$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer File: c966e577-4964-41bf-aced-835168bef4f1.cer (raw, json) Hash identifier: S57ynmgGTTZ98jzx5orkcQrelF52g1y1LKeVsIYBz8Q= Subject key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DD088C52EF6B424AE98964B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 00:45:17 +0000 Certificate not after: Tue 15 Aug 2028 00:45:17 +0000 Subordinate resources: IP: 168.123.0.0/16 IP: 192.149.202.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:88:c5:2e:f6:b4:24:ae:98:96:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 13 00:45:17 2026 GMT Not After : Aug 15 00:45:17 2028 GMT Subject: CN=c966e577-4964-41bf-aced-835168bef4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7f:de:1d:26:1c:bd:09:92:57:e8:07:ea:93: 2c:6d:fc:90:7c:65:8b:33:aa:19:2b:24:06:7e:16: a7:fe:0e:ba:a8:67:d2:a7:79:e2:1c:51:8b:ac:53: 2e:51:d6:37:b9:b5:9b:25:d3:58:74:b4:fa:67:7a: a3:5e:39:f6:34:c8:79:a6:60:89:2f:53:db:62:01: 1e:06:85:36:8d:2d:c8:3e:51:26:96:ce:46:f0:c0: f9:94:c4:1e:50:61:c5:f9:b5:fb:44:8f:c5:ce:ed: a5:3c:fd:33:b0:57:94:5b:5e:23:c7:58:5d:07:b7: 32:56:39:7e:e2:5b:11:bb:78:0c:57:66:57:1a:48: 56:a3:66:84:45:55:ae:56:e4:33:cd:29:98:49:bc: 9d:f5:f6:ea:3f:7f:4a:b6:a6:a5:df:70:42:a2:76: d6:36:f9:4a:09:f9:d2:82:7b:ae:13:63:5f:f1:ce: 97:83:9a:de:50:ee:8a:b1:f2:0d:6b:f5:33:f2:a4: 16:dd:95:e5:98:e0:e6:2e:87:8d:2f:c0:22:5b:12: aa:7c:5b:61:e5:d9:ba:b2:cf:cf:55:bc:fa:49:1c: 64:9c:c5:54:01:8d:b3:93:6e:43:8f:59:85:cf:f7: 7a:fd:db:43:aa:55:b7:a8:21:41:8b:3d:af:28:de: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 168.123.0.0/16 192.149.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d8:1d:2f:cc:64:4c:30:bc:55:57:88:78:34:c2:68:f5:fb: 7c:10:32:f5:79:2f:27:2e:49:80:6e:55:21:b8:ed:91:3a:79: 55:bb:4f:f6:4d:87:59:4b:d4:95:16:c8:8f:e0:e4:4c:87:2d: a5:4a:ce:8a:69:af:68:f3:85:23:40:1f:02:a5:c3:5d:c5:a6: a0:ee:8e:0e:1a:f5:33:e0:c6:4e:14:b3:ff:e8:0b:88:a8:d4: 71:60:6d:b8:9e:8d:b5:e0:44:ce:00:3f:4b:cd:20:b1:1a:97: 58:57:ce:a1:8a:8c:2c:50:16:0d:16:5e:5a:0f:f3:67:0d:5c: cd:da:e4:a0:fb:02:f2:0e:59:b1:7e:a3:f7:68:c9:b5:37:f9: aa:53:4a:34:5b:4a:0d:78:2a:91:48:44:83:63:f1:6e:db:ea: 16:ad:79:4d:ee:02:c7:b2:71:39:23:b4:0d:c7:d5:26:5a:a7: 26:a2:68:66:11:f1:13:47:18:e6:be:39:e5:ae:5f:66:44:41: 3f:42:25:6d:f0:0b:c5:56:65:67:a2:3c:b2:c5:e8:04:06:d9: bf:b7:da:1c:3c:95:d8:c1:c3:b8:85:99:3b:ba:45:ae:39:4b: c3:ce:e3:aa:67:1f:00:5e:f1:ec:7a:b2:bc:3a:78:2e:f8:e7: f9:23:2a:7c -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWE3QiMUu9rQkrpiWS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxMzAwNDUxN1oXDTI4MDgxNTAwNDUxN1owLzEtMCsGA1UEAxMk Yzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVmNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH/eHSYcvQmSV+gH6pMsbfyQfGWLM6oZKyQG fhan/g66qGfSp3niHFGLrFMuUdY3ubWbJdNYdLT6Z3qjXjn2NMh5pmCJL1PbYgEe BoU2jS3IPlEmls5G8MD5lMQeUGHF+bX7RI/Fzu2lPP0zsFeUW14jx1hdB7cyVjl+ 4lsRu3gMV2ZXGkhWo2aERVWuVuQzzSmYSbyd9fbqP39Ktqal33BConbWNvlKCfnS gnuuE2Nf8c6Xg5reUO6KsfINa/Uz8qQW3ZXlmODmLoeNL8AiWxKqfFth5dm6ss/P Vbz6SRxknMVUAY2zk25Dj1mFz/d6/dtDqlW3qCFBiz2vKN74uwIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFC0N2kRJ8R3m3/GXR/SlfY8einFdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j OTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5NjZlNTc3LTQ5NjQtNDFiZi1h Y2VkLTgzNTE2OGJlZjRmMS9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhi ZWY0ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCoewMEAMCVyjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAb2B0vzGRMMLxV V4h4NMJo9ft8EDL1eS8nLkmAblUhuO2ROnlVu0/2TYdZS9SVFsiP4ORMhy2lSs6K aa9o84UjQB8CpcNdxaag7o4OGvUz4MZOFLP/6AuIqNRxYG24no214ETOAD9LzSCx GpdYV86hiowsUBYNFl5aD/NnDVzN2uSg+wLyDlmxfqP3aMm1N/mqU0o0W0oNeCqR SESDY/Fu2+oWrXlN7gLHsnE5I7QNx9UmWqcmomhmEfETRxjmvjnlrl9mREE/QiVt 8AvFVmVnojyyxegEBtm/t9ocPJXYwcO4hZk7ukWuOUvDzuOqZx8AXvHserK8Ongu +Of5Iyp8 -----END CERTIFICATE-----Generated at Wed May 13 06:40:13 2026 by rpki-client