$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer File: 68e273c1-e39f-464b-8c1f-b45c8df2b148.cer (raw, json) Hash identifier: FBWDrsjML8Z4gHy/t1zOVPMNVa+XKF1xhmQlJHu7kqs= Subject key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E41224F66F9D31EB7AB25C280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Jun 2026 08:45:11 +0000 Certificate not after: Sun 24 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 26886 IP: 23.167.136.0/24 IP: 2607:82c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:22:4f:66:f9:d3:1e:b7:ab:25:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 22 08:45:11 2026 GMT Not After : Sep 24 08:45:11 2028 GMT Subject: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:2e:bc:f8:3f:9d:02:cb:b1:e0:bf:f1:7f: 73:7c:17:93:22:33:7e:0c:9a:5a:92:b7:f5:2c:35: e8:35:df:2b:4b:dd:67:1d:ab:9d:b4:f8:96:4e:cd: 19:2d:97:d9:01:50:7d:31:fa:3f:30:2e:1c:31:9f: 73:a8:94:36:4b:09:44:1b:ea:6a:87:52:5c:ab:49: ef:fc:96:98:35:ec:30:16:67:a5:9a:64:79:20:c1: e4:a7:ed:2e:64:c5:76:f1:89:de:4d:0e:83:b3:87: 7b:9a:d4:cc:81:20:94:f3:a1:85:7c:94:2f:c5:73: e7:3d:77:89:90:11:5e:4c:bd:b4:be:d8:05:0d:59: 0a:c6:28:e8:c1:f8:c8:b2:28:65:5a:db:21:15:7e: 39:6a:c3:85:0f:ea:a4:97:e0:c3:88:fb:4b:b0:49: f8:7d:ce:9e:b5:de:3e:30:ba:43:c7:e4:c7:f1:85: 7a:43:d9:42:d7:51:fd:da:24:3b:b1:e5:05:f8:f7: 49:7b:61:b4:bf:fc:65:f3:6a:9d:a2:1d:6b:01:1d: 72:86:3f:5e:d4:f8:a5:47:8c:07:74:6a:f6:9f:33: 7c:00:b9:1e:40:3b:ee:db:23:b8:70:ad:29:5f:7f: c3:0f:f2:c9:c5:27:91:57:d1:3c:e1:15:9f:90:1a: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.167.136.0/24 IPv6: 2607:82c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26886 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:90:7f:bc:90:46:ec:d3:62:bd:db:48:07:30:13:5f:92:fe: 32:64:1d:38:bb:0d:50:0e:04:c0:1a:83:bf:86:ba:6b:e5:ac: b2:d5:73:6b:ea:7a:b8:57:da:bf:db:8c:96:5b:ad:0a:b2:2c: 3f:79:bf:2a:a5:c9:40:f0:bd:4e:3d:3a:41:10:0d:b9:7a:6f: 0a:9d:ed:3c:49:70:60:cd:70:4a:b0:08:7b:1a:52:d4:c9:70: 38:2f:77:de:a6:cf:9e:ee:31:de:5d:ac:5c:e4:12:08:53:6a: e2:21:9d:c9:5c:fd:f6:16:00:18:a9:1d:15:04:6a:5f:29:98: 09:96:8e:21:53:5b:83:fd:7d:ab:17:f6:fb:ee:46:ac:24:67: 48:4a:22:bc:05:4a:a0:5a:0b:20:1f:bf:52:93:d7:31:2d:1e: 7d:36:0e:fa:3d:e0:10:24:7a:5b:38:20:c4:af:b8:5b:97:05: 0a:89:f3:bd:72:77:c5:ff:6b:f8:b4:71:0a:c1:8e:92:bf:62: c0:d2:88:77:da:dd:12:c8:69:12:52:c2:fb:57:de:c4:f5:a0: 96:23:e3:51:f0:f8:ac:60:17:11:21:08:45:d1:54:f2:4e:d0: 85:77:a6:26:4c:9c:14:79:6f:e9:b4:b1:27:98:0d:7b:d9:7e: d2:f1:71:86 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE5BIk9m+dMet6slwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYyMjA4NDUxMVoXDTI4MDkyNDA4NDUxMVowLzEtMCsGA1UEAxMk NjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJiMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2UuvPg/nQLLseC/8X9zfBeTIjN+DJpakrf1 LDXoNd8rS91nHaudtPiWTs0ZLZfZAVB9Mfo/MC4cMZ9zqJQ2SwlEG+pqh1Jcq0nv /JaYNewwFmelmmR5IMHkp+0uZMV28YneTQ6Ds4d7mtTMgSCU86GFfJQvxXPnPXeJ kBFeTL20vtgFDVkKxijowfjIsihlWtshFX45asOFD+qkl+DDiPtLsEn4fc6etd4+ MLpDx+TH8YV6Q9lC11H92iQ7seUF+PdJe2G0v/xl82qdoh1rAR1yhj9e1PilR4wH dGr2nzN8ALkeQDvu2yO4cK0pX3/DD/LJxSeRV9E84RWfkBou7wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFE0vi31RndERAVU7cxvbmnq+Yr+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY4ZTI3M2MxLWUzOWYtNDY0Yi04 YzFmLWI0NWM4ZGYyYjE0OC82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRm MmIxNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXp4gwDQQCAAIwBwMFACYHgsAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICaQYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK5B/vJBG7NNivdtIBzATX5L+MmQd OLsNUA4EwBqDv4a6a+WsstVza+p6uFfav9uMllutCrIsP3m/KqXJQPC9Tj06QRAN uXpvCp3tPElwYM1wSrAIexpS1MlwOC933qbPnu4x3l2sXOQSCFNq4iGdyVz99hYA GKkdFQRqXymYCZaOIVNbg/19qxf2++5GrCRnSEoivAVKoFoLIB+/UpPXMS0efTYO +j3gECR6WzggxK+4W5cFConzvXJ3xf9r+LRxCsGOkr9iwNKId9rdEshpElLC+1fe xPWgliPjUfD4rGAXESEIRdFU8k7QhXemJkycFHlv6bSxJ5gNe9l+0vFxhg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:43 2026 by rpki-client