$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer File: 4559e616-17ae-4214-9407-2e51c3be0fa4.cer (raw, json) Hash identifier: IpYRoVd0hgHUohlogdHDuSjzRIyBPdzueor0CNCKCJA= Subject key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E8B1D7163D5C37578D7631D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Jul 2026 20:45:12 +0000 Certificate not after: Fri 20 Oct 2028 20:45:12 +0000 Subordinate resources: IP: 23.165.232.0/24 IP: 2602:f9d4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:1d:71:63:d5:c3:75:78:d7:63:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 18 20:45:12 2026 GMT Not After : Oct 20 20:45:12 2028 GMT Subject: CN=4559e616-17ae-4214-9407-2e51c3be0fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:5b:7f:65:fe:ba:08:06:e1:a1:62:af:04: 1a:6a:ec:b5:bf:b3:91:36:f1:cc:ce:f6:f9:70:2d: 96:cd:b7:45:a3:fd:0f:dd:6d:d9:b9:e3:cf:bb:a3: 85:a1:5b:83:f5:9d:dc:0c:ad:a4:6a:c5:c0:0a:d0: 6a:0f:a6:e5:b0:81:99:ce:eb:e3:1e:a0:bc:84:a4: 0e:54:04:34:68:78:84:32:c2:26:a8:a3:f6:73:5f: 3d:83:56:9d:33:36:ed:f0:6b:f8:17:c0:83:9b:3c: c3:57:43:23:2b:10:90:a6:23:2d:6d:ec:1b:6c:27: 64:44:22:cf:9f:0f:0d:77:a4:ad:61:c1:23:ec:22: 38:31:c4:9a:8d:53:99:16:11:0c:80:e9:61:0a:6e: b0:9d:2c:fc:cb:0a:14:e1:27:a3:22:26:42:2f:1c: 39:a2:39:93:f3:70:dd:f0:d0:13:a3:7f:23:93:dc: 96:b0:3a:1b:63:a6:28:09:40:92:b7:5d:c0:ed:0d: a8:fc:66:fc:3b:56:7c:2d:db:71:7d:52:5a:c2:34: 1f:b1:56:13:13:76:95:64:ac:e6:07:22:63:c5:45: c3:25:78:bc:dd:1d:4f:78:e2:b9:20:6f:c4:08:e3: 0f:64:dc:d5:71:e8:19:3a:10:70:36:e0:8d:4e:66: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.232.0/24 IPv6: 2602:f9d4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:15:5e:95:65:1b:df:c6:69:58:90:85:37:78:4e:94:0c:c4: 97:5e:37:b6:a1:89:74:03:92:65:72:99:bf:de:3a:84:b5:5c: 4c:9c:4e:a0:7c:5b:54:ef:da:51:08:ef:d5:48:b7:d9:31:38: 3f:09:c4:cf:66:f0:28:c0:2c:f3:6b:a9:8c:8c:68:a3:a2:74: 8d:78:50:3e:51:99:bf:e0:16:6e:e5:d5:07:c9:a8:0a:6d:18: 30:f7:17:fe:d2:f7:17:e2:98:7b:26:0f:b8:b8:d3:96:8e:e4: 78:dd:30:3f:d3:69:3b:d6:fc:ac:df:69:3c:02:b2:12:ec:8c: 0c:7d:b0:3d:84:73:0c:ed:59:bd:65:99:bf:0e:53:19:60:13: b3:bb:a5:d1:22:71:30:94:74:25:9b:3f:e2:45:6b:6e:07:b7: af:10:58:e3:6b:33:fa:9b:cb:63:5c:8f:34:f1:a3:fa:b7:c9: 90:84:1e:bd:8a:9c:c8:61:69:7e:fc:a1:bc:02:bc:5a:4f:d2: 95:0c:4f:c7:83:95:7e:31:85:c5:b7:41:7f:61:c8:87:08:02: 98:d5:ac:7b:4d:ea:81:71:e4:98:10:95:40:3c:3f:af:4e:d2: 0d:a7:cb:6e:18:51:a8:4b:4b:1d:b0:f9:fc:2e:8f:97:4f:ff: 66:61:c1:cd -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE6LHXFj1cN1eNdjHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxODIwNDUxMloXDTI4MTAyMDIwNDUxMlowLzEtMCsGA1UEAxMk NDU1OWU2MTYtMTdhZS00MjE0LTk0MDctMmU1MWMzYmUwZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZxbf2X+uggG4aFirwQaauy1v7ORNvHMzvb5 cC2WzbdFo/0P3W3ZuePPu6OFoVuD9Z3cDK2kasXACtBqD6blsIGZzuvjHqC8hKQO VAQ0aHiEMsImqKP2c189g1adMzbt8Gv4F8CDmzzDV0MjKxCQpiMtbewbbCdkRCLP nw8Nd6StYcEj7CI4McSajVOZFhEMgOlhCm6wnSz8ywoU4SejIiZCLxw5ojmT83Dd 8NATo38jk9yWsDobY6YoCUCSt13A7Q2o/Gb8O1Z8LdtxfVJawjQfsVYTE3aVZKzm ByJjxUXDJXi83R1PeOK5IG/ECOMPZNzVcegZOhBwNuCNTmY46QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMfxKOinmmW1R5k9yu9ksdd7X4kPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 NTU5ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUxYzNiZTBmYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQ1NTllNjE2LTE3YWUtNDIxNC05 NDA3LTJlNTFjM2JlMGZhNC80NTU5ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUxYzNi ZTBmYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpegwDgQCAAIwCAMGACYC+dQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGYVXpVlG9/GaViQhTd4TpQMxJdeN7ahiXQDkmVymb/eOoS1XEycTqB8W1Tv2lEI 79VIt9kxOD8JxM9m8CjALPNrqYyMaKOidI14UD5Rmb/gFm7l1QfJqAptGDD3F/7S 9xfimHsmD7i405aO5HjdMD/TaTvW/KzfaTwCshLsjAx9sD2EcwztWb1lmb8OUxlg E7O7pdEicTCUdCWbP+JFa24Ht68QWONrM/qby2NcjzTxo/q3yZCEHr2KnMhhaX78 obwCvFpP0pUMT8eDlX4xhcW3QX9hyIcIApjVrHtN6oFx5JgQlUA8P69O0g2ny24Y UahLSx2w+fwuj5dP/2Zhwc0= -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:45 2026 by rpki-client