$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer File: 34247a70-c93d-4065-9548-762da5a386ba.cer (raw, json) Hash identifier: 60kJ8YwNNlYimdcB9lsHvHR7XYX9n0wL2FnwCtF8M10= Subject key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DB038479C5C1AECFA16B27000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 May 2026 10:57:14 +0000 Certificate not after: Sun 30 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 40072 AS: 402470 IP: 72.162.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:38:47:9c:5c:1a:ec:fa:16:b2:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 1 10:57:14 2026 GMT Not After : Jul 30 00:45:17 2028 GMT Subject: CN=34247a70-c93d-4065-9548-762da5a386ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:fd:f7:4f:3c:f4:f7:6a:a3:7b:c9:be:7f: 0a:b7:a2:c2:9b:5f:2e:3d:e4:3d:60:2f:b7:18:88: e8:2a:a1:f3:30:11:9e:e1:9a:cc:d5:2d:7d:9a:48: 6d:3a:1a:f0:26:5e:d3:0d:53:be:b2:65:73:bd:c0: 5b:34:af:27:0a:00:4d:04:05:93:e1:d5:ff:81:67: 6d:df:fa:6f:76:eb:60:e8:55:61:24:be:6f:d3:88: 57:3c:5a:f3:32:7b:26:03:6b:3a:e7:a1:26:08:cf: b0:16:ae:69:43:eb:7d:8f:d9:12:4e:f9:ad:6b:b2: 6f:08:70:f3:5e:79:59:84:a0:64:c7:6d:bf:8e:8f: a6:ec:32:eb:00:3b:f0:26:1c:23:fe:9e:cc:91:cb: cc:94:c8:08:93:5b:6b:7b:b8:ab:48:a6:ca:56:f0: 38:42:bd:a8:50:ac:18:0d:43:46:d5:7a:f2:5f:93: e7:b8:c3:c1:b5:bb:39:43:2d:dc:28:e6:bc:f9:6e: 20:f3:e5:c0:5f:2e:76:1b:53:5f:89:17:9a:cb:af: 75:0a:32:b7:b9:8f:92:31:e1:cd:b7:25:f7:11:85: 86:14:24:81:15:d6:dc:cd:2e:dd:93:fd:92:e8:08: 46:a6:f6:86:d4:0f:b0:e1:f5:09:b4:e5:f6:98:77: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 72.162.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40072 402470 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:37:5e:cd:92:22:4c:3a:45:80:b4:43:11:66:53:51:f8:1c: ec:1e:4e:fa:96:40:f7:c4:04:0e:09:12:5e:f7:58:e2:5c:0d: 2c:8d:1a:7a:be:05:8e:be:15:bd:80:d3:b1:b3:3d:06:9f:81: e4:77:9d:73:43:dc:3d:41:b4:dd:50:b6:b1:f0:94:5c:ca:a6: 32:55:74:13:51:e5:2a:cd:5e:f1:6d:c9:a0:cc:71:d4:2f:2e: 7c:0e:23:6c:18:b7:50:a6:02:f3:9c:22:6b:54:34:46:8c:c1: e9:a6:0a:3f:96:f5:fe:8a:2f:ce:45:aa:53:79:94:ff:a8:d6: a2:f0:d2:73:50:bc:25:37:37:6f:1e:d5:27:8a:0a:b8:3e:13: 5c:b6:77:c7:6c:be:ae:94:ff:d9:3b:36:0d:a6:d6:3e:9b:1c: f3:77:2a:d4:9b:36:23:96:bb:b9:ee:11:61:f3:d7:e9:d9:7e: 11:27:15:c9:74:01:6c:e2:f8:b7:e0:fc:61:1f:1b:fa:3a:a5: b7:32:85:60:71:e8:13:6a:09:9d:24:8b:e4:3a:f8:bd:8b:0f: 78:3f:f3:d9:1e:6b:43:0f:f9:8a:18:c3:8c:7d:ec:2c:33:40: bc:2d:80:e6:a0:bf:fe:ef:77:e7:fa:8b:56:fe:02:cd:ac:9f: fd:97:f4:fc -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWE2wOEecXBrs+haycAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUwMTEwNTcxNFoXDTI4MDczMDAwNDUxN1owLzEtMCsGA1UEAxMk MzQyNDdhNzAtYzkzZC00MDY1LTk1NDgtNzYyZGE1YTM4NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliz990889Pdqo3vJvn8Kt6LCm18uPeQ9YC+3 GIjoKqHzMBGe4ZrM1S19mkhtOhrwJl7TDVO+smVzvcBbNK8nCgBNBAWT4dX/gWdt 3/pvdutg6FVhJL5v04hXPFrzMnsmA2s656EmCM+wFq5pQ+t9j9kSTvmta7JvCHDz XnlZhKBkx22/jo+m7DLrADvwJhwj/p7MkcvMlMgIk1tre7irSKbKVvA4Qr2oUKwY DUNG1XryX5PnuMPBtbs5Qy3cKOa8+W4g8+XAXy52G1NfiReay691CjK3uY+SMeHN tyX3EYWGFCSBFdbczS7dk/2S6AhGpvaG1A+w4fUJtOX2mHevmwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFKbBG9a3JVrQpMGbn/eFItGTYUmCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z NDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVhMzg2YmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM0MjQ3YTcwLWM5M2QtNDA2NS05 NTQ4LTc2MmRhNWEzODZiYS8zNDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVh Mzg2YmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwBIojAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA nIgCAwYkJjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBmN17NkiJMOkWAtEMRZlNR+BzsHk76lkD3xAQOCRJe 91jiXA0sjRp6vgWOvhW9gNOxsz0Gn4Hkd51zQ9w9QbTdULax8JRcyqYyVXQTUeUq zV7xbcmgzHHULy58DiNsGLdQpgLznCJrVDRGjMHppgo/lvX+ii/ORapTeZT/qNai 8NJzULwlNzdvHtUnigq4PhNctnfHbL6ulP/ZOzYNptY+mxzzdyrUmzYjlru57hFh 89fp2X4RJxXJdAFs4vi34PxhHxv6OqW3MoVgcegTagmdJIvkOvi9iw94P/PZHmtD D/mKGMOMfewsM0C8LYDmoL/+73fn+otW/gLNrJ/9l/T8 -----END CERTIFICATE-----Generated at Wed May 13 11:41:24 2026 by rpki-client