$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer File: 98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer (raw, json) Hash identifier: hQLI8N2BVMbvH+IAW+cJMqn9alK/GAJT4brKf/CFUJs= Subject key identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E762D4E7E23DCEF393D8C8B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Jul 2026 08:45:11 +0000 Certificate not after: Fri 13 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 10631 IP: 131.96.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:2d:4e:7e:23:dc:ef:39:3d:8c:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 11 08:45:11 2026 GMT Not After : Oct 13 08:45:11 2028 GMT Subject: CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a6:31:f4:26:f6:c5:9c:48:b7:47:a7:50:ef: 59:46:07:3b:0c:4f:e0:73:bb:71:a9:0e:ba:af:d0: fe:e4:5c:dd:1c:63:d7:eb:5c:92:6a:19:d3:8b:c9: 33:45:d5:33:06:ec:bd:61:ca:62:6d:8c:cb:ce:ca: 20:df:90:26:a8:64:5b:33:f2:cb:1a:3d:37:5c:e4: b7:bb:09:c4:4e:a6:5d:b8:85:fc:69:24:08:b6:8f: 5b:12:7e:f0:8a:59:83:89:68:59:88:8a:be:92:d9: 7e:16:09:ee:15:b8:ec:e3:46:d9:62:10:20:d2:f6: f3:d7:92:a3:44:4c:0e:1e:fb:8e:11:8e:4f:b9:cf: 5b:98:c8:66:a5:d8:62:a0:fa:12:05:e6:ec:20:97: e7:1a:6f:14:3b:54:aa:28:2f:0a:3b:a5:41:10:e1: 0b:f6:d0:38:cf:d1:fb:ab:c3:88:53:91:ba:c7:c7: 63:42:20:eb:d5:59:c9:2b:a2:0e:18:b9:5d:c6:31: 25:12:39:87:a7:fb:5b:a9:64:b5:25:92:9e:cb:1e: 59:02:a0:ce:20:21:73:65:b6:90:84:33:39:c0:2f: a0:91:67:a0:dc:2a:c8:7e:a2:cb:6a:4c:d8:60:83: 65:be:cb:81:47:cb:b4:69:a9:5f:0e:d8:8e:f5:16: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 131.96.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10631 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a8:fb:3a:c4:fa:02:5c:37:2a:a7:c6:dc:55:bd:e4:75:37: 48:fe:bc:5a:72:9c:89:9d:07:cb:55:22:84:59:b7:f1:f0:31: bc:15:f7:34:9b:67:59:4b:54:a6:3d:2c:9e:82:10:bc:ea:df: 91:37:40:33:a4:4b:96:62:ed:f8:2c:5a:0b:19:9a:16:65:ac: a9:d0:8b:a4:ab:fd:d3:40:a5:49:cb:17:5e:44:1a:63:04:0a: 85:aa:20:29:6d:3a:52:9f:94:a2:f1:74:d6:15:77:f8:4f:1e: 2a:86:a5:db:f5:68:d4:f3:33:fa:82:10:c2:0b:82:1f:f6:c8: 9c:61:f7:bb:90:21:72:0d:0c:97:1e:6e:b6:2f:7f:a6:20:a9: 98:f4:d9:a5:d6:5e:e7:ec:87:4f:e8:2b:c1:96:3a:9f:cf:25: fa:2a:18:a9:2c:64:6e:03:60:07:65:2d:1f:d6:0b:8e:06:8b: 4e:b0:90:47:f7:52:81:80:cb:f0:64:2a:8c:e5:98:29:1d:f0: bf:58:bd:71:f2:03:d5:a0:6e:d9:0c:3b:c5:46:98:33:f4:56: d3:57:d4:ee:54:f1:05:ef:c9:8a:ea:64:61:e8:1d:2b:26:f6: 4e:61:b4:bb:f0:02:d1:02:38:21:5c:55:ff:ce:3b:25:a1:b3: 03:8e:42:00 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE52LU5+I9zvOT2MiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxMTA4NDUxMVoXDTI4MTAxMzA4NDUxMVowLzEtMCsGA1UEAxMk OThiMGU0YzMtMTY1My00OTdkLTgzYmEtOWQ4YjEwZTlmMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaYx9Cb2xZxIt0enUO9ZRgc7DE/gc7txqQ66 r9D+5FzdHGPX61ySahnTi8kzRdUzBuy9YcpibYzLzsog35AmqGRbM/LLGj03XOS3 uwnETqZduIX8aSQIto9bEn7wilmDiWhZiIq+ktl+FgnuFbjs40bZYhAg0vbz15Kj REwOHvuOEY5Puc9bmMhmpdhioPoSBebsIJfnGm8UO1SqKC8KO6VBEOEL9tA4z9H7 q8OIU5G6x8djQiDr1VnJK6IOGLldxjElEjmHp/tbqWS1JZKeyx5ZAqDOICFzZbaQ hDM5wC+gkWeg3CrIfqLLakzYYINlvsuBR8u0aalfDtiO9RZI3QIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFGFPvNkxJEKgV2IvxQoXsdw4ksmXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 OGIwZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhiMTBlOWYxYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzk4YjBlNGMzLTE2NTMtNDk3ZC04 M2JhLTlkOGIxMGU5ZjFhNC85OGIwZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhiMTBl OWYxYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCDYDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIp hzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCXqPs6xPoCXDcqp8bcVb3kdTdI/rxacpyJnQfLVSKEWbfx8DG8 Ffc0m2dZS1SmPSyeghC86t+RN0AzpEuWYu34LFoLGZoWZayp0Iukq/3TQKVJyxde RBpjBAqFqiApbTpSn5Si8XTWFXf4Tx4qhqXb9WjU8zP6ghDCC4If9sicYfe7kCFy DQyXHm62L3+mIKmY9Nml1l7n7IdP6CvBljqfzyX6KhipLGRuA2AHZS0f1guOBotO sJBH91KBgMvwZCqM5ZgpHfC/WL1x8gPVoG7ZDDvFRpgz9FbTV9TuVPEF78mK6mRh 6B0rJvZOYbS78ALRAjghXFX/zjslobMDjkIA -----END CERTIFICATE-----Generated at Fri Jul 24 00:27:19 2026 by rpki-client