$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer File: f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer (raw, json) Hash identifier: ORhYOb+9iKgrqI835I3fPaKSRi16XfeNapigBrqM0xk= Subject key identifier: 7D:B5:95:E5:B4:3D:8E:29:0A:60:51:6C:DA:78:76:1F:1D:FB:E7:E5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DFE21E51F535699A93CD6A2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 May 2026 08:45:11 +0000 Certificate not after: Thu 31 Aug 2028 08:45:11 +0000 Subordinate resources: IP: 2602:816:6000::/40 IP: 2620:49:8080::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:21:e5:1f:53:56:99:a9:3c:d6:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 29 08:45:11 2026 GMT Not After : Aug 31 08:45:11 2028 GMT Subject: CN=f04514a7-6d72-4ac6-8532-7a5f84d76f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:a5:29:47:f7:50:7e:a5:c7:4f:5f:ea:d1: 7c:b0:9f:f6:cd:35:f2:37:06:56:2c:09:f4:85:1f: 43:98:75:98:5f:bc:e1:66:0e:2a:77:76:c3:dc:bf: 36:bb:4b:cb:b9:95:59:eb:9d:66:6b:20:6d:bf:89: 85:b5:ce:b4:38:25:5d:76:9e:53:29:cc:50:53:c3: 79:4e:6e:40:c4:d3:51:9b:b9:de:87:22:bf:d1:62: ce:1c:cc:79:c4:04:01:81:af:e2:61:45:f4:1a:5c: b8:a2:9c:67:22:38:f1:9a:c0:07:71:fe:df:f8:99: c2:aa:e7:2c:4d:78:e7:72:b1:38:6d:ea:2b:14:58: 87:7d:64:38:21:9c:37:0a:97:39:64:fb:89:ac:79: ae:72:ea:f6:e1:fe:b4:a2:f6:81:9a:9e:1f:0b:ff: c3:60:b1:b5:23:af:9c:7a:ef:c9:1a:8c:b9:93:8a: c5:26:18:59:c8:09:a8:48:d6:43:42:d7:10:ba:60: a7:c9:6f:60:43:b7:c5:76:bd:cf:52:c5:4f:90:3d: 1b:e9:54:85:1f:ad:6e:44:cf:83:f3:c0:37:0b:5e: 91:44:91:8b:59:6e:a8:31:24:d0:61:c2:0d:56:19: 85:ba:92:7d:b5:50:6c:a5:2b:05:7b:61:80:fb:d8: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B5:95:E5:B4:3D:8E:29:0A:60:51:6C:DA:78:76:1F:1D:FB:E7:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:6000::/40 2620:49:8080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c9:f5:a6:39:9f:04:19:89:31:57:d0:90:c5:7d:c4:e8:6c: a4:be:a3:7d:cb:eb:d4:c2:b9:39:cc:b9:a6:2d:6a:b7:60:07: 8c:22:49:0a:12:c0:1a:d4:44:88:57:7d:83:ed:7d:90:c8:4a: 60:07:35:a1:93:e3:b9:ef:44:85:c4:64:56:4d:55:06:22:51: 36:97:06:25:1c:ce:6e:c5:ef:d1:2a:aa:49:55:dd:0d:e5:71: 54:60:31:90:b3:2d:ce:3d:76:3a:09:4a:34:72:77:5b:a4:71: 79:72:c4:b7:a4:9b:d1:17:12:de:0c:b3:1b:4a:21:e4:a5:c7: d5:97:6c:5b:97:16:35:fb:60:83:86:bd:af:c0:eb:e2:91:94: 39:c8:8a:9f:36:d2:7e:c9:5e:7e:5f:af:f8:8f:57:c1:f9:14: 82:b7:dc:d0:9e:32:20:12:c1:24:76:2d:b6:b0:86:67:86:fc: 2e:68:ad:ae:07:8e:bf:9f:fa:c5:b5:77:aa:ac:29:41:76:aa: bf:8e:a6:0f:41:59:10:23:df:5f:b8:dc:3a:fd:f3:c8:9e:0b: 51:db:da:4d:c6:c4:b9:49:84:fd:14:b1:26:f7:bc:24:7a:c5: b6:87:02:fe:be:09:9d:cb:70:18:d1:93:d0:be:0b:ff:19:7f: 9a:df:a9:63 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWE3+IeUfU1aZqTzWosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyOTA4NDUxMVoXDTI4MDgzMTA4NDUxMVowLzEtMCsGA1UEAxMk ZjA0NTE0YTctNmQ3Mi00YWM2LTg1MzItN2E1Zjg0ZDc2ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWSlKUf3UH6lx09f6tF8sJ/2zTXyNwZWLAn0 hR9DmHWYX7zhZg4qd3bD3L82u0vLuZVZ651mayBtv4mFtc60OCVddp5TKcxQU8N5 Tm5AxNNRm7nehyK/0WLOHMx5xAQBga/iYUX0Gly4opxnIjjxmsAHcf7f+JnCqucs TXjncrE4beorFFiHfWQ4IZw3Cpc5ZPuJrHmucur24f60ovaBmp4fC//DYLG1I6+c eu/JGoy5k4rFJhhZyAmoSNZDQtcQumCnyW9gQ7fFdr3PUsVPkD0b6VSFH61uRM+D 88A3C16RRJGLWW6oMSTQYcINVhmFupJ9tVBspSsFe2GA+9hcEQIDAQABo4IECjCC BAYwHQYDVR0OBBYEFH21leW0PY4pCmBRbNp4dh8d++flMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MDQ1MTRhNy02ZDcyLTRhYzYtODUzMi03YTVmODRkNzZmMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YwNDUxNGE3LTZkNzItNGFjNi04 NTMyLTdhNWY4NGQ3NmYyNC9mMDQ1MTRhNy02ZDcyLTRhYzYtODUzMi03YTVmODRk NzZmMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBgAmAggWYAMHACYgAEmAgDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApyfWm OZ8EGYkxV9CQxX3E6GykvqN9y+vUwrk5zLmmLWq3YAeMIkkKEsAa1ESIV32D7X2Q yEpgBzWhk+O570SFxGRWTVUGIlE2lwYlHM5uxe/RKqpJVd0N5XFUYDGQsy3OPXY6 CUo0cndbpHF5csS3pJvRFxLeDLMbSiHkpcfVl2xblxY1+2CDhr2vwOvikZQ5yIqf NtJ+yV5+X6/4j1fB+RSCt9zQnjIgEsEkdi22sIZnhvwuaK2uB46/n/rFtXeqrClB dqq/jqYPQVkQI99fuNw6/fPIngtR29pNxsS5SYT9FLEm97wkesW2hwL+vgmdy3AY 0ZPQvgv/GX+a36lj -----END CERTIFICATE-----Generated at Sat Jun 13 17:45:24 2026 by rpki-client