$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer File: 336db060-273c-4da7-88b6-6f47c8830474.cer (raw, json) Hash identifier: l2LE/mkzqavX+wouzPhnI3w4XLGAJkae+n1YpVzCRwA= Subject key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D8C230303D40F1F606A98C660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Apr 2026 12:45:17 +0000 Certificate not after: Fri 21 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 157.160.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:23:03:03:d4:0f:1f:60:6a:98:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 18 12:45:17 2026 GMT Not After : Jul 21 12:45:17 2028 GMT Subject: CN=336db060-273c-4da7-88b6-6f47c8830474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:bd:dd:61:4e:56:ce:45:8d:d0:ec:0e:a1: 5f:b0:e0:2e:2f:8e:db:99:df:14:69:24:f4:68:2b: c5:f1:0f:03:6a:97:b8:39:85:62:44:4a:c5:42:c1: 4b:35:ff:28:02:8e:67:de:a1:11:24:e8:cb:99:8c: f6:6c:2d:37:04:00:9e:02:40:64:e6:3f:a6:67:5f: 88:7f:82:0b:d1:12:fb:67:7b:7b:cc:5e:b0:3b:98: bb:c6:1e:f1:41:c7:38:75:77:d2:7f:6e:46:4b:75: 36:18:89:25:cc:f4:7f:9f:79:e4:3c:b7:c8:0e:ae: 2c:cc:03:4b:c6:41:85:04:bf:ac:76:24:ef:88:1c: 00:4d:2e:45:a7:fa:79:86:46:55:30:2d:fd:12:2e: 36:1e:53:df:9c:b5:62:b5:08:0f:a1:c3:41:ae:24: dd:e1:84:50:ce:91:04:d8:80:a6:33:0e:05:cb:71: b0:75:1f:fb:d8:09:d3:fa:35:cc:80:0f:09:85:2d: b9:09:a4:02:b7:b0:b0:a4:9d:71:98:7e:25:9d:94: aa:7e:19:16:26:1d:a8:40:12:af:22:a3:da:98:52: 04:0a:84:22:82:99:56:3c:4a:f4:65:75:1e:57:47: c9:4e:f2:97:24:6c:ec:f6:74:17:c0:33:fa:44:84: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 157.160.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:15:40:5e:4a:06:47:81:ff:f8:f2:d9:bd:6f:ad:3c:92:fe: be:df:0a:da:6b:f7:86:0c:0c:8d:6a:f5:80:68:49:e9:be:fd: 03:c0:5d:b2:8f:05:32:c3:2e:35:10:df:b2:6a:54:ff:eb:f5: 3a:a3:92:3e:f2:6a:6c:11:01:fd:b1:76:eb:ba:7a:65:70:40: 29:a9:38:e5:58:db:9c:8a:63:20:3a:de:8a:b8:70:d9:4a:51: fa:d4:e8:03:e9:46:10:e9:e2:b0:82:8b:8b:79:1e:81:1c:f6: 9c:49:19:2d:8c:06:f2:39:92:80:cb:53:1f:5b:37:d1:ff:96: 0c:89:6a:e8:7e:64:82:0e:8d:c8:55:8c:37:9f:43:17:ba:dc: cb:0a:e2:1b:62:64:f0:30:c3:21:9d:62:09:5e:47:09:e8:11: 5a:f6:f8:60:71:ee:40:23:53:dd:6b:2f:b4:32:34:ed:82:fc: 28:7c:cc:16:d4:c3:65:0b:87:cc:7f:7b:b5:a9:3f:e4:7d:15: ff:ba:8c:33:57:ad:29:6c:16:18:1f:7e:ca:21:eb:2a:8b:13: 1a:6e:b1:8b:bd:5d:97:dd:8f:ce:43:5a:c2:f7:03:8d:c9:dd: ac:06:e5:f4:bf:0d:4a:e9:2e:b4:f1:d8:b7:a4:61:43:f0:85: 3a:1a:a3:96 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE2MIwMD1A8fYGqYxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxODEyNDUxN1oXDTI4MDcyMTEyNDUxN1owLzEtMCsGA1UEAxMk MzM2ZGIwNjAtMjczYy00ZGE3LTg4YjYtNmY0N2M4ODMwNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu693WFOVs5FjdDsDqFfsOAuL47bmd8UaST0 aCvF8Q8Dape4OYViRErFQsFLNf8oAo5n3qERJOjLmYz2bC03BACeAkBk5j+mZ1+I f4IL0RL7Z3t7zF6wO5i7xh7xQcc4dXfSf25GS3U2GIklzPR/n3nkPLfIDq4szANL xkGFBL+sdiTviBwATS5Fp/p5hkZVMC39Ei42HlPfnLVitQgPocNBriTd4YRQzpEE 2ICmMw4Fy3GwdR/72AnT+jXMgA8JhS25CaQCt7CwpJ1xmH4lnZSqfhkWJh2oQBKv IqPamFIECoQigplWPEr0ZXUeV0fJTvKXJGzs9nQXwDP6RIQAFwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHWMXKPQg3OgKzuc33RZ8YeiaRSCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z MzZkYjA2MC0yNzNjLTRkYTctODhiNi02ZjQ3Yzg4MzA0NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzMzNmRiMDYwLTI3M2MtNGRhNy04 OGI2LTZmNDdjODgzMDQ3NC8zMzZkYjA2MC0yNzNjLTRkYTctODhiNi02ZjQ3Yzg4 MzA0NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCdoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALFUBeSgZHgf/48tm9b608 kv6+3wraa/eGDAyNavWAaEnpvv0DwF2yjwUywy41EN+yalT/6/U6o5I+8mpsEQH9 sXbrunplcEApqTjlWNucimMgOt6KuHDZSlH61OgD6UYQ6eKwgouLeR6BHPacSRkt jAbyOZKAy1MfWzfR/5YMiWrofmSCDo3IVYw3n0MXutzLCuIbYmTwMMMhnWIJXkcJ 6BFa9vhgce5AI1Pday+0MjTtgvwofMwW1MNlC4fMf3u1qT/kfRX/uowzV60pbBYY H37KIesqixMabrGLvV2X3Y/OQ1rC9wONyd2sBuX0vw1K6S608di3pGFD8IU6GqOW -----END CERTIFICATE-----Generated at Wed May 13 10:58:22 2026 by rpki-client