$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer File: 5e2da88f-6029-42b9-b598-2623343a3150.cer (raw, json) Hash identifier: Kc91qSg15w3KjUxt+WcSGa44GpYpf6sbCgN16cffo0s= Subject key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E86ED69CAB2B91AE68AD9E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jul 2026 08:45:11 +0000 Certificate not after: Thu 19 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 68 AS: 79 AS: 550 AS: 1829 AS: 1839 IP: 128.165.0.0/16 IP: 130.55.0.0/16 IP: 138.98.0.0/16 IP: 141.111.0.0/16 IP: 192.12.184.0/24 IP: 192.12.208.0/24 IP: 192.43.188.0/24 IP: 192.52.70.0/24 IP: 192.65.95.0/24 IP: 204.121.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:ed:69:ca:b2:b9:1a:e6:8a:d9:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 17 08:45:11 2026 GMT Not After : Oct 19 08:45:11 2028 GMT Subject: CN=5e2da88f-6029-42b9-b598-2623343a3150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:ed:84:c3:2c:52:7e:e7:9a:5f:2a:d3:58: b9:52:29:da:4f:00:a0:0f:24:10:fb:f9:e2:1c:d5: e5:45:2f:8e:29:f3:43:e8:67:a6:67:b5:0c:6d:6a: 45:66:64:8d:15:f0:6b:51:61:a4:fe:4b:ec:12:61: 68:93:73:5d:09:2a:40:2c:89:fa:19:e2:de:aa:8f: 1f:b8:10:83:06:5a:f4:ec:0f:c6:33:e5:04:0f:a8: cd:d9:ca:9c:68:8a:1d:86:d9:07:09:3e:37:d5:41: a9:21:14:b9:6b:62:81:f4:ab:24:5e:d8:d9:2e:59: 72:41:43:f7:b4:fa:83:c7:3e:8f:45:02:ff:e5:87: 08:ef:7c:ec:b9:a8:83:d5:8c:e0:e3:31:d6:58:06: 80:a3:30:a6:6f:e3:79:5d:35:9b:33:e0:dd:1e:e0: d1:8a:7f:e4:08:81:0e:5b:73:19:85:b0:3d:37:43: c6:7d:3d:a0:a7:c9:73:f4:a6:3a:9a:15:e7:27:99: 6f:8c:d3:4a:5a:42:97:ac:d5:a0:ad:4e:1b:c1:e8: 6b:be:3f:83:1f:32:03:2c:69:88:12:04:fb:c3:78: b1:08:bc:79:c3:f4:a7:6d:f8:7e:99:7b:73:75:bd: 7a:de:4c:b3:26:aa:a1:8e:78:a4:fc:e5:d0:97:97: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.43.188.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 68 79 550 1829 1839 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8b:76:80:e3:53:04:ef:d6:ee:00:9a:7e:30:20:dd:ff:d7: 4f:ee:25:7a:52:9e:26:2d:c2:80:53:83:50:1a:60:0c:57:15: 5f:26:1b:55:38:4f:30:97:97:ff:68:87:08:fe:fb:0b:57:00: e8:57:6a:30:d5:1c:7d:c0:2a:46:da:ac:26:b3:4f:ab:cf:14: 7f:b7:a5:bc:80:8c:54:c4:73:5f:a0:f1:8f:fa:38:60:e9:49: 66:e2:ef:d6:0f:33:d9:49:95:b7:f0:f0:4f:17:0a:99:0b:79: e2:b2:1b:2e:34:c6:ab:4b:73:bf:0b:db:47:93:37:66:60:a2: 29:3e:76:d0:c4:72:50:54:2b:61:45:42:df:94:1f:47:6d:e0: 27:b5:d7:20:16:3d:18:74:c7:67:ea:cd:53:d0:bf:1d:14:9e: 20:9d:91:13:c1:25:fb:cc:c5:6e:02:fb:c1:c9:79:41:5e:e6: 81:e0:39:9d:49:c9:f8:99:7e:e4:6d:5a:55:2d:d8:17:24:bf: 58:c9:9a:8d:f9:f0:c3:b2:9f:8d:9d:6a:43:3b:02:69:29:da: 63:f6:38:f2:18:95:11:6c:8e:f1:cc:93:1e:ac:72:00:b3:78: 3e:8d:30:12:25:74:05:7a:e1:57:ca:81:0f:87:73:91:cf:f6: 15:7d:a7:3d -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWE6G7WnKsrka5orZ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxNzA4NDUxMVoXDTI4MTAxOTA4NDUxMVowLzEtMCsGA1UEAxMk NWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2EzMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16PthMMsUn7nml8q01i5UinaTwCgDyQQ+/ni HNXlRS+OKfND6GemZ7UMbWpFZmSNFfBrUWGk/kvsEmFok3NdCSpALIn6GeLeqo8f uBCDBlr07A/GM+UED6jN2cqcaIodhtkHCT431UGpIRS5a2KB9KskXtjZLllyQUP3 tPqDxz6PRQL/5YcI73zsuaiD1Yzg4zHWWAaAozCmb+N5XTWbM+DdHuDRin/kCIEO W3MZhbA9N0PGfT2gp8lz9KY6mhXnJ5lvjNNKWkKXrNWgrU4bwehrvj+DHzIDLGmI EgT7w3ixCLx5w/Snbfh+mXtzdb163kyzJqqhjnik/OXQl5dAzwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFHyyKIT90FsUjv2HNP2mE/rMOSawMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzVlMmRhODhmLTYwMjktNDJiOS1i NTk4LTI2MjMzNDNhMzE1MC81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQz YTMxNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MD0EAgABMDcDAwCApQMDAII3AwMAimIDAwCNbwMEAMAMuAMEAMAM 0AMEAMArvAMEAMA0RgMEAMBBXwMDAMx5MCcGCCsGAQUFBwEIAQH/BBgwFqAUMBIC AUQCAU8CAgImAgIHJQICBy8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlot2gONTBO/W7gCafjAg3f/XT+4l elKeJi3CgFODUBpgDFcVXyYbVThPMJeX/2iHCP77C1cA6FdqMNUcfcAqRtqsJrNP q88Uf7elvICMVMRzX6Dxj/o4YOlJZuLv1g8z2UmVt/DwTxcKmQt54rIbLjTGq0tz vwvbR5M3ZmCiKT520MRyUFQrYUVC35QfR23gJ7XXIBY9GHTHZ+rNU9C/HRSeIJ2R E8El+8zFbgL7wcl5QV7mgeA5nUnJ+Jl+5G1aVS3YFyS/WMmajfnww7KfjZ1qQzsC aSnaY/Y48hiVEWyO8cyTHqxyALN4Po0wEiV0BXrhV8qBD4dzkc/2FX2nPQ== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:59 2026 by rpki-client