$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.cer File: 23dc136d-a5d2-43dd-b20e-5edff7bd04c3.cer (raw, json) Hash identifier: AVqQpMxrDF8KAmHe69ttyg+uvvbfc+rZabw6mCCQLi0= Subject key identifier: 64:ED:3F:36:A0:5B:36:A5:31:11:B4:A4:69:C7:23:C8:94:BB:5B:CF Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E7BC2B063276265F51FB11C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jul 2026 08:45:13 +0000 Certificate not after: Sun 15 Oct 2028 08:45:13 +0000 Subordinate resources: IP: 199.127.171.0/24 IP: 204.52.242.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:c2:b0:63:27:62:65:f5:1f:b1:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 13 08:45:13 2026 GMT Not After : Oct 15 08:45:13 2028 GMT Subject: CN=23dc136d-a5d2-43dd-b20e-5edff7bd04c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a9:b3:e8:5f:58:17:93:82:2b:8c:e2:08:bd: a5:bd:3c:d5:c8:fb:7c:f6:4d:9d:bd:90:31:ec:9b: f0:cb:6b:a3:5b:eb:5d:89:1a:ca:27:93:d4:ad:56: b5:7f:40:9a:9c:94:98:e2:25:73:38:e6:0c:80:05: 54:11:f7:c4:0d:0c:c4:bb:fe:a2:d4:7b:47:88:ea: 77:86:a2:b5:67:da:26:33:06:8b:f7:f3:52:15:5f: 0b:66:59:72:ae:32:86:e1:56:e5:77:bd:5c:6d:27: b1:60:41:9f:d6:38:5a:a2:2f:ad:47:58:9c:a5:cd: ec:9a:0c:b8:a9:ff:2a:3d:8f:17:b6:01:4a:a1:44: cd:c4:c2:0c:6d:e7:8f:e2:23:b9:e1:7d:dd:ab:d1: e1:b4:14:72:3c:62:4a:69:60:3b:7e:44:5b:91:2c: 7b:00:e1:96:c3:f4:fc:8d:af:61:58:f8:c1:3f:29: 03:ed:25:96:4f:f2:a6:fc:60:0b:f3:b8:60:4f:57: e0:9b:a8:5c:ad:1a:4c:9e:33:8d:c6:48:f8:8a:d6: d7:40:3e:c1:b4:c2:1f:79:d3:ed:31:ef:d3:9f:8e: 0b:29:29:09:bd:5c:d7:6e:5d:09:df:d1:bc:e9:d4: 03:16:3a:cc:ab:05:94:d8:31:56:b0:2d:81:61:74: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:ED:3F:36:A0:5B:36:A5:31:11:B4:A4:69:C7:23:C8:94:BB:5B:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.127.171.0/24 204.52.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ae:0d:3f:3d:57:48:3c:2d:d6:7c:00:ef:a1:5f:78:f4:2f: 5a:c4:d0:91:a4:9c:64:09:f4:77:28:a4:c2:3b:77:e0:67:68: ab:83:af:1d:b9:cf:06:ab:60:6b:02:dd:ac:46:e0:83:a6:31: 3e:b5:29:40:a5:26:cd:13:99:a3:6c:60:f0:16:b7:dc:47:d4: a9:0b:53:9f:84:77:3b:04:3e:f2:e5:9d:56:d1:27:04:4d:d1: 35:e0:43:04:82:b6:84:0f:73:e3:bd:c2:90:bb:3e:ac:5f:be: db:ae:0f:37:3c:87:80:68:e7:ad:ae:2a:f1:24:30:1d:32:94: dc:7c:22:3b:f5:43:38:b0:df:86:98:e9:52:54:bf:65:84:7a: 4c:66:1d:26:08:0a:a8:bc:8a:de:0b:ef:37:2e:dc:62:7b:ca: 3c:e2:6a:3c:ad:f4:5c:21:a2:4b:b9:51:50:ef:02:84:b4:35: cd:40:ad:28:75:59:25:87:59:98:04:47:99:4d:50:b5:6f:49: 81:ac:a9:86:7d:4d:ea:c9:87:71:6d:43:7c:07:1c:24:88:e3: c3:27:fd:05:b8:39:7d:64:1a:8f:dd:90:13:b6:67:cc:4a:38: 59:47:1a:58:99:46:d5:e9:24:54:7c:d1:7d:36:a7:32:12:af: 4d:56:93:b6 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE57wrBjJ2Jl9R+xHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxMzA4NDUxM1oXDTI4MTAxNTA4NDUxM1owLzEtMCsGA1UEAxMk MjNkYzEzNmQtYTVkMi00M2RkLWIyMGUtNWVkZmY3YmQwNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqmz6F9YF5OCK4ziCL2lvTzVyPt89k2dvZAx 7Jvwy2ujW+tdiRrKJ5PUrVa1f0CanJSY4iVzOOYMgAVUEffEDQzEu/6i1HtHiOp3 hqK1Z9omMwaL9/NSFV8LZllyrjKG4Vbld71cbSexYEGf1jhaoi+tR1icpc3smgy4 qf8qPY8XtgFKoUTNxMIMbeeP4iO54X3dq9HhtBRyPGJKaWA7fkRbkSx7AOGWw/T8 ja9hWPjBPykD7SWWT/Km/GAL87hgT1fgm6hcrRpMnjONxkj4itbXQD7BtMIfedPt Me/Tn44LKSkJvVzXbl0J39G86dQDFjrMqwWU2DFWsC2BYXSpNwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFGTtPzagWzalMRG0pGnHI8iUu1vPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y M2RjMTM2ZC1hNWQyLTQzZGQtYjIwZS01ZWRmZjdiZDA0YzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIzZGMxMzZkLWE1ZDItNDNkZC1i MjBlLTVlZGZmN2JkMDRjMy8yM2RjMTM2ZC1hNWQyLTQzZGQtYjIwZS01ZWRmZjdi ZDA0YzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHf6sDBADMNPIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANq4NPz1XSDwt 1nwA76FfePQvWsTQkaScZAn0dyikwjt34Gdoq4OvHbnPBqtgawLdrEbgg6YxPrUp QKUmzROZo2xg8Ba33EfUqQtTn4R3OwQ+8uWdVtEnBE3RNeBDBIK2hA9z473CkLs+ rF++264PNzyHgGjnra4q8SQwHTKU3HwiO/VDOLDfhpjpUlS/ZYR6TGYdJggKqLyK 3gvvNy7cYnvKPOJqPK30XCGiS7lRUO8ChLQ1zUCtKHVZJYdZmARHmU1QtW9Jgayp hn1N6smHcW1DfAccJIjjwyf9Bbg5fWQaj92QE7ZnzEo4WUcaWJlG1ekkVHzRfTan MhKvTVaTtg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:38:04 2026 by rpki-client