$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer File: cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer (raw, json) Hash identifier: jzxZZ/yeCokcWPRdNNLHv30UbNapLCrNHRqG5yU+N6g= Subject key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D8EEDB13A38251C3A7A4C2B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Apr 2026 12:45:17 +0000 Certificate not after: Sat 22 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 11913 IP: 23.163.120.0/24 IP: 2602:816:3000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:ed:b1:3a:38:25:1c:3a:7a:4c:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 19 12:45:17 2026 GMT Not After : Jul 22 12:45:17 2028 GMT Subject: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:02:ba:dd:08:f4:f7:6f:bb:b5:65:7f:e4: 32:ad:8b:44:b6:5c:88:37:10:4b:6e:22:39:a1:14: 01:83:a9:69:ee:08:ce:14:44:df:f1:d9:ec:72:3c: 89:ee:5e:45:2f:66:27:4f:34:a5:bd:70:5b:9b:b0: 01:bc:24:29:fa:f1:43:c9:24:17:4e:55:4b:c9:a3: 14:fa:60:ac:c8:b8:56:ba:d1:df:d0:37:fe:e8:48: a8:7d:cc:c7:9b:db:0c:9c:9e:84:d7:82:99:2d:88: 4f:28:05:37:18:32:d7:c2:ef:ea:30:d2:0e:f4:08: bc:c2:ab:6b:ae:a0:20:9e:50:3d:3a:78:ed:32:63: f0:28:11:1c:6f:9b:37:9b:83:b3:5d:f2:fa:49:a3: 1f:fd:66:08:39:a3:bc:c8:5b:60:4b:5e:08:74:6a: 45:3e:95:7a:ba:13:b4:99:98:3a:80:70:2f:78:a3: 6f:0e:e5:80:78:24:9f:8b:4b:fb:86:00:0f:8d:58: 91:90:75:83:5d:aa:d1:36:e1:9b:f8:16:b3:bf:eb: 7d:8c:ff:b0:d6:0a:e2:fc:2d:13:a9:21:41:07:33: 96:b9:e4:ba:02:18:5b:92:7b:8b:c1:ea:5c:df:dc: 89:46:e2:da:a3:94:da:ce:72:17:ba:78:85:95:f1: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 IPv6: 2602:816:3000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11913 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:92:24:0d:0f:17:bf:a7:3d:a0:96:16:9b:bb:b3:4b:cd:9c: ee:6c:d8:c0:4b:12:3f:ec:42:02:ab:57:15:7b:94:c5:a1:ab: 4c:51:f5:b3:6b:bf:2b:04:d3:aa:ad:00:61:f1:11:36:0e:a0: c0:51:a4:8c:98:57:a1:89:77:94:2d:34:01:3f:69:0e:cc:45: 91:fc:e9:00:79:cb:1f:57:65:2f:5b:d5:43:f7:57:cb:8c:6a: a1:6a:e1:a6:52:5b:75:fc:c5:f1:a2:2f:3f:11:0a:71:20:35: f8:d1:1a:88:fa:9f:83:8b:b2:ca:7d:a6:10:2a:7a:0f:9c:d7: aa:85:41:8f:19:6d:97:74:09:61:22:32:6a:2b:0d:fa:3c:c4: 6e:a0:84:99:a6:44:b0:a0:77:0e:98:51:7b:df:55:8e:84:6c: 5a:cb:46:19:27:2b:6b:b9:42:3d:09:7c:c6:46:6e:f1:46:24: 3e:f7:72:2b:37:b1:85:5f:c2:58:d5:cb:5b:21:48:2b:6c:9b: 45:9d:45:b3:c6:2e:83:a3:3b:5c:cb:28:df:6d:52:58:33:a7: e8:b2:49:00:57:f7:11:88:38:b1:13:3e:e0:b3:17:c3:8f:18: 83:98:86:d6:bb:ef:bf:68:04:1b:00:25:fb:7f:7b:f3:33:ce: d5:5a:f9:ed -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2O7bE6OCUcOnpMK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxOTEyNDUxN1oXDTI4MDcyMjEyNDUxN1owLzEtMCsGA1UEAxMk Y2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNmY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/ECut0I9Pdvu7Vlf+QyrYtEtlyINxBLbiI5 oRQBg6lp7gjOFETf8dnscjyJ7l5FL2YnTzSlvXBbm7ABvCQp+vFDySQXTlVLyaMU +mCsyLhWutHf0Df+6EiofczHm9sMnJ6E14KZLYhPKAU3GDLXwu/qMNIO9Ai8wqtr rqAgnlA9OnjtMmPwKBEcb5s3m4OzXfL6SaMf/WYIOaO8yFtgS14IdGpFPpV6uhO0 mZg6gHAveKNvDuWAeCSfi0v7hgAPjViRkHWDXarRNuGb+Bazv+t9jP+w1gri/C0T qSFBBzOWueS6AhhbknuLwepc39yJRuLao5TaznIXuniFlfGsmQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPq6F0hsNc2KizwWYMRvn1gOL15kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NmMzEyOTZmLThmMmYtNDI2OC04 NTk5LTRjNDdkMjVjZmNmMC9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1 Y2ZjZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXo3gwDwQCAAIwCQMHBCYCCBYwADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIuiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDkiQNDxe/pz2glhabu7NLzZzu bNjASxI/7EICq1cVe5TFoatMUfWza78rBNOqrQBh8RE2DqDAUaSMmFehiXeULTQB P2kOzEWR/OkAecsfV2UvW9VD91fLjGqhauGmUlt1/MXxoi8/EQpxIDX40RqI+p+D i7LKfaYQKnoPnNeqhUGPGW2XdAlhIjJqKw36PMRuoISZpkSwoHcOmFF731WOhGxa y0YZJytruUI9CXzGRm7xRiQ+93IrN7GFX8JY1ctbIUgrbJtFnUWzxi6Doztcyyjf bVJYM6foskkAV/cRiDixEz7gsxfDjxiDmIbWu++/aAQbACX7f3vzM87VWvnt -----END CERTIFICATE-----Generated at Wed May 13 04:40:25 2026 by rpki-client