$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer File: b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer (raw, json) Hash identifier: YTIyniAYUn2NxujAujkCaL9qxdJ7yObnjmwIT+IeCCc= Subject key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DC6C35F7A20AB0214A1F54E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 09 May 2026 12:45:17 +0000 Certificate not after: Fri 11 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 26042 IP: 23.145.120.0/24 IP: 142.249.164.0/22 IP: 2602:294::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:c3:5f:7a:20:ab:02:14:a1:f5:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 9 12:45:17 2026 GMT Not After : Aug 11 12:45:17 2028 GMT Subject: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:0a:02:ea:dc:ce:d1:53:7a:99:90:43:0b: 1b:3b:d4:5e:0a:7b:40:ac:a6:c0:4a:40:64:23:5b: 58:d7:20:fe:6e:4b:29:b4:10:2a:bf:5f:b4:ca:c7: f6:8e:64:72:9f:fa:f5:4a:98:cf:18:4c:cf:49:ac: 86:34:e9:4a:9c:cb:a0:ce:92:fc:a3:81:89:65:49: 30:ab:91:1c:da:b4:68:1a:87:f4:7a:9d:47:38:e5: 55:94:4a:58:1a:1f:3b:f8:c6:ef:4f:0b:2e:c6:dc: 98:fa:a5:44:41:f7:0a:74:cf:9f:90:a0:bd:94:94: 3e:5c:95:32:98:fa:12:96:ad:a0:a7:07:05:a3:04: 3a:cf:88:33:b5:6e:87:65:ff:00:9e:fb:0f:9f:c0: 59:cc:8a:0d:22:6d:b8:e2:6d:42:be:c1:55:2e:5e: eb:5d:ff:07:ca:fe:ba:9f:50:73:66:72:a1:71:5a: 3d:41:0a:6b:31:02:40:2b:72:8f:ba:9d:bc:0c:d1: f1:e5:01:25:3e:72:b6:fc:c7:c4:67:0b:95:76:ab: 66:07:c1:8a:4b:cb:fd:bc:e1:b2:35:e1:97:25:83: 63:f0:51:a9:d5:e6:f9:95:1f:36:6b:10:41:4c:3e: cc:90:a9:4d:25:22:95:c3:60:4b:3c:56:81:45:04: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.145.120.0/24 142.249.164.0/22 IPv6: 2602:294::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:17:bb:3f:ae:83:50:25:f9:20:10:96:f1:72:de:d9:7e:83: 83:1b:2e:22:60:d6:d1:d6:18:42:59:52:25:82:24:ca:37:43: 00:02:64:f3:e1:c0:b4:1b:22:6e:6c:ac:da:d9:05:88:33:62: 88:30:6f:3c:f0:ae:40:e2:6c:ed:82:81:fa:46:af:d9:81:a5: ec:d0:c0:41:2c:03:e6:89:40:57:f1:68:f7:67:2e:25:bc:b1: de:ef:4b:84:ba:3f:2d:b3:f0:29:6a:f7:73:1a:65:4f:90:b9: 7b:db:5d:90:cb:fe:3b:40:65:9e:a7:15:6b:89:92:ca:de:79: 19:92:82:71:36:6a:5d:4e:9e:99:57:ca:ae:2f:83:05:5f:f8: 35:ac:ca:25:91:f7:d3:62:dc:52:bc:cd:e6:26:c3:fa:1b:20: 13:7e:ae:fd:c8:4c:b2:06:e8:82:57:f9:c5:dd:07:40:ee:32: 2e:2a:43:3c:3f:d5:9f:d2:df:77:64:ec:48:3b:e3:43:28:c9: ad:c8:f0:2e:3b:5f:be:ce:92:06:4d:27:fb:b5:6d:84:a8:a9: 80:fb:4e:e6:7d:ef:6a:77:05:f3:84:e4:2a:dd:09:e8:a2:4a: a0:f4:83:85:9e:44:25:b8:06:f1:4b:51:8e:47:83:7a:7a:f4: 4b:1c:79:5c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE3Gw196IKsCFKH1TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUwOTEyNDUxN1oXDTI4MDgxMTEyNDUxN1owLzEtMCsGA1UEAxMk YjRlOGU5OTAtNTBmNC00Mjg0LWJmYzAtMTg3OGE1ZmJjMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgkKAurcztFTepmQQwsbO9ReCntArKbASkBk I1tY1yD+bksptBAqv1+0ysf2jmRyn/r1SpjPGEzPSayGNOlKnMugzpL8o4GJZUkw q5Ec2rRoGof0ep1HOOVVlEpYGh87+MbvTwsuxtyY+qVEQfcKdM+fkKC9lJQ+XJUy mPoSlq2gpwcFowQ6z4gztW6HZf8AnvsPn8BZzIoNIm244m1CvsFVLl7rXf8Hyv66 n1BzZnKhcVo9QQprMQJAK3KPup28DNHx5QElPnK2/MfEZwuVdqtmB8GKS8v9vOGy NeGXJYNj8FGp1eb5lR82axBBTD7MkKlNJSKVw2BLPFaBRQT1QQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFBUM9WGbTw7UUeaUhSmLKMDFC4WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i NGU4ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4YTVmYmMwZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I0ZThlOTkwLTUwZjQtNDI4NC1i ZmMwLTE4NzhhNWZiYzBmMC9iNGU4ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4YTVm YmMwZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkXgDBAKO+aQwDgQCAAIwCAMGBCYCApQAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmW6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHgXuz+ug1Al+SAQlvFy 3tl+g4MbLiJg1tHWGEJZUiWCJMo3QwACZPPhwLQbIm5srNrZBYgzYogwbzzwrkDi bO2CgfpGr9mBpezQwEEsA+aJQFfxaPdnLiW8sd7vS4S6Py2z8Clq93MaZU+QuXvb XZDL/jtAZZ6nFWuJksreeRmSgnE2al1OnplXyq4vgwVf+DWsyiWR99Ni3FK8zeYm w/obIBN+rv3ITLIG6IJX+cXdB0DuMi4qQzw/1Z/S33dk7Eg740Moya3I8C47X77O kgZNJ/u1bYSoqYD7TuZ972p3BfOE5CrdCeiiSqD0g4WeRCW4BvFLUY5Hg3p69Esc eVw= -----END CERTIFICATE-----Generated at Wed May 13 03:49:22 2026 by rpki-client