOY4rsNetjpMMWcWY4kxBxswny0dKi6GtwIekls chXQMoNzG9YGkFjYQzKVLN6bbWCBWvJpwX/ckahB2FjGRIPSIAMxlWkI7ZvhvHvd eU+Y0aILbNnWAi7QDfryC6ZxPS41BFGDwyJAa4SLr9afzuWMNbGUilYqkANGy7Fq 47RmFtM1h6OlzxZ1r+sRRV2Ly51O40SxAl9WlPWR+69EVqitdwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNSFxv20WnvWbuUwS0KSwImhbLM3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k YzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3ZjA1NzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2RjM2EyZDE4LWIxNzEtNDZmYS04 NjkzLTAwODBkNzdmMDU3OS9kYzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3 ZjA1NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAeOhAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAX1Xh8u13SCPrc8uuIypM nSttkkCNInNjHbez4ZvzsHODEgFmTMEkL/olmWLpnbqGuaZyOBXab3YVwRkLW/q3 rCKvYExjYjSQKiyPERLtNRuQYAB1quTriVK1tSzM+iKq3kEeNoVfhkSI82VVlbw6 s0RWzhMUgyWwtsBhHVJ++mbBZABs1Bfzopj9lHM8dEqyfANGEwyZkWOw0lZq6YS3 p1KmpX0bYCe4GX3SpWtoeZXd+oW7sKEtPKZQJiWvnks7M4ihnDRWh4zHDrpoFyOE FtLHATOFTMEzSCIV/8yFS3kKN22v3pz+42fuKAhPvjbgNQpbr4Lvj4ZpPlcurSPX 4A== -----END CERTIFICATE-----Generated at Fri Apr 17 11:59:12 2026 by rpki-client