$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f.cer File: 42228b03-73da-4c1a-9825-832cf144e90f.cer (raw, json) Hash identifier: CBQbGtq1NQu18C1zNWaixGTNjNXMGZicelXHfSSdeXw= Subject key identifier: 41:AB:20:75:D8:31:52:AF:3C:69:51:E5:0F:88:26:A0:6A:15:DD:9B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E78F7FDD9CFC94C68A2C4A880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/42228b03-73da-4c1a-9825-832cf144e90f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jul 2026 08:45:11 +0000 Certificate not after: Sat 14 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 399622 IP: 2606:4940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:f7:fd:d9:cf:c9:4c:68:a2:c4:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 12 08:45:11 2026 GMT Not After : Oct 14 08:45:11 2028 GMT Subject: CN=42228b03-73da-4c1a-9825-832cf144e90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:c0:62:ce:25:c9:3a:60:63:da:6b:d7:14: 04:35:43:8f:61:80:e0:2a:04:7b:59:35:e3:a8:4e: 9d:27:f9:8a:47:24:b9:ee:fa:26:4a:0d:5f:2b:fc: df:5c:3f:53:ec:7f:9a:e5:9b:4c:5a:61:e1:7b:f9: 4a:6a:fb:e2:09:79:f5:bf:98:88:20:57:4c:55:5e: d2:e9:8a:d4:6b:cd:30:76:e2:15:d0:e1:54:ae:89: 62:0a:0b:32:70:f7:a7:a2:7b:01:b2:b0:36:90:a0: 3f:84:d4:ae:1f:29:5b:b6:7e:6c:72:a1:0b:ae:05: 62:ec:e0:75:0c:f5:e2:50:32:a4:c9:e8:00:e6:2d: ae:85:1d:7a:5b:85:1e:3d:c4:e1:f7:c6:fd:c6:db: b1:fb:4e:b7:cc:95:29:2f:a9:90:93:d1:ad:12:89: c1:4c:cd:00:8d:c9:0d:f3:8e:78:84:d3:f5:b1:0c: 51:d1:54:85:fa:c4:13:49:07:04:5a:a3:d1:5a:69: c0:7e:50:44:b7:d4:2f:5e:4e:9d:29:4f:61:5a:d3: ba:2f:34:11:98:3c:0f:d7:9d:1d:ac:7d:d1:c4:91: 55:58:39:ed:1c:b4:60:8d:08:d7:52:f5:a2:40:4f: 9b:0b:cf:2b:89:5f:3f:0e:e4:d9:8c:22:07:56:be: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AB:20:75:D8:31:52:AF:3C:69:51:E5:0F:88:26:A0:6A:15:DD:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/42228b03-73da-4c1a-9825-832cf144e90f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:4940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399622 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8c:1b:07:bc:28:6c:75:46:2b:36:11:02:4a:c2:bd:f7:d2: 8d:57:b6:0d:4a:2f:67:77:03:52:c7:e1:90:0b:fe:88:e1:6d: 42:94:ee:60:75:13:a2:ba:b7:18:f3:1b:35:36:33:7a:73:81: 18:f7:b1:9e:83:8a:f6:bb:32:45:96:f7:3d:39:ec:6f:54:96: 75:7d:98:59:d2:ec:fc:e5:9c:0d:f1:96:60:e6:93:bf:b3:3e: 07:34:eb:13:b4:98:f5:39:1c:84:ff:ab:a0:8a:d1:fb:94:bf: e3:01:b7:67:52:ca:2f:0d:ca:40:e1:78:0c:6a:42:22:b0:07: 67:e2:cb:89:a9:fd:b6:3b:4c:c5:08:9f:14:30:4a:11:b6:ae: ca:44:6e:27:df:04:20:12:e8:b5:10:47:3b:f1:cc:be:2c:d0: 86:83:87:ba:90:d3:94:bd:7d:68:07:85:5a:43:8a:58:ce:80: d5:2d:78:37:70:5e:a0:9d:08:32:0d:62:15:5a:d4:2a:e6:e7: 9e:a4:b0:29:be:aa:32:3c:d8:5f:3c:5b:8b:c3:43:23:8a:ec: 6b:65:fc:95:30:4a:a3:d4:0d:ff:18:b9:9a:e2:05:b7:68:37: ef:3f:dc:86:54:9e:5c:be:7b:2c:23:e4:7f:25:dc:90:fc:3e: 2a:09:67:d7 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE549/3Zz8lMaKLEqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxMjA4NDUxMVoXDTI4MTAxNDA4NDUxMVowLzEtMCsGA1UEAxMk NDIyMjhiMDMtNzNkYS00YzFhLTk4MjUtODMyY2YxNDRlOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLzAYs4lyTpgY9pr1xQENUOPYYDgKgR7WTXj qE6dJ/mKRyS57vomSg1fK/zfXD9T7H+a5ZtMWmHhe/lKavviCXn1v5iIIFdMVV7S 6YrUa80wduIV0OFUroliCgsycPenonsBsrA2kKA/hNSuHylbtn5scqELrgVi7OB1 DPXiUDKkyegA5i2uhR16W4UePcTh98b9xtux+063zJUpL6mQk9GtEonBTM0AjckN 8454hNP1sQxR0VSF+sQTSQcEWqPRWmnAflBEt9QvXk6dKU9hWtO6LzQRmDwP150d rH3RxJFVWDntHLRgjQjXUvWiQE+bC88riV8/DuTZjCIHVr4dywIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFEGrIHXYMVKvPGlR5Q+IJqBqFd2bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 MjIyOGIwMy03M2RhLTRjMWEtOTgyNS04MzJjZjE0NGU5MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQyMjI4YjAzLTczZGEtNGMxYS05 ODI1LTgzMmNmMTQ0ZTkwZi80MjIyOGIwMy03M2RhLTRjMWEtOTgyNS04MzJjZjE0 NGU5MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBklAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYZBjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB7jBsHvChsdUYrNhECSsK999KNV7YNSi9ndwNSx+GQC/6I 4W1ClO5gdROiurcY8xs1NjN6c4EY97Geg4r2uzJFlvc9OexvVJZ1fZhZ0uz85ZwN 8ZZg5pO/sz4HNOsTtJj1ORyE/6ugitH7lL/jAbdnUsovDcpA4XgMakIisAdn4suJ qf22O0zFCJ8UMEoRtq7KRG4n3wQgEui1EEc78cy+LNCGg4e6kNOUvX1oB4VaQ4pY zoDVLXg3cF6gnQgyDWIVWtQq5ueepLApvqoyPNhfPFuLw0MjiuxrZfyVMEqj1A3/ GLma4gW3aDfvP9yGVJ5cvnssI+R/JdyQ/D4qCWfX -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:17 2026 by rpki-client