$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d.cer File: 5435538b-fc51-4bec-ae5c-304b1aaa155d.cer (raw, json) Hash identifier: xlt/aEJ0UBFFCYtBSTtuTaWXw4CnJnkd74eZgKA9Z4o= Subject key identifier: 25:44:40:34:92:B6:70:84:02:62:7F:3A:77:3E:EF:50:C6:6C:93:FA Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DC98E1060ECF41AE174A0E9B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 May 2026 12:45:17 +0000 Certificate not after: Sat 12 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 5758 IP: 74.188.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:8e:10:60:ec:f4:1a:e1:74:a0:e9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 10 12:45:17 2026 GMT Not After : Aug 12 12:45:17 2028 GMT Subject: CN=5435538b-fc51-4bec-ae5c-304b1aaa155d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:2a:3e:5e:f8:b3:a0:54:ca:9f:31:32:55: 8d:33:a5:fe:43:d1:df:7b:21:57:df:a3:26:18:87: e0:3e:c8:88:48:13:e3:ba:24:b1:0f:21:ac:bf:a0: 51:f9:32:df:12:91:ae:40:6c:6e:c3:65:03:b1:b8: 71:1b:a7:bb:0c:3e:1d:b8:f4:b7:63:b0:f8:3e:db: 32:5d:cf:f1:b3:9a:d6:b4:c1:96:fd:d6:c9:6e:f2: 19:aa:f1:38:44:0b:b5:af:33:ca:3c:fc:9b:3d:28: 33:01:9d:f6:80:01:82:2a:6a:18:cc:f7:94:47:21: 8d:5a:28:78:d2:77:c1:4b:d2:0c:b6:f7:44:86:8c: ae:84:2c:b3:4f:07:60:eb:85:15:b1:4e:00:03:d8: 02:8a:38:0c:6d:aa:30:8a:7c:2a:89:bb:4f:7b:16: 4a:11:3a:14:b9:ed:d7:f2:a4:4e:dd:bf:2d:c0:4d: 7d:77:94:cd:5d:bb:07:32:fe:d0:65:77:84:5d:6a: e5:5b:4a:2c:20:6a:9a:97:38:23:d5:8c:67:96:55: 5f:18:fa:c9:cb:b3:15:c7:52:96:8f:bb:cc:bb:ed: 09:0a:0d:d4:a2:75:e1:40:da:de:a0:0e:30:a2:b0: 1d:41:2d:34:6f:0a:30:ef:4a:9e:14:64:aa:ef:ce: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:44:40:34:92:B6:70:84:02:62:7F:3A:77:3E:EF:50:C6:6C:93:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 74.188.128.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5758 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:83:92:73:a6:2c:2f:4f:e2:ca:81:c0:29:46:c7:f7:85:62: e6:51:03:a6:31:c5:13:88:2d:28:fd:e3:05:1e:fe:7e:16:12: a6:95:ce:9e:e5:cf:ee:f0:be:ea:36:3d:9f:7a:78:ff:20:17: 38:75:77:36:11:1e:fa:b6:22:cb:ca:31:f0:3f:5e:86:56:ae: be:36:a5:a2:f2:d9:5b:8a:0d:d6:68:d7:94:61:b5:3b:74:b3: b4:a4:2d:7d:1c:5e:20:78:d3:8d:ae:37:1a:95:23:00:72:1a: 76:5b:3e:88:2c:20:30:4b:56:d1:ff:a4:f9:44:cc:fe:b2:74: a2:f6:03:5b:4a:83:83:37:44:c9:50:c0:54:bf:a2:e3:b4:94: 77:d4:0c:8e:41:2d:55:26:21:6d:3f:47:88:c2:8b:40:49:dd: da:71:11:6f:a8:46:78:79:8c:bc:70:84:93:b8:6e:80:dd:64: 6c:08:97:f5:9a:c0:4f:2f:53:17:7d:00:e9:06:30:58:66:7f: 8a:55:b7:e7:72:25:01:fc:86:0b:3f:2a:ed:2a:aa:0e:4d:d7: 19:bf:39:a8:30:e2:b4:59:09:d5:c7:e2:6b:f2:89:34:a7:1d: 22:66:c6:35:73:a8:b0:06:78:04:67:bb:b5:87:04:4f:69:d6: f7:f9:df:bc -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE3JjhBg7PQa4XSg6bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxMDEyNDUxN1oXDTI4MDgxMjEyNDUxN1owLzEtMCsGA1UEAxMk NTQzNTUzOGItZmM1MS00YmVjLWFlNWMtMzA0YjFhYWExNTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA490qPl74s6BUyp8xMlWNM6X+Q9HfeyFX36Mm GIfgPsiISBPjuiSxDyGsv6BR+TLfEpGuQGxuw2UDsbhxG6e7DD4duPS3Y7D4Ptsy Xc/xs5rWtMGW/dbJbvIZqvE4RAu1rzPKPPybPSgzAZ32gAGCKmoYzPeURyGNWih4 0nfBS9IMtvdEhoyuhCyzTwdg64UVsU4AA9gCijgMbaowinwqibtPexZKEToUue3X 8qRO3b8twE19d5TNXbsHMv7QZXeEXWrlW0osIGqalzgj1YxnllVfGPrJy7MVx1KW j7vMu+0JCg3UonXhQNreoA4worAdQS00bwow70qeFGSq784qyQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFCVEQDSStnCEAmJ/Onc+71DGbJP6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 NDM1NTM4Yi1mYzUxLTRiZWMtYWU1Yy0zMDRiMWFhYTE1NWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzU0MzU1MzhiLWZjNTEtNGJlYy1h ZTVjLTMwNGIxYWFhMTU1ZC81NDM1NTM4Yi1mYzUxLTRiZWMtYWU1Yy0zMDRiMWFh YTE1NWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAZKvIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Fn4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKIOSc6YsL0/iyoHAKUbH94Vi5lEDpjHFE4gtKP3jBR7+fhYS ppXOnuXP7vC+6jY9n3p4/yAXOHV3NhEe+rYiy8ox8D9ehlauvjalovLZW4oN1mjX lGG1O3SztKQtfRxeIHjTja43GpUjAHIadls+iCwgMEtW0f+k+UTM/rJ0ovYDW0qD gzdEyVDAVL+i47SUd9QMjkEtVSYhbT9HiMKLQEnd2nERb6hGeHmMvHCEk7hugN1k bAiX9ZrATy9TF30A6QYwWGZ/ilW353IlAfyGCz8q7SqqDk3XGb85qDDitFkJ1cfi a/KJNKcdImbGNXOosAZ4BGe7tYcET2nW9/nfvA== -----END CERTIFICATE-----Generated at Wed May 13 12:45:24 2026 by rpki-client