$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer File: d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer (raw, json) Hash identifier: V0xoKQXZhA+g8zVxe1TUY1ZQ67kqNWTB+RmjQa+x4eo= Subject key identifier: 7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D91B860E7330D36AEA1847880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 12:45:17 +0000 Certificate not after: Sun 23 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 142.17.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:b8:60:e7:33:0d:36:ae:a1:84:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 20 12:45:17 2026 GMT Not After : Jul 23 12:45:17 2028 GMT Subject: CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:a5:7f:95:28:15:d9:80:07:97:73:f1:9a: d1:5d:91:73:e4:fb:9f:75:18:90:65:e1:f5:82:fb: 8e:d0:0c:77:ce:d4:88:3a:08:3f:f2:0c:26:e4:17: 40:f0:7f:eb:d7:36:3f:3b:bb:d3:08:90:6c:60:46: 05:4c:53:8f:c3:3a:61:69:20:ab:78:fa:2a:b6:34: fc:74:04:e6:48:9c:ff:07:f1:e9:5e:87:a8:27:4d: d1:1c:a2:c9:88:e3:bd:97:d6:6e:c4:bb:e5:32:7d: ab:c1:00:df:eb:be:64:c7:d6:6a:69:a8:72:a3:c7: 0a:1d:06:5d:39:05:9f:30:c0:39:e6:c0:c6:2d:17: 1b:c9:89:75:0f:98:ed:4d:dc:9e:54:ac:98:52:7d: da:7a:d3:3d:a8:c3:72:ab:08:9c:be:26:68:54:94: 40:b7:40:2d:b5:f9:27:e7:ab:ed:05:4d:a9:5b:58: ad:c3:61:0b:db:46:5b:ea:33:5a:1a:c9:78:35:7b: e3:9a:c9:ca:57:4e:a7:13:21:c3:71:8f:7b:10:be: ae:39:dd:c6:90:f2:e6:88:a4:e9:91:28:43:11:f5: 95:65:c8:b4:85:26:08:28:f0:ac:d9:0c:24:3c:f0: 1d:04:89:9a:7c:20:7c:1d:fc:89:32:d6:45:bc:4e: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.17.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d6:09:f9:1a:3b:26:77:c7:72:57:6d:f9:5d:55:51:e0:62: c3:7e:fb:f8:85:3f:c8:35:48:4f:b4:3e:f9:8c:33:80:03:45: e6:8b:67:35:71:40:76:13:3a:ef:0e:11:71:8b:cd:37:17:d8: 07:e3:b7:8d:f7:d6:5c:25:f3:c9:d9:cd:1b:87:c8:ba:fb:9d: 85:44:b2:0d:68:9e:0d:97:5d:f3:cb:5e:f9:63:9d:63:df:60: c7:5c:a9:a3:96:56:e2:34:97:63:81:87:f8:28:c9:77:5f:b5: 49:eb:ad:60:37:89:73:76:b0:74:2f:3e:9b:78:4a:28:83:2b: 97:69:41:e0:86:ac:93:43:ef:47:31:1a:a8:89:19:97:26:97: 57:94:a2:e7:60:7c:61:6b:b9:88:58:08:3f:7b:39:ba:72:fc: 2e:75:5e:11:be:c0:ab:52:44:1c:d3:b6:6a:9f:08:4f:06:4c: b3:f4:9c:65:e9:56:1e:4b:59:1a:03:b6:db:65:df:6c:56:d3: 77:12:6d:65:fb:95:fd:83:fc:dd:a8:7b:3c:65:fe:87:e3:c7: 05:13:8d:b6:f0:94:62:8d:bf:81:72:f7:df:50:66:cf:2c:89: 0b:5f:13:c2:65:0c:cd:46:e1:35:70:8b:36:82:3e:cb:6b:61: f9:10:0c:1e -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE2RuGDnMw02rqGEeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyMDEyNDUxN1oXDTI4MDcyMzEyNDUxN1owLzEtMCsGA1UEAxMk ZDc3MGM1Y2YtZDg4My00M2JjLWE3MmUtNGFlN2Y5MGQ0OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoalf5UoFdmAB5dz8ZrRXZFz5PufdRiQZeH1 gvuO0Ax3ztSIOgg/8gwm5BdA8H/r1zY/O7vTCJBsYEYFTFOPwzphaSCrePoqtjT8 dATmSJz/B/HpXoeoJ03RHKLJiOO9l9ZuxLvlMn2rwQDf675kx9Zqaahyo8cKHQZd OQWfMMA55sDGLRcbyYl1D5jtTdyeVKyYUn3aetM9qMNyqwicviZoVJRAt0Attfkn 56vtBU2pW1itw2EL20Zb6jNaGsl4NXvjmsnKV06nEyHDcY97EL6uOd3GkPLmiKTp kShDEfWVZci0hSYIKPCs2QwkPPAdBImafCB8HfyJMtZFvE6gfQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHweYndFSSEhEXeCYm+M1VKxuqguMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k NzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3ZjkwZDQ5MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Q3NzBjNWNmLWQ4ODMtNDNiYy1h NzJlLTRhZTdmOTBkNDkwMC9kNzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3Zjkw ZDQ5MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCOETBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg1gn5Gjsmd8dyV235XVVR 4GLDfvv4hT/INUhPtD75jDOAA0Xmi2c1cUB2EzrvDhFxi803F9gH47eN99ZcJfPJ 2c0bh8i6+52FRLINaJ4Nl13zy175Y51j32DHXKmjllbiNJdjgYf4KMl3X7VJ661g N4lzdrB0Lz6beEoogyuXaUHghqyTQ+9HMRqoiRmXJpdXlKLnYHxha7mIWAg/ezm6 cvwudV4RvsCrUkQc07ZqnwhPBkyz9Jxl6VYeS1kaA7bbZd9sVtN3Em1l+5X9g/zd qHs8Zf6H48cFE4228JRijb+BcvffUGbPLIkLXxPCZQzNRuE1cIs2gj7La2H5EAwe -----END CERTIFICATE-----Generated at Wed May 13 06:22:29 2026 by rpki-client