$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer File: fa43a831-b765-4adf-a0f0-2882a5c07fab.cer (raw, json) Hash identifier: EjEcO2aLyEzx2Te8tDvBgQgEgtcYixMz1paRrDBcnaA= Subject key identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D650D6EDC012A1AE000435980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Apr 2026 12:45:17 +0000 Certificate not after: Fri 07 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 396842 IP: 23.135.160.0/24 IP: 199.193.60.0/22 IP: 2602:fe6c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:0d:6e:dc:01:2a:1a:e0:00:43:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 4 12:45:17 2026 GMT Not After : Jul 7 12:45:17 2028 GMT Subject: CN=fa43a831-b765-4adf-a0f0-2882a5c07fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:8c:5f:2c:67:14:4c:c6:6a:92:3b:ef:6c: bc:67:4a:fe:44:d8:9b:ca:13:54:70:96:77:d9:48: 0f:72:6f:04:3f:b7:2a:01:af:d6:8a:bf:66:21:2f: 05:93:b5:24:95:5d:ad:54:01:f6:13:6a:59:4a:8c: 40:65:45:e5:47:f6:3b:14:66:cc:6a:5a:86:c3:89: 71:55:11:c2:37:e0:a9:7e:e3:99:6c:d9:98:78:a6: 00:7d:74:63:94:b3:90:f9:85:6f:d3:f9:72:a2:ce: d0:ab:55:a2:e8:ad:96:6f:35:2d:48:19:fa:d3:86: b2:a5:f5:cc:a7:94:a3:cc:b0:c5:cd:fe:2a:80:fe: 11:c8:9b:8b:46:ac:90:d5:75:32:3d:60:e9:ab:21: af:ec:0d:b6:65:c1:5a:3e:97:38:2a:93:42:45:07: e5:d3:2e:c6:99:ab:c8:ad:d2:48:c5:ff:2a:44:eb: ac:b0:54:b7:d2:4a:cc:a7:7f:06:1f:3e:d4:8b:12: 36:7f:93:9f:73:5c:ad:83:b1:c5:d9:f5:56:96:95: 3f:1e:96:fe:67:1c:ff:60:a8:c8:47:5e:5e:b4:1c: da:46:19:70:26:fb:44:a8:2b:9b:6f:16:5a:7b:ea: 38:16:e4:5f:2e:45:65:15:5c:7a:4c:87:71:93:6e: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.135.160.0/24 199.193.60.0/22 IPv6: 2602:fe6c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396842 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:98:86:d6:e0:c0:ba:3a:8e:57:2b:7a:a6:13:07:00:54:bf: 5b:c5:00:72:c2:eb:90:78:9b:a5:52:8a:9f:96:b1:36:64:f9: ca:aa:0f:eb:e4:a6:66:ea:aa:79:fa:8b:92:b2:0d:4c:bd:d6: e1:96:91:e6:dd:99:eb:95:c7:04:68:1f:3d:bb:21:49:6f:e1: fc:ba:0d:af:c9:ed:21:ac:76:e8:8a:39:81:21:99:91:33:97: 36:99:8f:12:9f:57:99:0f:2d:b9:6a:0d:fd:f1:ef:4a:1b:b8: b8:80:f4:a0:02:81:d0:38:1a:19:52:8a:b8:7f:b6:11:2d:ad: 58:90:88:be:21:8d:58:40:07:d0:46:14:79:81:98:37:de:80: 0e:be:fc:ac:a2:e7:ae:00:f0:85:55:08:0e:90:28:54:ed:6b: 4d:00:9a:2a:e5:fa:ed:dd:30:ad:7f:22:22:c0:20:65:50:31: 59:74:c6:63:ac:fc:24:bb:f7:b7:3d:b0:44:0e:87:44:16:14: c2:8d:cc:d9:55:e4:c9:55:79:82:85:0a:f8:b3:68:25:33:80: 47:98:c2:4c:f9:75:44:14:d9:07:13:ad:62:ed:4f:93:a3:81: 66:12:ad:b5:3a:50:60:d3:8f:c6:8c:26:51:2d:0b:96:1e:32: ba:60:b8:9e -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE1lDW7cASoa4ABDWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwNDEyNDUxN1oXDTI4MDcwNzEyNDUxN1owLzEtMCsGA1UEAxMk ZmE0M2E4MzEtYjc2NS00YWRmLWEwZjAtMjg4MmE1YzA3ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqiMXyxnFEzGapI772y8Z0r+RNibyhNUcJZ3 2UgPcm8EP7cqAa/Wir9mIS8Fk7UklV2tVAH2E2pZSoxAZUXlR/Y7FGbMalqGw4lx VRHCN+CpfuOZbNmYeKYAfXRjlLOQ+YVv0/lyos7Qq1Wi6K2WbzUtSBn604aypfXM p5SjzLDFzf4qgP4RyJuLRqyQ1XUyPWDpqyGv7A22ZcFaPpc4KpNCRQfl0y7GmavI rdJIxf8qROussFS30krMp38GHz7UixI2f5Ofc1ytg7HF2fVWlpU/Hpb+Zxz/YKjI R15etBzaRhlwJvtEqCubbxZae+o4FuRfLkVlFVx6TIdxk25qLwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJw1eUTAqc2xYLK1sOvKB0IdFNqcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVjMDdmYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZhNDNhODMxLWI3NjUtNGFkZi1h MGYwLTI4ODJhNWMwN2ZhYi9mYTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVj MDdmYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXh6ADBALHwTwwDgQCAAIwCAMGBCYC/mwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYOKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYmIbW4MC6Oo5XK3qm EwcAVL9bxQBywuuQeJulUoqflrE2ZPnKqg/r5KZm6qp5+ouSsg1MvdbhlpHm3Znr lccEaB89uyFJb+H8ug2vye0hrHboijmBIZmRM5c2mY8Sn1eZDy25ag398e9KG7i4 gPSgAoHQOBoZUoq4f7YRLa1YkIi+IY1YQAfQRhR5gZg33oAOvvysoueuAPCFVQgO kChU7WtNAJoq5frt3TCtfyIiwCBlUDFZdMZjrPwku/e3PbBEDodEFhTCjczZVeTJ VXmChQr4s2glM4BHmMJM+XVEFNkHE61i7U+To4FmEq21OlBg04/GjCZRLQuWHjK6 YLie -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:45 2026 by rpki-client