$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer File: a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer (raw, json) Hash identifier: yudR9pqgTnRxbkagxuq7G1v1rC3QViVrLl1e4fN0dd0= Subject key identifier: 0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DBB98A5F4BF02493B15305B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 12:45:18 +0000 Certificate not after: Mon 07 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 40939 IP: 64.6.44.0/23 IP: 2602:f9f8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:98:a5:f4:bf:02:49:3b:15:30:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 5 12:45:18 2026 GMT Not After : Aug 7 12:45:18 2028 GMT Subject: CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:2c:57:95:9b:d0:b6:b0:05:da:1c:d8:96: d9:1c:23:76:54:3c:b4:3f:77:db:a8:3f:a0:3c:e2: 0e:93:2a:f0:02:0b:8b:d1:a4:68:72:63:ba:97:7b: c9:6f:d7:05:26:7c:a9:bd:d1:d1:30:71:20:de:aa: b7:1d:69:3e:c4:fe:84:df:0c:2b:91:2a:a2:59:e5: 86:b1:e4:0a:1a:14:62:38:b8:69:08:04:da:32:5f: 7e:b2:04:cb:e8:35:3c:79:0c:f5:cd:9e:30:ca:5c: 97:7b:50:1c:dc:15:7e:a7:89:74:30:a8:37:bc:1c: bc:33:50:f6:18:6b:3a:bd:00:cb:38:a0:fc:26:4d: e7:a4:ca:9d:f2:6c:f4:83:d3:45:9b:4a:04:8c:8b: 87:03:aa:e0:87:cc:ea:72:13:62:97:39:2b:d9:8d: cb:88:fb:1c:aa:5f:b3:bd:52:2d:aa:47:7d:2d:4a: b5:cd:45:3a:a9:0d:4b:05:81:14:ae:55:1a:19:c1: 30:d2:05:fe:31:36:93:3f:b7:0c:22:20:1e:8e:91: 96:9e:13:00:aa:3c:42:5e:3b:69:04:db:f4:31:0b: da:8b:51:31:9c:19:15:55:76:0a:e0:5f:d8:f4:dd: 4f:b4:b1:40:8c:99:84:59:1c:d7:f7:33:00:66:8c: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 64.6.44.0/23 IPv6: 2602:f9f8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40939 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:dc:8b:58:a9:6c:6f:d6:56:93:af:c1:3d:83:83:75:c1:f0: c7:de:6e:03:eb:99:6e:eb:3e:f7:8b:55:fe:6f:a4:ce:b1:09: 32:c3:aa:56:e8:34:ce:08:ad:0b:7a:13:4a:d9:05:5f:d8:31: 51:be:3b:04:52:21:b9:6e:ea:f4:cb:c4:03:6e:54:80:9a:a8: 79:88:52:f1:eb:fc:72:30:06:18:0b:0a:d6:c8:f3:50:8f:a5: 30:35:27:20:9b:24:af:25:32:82:1f:db:9f:95:aa:9b:8a:71: a1:2d:ef:06:9f:9d:c7:12:16:3e:06:56:1c:cc:cb:0f:18:7f: ed:91:49:db:2f:a7:00:a0:b5:9f:10:d8:8e:f2:68:f6:a5:5a: 32:d1:d2:95:1a:8a:02:7b:31:5e:72:f6:11:98:0f:aa:b6:d0: 95:f9:ab:e0:d9:4f:62:93:98:a8:6b:88:44:ca:a7:dc:2e:eb: 80:eb:b2:82:33:6a:53:65:8b:0d:b5:ef:df:48:88:37:1c:53: f1:c0:9e:cb:44:49:b8:bf:d9:81:09:24:66:ec:61:cf:9e:d5: 12:fd:d6:8f:0c:82:82:7c:7d:d5:a9:eb:f3:d2:10:69:8e:39: c7:a1:58:98:bc:fd:5a:58:bd:a1:b9:4e:1a:26:85:b7:83:e5: da:8c:60:56 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE27mKX0vwJJOxUwW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUwNTEyNDUxOFoXDTI4MDgwNzEyNDUxOFowLzEtMCsGA1UEAxMk YTUwOTZkMzMtN2MzMC00ZWNlLWFiNTQtNTVhOThjZjdmMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ssV5Wb0LawBdoc2JbZHCN2VDy0P3fbqD+g POIOkyrwAguL0aRocmO6l3vJb9cFJnypvdHRMHEg3qq3HWk+xP6E3wwrkSqiWeWG seQKGhRiOLhpCATaMl9+sgTL6DU8eQz1zZ4wylyXe1Ac3BV+p4l0MKg3vBy8M1D2 GGs6vQDLOKD8Jk3npMqd8mz0g9NFm0oEjIuHA6rgh8zqchNilzkr2Y3LiPscql+z vVItqkd9LUq1zUU6qQ1LBYEUrlUaGcEw0gX+MTaTP7cMIiAejpGWnhMAqjxCXjtp BNv0MQvai1ExnBkVVXYK4F/Y9N1PtLFAjJmEWRzX9zMAZowNLwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAo/GdT5VDQQ3dTXcrnn8FnZXyIJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h NTA5NmQzMy03YzMwLTRlY2UtYWI1NC01NWE5OGNmN2YwOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2E1MDk2ZDMzLTdjMzAtNGVjZS1h YjU0LTU1YTk4Y2Y3ZjA4Yy9hNTA5NmQzMy03YzMwLTRlY2UtYWI1NC01NWE5OGNm N2YwOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAFABiwwDgQCAAIwCAMGACYC+fgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCf6zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJ3ItYqWxv1laTr8E9g4N1wfDH 3m4D65lu6z73i1X+b6TOsQkyw6pW6DTOCK0LehNK2QVf2DFRvjsEUiG5bur0y8QD blSAmqh5iFLx6/xyMAYYCwrWyPNQj6UwNScgmySvJTKCH9uflaqbinGhLe8Gn53H EhY+BlYczMsPGH/tkUnbL6cAoLWfENiO8mj2pVoy0dKVGooCezFecvYRmA+qttCV +avg2U9ik5ioa4hEyqfcLuuA67KCM2pTZYsNte/fSIg3HFPxwJ7LREm4v9mBCSRm 7GHPntUS/daPDIKCfH3Vqevz0hBpjjnHoViYvP1aWL2huU4aJoW3g+XajGBW -----END CERTIFICATE-----Generated at Wed May 13 03:53:34 2026 by rpki-client