$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer File: 9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer (raw, json) Hash identifier: kb7hNSDtthJX4iySE/0089Rf7BLEaCLqUeUIqHMthIQ= Subject key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DCF236D9F7E9C4D45C717A5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 12:45:17 +0000 Certificate not after: Mon 14 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 23.133.148.0/24 IP: 2602:f709::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:23:6d:9f:7e:9c:4d:45:c7:17:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 12 12:45:17 2026 GMT Not After : Aug 14 12:45:17 2028 GMT Subject: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:16:a6:85:2a:6c:bc:ed:37:51:49:f1:a7: 1f:e1:f2:db:78:d2:53:ba:bd:2a:9e:a4:60:be:e3: 3a:45:c0:9f:8b:5c:79:3d:b8:c5:92:08:67:bd:74: 9b:be:81:bf:0c:9b:06:6f:d5:bf:04:f0:b0:15:10: b6:ae:c9:54:18:de:58:f8:29:a1:8d:fd:1b:81:d7: b2:ca:b9:24:c7:bb:2f:94:90:59:c4:4d:e6:ef:3f: 28:4f:ff:98:45:38:2c:92:ba:d5:06:8b:5c:6d:a9: 58:69:56:1a:04:66:52:89:3a:36:5e:66:76:76:ff: 4e:e5:cb:10:c3:62:8d:8d:75:3e:d9:50:78:4f:52: 11:d2:12:7e:b3:da:2b:cd:d3:77:4d:e4:b9:10:18: 00:67:00:8c:a3:10:e0:48:de:e8:a6:d7:87:d9:42: 61:8c:02:8f:b1:1b:92:2c:fb:af:4d:92:10:d3:6f: be:f3:05:e8:bc:9c:b7:f4:57:4e:f2:7f:8f:2e:7d: 1e:d6:13:b6:4b:f2:2a:d4:b4:d9:96:62:10:2a:62: 90:f3:84:96:0d:41:2b:7c:b7:0b:13:1c:0f:66:ff: 55:b3:1f:e3:e0:54:dd:91:3a:48:61:df:fa:61:63: 75:42:e1:91:09:3c:b7:5c:a9:c6:4e:e9:32:5a:59: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 IPv6: 2602:f709::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:70:1a:74:77:b1:a6:2f:f0:22:e5:2e:31:43:44:58:67:fa: 0c:79:90:c1:48:ef:87:72:b0:3a:fb:e4:51:05:61:0f:68:5c: 0d:aa:c0:36:cc:bf:23:3b:ed:6f:09:30:37:13:80:cb:96:2c: b1:10:5b:46:88:f0:d0:b2:7e:d3:a1:b0:03:e1:28:bf:ba:c9: 7b:02:61:8f:9b:46:5e:28:80:8c:f5:70:27:44:77:35:88:69: d6:f7:7c:88:35:dd:f4:c8:59:d3:43:a2:20:70:40:63:d2:89: 41:bd:f8:95:e0:82:f1:59:7b:b9:6e:5c:cf:af:57:e4:91:1a: 1d:4c:f4:72:6d:28:dc:ce:b2:fc:43:c6:bb:c8:e3:ff:ed:ed: 73:8b:80:0c:48:04:5d:9d:15:c0:4a:5d:66:7f:5e:3d:fd:51: 16:a1:15:e6:29:be:70:e7:4f:4e:00:ae:00:01:98:cc:b8:12: 9a:cb:cd:ce:eb:bc:8b:ed:00:b7:1a:b9:88:6a:47:69:7e:b9: f2:71:75:e8:3b:5f:bb:30:9f:75:87:d6:f6:fa:24:3a:3a:ac: 87:c4:f2:94:79:7a:a2:8a:a4:c9:ac:34:45:1b:94:fe:61:f8: c5:aa:7e:fa:e2:5c:94:fc:fc:22:6d:0d:44:aa:ba:be:a2:e7: 13:17:58:a7 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3PI22ffpxNRccXpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxMjEyNDUxN1oXDTI4MDgxNDEyNDUxN1owLzEtMCsGA1UEAxMk OWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvoWpoUqbLztN1FJ8acf4fLbeNJTur0qnqRg vuM6RcCfi1x5PbjFkghnvXSbvoG/DJsGb9W/BPCwFRC2rslUGN5Y+Cmhjf0bgdey yrkkx7svlJBZxE3m7z8oT/+YRTgskrrVBotcbalYaVYaBGZSiTo2XmZ2dv9O5csQ w2KNjXU+2VB4T1IR0hJ+s9orzdN3TeS5EBgAZwCMoxDgSN7opteH2UJhjAKPsRuS LPuvTZIQ02++8wXovJy39FdO8n+PLn0e1hO2S/Iq1LTZlmIQKmKQ84SWDUErfLcL ExwPZv9Vsx/j4FTdkTpIYd/6YWN1QuGRCTy3XKnGTukyWlkdOQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHYIU9S4qbA08jMeaIvclTDaDQaVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzlkZmJmNWQ3LWRkZmUtNGUyZS04 YTk1LTY4ZGVkNjQ5ODkxMy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0 OTg5MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhZQwDgQCAAIwCAMGACYC9wkAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AA1wGnR3saYv8CLlLjFDRFhn+gx5kMFI74dysDr75FEFYQ9oXA2qwDbMvyM77W8J MDcTgMuWLLEQW0aI8NCyftOhsAPhKL+6yXsCYY+bRl4ogIz1cCdEdzWIadb3fIg1 3fTIWdNDoiBwQGPSiUG9+JXggvFZe7luXM+vV+SRGh1M9HJtKNzOsvxDxrvI4//t 7XOLgAxIBF2dFcBKXWZ/Xj39URahFeYpvnDnT04ArgABmMy4EprLzc7rvIvtALca uYhqR2l+ufJxdeg7X7swn3WH1vb6JDo6rIfE8pR5eqKKpMmsNEUblP5h+MWqfvri XJT8/CJtDUSqur6i5xMXWKc= -----END CERTIFICATE-----Generated at Tue May 12 21:43:19 2026 by rpki-client