$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer File: b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer (raw, json) Hash identifier: TEftF39+lS0fb9da+LuAhacDfT1AKWCQ6+Qmf8XiSko= Subject key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D948310F5B811641C9CF85A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 12:45:17 +0000 Certificate not after: Mon 24 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 398290 IP: 167.32.0.0/16 IP: 2605:d840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:83:10:f5:b8:11:64:1c:9c:f8:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 21 12:45:17 2026 GMT Not After : Jul 24 12:45:17 2028 GMT Subject: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:b4:b8:6a:77:74:e9:2b:1b:66:8f:21:3c: 96:b8:33:ab:27:28:5d:e3:b6:b9:eb:7e:6d:44:0b: 7b:1d:e2:83:93:4b:61:f4:7c:cb:01:6e:e5:be:c8: 33:66:ed:4b:0a:11:02:75:96:12:2f:0e:e6:29:4e: 24:6b:f3:e5:74:31:5d:f0:79:66:15:2c:57:d0:d8: 16:6e:28:c4:83:9d:e0:51:d0:4c:ef:1d:00:e9:62: 8f:ac:a6:42:5a:b0:02:bb:c5:61:18:d0:5c:b4:46: df:09:25:04:07:5d:c9:88:ac:b4:83:0f:f0:40:4c: 49:3e:49:4d:2e:b9:be:39:49:18:77:e3:68:33:a6: d1:25:54:8c:d2:d6:6e:81:4b:e8:b4:f8:55:84:54: 6d:69:99:23:b4:a8:71:7a:96:12:90:ba:f4:cb:a2: 29:8e:ab:e5:de:66:2b:0e:69:66:da:ef:a0:50:2f: 4a:c1:b3:ce:a4:88:b0:0a:91:05:2c:5b:9f:16:42: 26:08:2d:3e:8b:fd:bc:02:45:76:f5:2a:85:c5:06: 98:34:f8:13:9c:20:c8:e4:9f:f8:5e:f1:aa:74:10: fc:6f:38:bb:3f:93:98:e6:f5:e2:3a:11:87:25:b8: 83:a5:c7:73:7b:51:a3:81:24:ec:35:2c:7a:86:1c: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 167.32.0.0/16 IPv6: 2605:d840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398290 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c7:e2:63:0f:95:bc:dc:f1:98:ac:ab:fa:b9:21:b5:99:ae: b3:60:5a:19:45:ab:75:6c:41:f2:42:0b:e9:c5:ac:66:ef:01: ac:49:c2:3a:3d:bc:74:f5:f5:38:30:2b:72:e7:c3:a6:f0:9c: c4:90:d2:c1:9a:8f:06:53:a4:f8:e2:61:c3:ff:3f:e8:d6:bd: d1:c0:7a:c4:bd:6c:60:03:1d:0e:5e:bc:a9:79:77:54:c3:36: 01:f7:19:78:42:ab:1b:1e:7e:d5:84:d9:a2:48:15:43:89:4f: 59:0c:b7:9c:e5:e8:11:de:65:98:11:3c:b0:6e:37:5b:9b:1e: ed:8f:ed:7a:5f:26:7a:ed:19:2f:e0:dc:19:8c:59:20:66:ff: 2d:19:70:82:c3:55:e9:0a:82:e6:ae:6b:f1:7b:f2:5e:ed:17: 1d:51:0d:4f:8a:0e:02:e1:a6:5a:fc:28:53:e6:c0:3b:d1:83: 03:fb:cd:35:45:01:f3:5e:6f:43:08:c3:40:ae:14:81:0d:59: 91:aa:45:0f:05:40:44:fe:ba:43:8a:63:7a:36:c0:17:6b:4d: 48:63:ec:a9:37:e2:fb:17:a9:26:c1:1d:1a:5b:43:49:dc:a8: bd:ed:3b:bf:9f:9b:5a:4c:80:87:e1:50:7f:3b:30:f1:5b:b9: a6:1b:7a:4c -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE2UgxD1uBFkHJz4WiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyMTEyNDUxN1oXDTI4MDcyNDEyNDUxN1owLzEtMCsGA1UEAxMk YjQxZDJmZmItZmE4YS00ZGFmLTllYTctZTJjYzQ2ZGNlZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP60uGp3dOkrG2aPITyWuDOrJyhd47a5635t RAt7HeKDk0th9HzLAW7lvsgzZu1LChECdZYSLw7mKU4ka/PldDFd8HlmFSxX0NgW bijEg53gUdBM7x0A6WKPrKZCWrACu8VhGNBctEbfCSUEB13JiKy0gw/wQExJPklN Lrm+OUkYd+NoM6bRJVSM0tZugUvotPhVhFRtaZkjtKhxepYSkLr0y6Ipjqvl3mYr Dmlm2u+gUC9KwbPOpIiwCpEFLFufFkImCC0+i/28AkV29SqFxQaYNPgTnCDI5J/4 XvGqdBD8bzi7P5OY5vXiOhGHJbiDpcdze1GjgSTsNSx6hhy/LQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFB1+DceYRWIPSCyuo3uxCzVjmSUlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i NDFkMmZmYi1mYThhLTRkYWYtOWVhNy1lMmNjNDZkY2VlZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I0MWQyZmZiLWZhOGEtNGRhZi05 ZWE3LWUyY2M0NmRjZWVkYi9iNDFkMmZmYi1mYThhLTRkYWYtOWVhNy1lMmNjNDZk Y2VlZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwCnIDANBAIAAjAHAwUAJgXYQDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMGE9IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZ8fiYw+VvNzxmKyr+rkhtZmus2Ba GUWrdWxB8kIL6cWsZu8BrEnCOj28dPX1ODArcufDpvCcxJDSwZqPBlOk+OJhw/8/ 6Na90cB6xL1sYAMdDl68qXl3VMM2AfcZeEKrGx5+1YTZokgVQ4lPWQy3nOXoEd5l mBE8sG43W5se7Y/tel8meu0ZL+DcGYxZIGb/LRlwgsNV6QqC5q5r8XvyXu0XHVEN T4oOAuGmWvwoU+bAO9GDA/vNNUUB815vQwjDQK4UgQ1ZkapFDwVARP66Q4pjejbA F2tNSGPsqTfi+xepJsEdGltDSdyove07v5+bWkyAh+FQfzsw8Vu5pht6TA== -----END CERTIFICATE-----Generated at Tue May 12 21:40:59 2026 by rpki-client