$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81.cer File: f12fc670-c513-43aa-8e45-f34564e90e81.cer (raw, json) Hash identifier: p0TekCYKvYIthQ2zW316sdvYj9CmwUzQjuWkenOIELI= Subject key identifier: 75:3A:62:0A:EE:46:05:7C:39:EA:E6:F9:0B:58:89:86:B1:AF:3E:B1 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DEB0E44F33A8D0F2D86BEE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 May 2026 12:45:17 +0000 Certificate not after: Thu 24 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 205.236.77.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:0e:44:f3:3a:8d:0f:2d:86:be:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 22 12:45:17 2026 GMT Not After : Aug 24 12:45:17 2028 GMT Subject: CN=f12fc670-c513-43aa-8e45-f34564e90e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:7f:e0:ae:c5:af:3c:53:54:58:95:6a:c6: fb:1e:0a:34:84:88:60:f4:a5:cf:e4:51:e6:60:39: 71:14:f3:d7:74:52:d5:6c:5a:ed:3c:8e:61:17:65: 0e:58:b6:dd:37:80:87:f3:bc:71:37:7d:12:15:33: 59:99:07:ba:0c:b5:1c:5f:34:4f:a8:3b:09:0a:27: b9:88:66:37:ec:63:42:df:18:e7:ad:d4:4a:a3:dc: 97:c8:75:a0:a7:ef:44:58:59:18:b5:34:fe:a3:ec: f8:85:3e:a8:9e:f2:d1:77:ea:57:07:52:fb:8b:14: 3b:f9:bd:80:67:f8:08:67:04:4a:eb:dc:10:f2:cf: 81:17:b3:7f:88:ea:e9:ac:4e:fd:95:fb:6b:3b:b1: d9:df:da:ec:7a:be:c4:6a:e1:0d:a6:7d:e4:65:83: 2c:e2:70:fe:b3:f5:90:10:48:65:ba:a9:f5:01:12: 34:a7:c5:52:ae:e7:5e:9b:4e:a3:6f:2e:65:14:6c: 45:c4:8a:12:37:d5:9a:2b:09:f4:72:7d:c6:92:2d: a8:df:ed:4a:3f:21:8a:f1:8f:5f:0b:43:2f:f3:a7: b4:8a:14:e8:07:40:b4:05:49:95:eb:d0:f7:9f:2f: 4e:ed:ec:4b:04:98:b3:e5:0d:bf:4c:ad:f3:b1:d7: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3A:62:0A:EE:46:05:7C:39:EA:E6:F9:0B:58:89:86:B1:AF:3E:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.236.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:88:b2:95:bb:3d:44:ea:90:17:21:18:ee:45:8f:6a:05:be: 0f:a5:39:bd:64:32:29:51:09:76:d0:71:b6:a6:53:d6:b9:00: 67:72:68:32:70:85:96:c9:3e:aa:9a:ed:3b:f5:6a:3b:42:c4: 96:25:5f:ff:9d:e6:1e:f7:ce:01:b8:fc:c6:9f:2c:4a:95:62: b6:6b:e3:98:5f:e5:b0:50:53:29:cf:9b:96:27:68:31:7e:46: 60:17:e2:57:e5:e7:f4:2d:3b:a2:f5:39:a1:95:49:1e:af:29: 4b:4f:e8:57:51:fb:de:6a:c9:e4:5a:4d:b5:0a:a6:f1:35:a9: 05:f8:c0:12:33:ce:56:ed:b2:22:80:0d:c9:1e:e5:04:58:d3: de:3e:09:53:ce:96:ff:de:d9:c3:24:4b:c4:89:a9:1d:18:71: a6:8d:06:a2:3b:df:3e:92:5b:0b:3c:82:fe:9f:bc:cb:77:a2: 61:a1:14:9f:96:97:79:4d:a0:ec:03:b5:09:15:f4:da:96:b9: 37:eb:1c:b4:87:9c:8b:ea:7b:8e:ab:55:53:2c:36:4f:fa:db: e7:7a:df:3c:8b:b1:f6:39:70:5f:59:70:02:eb:4a:7b:4e:04: 76:ba:df:a5:32:7c:d4:cb:f9:7b:cf:1a:ae:4c:a4:22:eb:87: bf:1c:21:74 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3rDkTzOo0PLYa+4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyMjEyNDUxN1oXDTI4MDgyNDEyNDUxN1owLzEtMCsGA1UEAxMk ZjEyZmM2NzAtYzUxMy00M2FhLThlNDUtZjM0NTY0ZTkwZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnup/4K7FrzxTVFiVasb7Hgo0hIhg9KXP5FHm YDlxFPPXdFLVbFrtPI5hF2UOWLbdN4CH87xxN30SFTNZmQe6DLUcXzRPqDsJCie5 iGY37GNC3xjnrdRKo9yXyHWgp+9EWFkYtTT+o+z4hT6onvLRd+pXB1L7ixQ7+b2A Z/gIZwRK69wQ8s+BF7N/iOrprE79lftrO7HZ39rser7EauENpn3kZYMs4nD+s/WQ EEhluqn1ARI0p8VSrudem06jby5lFGxFxIoSN9WaKwn0cn3Gki2o3+1KPyGK8Y9f C0Mv86e0ihToB0C0BUmV69D3ny9O7exLBJiz5Q2/TK3zsdfxywIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHU6YgruRgV8Oerm+QtYiYaxrz6xMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MTJmYzY3MC1jNTEzLTQzYWEtOGU0NS1mMzQ1NjRlOTBlODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YxMmZjNjcwLWM1MTMtNDNhYS04 ZTQ1LWYzNDU2NGU5MGU4MS9mMTJmYzY3MC1jNTEzLTQzYWEtOGU0NS1mMzQ1NjRl OTBlODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN7E0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUYiylbs9ROqQFyEY7kWP agW+D6U5vWQyKVEJdtBxtqZT1rkAZ3JoMnCFlsk+qprtO/VqO0LEliVf/53mHvfO Abj8xp8sSpVitmvjmF/lsFBTKc+blidoMX5GYBfiV+Xn9C07ovU5oZVJHq8pS0/o V1H73mrJ5FpNtQqm8TWpBfjAEjPOVu2yIoANyR7lBFjT3j4JU86W/97ZwyRLxImp HRhxpo0GojvfPpJbCzyC/p+8y3eiYaEUn5aXeU2g7AO1CRX02pa5N+sctIeci+p7 jqtVUyw2T/rb53rfPIux9jlwX1lwAutKe04EdrrfpTJ81Mv5e88arkykIuuHvxwh dA== -----END CERTIFICATE-----Generated at Sat Jun 13 23:06:25 2026 by rpki-client