$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c8dbd8a-86b8-436e-b334-fc590e6d5e09.cer File: 7c8dbd8a-86b8-436e-b334-fc590e6d5e09.cer (raw, json) Hash identifier: nA+pjSN0zn2M/G1coojobwIUMzmlGc7Csydy2HgvZBA= Subject key identifier: 8A:79:89:38:9D:34:7A:6B:AE:66:4F:77:A0:3E:C3:2E:0A:8A:CE:21 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D222649148599AA5A1CE44100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c8dbd8a-86b8-436e-b334-fc590e6d5e09/7c8dbd8a-86b8-436e-b334-fc590e6d5e09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c8dbd8a-86b8-436e-b334-fc590e6d5e09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Mar 2026 13:36:12 +0000 Certificate not after: Tue 13 Jun 2028 13:36:12 +0000 Subordinate resources: IP: 206.209.216.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:26:49:14:85:99:aa:5a:1c:e4:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 11 13:36:12 2026 GMT Not After : Jun 13 13:36:12 2028 GMT Subject: CN=7c8dbd8a-86b8-436e-b334-fc590e6d5e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:3b:71:b6:76:a7:b6:19:19:4c:98:31:3a: 3b:23:3a:5e:f9:7c:1c:4e:70:de:30:19:5f:64:d1: ad:c2:ce:13:e7:c1:ee:fa:6f:3a:06:f3:31:85:e6: cd:12:9f:87:30:54:6a:b8:ca:42:ec:b4:78:00:5f: de:40:8e:1f:0c:7d:70:48:61:82:df:cc:32:ee:fe: 10:f9:69:d4:54:cb:4f:d3:ce:a7:7e:72:04:53:b0: 85:39:dc:fd:93:29:fb:5f:00:93:6a:b0:32:1d:ec: 29:8f:64:ae:c3:0d:3e:b2:c3:f6:83:d4:9d:6a:93: db:8a:11:7d:77:bb:5a:1c:f8:53:85:d0:ab:0c:45: d3:de:60:64:c8:ff:e3:dd:19:88:57:3e:e5:56:0f: 24:9a:c4:df:44:09:b2:1e:da:d1:04:8f:80:c6:5f: 81:27:6c:2a:d1:a1:85:cc:2f:79:99:f4:53:eb:21: d1:51:0d:62:4b:ad:dc:a8:ed:b1:41:84:e6:22:36: 1c:56:d6:87:6e:69:02:6e:e1:37:a0:c8:55:a0:be: 16:d2:01:fa:82:67:6d:6b:3a:a5:9b:cc:d3:56:34: 63:2b:22:3f:6d:48:6b:02:ef:41:d7:1a:a4:9d:a6: 31:50:f9:4c:20:21:5d:21:02:d9:31:88:f9:00:0a: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:89:38:9D:34:7A:6B:AE:66:4F:77:A0:3E:C3:2E:0A:8A:CE:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c8dbd8a-86b8-436e-b334-fc590e6d5e09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c8dbd8a-86b8-436e-b334-fc590e6d5e09/7c8dbd8a-86b8-436e-b334-fc590e6d5e09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 206.209.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c8:0e:01:5f:f3:91:54:3f:be:82:0e:38:7d:b1:9c:c8:f6: 4b:e3:e5:44:b3:72:ce:63:96:5a:5b:2b:6f:6f:a4:1e:7a:02: ac:6d:fe:1a:60:30:b6:ad:f6:bb:47:2d:42:eb:78:ee:46:38: 94:13:51:ec:d3:e7:2e:73:c1:93:8c:65:05:c9:21:99:2c:17: 2a:f1:c2:9d:24:04:46:60:1a:df:cd:c5:d1:5a:8f:12:59:6d: 84:d5:92:10:ee:1d:2f:f9:e9:0f:93:f2:a4:14:00:5f:b4:64: b2:ad:3d:94:44:77:77:5b:b9:56:34:8e:c2:ed:14:cd:45:f5: 40:50:9a:5d:06:22:5a:22:2f:48:dd:4f:ce:ff:bd:8d:d6:58: c4:f6:74:5f:1f:66:e1:ca:12:49:0f:bd:d9:75:e1:80:eb:95: 94:f3:95:58:f0:69:35:70:b9:25:7e:ea:24:0a:23:80:29:1e: d6:d6:48:90:b8:84:2b:eb:2a:52:9c:ee:ae:93:87:f3:55:d6: 33:6c:f1:fe:28:62:0b:4f:4f:ec:29:5c:89:2a:55:5c:88:8d: d1:c6:d5:bf:d7:17:26:84:37:06:2a:d7:2f:ae:46:58:0f:f6: 21:96:ce:cb:9d:9c:c4:f9:71:62:67:68:40:78:a9:d3:72:38: fb:ca:01:f7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0iJkkUhZmqWhzkQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDMxMTEzMzYxMloXDTI4MDYxMzEzMzYxMlowLzEtMCsGA1UEAxMk N2M4ZGJkOGEtODZiOC00MzZlLWIzMzQtZmM1OTBlNmQ1ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/M7cbZ2p7YZGUyYMTo7Izpe+XwcTnDeMBlf ZNGtws4T58Hu+m86BvMxhebNEp+HMFRquMpC7LR4AF/eQI4fDH1wSGGC38wy7v4Q +WnUVMtP086nfnIEU7CFOdz9kyn7XwCTarAyHewpj2Suww0+ssP2g9SdapPbihF9 d7taHPhThdCrDEXT3mBkyP/j3RmIVz7lVg8kmsTfRAmyHtrRBI+Axl+BJ2wq0aGF zC95mfRT6yHRUQ1iS63cqO2xQYTmIjYcVtaHbmkCbuE3oMhVoL4W0gH6gmdtazql m8zTVjRjKyI/bUhrAu9B1xqknaYxUPlMICFdIQLZMYj5AAqS6wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIp5iTidNHprrmZPd6A+wy4Kis4hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 YzhkYmQ4YS04NmI4LTQzNmUtYjMzNC1mYzU5MGU2ZDVlMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzdjOGRiZDhhLTg2YjgtNDM2ZS1i MzM0LWZjNTkwZTZkNWUwOS83YzhkYmQ4YS04NmI4LTQzNmUtYjMzNC1mYzU5MGU2 ZDVlMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADO0dgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfcgOAV/zkVQ/voIOOH2x nMj2S+PlRLNyzmOWWlsrb2+kHnoCrG3+GmAwtq32u0ctQut47kY4lBNR7NPnLnPB k4xlBckhmSwXKvHCnSQERmAa383F0VqPEllthNWSEO4dL/npD5PypBQAX7Rksq09 lER3d1u5VjSOwu0UzUX1QFCaXQYiWiIvSN1Pzv+9jdZYxPZ0Xx9m4coSSQ+92XXh gOuVlPOVWPBpNXC5JX7qJAojgCke1tZIkLiEK+sqUpzurpOH81XWM2zx/ihiC09P 7ClciSpVXIiN0cbVv9cXJoQ3BirXL65GWA/2IZbOy52cxPlxYmdoQHip03I4+8oB 9w== -----END CERTIFICATE-----Generated at Sat Mar 28 10:48:28 2026 by rpki-client