$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer File: c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer (raw, json) Hash identifier: dt6jR69iT8N8V3TdCjZ3SYI7E8k6TMkhfk+q+oGeXz0= Subject key identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DC3F8AFF0E97A201B7FCC6480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 May 2026 12:45:16 +0000 Certificate not after: Thu 10 Aug 2028 12:45:16 +0000 Subordinate resources: AS: 53949 IP: 162.213.172.0/22 IP: 173.225.144.0/20 IP: 192.119.134.0/24 IP: 198.98.208.0/20 IP: 206.198.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c3:f8:af:f0:e9:7a:20:1b:7f:cc:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 8 12:45:16 2026 GMT Not After : Aug 10 12:45:16 2028 GMT Subject: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:dc:cc:c9:1d:8b:26:c7:b2:94:99:6a:a0: 90:3a:08:e5:e6:34:14:d8:12:35:43:7f:e6:62:a9: 79:93:1d:c3:d3:d0:f8:74:00:37:aa:07:d8:38:21: 70:8c:40:ab:b0:9e:96:94:70:dc:99:29:ae:da:e9: f0:d6:47:4d:34:dd:ff:4f:b3:45:ce:3f:3d:e5:ab: cc:94:cc:30:00:8d:ad:a8:c7:f9:bc:e3:93:cc:da: d8:9e:e9:17:55:17:97:50:a2:8f:80:5e:48:6c:3a: 2c:a3:52:9d:97:60:ea:7a:16:27:bc:d0:ba:42:ec: 1f:29:0f:d1:0f:6f:90:c6:4f:d2:55:de:35:46:1d: 69:0e:70:aa:6b:71:42:37:6e:a9:a6:37:a4:9d:a2: 3a:b2:81:c2:0e:3e:c6:51:65:1e:31:02:cd:10:a7: 71:5b:1c:ca:3a:fb:2d:ec:69:ff:f5:12:27:cf:95: 4c:9c:c2:05:4f:de:db:ee:a5:1e:88:02:6a:11:3a: 85:bc:d1:ca:1c:f5:76:93:d5:f4:da:56:7c:ef:e7: 93:da:c3:b6:22:74:41:fc:31:10:01:b7:e4:22:fb: 9c:fb:b4:0b:82:30:eb:d7:37:5b:8f:de:7f:29:0f: 93:a2:fe:0f:75:dd:f4:8c:dd:82:8c:2b:61:b8:41: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.213.172.0/22 173.225.144.0/20 192.119.134.0/24 198.98.208.0/20 206.198.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53949 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:62:85:91:9d:ee:12:0c:09:4a:a3:43:98:f6:85:d0:91:3c: a0:ac:20:aa:8e:74:c6:16:2b:83:87:db:87:37:1c:55:1a:e5: c7:4a:5d:da:df:bd:93:b4:82:fe:40:64:29:24:15:9f:e9:eb: 93:75:af:4f:7b:45:57:56:46:58:d0:9e:a3:a8:63:f7:e2:53: 4f:ae:34:e3:c4:5d:4a:23:85:76:d6:53:9f:85:ab:13:ca:45: d6:0b:0a:dd:28:c6:f1:22:cc:e1:35:f3:f6:71:17:e7:70:35: 11:82:68:f3:eb:48:77:06:5d:aa:b9:07:9a:1d:51:88:f3:5c: 07:25:18:97:7b:ce:2d:db:33:a0:24:a1:33:e2:28:da:8a:8c: f3:4e:f0:d1:b8:39:fb:87:c6:93:af:d8:49:09:7d:1b:59:69: 0b:a1:37:2d:12:27:f9:d6:b8:1e:7f:42:e5:e8:2b:23:60:75: c3:ec:ef:c2:3f:37:29:13:d2:40:2a:4c:db:b4:30:95:45:62: 42:02:06:17:89:62:01:81:ef:36:bd:b5:1e:4c:56:0d:8b:a1: 63:d8:af:a2:35:9b:a5:a5:87:7b:57:9c:9d:02:7d:64:36:42: 08:cf:97:ac:29:51:71:59:ee:e5:56:fe:66:9a:db:df:15:42: 71:06:a4:f2 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWE3D+K/w6XogG3/MZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUwODEyNDUxNloXDTI4MDgxMDEyNDUxNlowLzEtMCsGA1UEAxMk YzliMDZjNTItYzY4ZC00NGVjLWFlNjUtN2ViYjJhOTlkNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9PczMkdiybHspSZaqCQOgjl5jQU2BI1Q3/m Yql5kx3D09D4dAA3qgfYOCFwjECrsJ6WlHDcmSmu2unw1kdNNN3/T7NFzj895avM lMwwAI2tqMf5vOOTzNrYnukXVReXUKKPgF5IbDoso1Kdl2DqehYnvNC6QuwfKQ/R D2+Qxk/SVd41Rh1pDnCqa3FCN26ppjeknaI6soHCDj7GUWUeMQLNEKdxWxzKOvst 7Gn/9RInz5VMnMIFT97b7qUeiAJqETqFvNHKHPV2k9X02lZ87+eT2sO2InRB/DEQ AbfkIvuc+7QLgjDr1zdbj95/KQ+Tov4Pdd30jN2CjCthuEHf7wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFGjsn8I5tFip1JQ4C6/BWB3oWb1/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j OWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5OWQ2Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5YjA2YzUyLWM2OGQtNDRlYy1h ZTY1LTdlYmIyYTk5ZDZjYy9jOWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5 OWQ2Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAKi1awDBASt4ZADBADAd4YDBATGYtADBALOxsww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANK9MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABZihZGd7hIMCUqj Q5j2hdCRPKCsIKqOdMYWK4OH24c3HFUa5cdKXdrfvZO0gv5AZCkkFZ/p65N1r097 RVdWRljQnqOoY/fiU0+uNOPEXUojhXbWU5+FqxPKRdYLCt0oxvEizOE18/ZxF+dw NRGCaPPrSHcGXaq5B5odUYjzXAclGJd7zi3bM6AkoTPiKNqKjPNO8NG4OfuHxpOv 2EkJfRtZaQuhNy0SJ/nWuB5/QuXoKyNgdcPs78I/NykT0kAqTNu0MJVFYkICBheJ YgGB7za9tR5MVg2LoWPYr6I1m6Wlh3tXnJ0CfWQ2QgjPl6wpUXFZ7uVW/maa298V QnEGpPI= -----END CERTIFICATE-----Generated at Wed May 13 03:17:42 2026 by rpki-client