$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer File: b61fdb7f-6654-4226-b916-f915d5e335dc.cer (raw, json) Hash identifier: LMOUihJvE5G99Kmok3ULnEuGmd40Y7S+iyle1MWfepg= Subject key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DB06DE75DA755FB1C715B0C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 May 2026 12:45:17 +0000 Certificate not after: Thu 03 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 395842 IP: 23.144.40.0/23 IP: 2607:8c0::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:6d:e7:5d:a7:55:fb:1c:71:5b:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 1 12:45:17 2026 GMT Not After : Aug 3 12:45:17 2028 GMT Subject: CN=b61fdb7f-6654-4226-b916-f915d5e335dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3b:c4:d5:6c:da:42:d8:fe:bd:9e:02:8c:61: 55:0c:1f:8a:2d:c7:d0:66:94:f3:c2:af:c5:b6:b6: 99:9e:92:88:86:f2:68:77:08:eb:f0:2d:90:fa:84: 9c:20:8a:83:85:ab:4b:f3:58:70:7a:32:fc:54:ba: 5d:f0:92:03:2d:49:04:8a:4c:38:ef:a8:3d:48:a3: ff:93:02:3b:83:8e:0a:8d:35:a6:d0:27:f6:9d:fc: 48:43:85:4e:93:20:e6:63:7e:0d:c3:91:3c:66:d1: 31:74:40:b1:43:25:84:a5:ad:26:ef:eb:a2:e6:83: 27:08:29:17:ae:e5:1c:6d:93:d4:75:5c:fb:64:fb: b1:61:71:89:a7:b5:e3:72:44:dd:3b:c2:b5:f2:20: bd:56:a6:d0:99:ba:91:dd:36:13:03:35:c7:cd:e6: 9e:29:41:3a:f6:b5:77:ad:90:63:ee:ad:a5:e9:36: 2f:ef:15:0d:9e:28:38:6c:a1:8c:6d:07:09:f9:1d: 81:b2:84:5c:1b:ce:f4:4f:be:39:14:a5:a2:dd:33: 62:6b:55:98:fd:58:04:e1:c0:af:9e:cd:40:61:4c: a8:1e:1a:8e:20:91:e7:5f:19:fc:80:3e:3f:6f:e4: 18:4c:17:ad:05:ad:3c:fc:5a:ee:43:ae:1d:eb:4a: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.144.40.0/23 IPv6: 2607:8c0::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395842 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:61:71:8c:a8:b6:bb:97:a5:41:72:5c:ee:f0:7d:ec:bc:37: 35:21:0e:42:91:97:fd:c2:a5:4e:73:44:1a:d8:23:29:2a:07: 22:03:f1:73:8d:c2:4e:b9:b3:b5:73:be:7b:bb:58:dd:66:e9: cc:72:b3:93:0e:79:02:72:ef:ef:58:b2:24:26:4e:e3:da:91: 4c:16:bc:9e:2b:08:46:0e:79:5b:2b:1f:f8:52:35:75:e8:79: f1:dc:03:d2:3f:6e:40:96:15:cc:1f:53:9c:c5:80:1b:2f:c9: f4:a4:22:ee:75:89:ca:a6:af:1a:0c:18:d3:fb:bc:49:b9:31: 55:0c:5d:5b:d9:c0:aa:96:64:bf:e5:28:2b:97:6d:b7:7f:f3: 16:2d:fc:5e:0b:ca:4d:c8:7a:1b:09:5d:26:71:48:aa:18:47: 05:50:1b:d0:40:94:e4:cf:5c:70:10:02:60:20:50:ec:44:16: ee:30:49:fb:bb:aa:f3:20:c2:5a:fe:c5:1a:ef:1b:23:c3:98: c9:76:99:08:f8:ce:ee:87:ef:a6:3b:45:d8:d6:aa:e2:e4:ba: 1e:ac:7b:fd:90:ac:f1:96:1b:fb:cc:d7:c6:34:65:28:71:c5: 84:44:28:41:34:e2:0b:66:3f:a2:84:4a:7a:01:7d:d4:ad:49: cc:61:5a:cc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2wbeddp1X7HHFbDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUwMTEyNDUxN1oXDTI4MDgwMzEyNDUxN1owLzEtMCsGA1UEAxMk YjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMzNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jvE1WzaQtj+vZ4CjGFVDB+KLcfQZpTzwq/F traZnpKIhvJodwjr8C2Q+oScIIqDhatL81hwejL8VLpd8JIDLUkEikw476g9SKP/ kwI7g44KjTWm0Cf2nfxIQ4VOkyDmY34Nw5E8ZtExdECxQyWEpa0m7+ui5oMnCCkX ruUcbZPUdVz7ZPuxYXGJp7XjckTdO8K18iC9VqbQmbqR3TYTAzXHzeaeKUE69rV3 rZBj7q2l6TYv7xUNnig4bKGMbQcJ+R2BsoRcG870T745FKWi3TNia1WY/VgE4cCv ns1AYUyoHhqOIJHnXxn8gD4/b+QYTBetBa08/FruQ64d60rhNwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBWZokQwtYAUZq/MLXYMJ0Cn+gAmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i NjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I2MWZkYjdmLTY2NTQtNDIyNi1i OTE2LWY5MTVkNWUzMzVkYy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVl MzM1ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAEXkCgwDQQCAAIwBwMFBCYHCMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgpCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHBhcYyotruXpUFyXO7wfey8NzUh DkKRl/3CpU5zRBrYIykqByID8XONwk65s7Vzvnu7WN1m6cxys5MOeQJy7+9YsiQm TuPakUwWvJ4rCEYOeVsrH/hSNXXoefHcA9I/bkCWFcwfU5zFgBsvyfSkIu51icqm rxoMGNP7vEm5MVUMXVvZwKqWZL/lKCuXbbd/8xYt/F4Lyk3IehsJXSZxSKoYRwVQ G9BAlOTPXHAQAmAgUOxEFu4wSfu7qvMgwlr+xRrvGyPDmMl2mQj4zu6H76Y7RdjW quLkuh6se/2QrPGWG/vM18Y0ZShxxYREKEE04gtmP6KESnoBfdStScxhWsw= -----END CERTIFICATE-----Generated at Tue May 12 21:34:01 2026 by rpki-client