$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer File: dd89d034-c049-4b11-917d-e035f703312f.cer (raw, json) Hash identifier: v+DXNxi6BXC8/2T5j9zUF5WsyQOFQ28/OOM/Pzy2Llk= Subject key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DCF236D812728D30F96507D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 12:45:17 +0000 Certificate not after: Mon 14 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 13394 IP: 204.63.214.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:23:6d:81:27:28:d3:0f:96:50:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 12 12:45:17 2026 GMT Not After : Aug 14 12:45:17 2028 GMT Subject: CN=dd89d034-c049-4b11-917d-e035f703312f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:9d:76:c6:fd:ab:8e:cd:d9:bd:e0:2b:05: 51:8e:5e:e7:ec:24:e0:4b:e1:6e:2a:e5:a2:42:f2: 19:be:71:26:b9:0b:44:13:33:05:55:65:e8:b9:a7: ac:0e:33:00:be:e3:7c:56:e7:06:a7:b2:cb:0e:dd: 73:12:84:94:85:be:36:24:1f:cd:bf:f7:45:62:b8: 5a:33:ca:36:00:dd:a9:14:d5:1c:3f:10:18:30:c3: 1a:36:41:df:a4:3a:10:c6:60:d9:1f:09:76:7d:50: 56:6f:57:f6:ae:31:d3:c1:b7:81:35:f6:8d:0e:53: 3f:94:6b:8e:bf:50:82:26:f9:95:5c:ed:2e:98:66: cf:92:b9:50:dc:ab:d1:a2:88:41:c4:d8:e7:d2:20: 93:0a:d4:1f:69:b9:e6:92:93:9e:48:30:0f:5d:eb: 95:5f:29:e8:4a:5b:1b:ee:dd:c4:86:7c:4f:fc:bb: 0d:90:27:d3:90:59:69:fa:ca:46:bc:43:aa:90:86: 72:80:60:d5:2a:4e:4c:0b:73:88:77:e6:5e:70:09: aa:53:87:cf:10:da:ee:38:c7:c6:f6:42:af:46:ca: 21:65:0e:d9:03:7c:66:b1:22:60:a7:71:27:6d:ee: bd:dd:52:8a:64:46:ad:ad:86:28:c9:60:5b:69:98: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.63.214.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13394 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f5:26:c1:09:74:93:76:66:5b:e5:2f:26:01:ca:46:4a:78: 1a:2f:af:32:4a:3b:66:d4:0a:82:f7:ab:cc:51:76:0a:9d:f3: e0:ec:73:7d:8f:b5:0d:6e:17:01:33:60:fd:67:e0:49:84:50: d2:fe:ea:e9:79:8e:bb:54:8f:49:fb:e4:3a:d0:48:6b:2b:73: 29:45:95:67:2f:9f:35:1e:09:d7:a7:df:f7:0e:bf:1f:1b:a1: 0d:61:d4:53:b0:a2:32:23:db:70:43:c6:82:6d:45:af:98:ab: 82:c4:22:75:f6:8d:c7:0e:cb:22:70:75:af:64:a9:eb:35:e1: 24:ab:47:42:c5:c0:a8:18:a6:a5:df:04:94:f1:1b:29:f1:3b: 49:79:a8:c1:cb:95:c6:58:96:9b:61:e8:d8:24:f8:fa:cf:dd: 1f:66:77:17:65:77:28:ec:c0:c7:90:da:9a:b8:e0:46:71:7d: 5e:b6:83:4a:9a:0d:8c:84:f8:07:09:bf:79:19:ba:00:19:0e: 0d:f6:50:da:a7:7e:6d:ca:97:56:55:58:a6:bd:cb:bc:fd:1e: 63:ef:38:14:07:1f:1e:ce:11:61:96:c4:ca:cc:5e:7e:cc:fa: b4:7e:21:3c:f6:81:35:99:13:32:f9:dd:b7:99:fd:54:8e:a5: 64:e3:e8:78 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE3PI22BJyjTD5ZQfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxMjEyNDUxN1oXDTI4MDgxNDEyNDUxN1owLzEtMCsGA1UEAxMk ZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMzMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgSddsb9q47N2b3gKwVRjl7n7CTgS+FuKuWi QvIZvnEmuQtEEzMFVWXouaesDjMAvuN8VucGp7LLDt1zEoSUhb42JB/Nv/dFYrha M8o2AN2pFNUcPxAYMMMaNkHfpDoQxmDZHwl2fVBWb1f2rjHTwbeBNfaNDlM/lGuO v1CCJvmVXO0umGbPkrlQ3KvRoohBxNjn0iCTCtQfabnmkpOeSDAPXeuVXynoSlsb 7t3EhnxP/LsNkCfTkFlp+spGvEOqkIZygGDVKk5MC3OId+ZecAmqU4fPENruOMfG 9kKvRsohZQ7ZA3xmsSJgp3Enbe693VKKZEatrYYoyWBbaZhFsQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFP0tNszs7gDcKWQmqHwvrOYfDrH4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k ZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2RkODlkMDM0LWMwNDktNGIxMS05 MTdkLWUwMzVmNzAzMzEyZi9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1Zjcw MzMxMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMP9YwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NFIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAevUmwQl0k3ZmW+UvJgHKRkp4Gi+vMko7ZtQKgverzFF2Cp3z 4OxzfY+1DW4XATNg/WfgSYRQ0v7q6XmOu1SPSfvkOtBIaytzKUWVZy+fNR4J16ff 9w6/HxuhDWHUU7CiMiPbcEPGgm1Fr5irgsQidfaNxw7LInB1r2Sp6zXhJKtHQsXA qBimpd8ElPEbKfE7SXmowcuVxliWm2Ho2CT4+s/dH2Z3F2V3KOzAx5DamrjgRnF9 XraDSpoNjIT4Bwm/eRm6ABkODfZQ2qd+bcqXVlVYpr3LvP0eY+84FAcfHs4RYZbE ysxefsz6tH4hPPaBNZkTMvndt5n9VI6lZOPoeA== -----END CERTIFICATE-----Generated at Wed May 13 05:06:00 2026 by rpki-client