$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer File: 1140553e-654b-4538-9cd3-d94d30ee0482.cer (raw, json) Hash identifier: p1pIvsQgTj2k5kenDPj22MIX1nCngVUpnrlxUBny0Xw= Subject key identifier: 58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DBCFDFD31DB4598D851945F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 00:45:18 +0000 Certificate not after: Tue 08 Aug 2028 00:45:18 +0000 Subordinate resources: IP: 2620:0:930::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bc:fd:fd:31:db:45:98:d8:51:94:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 6 00:45:18 2026 GMT Not After : Aug 8 00:45:18 2028 GMT Subject: CN=1140553e-654b-4538-9cd3-d94d30ee0482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:85:6c:35:71:54:10:8b:93:57:2b:0f:0b: 23:2a:4d:2e:c8:84:2f:1d:74:f5:ca:ea:98:bd:b3: 9b:97:f2:6c:3b:ce:b8:81:19:64:3d:1a:a5:40:82: 91:00:21:16:16:59:9d:df:2d:b8:95:c9:e7:77:5b: cd:e0:f7:29:8b:40:11:6e:af:5a:75:08:dc:32:14: a4:51:df:5f:83:b8:07:aa:fe:d4:12:d8:b9:f8:60: 99:e0:67:93:18:29:48:a5:90:4d:8d:e2:58:90:a7: d2:40:4f:50:51:64:35:fe:c8:b8:9d:3b:aa:07:8e: 66:d4:a8:ec:07:d5:b2:fb:26:70:80:37:cd:11:f7: e8:18:34:6e:6f:1d:a9:de:96:d0:b0:fd:17:ae:b5: b3:b5:c9:f4:d9:f8:b6:4f:73:f3:79:0c:57:7d:fd: 86:34:32:64:50:b8:03:b5:6e:4c:9c:9b:0e:35:dd: c8:2e:45:fa:f3:0a:59:0c:26:b7:cb:47:e4:52:1c: 86:d5:ea:d5:29:37:7d:d4:8d:91:27:23:39:5c:9c: d4:e6:6c:b9:ae:b9:30:74:e9:aa:26:07:a4:d3:03: 4a:7a:3d:44:35:69:15:9f:54:d5:71:ea:f6:cc:b4: 45:69:39:71:65:d6:f1:e2:5c:a6:36:65:53:dc:16: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:930::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f2:f7:e8:97:13:f0:06:16:a0:08:41:0f:f3:46:9b:77:7e: 14:de:ff:14:47:9d:9c:4c:2e:05:f7:f6:71:82:15:19:08:b8: 80:ee:a0:5c:be:da:4b:41:2e:4d:8d:56:9f:83:95:f8:bf:42: a9:33:37:1c:8e:38:32:46:f7:e3:3b:82:02:d3:82:ba:16:4f: 06:a2:d4:6e:e4:41:63:c3:2c:e9:9c:71:a1:d0:ed:34:dd:6b: 03:ae:86:7f:5d:fa:d2:83:1d:93:7d:bd:eb:c5:fc:1d:3a:3d: 1d:24:65:ef:63:31:36:b9:44:da:8c:3d:8c:44:e6:56:30:99: 15:50:52:a1:90:ed:0c:99:fd:f2:b3:d2:b1:43:9f:ba:01:02: cd:80:0e:db:37:a6:18:e1:84:73:93:d7:8a:90:50:ec:56:db: 67:93:a0:1f:79:1f:0a:75:72:fd:ba:ae:30:43:d2:7c:35:e3: dd:b0:fc:90:eb:4a:d6:b6:b7:49:60:10:b9:1c:c5:2a:08:69: 13:0d:2f:df:b1:a4:15:af:7a:96:50:bf:d2:71:91:ae:05:87: 83:21:33:94:41:77:46:e4:ad:85:c5:2c:f4:84:4e:4f:ca:5a: 9c:9a:7c:c7:bb:b8:7f:37:c0:21:09:76:63:34:63:d3:53:04: d3:07:2f:d7 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE28/f0x20WY2FGUX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUwNjAwNDUxOFoXDTI4MDgwODAwNDUxOFowLzEtMCsGA1UEAxMk MTE0MDU1M2UtNjU0Yi00NTM4LTljZDMtZDk0ZDMwZWUwNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg+FbDVxVBCLk1crDwsjKk0uyIQvHXT1yuqY vbObl/JsO864gRlkPRqlQIKRACEWFlmd3y24lcnnd1vN4Pcpi0ARbq9adQjcMhSk Ud9fg7gHqv7UEti5+GCZ4GeTGClIpZBNjeJYkKfSQE9QUWQ1/si4nTuqB45m1Kjs B9Wy+yZwgDfNEffoGDRubx2p3pbQsP0XrrWztcn02fi2T3PzeQxXff2GNDJkULgD tW5MnJsONd3ILkX68wpZDCa3y0fkUhyG1erVKTd91I2RJyM5XJzU5my5rrkwdOmq Jgek0wNKej1ENWkVn1TVcer2zLRFaTlxZdbx4lymNmVT3BbQTQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFFg9SmtKPn9CszYfYJlp0KIdGXHQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x MTQwNTUzZS02NTRiLTQ1MzgtOWNkMy1kOTRkMzBlZTA0ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzExNDA1NTNlLTY1NGItNDUzOC05 Y2QzLWQ5NGQzMGVlMDQ4Mi8xMTQwNTUzZS02NTRiLTQ1MzgtOWNkMy1kOTRkMzBl ZTA0ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAACTAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATvL36JcT8AYWoAhB D/NGm3d+FN7/FEednEwuBff2cYIVGQi4gO6gXL7aS0EuTY1Wn4OV+L9CqTM3HI44 Mkb34zuCAtOCuhZPBqLUbuRBY8Ms6ZxxodDtNN1rA66Gf1360oMdk32968X8HTo9 HSRl72MxNrlE2ow9jETmVjCZFVBSoZDtDJn98rPSsUOfugECzYAO2zemGOGEc5PX ipBQ7FbbZ5OgH3kfCnVy/bquMEPSfDXj3bD8kOtK1ra3SWAQuRzFKghpEw0v37Gk Fa96llC/0nGRrgWHgyEzlEF3RuSthcUs9IROT8panJp8x7u4fzfAIQl2YzRj01ME 0wcv1w== -----END CERTIFICATE-----Generated at Wed May 13 11:41:48 2026 by rpki-client