$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer File: c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer (raw, json) Hash identifier: KP/druI7jP8XHgzt8UfSHYzhkMOeZfX97DiHZPz+sFU= Subject key identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D8D885A2D68973997DAC89E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Apr 2026 00:45:17 +0000 Certificate not after: Sat 22 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 11925 AS: 401057 IP: 23.163.200.0/24 IP: 131.143.176.0/22 IP: 2607:7140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:88:5a:2d:68:97:39:97:da:c8:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 19 00:45:17 2026 GMT Not After : Jul 22 00:45:17 2028 GMT Subject: CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:6f:0d:2a:5e:6c:8f:8a:52:7b:b6:ad:5a: 6b:42:25:ee:0c:b6:8d:bf:9b:83:12:51:a1:be:e4: 6a:8c:2a:0d:44:75:05:ec:a3:65:6e:fb:c7:79:75: a3:f9:c4:c5:78:69:7c:80:2a:c2:47:6b:e4:17:a2: 30:0f:62:07:df:42:d0:b5:a0:72:2c:7a:b2:85:43: 61:0a:ef:10:96:50:1b:b3:19:be:98:a1:79:50:36: 21:90:fd:ed:39:f2:b3:59:b8:57:df:c1:73:c7:42: 4e:1c:96:7e:90:2d:bd:20:50:b9:c8:d7:55:de:0a: 55:ee:38:e9:71:b1:32:1a:97:50:ce:dd:49:31:de: d7:d1:03:b2:53:e8:d3:62:dc:05:d1:ba:64:96:b5: 5e:08:1a:65:92:95:63:56:a3:33:35:99:8d:2f:6e: 30:0f:d5:05:10:04:8f:fd:59:d7:1b:a8:30:15:5a: 03:ef:b6:28:0b:78:fd:df:e3:e0:c5:05:4a:6e:a2: 41:cb:87:b7:5f:0b:a4:45:09:76:34:60:72:22:d9: 23:28:f2:91:a6:42:d0:98:05:93:46:09:4f:e0:98: 4d:86:6f:05:38:2d:ab:78:e4:8e:f1:e9:c7:b0:a4: 8c:e1:3b:45:e8:1d:b3:89:f8:3e:3b:f2:0d:9d:86: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.163.200.0/24 131.143.176.0/22 IPv6: 2607:7140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11925 401057 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:de:ca:fa:9f:82:35:c2:cd:59:f4:a3:bb:02:af:a0:4c:a4: 23:1b:ff:31:cd:a5:c4:22:b0:3c:21:2b:83:b1:93:b3:09:e1: 4d:68:5e:08:d1:53:2c:a2:52:e0:7f:f3:e0:a5:ac:59:f5:10: 4d:6c:34:b5:c9:c9:da:ce:6e:49:94:67:82:c1:48:2e:54:6f: 9e:df:a8:bb:ed:9b:16:95:fb:02:bc:70:64:45:36:6d:b8:ed: 63:f6:5c:e3:0f:02:bb:7f:a4:97:f2:51:e8:bf:95:77:6c:58: 02:2d:9e:0b:ec:7e:6a:2f:91:ef:89:8e:c5:56:10:5d:1d:fe: c8:72:49:dc:ae:90:bc:24:7e:be:fa:b5:6e:07:f3:4c:37:6f: 74:89:44:6a:2c:09:77:3e:31:30:e3:19:9d:1c:9e:6e:d6:4c: de:12:04:61:67:ca:ff:1d:4f:8a:e7:10:50:1c:5c:a0:77:c3: 1f:fa:70:20:d9:1e:cb:b2:ff:37:b4:b1:de:b4:9f:a6:fd:fc: c2:40:41:13:73:42:2c:69:42:cf:37:6c:43:9c:45:99:19:b6: b0:3c:54:37:3e:78:88:10:6c:f2:4a:d2:14:80:ba:55:d5:15: 57:93:0f:48:01:b6:fe:a9:ac:8c:85:da:cd:2e:f4:d2:2b:3c: 6c:b2:6c:dd -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE2NiFotaJc5l9rIngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxOTAwNDUxN1oXDTI4MDcyMjAwNDUxN1owLzEtMCsGA1UEAxMk YzlmMjVjZTMtMDFmNC00ZGZmLWJmMzgtMDU5YWY1YjY0ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt79vDSpebI+KUnu2rVprQiXuDLaNv5uDElGh vuRqjCoNRHUF7KNlbvvHeXWj+cTFeGl8gCrCR2vkF6IwD2IH30LQtaByLHqyhUNh Cu8QllAbsxm+mKF5UDYhkP3tOfKzWbhX38Fzx0JOHJZ+kC29IFC5yNdV3gpV7jjp cbEyGpdQzt1JMd7X0QOyU+jTYtwF0bpklrVeCBplkpVjVqMzNZmNL24wD9UFEASP /VnXG6gwFVoD77YoC3j93+PgxQVKbqJBy4e3XwukRQl2NGByItkjKPKRpkLQmAWT RglP4JhNhm8FOC2reOSO8enHsKSM4TtF6B2zifg+O/INnYa3twIDAQABo4IENDCC BDAwHQYDVR0OBBYEFCJazC1Xlv86zrxyayQP2dsjmtIlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j OWYyNWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlhZjViNjRkM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5ZjI1Y2UzLTAxZjQtNGRmZi1i ZjM4LTA1OWFmNWI2NGQzYi9jOWYyNWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlhZjVi NjRkM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXo8gDBAKDj7AwDQQCAAIwBwMFACYHcUAwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICLpUCAwYeoTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh3sr6n4I1ws1Z 9KO7Aq+gTKQjG/8xzaXEIrA8ISuDsZOzCeFNaF4I0VMsolLgf/PgpaxZ9RBNbDS1 ycnazm5JlGeCwUguVG+e36i77ZsWlfsCvHBkRTZtuO1j9lzjDwK7f6SX8lHov5V3 bFgCLZ4L7H5qL5HviY7FVhBdHf7IckncrpC8JH6++rVuB/NMN290iURqLAl3PjEw 4xmdHJ5u1kzeEgRhZ8r/HU+K5xBQHFygd8Mf+nAg2R7Lsv83tLHetJ+m/fzCQEET c0IsaULPN2xDnEWZGbawPFQ3PniIEGzyStIUgLpV1RVXkw9IAbb+qayMhdrNLvTS Kzxssmzd -----END CERTIFICATE-----Generated at Tue May 12 21:40:28 2026 by rpki-client