$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.cer File: 99db0446-fe0e-41b5-bb4b-84fefa1ebf90.cer (raw, json) Hash identifier: xHP6LdmccPCxqYLxymwa2Fj7jMbEOUnZAM/DS8seMeM= Subject key identifier: 1C:D6:69:AB:DF:1D:06:9F:0A:43:4C:80:25:2C:B5:A4:07:93:F6:0F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DB603460879E6E3D56E7F1F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 May 2026 12:45:17 +0000 Certificate not after: Sat 05 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 14019 AS: 14267 IP: 198.73.105.0 -- 198.73.108.255 IP: 198.73.192.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b6:03:46:08:79:e6:e3:d5:6e:7f:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 3 12:45:17 2026 GMT Not After : Aug 5 12:45:17 2028 GMT Subject: CN=99db0446-fe0e-41b5-bb4b-84fefa1ebf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:83:b3:d9:2c:65:f2:9d:d5:90:00:df:8d: dc:3d:1a:81:4d:a8:b0:53:6e:57:80:52:c0:bf:67: ed:09:85:c5:98:4c:52:5e:c2:d8:6d:19:97:2e:fd: d0:22:d3:27:d0:75:b9:6d:45:b9:c1:fc:64:16:2a: 75:af:73:ec:72:9a:dc:6c:7a:a1:d9:0d:d9:b4:a3: 6a:f1:15:21:a9:b8:38:eb:e1:10:3d:7a:08:71:46: 3c:61:92:58:7b:a2:35:ad:f6:b1:dc:ea:38:55:68: 20:55:57:ba:b2:d8:68:f7:14:77:19:17:b6:94:1a: b6:66:b2:fd:48:dc:08:1e:6d:f6:28:98:55:f2:1f: 40:1a:64:ce:6d:3f:ea:97:e0:0a:36:f7:e5:df:5c: fb:74:83:56:0d:c7:43:d1:4a:78:1e:b1:d1:d3:80: 67:36:5a:27:65:b9:ab:5b:04:07:e4:27:e2:b4:ec: d9:4f:9e:24:43:27:ff:ca:59:44:28:66:8b:5f:21: cf:c1:81:71:a6:9f:30:5c:09:17:24:fd:f7:59:43: 9b:ea:a6:01:74:ce:c8:b9:fd:d6:5e:a6:d2:c8:c0: 67:eb:8d:eb:6e:41:bd:bf:4d:4c:9b:2c:1b:b1:24: 2b:74:ce:3f:4c:83:0c:b6:85:f1:1c:8f:ad:82:63: c1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D6:69:AB:DF:1D:06:9F:0A:43:4C:80:25:2C:B5:A4:07:93:F6:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.73.105.0-198.73.108.255 198.73.192.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14019 14267 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c9:dc:dd:30:9f:0b:ec:60:b0:2c:4f:b6:73:d9:f0:85:1d: 9e:f6:07:95:3d:ec:a1:5d:cd:39:48:90:5a:d1:cc:a2:e4:c5: 38:4c:a1:88:67:7d:db:2b:f0:b8:14:1d:8e:b3:16:17:55:cf: 64:cd:0b:35:e0:52:2e:17:dd:56:26:3b:48:67:3f:1f:01:c9: da:aa:03:f9:bc:20:38:df:73:3d:ea:a9:bb:df:a3:ac:4b:e9: a4:02:09:70:23:dc:43:1f:d2:93:94:a9:35:ca:77:ee:1e:36: c4:58:3a:f8:29:70:04:2a:75:0f:2b:d7:e6:a1:be:22:22:3a: 83:a0:30:30:f6:de:2d:5c:8f:82:5f:b8:33:39:40:c0:e2:b4: 0a:e6:76:e9:c5:3e:d5:80:a1:c8:06:e3:69:8f:b3:2d:0d:43: 05:87:74:de:8d:b1:2f:6c:6d:02:bc:a6:5b:b3:40:a6:d6:1f: e0:ab:14:ee:2f:1b:11:17:7b:fd:d7:8a:6d:d9:0b:40:6b:b8: de:88:67:81:7a:fc:ff:48:8c:ea:6f:30:33:34:d4:14:2c:bb: 08:e2:52:1f:77:bb:ba:bc:6e:1c:80:81:15:00:38:71:68:dd: 29:07:94:99:25:c1:70:89:09:46:24:78:ab:08:5d:fc:91:e8: 63:20:5c:ab -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE22A0YIeebj1W5/HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUwMzEyNDUxN1oXDTI4MDgwNTEyNDUxN1owLzEtMCsGA1UEAxMk OTlkYjA0NDYtZmUwZS00MWI1LWJiNGItODRmZWZhMWViZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrSDs9ksZfKd1ZAA343cPRqBTaiwU25XgFLA v2ftCYXFmExSXsLYbRmXLv3QItMn0HW5bUW5wfxkFip1r3PscprcbHqh2Q3ZtKNq 8RUhqbg46+EQPXoIcUY8YZJYe6I1rfax3Oo4VWggVVe6stho9xR3GRe2lBq2ZrL9 SNwIHm32KJhV8h9AGmTObT/ql+AKNvfl31z7dINWDcdD0Up4HrHR04BnNlonZbmr WwQH5CfitOzZT54kQyf/yllEKGaLXyHPwYFxpp8wXAkXJP33WUOb6qYBdM7Iuf3W XqbSyMBn643rbkG9v01MmywbsSQrdM4/TIMMtoXxHI+tgmPBKQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBzWaavfHQafCkNMgCUstaQHk/YPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 OWRiMDQ0Ni1mZTBlLTQxYjUtYmI0Yi04NGZlZmExZWJmOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzk5ZGIwNDQ2LWZlMGUtNDFiNS1i YjRiLTg0ZmVmYTFlYmY5MC85OWRiMDQ0Ni1mZTBlLTQxYjUtYmI0Yi04NGZlZmEx ZWJmOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAMZJaQMEAMZJbAMEBMZJwDAdBggrBgEFBQcB CAEB/wQOMAygCjAIAgI2wwICN7swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWcnc3TCfC+xgsCxPtnPZ8IUd nvYHlT3soV3NOUiQWtHMouTFOEyhiGd92yvwuBQdjrMWF1XPZM0LNeBSLhfdViY7 SGc/HwHJ2qoD+bwgON9zPeqpu9+jrEvppAIJcCPcQx/Sk5SpNcp37h42xFg6+Clw BCp1DyvX5qG+IiI6g6AwMPbeLVyPgl+4MzlAwOK0CuZ26cU+1YChyAbjaY+zLQ1D BYd03o2xL2xtArymW7NAptYf4KsU7i8bERd7/deKbdkLQGu43ohngXr8/0iM6m8w MzTUFCy7COJSH3e7urxuHICBFQA4cWjdKQeUmSXBcIkJRiR4qwhd/JHoYyBcqw== -----END CERTIFICATE-----Generated at Wed May 13 03:08:53 2026 by rpki-client