$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.cer File: 787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.cer (raw, json) Hash identifier: mXsk8fv4DFdfWHwxwnWwGj7pDC4fSNENa9cj/zZbm/Q= Subject key identifier: 44:57:A7:4B:AE:BA:15:31:41:97:8F:49:C6:B8:A4:3B:05:18:F1:40 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D9CE31D732AA2B88AD1065B5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Apr 2026 12:45:17 +0000 Certificate not after: Thu 27 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 398784 IP: 204.52.238.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:e3:1d:73:2a:a2:b8:8a:d1:06:5b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 24 12:45:17 2026 GMT Not After : Jul 27 12:45:17 2028 GMT Subject: CN=787ecefc-952e-4f0a-9180-3f9d1ecd4ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:62:34:c5:c7:6a:a5:f2:3f:bd:a0:07:83: 0c:4c:40:66:32:43:4e:88:bb:ab:f0:91:2d:6f:48: 4e:9e:7e:56:87:01:0b:75:fd:a7:0e:85:3a:80:a2: a3:7f:93:b7:84:41:b8:78:a5:b0:c1:ea:87:84:bc: 30:da:9c:2d:77:c3:b8:a7:06:ed:4d:d6:ff:e4:af: 58:5c:d6:3f:5a:ef:27:fd:fb:9e:a7:03:70:2a:49: 34:5b:73:ec:9a:3c:1b:d2:2a:eb:bc:4c:b5:d7:4b: 71:8a:ff:b7:70:5b:db:9c:06:44:d0:38:3c:82:63: d7:1e:3b:48:5d:d6:f9:3b:b9:34:37:36:91:05:a7: 72:a4:d2:1b:ac:04:0e:58:7a:d8:ec:8e:3c:b5:2c: 2a:2a:15:47:f4:d4:95:29:37:98:b3:80:16:d9:01: 0f:f0:60:ff:27:e5:18:d4:6d:a1:4b:c7:c6:74:09: b3:71:1f:73:c9:7f:00:df:a4:d3:26:6d:bc:02:b6: d4:7d:ad:b9:5a:37:f7:f6:10:22:81:fd:71:0e:06: 02:4e:4d:52:0d:87:11:58:e3:10:33:c3:8b:9c:55: d3:94:19:15:91:91:60:b9:49:0f:f9:fe:1a:44:df: ab:ce:b5:df:20:df:14:1b:a0:07:cb:83:99:5d:31: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:A7:4B:AE:BA:15:31:41:97:8F:49:C6:B8:A4:3B:05:18:F1:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.52.238.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398784 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b3:20:8a:15:ce:8c:30:4e:db:0e:b0:6c:4e:2e:b9:3b:a3: 1d:f2:b5:8d:61:25:bc:a6:91:a1:f5:c8:72:f4:0e:b5:86:b8: b1:2c:87:1e:df:3c:9b:3a:cf:aa:18:fe:65:8b:3e:f6:4e:e5: ee:db:a9:22:6e:f6:56:8d:3c:a9:ca:97:36:56:2f:85:8e:db: 97:fa:a0:6a:7c:b9:88:5f:e5:5a:03:7f:cd:2f:0e:59:68:dd: 92:85:52:69:48:5a:0a:3e:9f:36:4b:66:fc:37:01:5e:85:8c: b2:3f:b9:7f:4d:a8:68:3d:c5:f6:48:2b:3f:6d:9c:17:33:8e: af:d2:0a:16:5b:08:30:3d:0a:b6:b3:85:8f:54:01:b1:7d:e3: 4d:dd:9c:d4:9b:d8:1e:7d:6c:df:66:90:7b:7c:c8:fa:a6:0e: 0d:73:eb:67:89:4d:6a:17:69:e1:d7:7c:7e:b8:1a:5e:f0:d8: 88:e9:31:2d:1e:9c:3d:34:99:e0:a1:f2:68:8f:61:20:cc:67: a3:18:de:bd:f9:40:be:10:f4:8b:18:d5:e0:1e:f4:ca:bc:b7: 05:6f:58:9c:85:80:17:fa:59:df:98:4a:be:c5:16:42:f1:be: 45:d0:cc:fe:8d:6c:96:f9:bb:82:c2:0c:1c:0c:57:c7:b5:99: 46:bb:ae:30 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2c4x1zKqK4itEGW14wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyNDEyNDUxN1oXDTI4MDcyNzEyNDUxN1owLzEtMCsGA1UEAxMk Nzg3ZWNlZmMtOTUyZS00ZjBhLTkxODAtM2Y5ZDFlY2Q0ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ARiNMXHaqXyP72gB4MMTEBmMkNOiLur8JEt b0hOnn5WhwELdf2nDoU6gKKjf5O3hEG4eKWwweqHhLww2pwtd8O4pwbtTdb/5K9Y XNY/Wu8n/fuepwNwKkk0W3Psmjwb0irrvEy110txiv+3cFvbnAZE0Dg8gmPXHjtI Xdb5O7k0NzaRBadypNIbrAQOWHrY7I48tSwqKhVH9NSVKTeYs4AW2QEP8GD/J+UY 1G2hS8fGdAmzcR9zyX8A36TTJm28ArbUfa25Wjf39hAigf1xDgYCTk1SDYcRWOMQ M8OLnFXTlBkVkZFguUkP+f4aRN+rzrXfIN8UG6AHy4OZXTHMFQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFERXp0uuuhUxQZePSca4pDsFGPFAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 ODdlY2VmYy05NTJlLTRmMGEtOTE4MC0zZjlkMWVjZDRmZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc4N2VjZWZjLTk1MmUtNGYwYS05 MTgwLTNmOWQxZWNkNGZmMy83ODdlY2VmYy05NTJlLTRmMGEtOTE4MC0zZjlkMWVj ZDRmZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMNO4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhXAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADKzIIoVzowwTtsOsGxOLrk7ox3ytY1hJbymkaH1yHL0DrWG uLEshx7fPJs6z6oY/mWLPvZO5e7bqSJu9laNPKnKlzZWL4WO25f6oGp8uYhf5VoD f80vDllo3ZKFUmlIWgo+nzZLZvw3AV6FjLI/uX9NqGg9xfZIKz9tnBczjq/SChZb CDA9CrazhY9UAbF9403dnNSb2B59bN9mkHt8yPqmDg1z62eJTWoXaeHXfH64Gl7w 2IjpMS0enD00meCh8miPYSDMZ6MY3r35QL4Q9IsY1eAe9Mq8twVvWJyFgBf6Wd+Y Sr7FFkLxvkXQzP6NbJb5u4LCDBwMV8e1mUa7rjA= -----END CERTIFICATE-----Generated at Wed May 13 03:49:30 2026 by rpki-client