$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer File: 064b1cb7-5fb2-4a39-b431-c1397f63a818.cer (raw, json) Hash identifier: 9TAQYlxNPyPF5ab/2bJ6T/Q3pL5JkABZvD8il06qKqw= Subject key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D49B8FB8259F69A0F89CC7A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 17:48:18 +0000 Certificate not after: Sun 02 May 2027 00:45:32 +0000 Subordinate resources: AS: 22619 AS: 46366 IP: 74.116.192.0/21 IP: 199.30.128.0/22 IP: 206.167.1.0/24 IP: 208.94.172.0/22 IP: 216.171.224.0/24 IP: 216.171.226.0/23 IP: 216.171.231.0 -- 216.171.235.255 IP: 216.171.237.0/24 IP: 2605:c580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:b8:fb:82:59:f6:9a:0f:89:cc:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 25 17:48:18 2026 GMT Not After : May 2 00:45:32 2027 GMT Subject: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:c2:39:a0:67:40:87:a0:c6:91:42:9f:8a: e2:60:94:64:e8:ae:54:9c:30:84:06:63:67:50:83: f0:0f:28:86:db:24:0e:22:3e:28:04:45:c1:30:f3: cc:1f:59:8a:b1:86:22:bf:2c:55:97:e8:63:5d:f8: b4:67:7e:6c:e6:96:c4:0c:12:bb:c9:46:83:bd:fc: 5d:4c:bd:67:b6:eb:29:4e:09:fd:7c:04:64:f8:39: 34:ec:87:95:25:4f:f3:8b:ad:d9:0e:bf:fd:78:4a: a6:77:f2:e5:24:2e:9e:00:44:e4:4b:26:57:83:32: 37:85:85:4e:d9:cb:67:96:50:2f:75:a6:90:94:95: 85:94:dc:af:a8:9f:b6:c2:52:01:e7:26:88:1b:50: b7:f7:bf:01:fa:55:b1:98:f6:95:65:fe:b5:ee:68: 06:9e:8a:02:84:f1:21:25:37:35:d1:53:82:fa:fa: fd:fe:45:87:c0:fc:15:84:82:d5:b3:cd:49:06:42: 5e:aa:f0:e9:3e:3c:13:a9:22:ff:b1:2f:4e:19:9c: c1:41:cf:3d:ec:98:00:ea:90:09:55:1c:a4:93:be: 28:09:ad:b8:5f:fa:09:72:e8:02:0c:b0:10:44:d8: 63:ef:91:ce:cc:b5:e0:e3:72:1a:3a:cb:d3:96:f0: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 74.116.192.0/21 199.30.128.0/22 206.167.1.0/24 208.94.172.0/22 216.171.224.0/24 216.171.226.0/23 216.171.231.0-216.171.235.255 216.171.237.0/24 IPv6: 2605:c580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22619 46366 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:da:40:a5:3d:63:ca:61:cb:05:10:0f:4b:61:40:89:b2:48: ac:3f:03:e4:3a:2c:f8:d4:85:4c:fc:7a:2e:bc:bd:73:90:07: e2:22:7e:96:1d:99:7e:c3:66:c6:a5:29:64:d0:f9:42:26:7f: 38:97:b4:55:2f:2a:6d:44:d5:18:53:da:d8:24:a0:8a:78:9b: b5:97:20:2a:21:85:15:49:8e:f7:a5:69:68:cd:4e:56:cd:8a: f2:8d:f5:9b:94:57:d2:71:ba:40:ce:df:ec:f8:ba:d1:52:ca: 9a:6d:d7:a0:ac:2f:be:df:42:8a:53:99:a8:29:be:b0:1a:4c: 4b:21:35:ac:b7:e0:c5:40:28:d5:d4:b3:6d:97:dd:12:a9:da: c7:69:ad:79:3a:88:db:cd:54:89:45:6f:5c:5d:89:2f:7b:df: 2e:cd:de:f2:d4:33:86:69:87:81:fe:83:61:a6:35:79:fd:d0: 24:52:89:ae:50:68:3b:3a:72:2b:c2:46:5c:21:15:bc:07:4f: 80:83:71:3a:32:64:27:b3:5b:3b:13:2c:dd:c6:27:96:9a:b3: 4a:9f:98:5c:b1:4f:47:5e:40:41:7e:a5:f2:8b:ab:d5:c6:56: bb:81:12:90:a4:64:cf:9e:8a:db:5f:23:d0:d3:26:d1:d5:ab: b7:67:3c:04 -----BEGIN CERTIFICATE----- MIIHTjCCBjagAwIBAgIUAQ0Mn0MoWE1JuPuCWfaaD4nMegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDMyNTE3NDgxOFoXDTI3MDUwMjAwNDUzMlowLzEtMCsGA1UEAxMk MDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNhODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgbCOaBnQIegxpFCn4riYJRk6K5UnDCEBmNn UIPwDyiG2yQOIj4oBEXBMPPMH1mKsYYivyxVl+hjXfi0Z35s5pbEDBK7yUaDvfxd TL1ntuspTgn9fARk+Dk07IeVJU/zi63ZDr/9eEqmd/LlJC6eAETkSyZXgzI3hYVO 2ctnllAvdaaQlJWFlNyvqJ+2wlIB5yaIG1C3978B+lWxmPaVZf617mgGnooChPEh JTc10VOC+vr9/kWHwPwVhILVs81JBkJeqvDpPjwTqSL/sS9OGZzBQc897JgA6pAJ VRykk74oCa24X/oJcugCDLAQRNhj75HOzLXg43IaOsvTlvCfXwIDAQABo4IEYDCC BFwwHQYDVR0OBBYEFNU+LxC1u3ChILmVh1mknOqY1NTrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA2NGIxY2I3LTVmYjItNGEzOS1i NDMxLWMxMzk3ZjYzYTgxOC8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2 M2E4MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwYAYIKwYBBQUH AQcBAf8EUTBPMD4EAgABMDgDBANKdMADBALHHoADBADOpwEDBALQXqwDBADYq+AD BAHYq+IwDAMEANir5wMEAtir6AMEANir7TANBAIAAjAHAwUAJgXFgDAeBggrBgEF BQcBCAEB/wQPMA2gCzAJAgJYWwIDALUeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJjaQKU9Y8phywUQD0th QImySKw/A+Q6LPjUhUz8ei68vXOQB+IifpYdmX7DZsalKWTQ+UImfziXtFUvKm1E 1RhT2tgkoIp4m7WXICohhRVJjvelaWjNTlbNivKN9ZuUV9JxukDO3+z4utFSyppt 16CsL77fQopTmagpvrAaTEshNay34MVAKNXUs22X3RKp2sdprXk6iNvNVIlFb1xd iS973y7N3vLUM4Zph4H+g2GmNXn90CRSia5QaDs6civCRlwhFbwHT4CDcToyZCez WzsTLN3GJ5aas0qfmFyxT0deQEF+pfKLq9XGVruBEpCkZM+eittfI9DTJtHVq7dn PAQ= -----END CERTIFICATE-----Generated at Wed Mar 25 23:26:06 2026 by rpki-client