$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer File: 3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer (raw, json) Hash identifier: ZNYVs23LdWLQbYPVMVoO2u3C+bRtnrQyL9c+Bth2zSk= Subject key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DA5432C105F2B0F0C61C04840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 12:45:18 +0000 Certificate not after: Sun 30 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 14228 IP: 162.249.60.0/22 IP: 2620:d5:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:43:2c:10:5f:2b:0f:0c:61:c0:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 27 12:45:18 2026 GMT Not After : Jul 30 12:45:18 2028 GMT Subject: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:6a:65:62:35:d7:8e:80:65:e4:39:54:05: 54:07:9f:35:80:7d:1a:7f:73:72:97:43:40:5f:52: ab:5d:d6:66:8b:e1:90:da:e2:b6:ad:66:1f:51:25: 71:5a:b7:af:bc:f7:3f:88:8e:3f:a3:1f:cf:3a:6c: df:e0:4e:fe:88:7c:64:ea:96:1f:9b:5d:8b:2a:cd: 10:76:5f:1d:6e:03:6f:69:b0:f1:e3:bb:1a:fd:91: d1:ab:35:37:94:25:b9:06:a9:31:b8:6c:a5:b5:56: 79:ee:31:f5:10:c0:4b:82:47:2e:c3:e8:4a:7b:57: 13:c6:0c:52:c8:0e:12:04:dc:bc:ad:18:32:a2:e6: 85:84:bb:55:fb:55:b6:4a:85:9f:85:e7:a6:40:d1: ce:b6:bd:19:c2:d8:bd:94:ca:4b:01:19:e3:01:67: 3b:af:b9:a8:27:2b:d8:c0:3e:41:2b:28:79:df:f4: 6e:ed:89:42:86:6d:d6:ab:3b:72:0e:c2:c4:a6:8e: 61:76:60:97:b3:ff:91:c7:33:77:f3:75:10:b0:2a: 1a:a9:06:44:9d:0f:c0:0c:44:e5:f6:b4:75:e7:76: c7:1e:21:8f:29:8c:ab:af:be:4c:59:e2:07:6a:3e: b0:13:89:9c:8d:0c:7e:10:da:a9:82:37:52:61:f6: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.249.60.0/22 IPv6: 2620:d5:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:49:73:e2:34:1a:be:2a:2b:60:16:03:bf:f4:c7:f4:cc:43: 91:dd:f3:37:3a:bf:90:93:ee:f2:28:23:5a:cd:41:82:7e:3f: 5a:2b:c8:6b:27:df:1b:e9:95:1e:c5:87:f8:30:32:1a:85:cf: d5:15:3c:53:2a:10:cd:c1:ca:22:07:f3:73:97:91:2d:60:30: 1e:09:b2:66:77:8a:0d:eb:df:23:6b:3a:1a:dd:36:56:e8:c3: d7:30:90:a9:4c:79:6c:bc:8a:73:69:b4:c1:34:96:4f:2b:bf: e0:44:b2:88:5b:d1:ea:22:eb:bd:b8:5e:05:5e:fa:74:e5:21: 77:f6:76:25:31:1f:f3:04:0d:5a:2e:f9:92:9c:14:ec:43:ce: 4a:f5:75:e2:a6:44:90:b2:f8:8b:88:59:85:c7:2a:8b:d1:7d: 28:15:eb:a9:e1:57:6f:29:ae:a8:49:db:17:93:34:6f:e8:ae: d4:34:46:9e:5a:f0:d6:e0:38:7e:4d:fb:cf:ae:e4:02:1f:2b: 65:7e:2d:20:16:5a:0a:9e:c7:19:c2:fd:5f:f5:d6:a1:70:80: 35:ce:78:74:e3:11:26:9a:c9:35:9e:27:38:ad:6b:e5:e9:cb: 6d:a5:14:34:0b:52:90:59:d0:6a:82:14:71:f8:67:68:b2:82: 96:dd:d1:ab -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2lQywQXysPDGHASEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyNzEyNDUxOFoXDTI4MDczMDEyNDUxOFowLzEtMCsGA1UEAxMk M2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcRqZWI1146AZeQ5VAVUB581gH0af3Nyl0NA X1KrXdZmi+GQ2uK2rWYfUSVxWrevvPc/iI4/ox/POmzf4E7+iHxk6pYfm12LKs0Q dl8dbgNvabDx47sa/ZHRqzU3lCW5BqkxuGyltVZ57jH1EMBLgkcuw+hKe1cTxgxS yA4SBNy8rRgyouaFhLtV+1W2SoWfheemQNHOtr0Zwti9lMpLARnjAWc7r7moJyvY wD5BKyh53/Ru7YlChm3WqztyDsLEpo5hdmCXs/+RxzN383UQsCoaqQZEnQ/ADETl 9rR153bHHiGPKYyrr75MWeIHaj6wE4mcjQx+ENqpgjdSYfbjdQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPFA7TP6mfrmaMNCNwHCa0xqrjUoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z ZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzNlNjVjNjEwLWZhNDktNGQ3Yi1h MmU3LTY5MTI0ZjFlNWM4NS8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYx ZTVjODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAKi+TwwDwQCAAIwCQMHACYgANVAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI3lDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+SXPiNBq+KitgFgO/9Mf0zEOR 3fM3Or+Qk+7yKCNazUGCfj9aK8hrJ98b6ZUexYf4MDIahc/VFTxTKhDNwcoiB/Nz l5EtYDAeCbJmd4oN698jazoa3TZW6MPXMJCpTHlsvIpzabTBNJZPK7/gRLKIW9Hq Iuu9uF4FXvp05SF39nYlMR/zBA1aLvmSnBTsQ85K9XXipkSQsviLiFmFxyqL0X0o Feup4VdvKa6oSdsXkzRv6K7UNEaeWvDW4Dh+TfvPruQCHytlfi0gFloKnscZwv1f 9dahcIA1znh04xEmmsk1nic4rWvl6cttpRQ0C1KQWdBqghRx+GdosoKW3dGr -----END CERTIFICATE-----Generated at Wed May 13 05:24:01 2026 by rpki-client