$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345.cer File: d2acdbd8-f1ce-4bef-aafd-16a56d585345.cer (raw, json) Hash identifier: /axMMWVFib8u7F4nEA6p3utG2LGTxuBaea+UvskmI44= Subject key identifier: AC:46:0F:8D:37:C2:14:D1:71:06:1A:D3:44:20:48:D7:F7:6B:5D:D6 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E74C7F81ECB32F18F7B636400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jul 2026 20:45:12 +0000 Certificate not after: Thu 12 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 22332 AS: 33045 IP: 129.253.0.0/18 IP: 129.253.128.0/18 IP: 192.152.234.0/24 IP: 199.255.44.0/22 IP: 2620:ff::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:c7:f8:1e:cb:32:f1:8f:7b:63:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 10 20:45:12 2026 GMT Not After : Oct 12 20:45:12 2028 GMT Subject: CN=d2acdbd8-f1ce-4bef-aafd-16a56d585345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:fa:77:05:69:40:b3:aa:83:99:9d:e2:71: 44:b3:3b:d6:22:c4:b2:47:41:48:0c:ec:60:ff:8b: 63:3f:f6:ad:3e:e5:90:81:9c:86:61:b0:59:c7:ff: b6:9e:49:66:c1:db:f0:42:5d:28:87:e5:94:5a:76: 35:68:fa:0a:3c:9d:8f:0f:6d:74:c3:69:68:52:d9: df:22:60:04:af:85:ff:05:4b:6f:64:ef:1d:c6:0c: 56:36:1e:a6:dc:ad:20:3d:e7:64:31:d4:e7:a5:0a: 3b:b7:2f:31:38:a9:2f:ea:38:7c:19:39:ca:75:af: e4:d7:3a:8a:62:09:fa:66:f1:b6:c2:18:f4:40:3c: 33:07:d4:68:58:bf:b2:a7:0f:d5:47:37:50:29:d0: da:fb:7f:d4:77:2f:23:e2:ef:c4:8d:7f:77:71:15: 6a:d2:d7:ab:76:4a:30:c8:8e:78:c2:bb:ed:0e:b1: 25:a0:19:d0:55:6d:3a:2d:55:f9:38:1c:e2:e4:3f: a2:65:8e:e0:d7:89:bb:7c:61:34:44:b0:e0:81:9b: e8:7d:43:75:81:87:19:2f:3c:55:ea:86:9a:3a:6c: 2b:3c:0a:d5:e8:79:ae:f9:e2:99:0f:56:f2:f2:d0: a5:ba:5d:81:43:f1:da:06:53:23:f0:de:09:9b:72: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:46:0F:8D:37:C2:14:D1:71:06:1A:D3:44:20:48:D7:F7:6B:5D:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 129.253.0.0/18 129.253.128.0/18 192.152.234.0/24 199.255.44.0/22 IPv6: 2620:ff::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22332 33045 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:79:f1:2c:83:e0:5c:87:76:31:9f:21:73:ff:9f:6f:a1:ed: b9:58:30:99:24:e4:46:fd:53:21:f3:86:76:60:e5:15:e8:57: 28:7f:8f:ec:cb:ff:75:5c:3a:4a:58:71:d3:fb:9b:4a:a4:a4: a2:83:5c:1a:6e:7a:66:ef:3d:08:8a:ef:77:59:5e:2f:c3:dd: f3:6c:ad:83:8c:48:d6:7c:15:86:43:96:67:c3:25:8a:dc:82: c5:65:78:24:89:ef:60:45:3e:5f:29:42:68:ae:f5:c3:f1:da: 1e:c9:f9:5f:f4:5a:56:2d:21:97:94:53:cb:d8:96:a3:51:b6: 5d:30:e5:cb:32:14:ed:23:bd:08:9f:18:c9:60:a1:2b:b2:ae: 1e:78:89:ac:1b:b6:1e:de:82:e6:b6:0b:c7:5e:ff:68:a8:17: 2d:db:21:1c:3f:cb:57:3f:71:1b:08:86:cc:f8:c0:3c:5f:8f: 32:ea:1e:57:ef:26:72:66:c9:99:f9:5d:3b:41:af:9a:b0:3e: 6c:0f:b3:12:38:d9:34:25:23:66:74:b6:99:c8:d3:2f:dc:76: 0f:39:4d:58:6e:51:19:4b:8b:64:28:30:4e:a6:63:5d:38:91: 1b:9d:c3:ae:4f:fb:39:cf:3a:08:85:7f:60:c4:9f:7f:30:66: 2f:ed:9e:89 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWE50x/geyzLxj3tjZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxMDIwNDUxMloXDTI4MTAxMjIwNDUxMlowLzEtMCsGA1UEAxMk ZDJhY2RiZDgtZjFjZS00YmVmLWFhZmQtMTZhNTZkNTg1MzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFj6dwVpQLOqg5md4nFEszvWIsSyR0FIDOxg /4tjP/atPuWQgZyGYbBZx/+2nklmwdvwQl0oh+WUWnY1aPoKPJ2PD210w2loUtnf ImAEr4X/BUtvZO8dxgxWNh6m3K0gPedkMdTnpQo7ty8xOKkv6jh8GTnKda/k1zqK Ygn6ZvG2whj0QDwzB9RoWL+ypw/VRzdQKdDa+3/Udy8j4u/EjX93cRVq0terdkow yI54wrvtDrEloBnQVW06LVX5OBzi5D+iZY7g14m7fGE0RLDggZvofUN1gYcZLzxV 6oaaOmwrPArV6Hmu+eKZD1by8tClul2BQ/HaBlMj8N4Jm3L/RQIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFKxGD403whTRcQYa00QgSNf3a13WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MmFjZGJkOC1mMWNlLTRiZWYtYWFmZC0xNmE1NmQ1ODUzNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QyYWNkYmQ4LWYxY2UtNGJlZi1h YWZkLTE2YTU2ZDU4NTM0NS9kMmFjZGJkOC1mMWNlLTRiZWYtYWFmZC0xNmE1NmQ1 ODUzNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMB4EAgABMBgDBAaB/QADBAaB/YADBADAmOoDBALH/ywwDwQCAAIw CQMHACYgAP8AADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJXPAIDAIEVMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBADt58SyD4FyHdjGfIXP/n2+h7blYMJkk5Eb9UyHzhnZg5RXoVyh/j+zL/3Vc OkpYcdP7m0qkpKKDXBpuembvPQiK73dZXi/D3fNsrYOMSNZ8FYZDlmfDJYrcgsVl eCSJ72BFPl8pQmiu9cPx2h7J+V/0WlYtIZeUU8vYlqNRtl0w5csyFO0jvQifGMlg oSuyrh54iawbth7egua2C8de/2ioFy3bIRw/y1c/cRsIhsz4wDxfjzLqHlfvJnJm yZn5XTtBr5qwPmwPsxI42TQlI2Z0tpnI0y/cdg85TVhuURlLi2QoME6mY104kRud w65P+znPOgiFf2DEn38wZi/tnok= -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:07 2026 by rpki-client