$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer File: f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer (raw, json) Hash identifier: Tp93K7iPsiXgUG8Kuicwp5ROQZTmyu/K1RbQap/ZhoA= Subject key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E17420DB0CD1995BE466D1F20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jun 2026 08:45:11 +0000 Certificate not after: Sat 09 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 400544 IP: 104.156.128.0/22 IP: 2607:76c0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:17:42:0d:b0:cd:19:95:be:46:6d:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 7 08:45:11 2026 GMT Not After : Sep 9 08:45:11 2028 GMT Subject: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:bf:58:86:8d:fe:8f:ed:c0:98:4b:20:b4: db:c0:6d:70:eb:5f:f3:04:c2:37:cf:2f:6f:db:ac: f8:88:b9:c9:f4:15:3e:4b:01:e3:41:60:72:2e:87: 82:31:c3:91:88:11:82:31:9e:f9:60:f1:ee:06:58: 29:10:1f:6a:22:cf:40:57:a6:b8:67:b6:bf:3e:27: 57:54:9c:2b:39:26:8f:8e:ce:5b:1e:44:d2:1c:49: 64:ff:83:4f:c6:af:81:d6:30:97:08:1d:a2:7f:f5: c0:36:8b:76:b4:b8:34:3f:99:87:bd:2f:b5:cd:8b: 74:3a:9e:5c:d6:61:fd:e5:59:ad:86:09:33:30:4f: b2:07:93:ea:9e:4c:94:13:c9:8d:79:62:0c:4a:cc: 57:6f:12:55:50:58:af:04:28:0e:c6:4e:92:f3:91: cb:6f:76:16:d4:f5:30:a5:33:5b:af:52:d5:f3:d9: 94:49:b5:40:21:4c:36:4a:fa:be:d2:d9:4b:c1:f1: f4:b2:62:32:a6:aa:1c:86:0a:a3:a8:c9:b5:ae:92: 4e:43:97:d1:f0:b5:97:cf:e8:ad:7f:f4:d5:a6:49: 7a:2a:5c:d0:df:a1:64:0b:bd:0c:60:e9:c6:b5:fc: 92:6d:1b:9c:49:c4:d8:03:c4:44:db:46:9c:d7:59: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.156.128.0/22 IPv6: 2607:76c0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400544 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:cf:2e:a2:6d:80:84:94:d2:87:e9:a9:b6:ab:e1:b2:58:c3: 35:53:6a:86:0a:9d:81:1e:f9:54:24:92:12:2c:8c:6d:1c:4e: 19:dd:d1:d8:e4:37:89:f6:95:17:98:47:68:75:ee:df:24:36: 59:40:92:da:f4:bd:65:03:b8:dc:9e:37:f3:cf:1a:e1:0d:24: d0:e4:3f:31:e3:60:b3:87:ca:33:6b:be:db:3a:16:f0:ca:89: af:0d:10:31:15:6a:65:34:c5:0b:b8:a6:c8:12:46:da:4e:43: 06:f3:51:a3:48:e5:f5:54:1b:78:60:28:8c:19:6e:5b:c9:cb: 93:1b:15:5e:7a:2c:d1:21:e5:fc:5d:9a:0b:5a:36:df:6c:de: 2c:5b:e3:e8:c0:15:d1:48:1d:27:88:b5:2d:24:e7:8b:fe:10: de:f8:91:5f:5c:dd:ce:02:24:95:72:34:f9:12:e0:db:e2:75: 26:ea:d2:34:51:72:30:d2:f8:e6:fa:cd:5b:d1:dc:76:3e:c8: 49:34:a5:97:9e:ea:e9:5e:0d:36:c4:06:d1:eb:a7:a3:99:09: da:f9:9a:f6:f4:33:25:f0:98:46:91:be:60:0f:8c:72:22:2e: 13:5b:1b:39:95:3f:d5:11:fb:52:75:3f:59:f2:70:10:f0:0d: 14:36:68:77 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE4XQg2wzRmVvkZtHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYwNzA4NDUxMVoXDTI4MDkwOTA4NDUxMVowLzEtMCsGA1UEAxMk ZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5YzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mG/WIaN/o/twJhLILTbwG1w61/zBMI3zy9v 26z4iLnJ9BU+SwHjQWByLoeCMcORiBGCMZ75YPHuBlgpEB9qIs9AV6a4Z7a/PidX VJwrOSaPjs5bHkTSHElk/4NPxq+B1jCXCB2if/XANot2tLg0P5mHvS+1zYt0Op5c 1mH95VmthgkzME+yB5PqnkyUE8mNeWIMSsxXbxJVUFivBCgOxk6S85HLb3YW1PUw pTNbr1LV89mUSbVAIUw2Svq+0tlLwfH0smIypqochgqjqMm1rpJOQ5fR8LWXz+it f/TVpkl6KlzQ36FkC70MYOnGtfySbRucScTYA8RE20ac11neGQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOz9yOuyNvO7ltrEZOuS2amp9xM9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m ODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y4MWJhY2Q4LWY3ZDktNDdkNy1h YTI0LTUzOTEwNDlmOWM4Mi9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5 ZjljODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJonIAwDgQCAAIwCAMGBCYHdsAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYcoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABzy6ibYCElNKH6am2q+GyWMM1 U2qGCp2BHvlUJJISLIxtHE4Z3dHY5DeJ9pUXmEdode7fJDZZQJLa9L1lA7jcnjfz zxrhDSTQ5D8x42Czh8oza77bOhbwyomvDRAxFWplNMULuKbIEkbaTkMG81GjSOX1 VBt4YCiMGW5bycuTGxVeeizRIeX8XZoLWjbfbN4sW+PowBXRSB0niLUtJOeL/hDe +JFfXN3OAiSVcjT5EuDb4nUm6tI0UXIw0vjm+s1b0dx2PshJNKWXnurpXg02xAbR 66ejmQna+Zr29DMl8JhGkb5gD4xyIi4TWxs5lT/VEftSdT9Z8nAQ8A0UNmh3 -----END CERTIFICATE-----Generated at Sat Jun 13 21:48:17 2026 by rpki-client