$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer File: e85794f9-a8df-4d59-8974-f686e8987f1b.cer (raw, json) Hash identifier: VdNzUGoHxveWecGG7aiShRY5DKrGTZ6EzXFTc75P6fE= Subject key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D9483111303EB37839D3AF580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 12:45:17 +0000 Certificate not after: Mon 24 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 205.237.8.0 -- 205.237.19.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:83:11:13:03:eb:37:83:9d:3a:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 21 12:45:17 2026 GMT Not After : Jul 24 12:45:17 2028 GMT Subject: CN=e85794f9-a8df-4d59-8974-f686e8987f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:a4:a3:49:2f:f0:e9:b4:85:9f:90:38:e9: 94:dc:6f:6e:70:f0:f9:41:0f:7b:e1:82:26:4b:e1: 89:8d:62:d0:01:f3:7f:1f:e6:71:8b:f5:bc:c7:70: a7:ec:f5:d6:52:26:2b:ba:20:84:2b:a0:10:66:c6: 56:0c:6f:e7:a4:7d:0b:7d:64:64:cc:37:4f:7c:5d: 4e:cb:ab:d3:e5:5e:42:1a:25:cc:8d:ca:5d:78:ee: 23:af:ca:1c:6f:c2:d0:70:c5:2f:4f:2d:69:e0:fa: 57:f6:89:b2:61:fe:c9:0f:dd:dc:bd:a5:f3:e4:84: ab:4d:d2:00:54:41:1b:89:53:f6:15:36:37:db:0b: 06:d6:83:ec:14:ff:91:8c:31:6e:00:e1:94:df:76: 83:d6:b6:c3:af:50:c9:64:4d:1f:56:20:42:a2:b9: ef:49:4e:2e:d3:6f:3a:d7:cd:df:1c:f0:17:6e:61: 2b:75:b9:74:bd:24:ee:28:3f:fa:83:06:0e:cc:0a: a6:48:c4:5a:7f:79:47:04:ff:4e:96:a8:b6:66:c9: f0:9b:64:09:b8:3e:f8:7b:33:53:77:6b:56:f1:11: 59:be:07:75:ed:56:38:02:51:44:f3:13:ee:5e:91: 8f:c1:21:0d:9c:71:e2:a1:dd:e8:4a:8c:53:b0:8e: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.237.8.0-205.237.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4c:a7:21:3d:c5:c3:5d:9c:f4:4e:27:b3:1a:d8:0b:07:89: f8:85:5e:f9:a9:9f:c3:1d:f5:93:ab:8f:36:bf:ce:6a:a0:a2: 7d:79:c4:a1:a9:24:37:cf:d8:95:f4:33:ca:88:1d:a9:9e:38: 22:c3:42:17:15:8d:b5:a9:30:41:3e:14:9c:d8:8f:d3:a7:17: 85:bc:da:a0:46:87:4c:f3:71:35:aa:43:ec:ca:4b:3d:02:ca: 34:65:6a:fd:6c:b6:52:fe:74:50:ea:92:87:b2:cd:6a:6d:9d: 19:44:e5:35:30:78:52:3f:fd:7c:94:a5:c1:4a:0c:13:fa:e1: 3a:4d:22:10:ed:f6:ff:a2:c6:b4:4c:b2:90:a9:db:bc:bd:bb: d0:eb:fc:ea:fd:79:fc:0c:6b:0d:5e:78:ac:e9:b4:e0:b5:23: ad:da:8b:66:8e:b9:65:1f:b5:51:6c:21:d2:16:ab:69:41:6d: 51:1c:36:16:72:6a:04:38:ef:27:1d:36:c2:80:1a:33:c9:c2: fa:66:c7:b6:6f:26:f6:eb:d3:63:98:3b:c7:ad:9f:71:56:d1: 5b:94:bb:35:c3:95:3c:35:3b:3b:ac:e0:b2:7c:0a:d5:d7:40: 6e:ce:4e:52:54:ed:e2:b4:51:4b:54:ce:49:ff:8e:f2:3b:0d: c9:7d:d1:b5 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE2UgxETA+s3g5069YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyMTEyNDUxN1oXDTI4MDcyNDEyNDUxN1owLzEtMCsGA1UEAxMk ZTg1Nzk0ZjktYThkZi00ZDU5LTg5NzQtZjY4NmU4OTg3ZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzCko0kv8Om0hZ+QOOmU3G9ucPD5QQ974YIm S+GJjWLQAfN/H+Zxi/W8x3Cn7PXWUiYruiCEK6AQZsZWDG/npH0LfWRkzDdPfF1O y6vT5V5CGiXMjcpdeO4jr8ocb8LQcMUvTy1p4PpX9omyYf7JD93cvaXz5ISrTdIA VEEbiVP2FTY32wsG1oPsFP+RjDFuAOGU33aD1rbDr1DJZE0fViBCornvSU4u0286 183fHPAXbmErdbl0vSTuKD/6gwYOzAqmSMRaf3lHBP9Olqi2Zsnwm2QJuD74ezNT d2tW8RFZvgd17VY4AlFE8xPuXpGPwSENnHHiod3oSoxTsI7mXQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFEIt9K+vk7xCxhxDe5wW+OfjyetSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ODU3OTRmOS1hOGRmLTRkNTktODk3NC1mNjg2ZTg5ODdmMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U4NTc5NGY5LWE4ZGYtNGQ1OS04 OTc0LWY2ODZlODk4N2YxYi9lODU3OTRmOS1hOGRmLTRkNTktODk3NC1mNjg2ZTg5 ODdmMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEA83tCAMEAs3tEDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUTKchPcXD XZz0TiezGtgLB4n4hV75qZ/DHfWTq482v85qoKJ9ecShqSQ3z9iV9DPKiB2pnjgi w0IXFY21qTBBPhSc2I/TpxeFvNqgRodM83E1qkPsyks9Aso0ZWr9bLZS/nRQ6pKH ss1qbZ0ZROU1MHhSP/18lKXBSgwT+uE6TSIQ7fb/osa0TLKQqdu8vbvQ6/zq/Xn8 DGsNXnis6bTgtSOt2otmjrllH7VRbCHSFqtpQW1RHDYWcmoEOO8nHTbCgBozycL6 Zse2byb269NjmDvHrZ9xVtFblLs1w5U8NTs7rOCyfArV10Buzk5SVO3itFFLVM5J /47yOw3JfdG1 -----END CERTIFICATE-----Generated at Wed May 13 11:54:36 2026 by rpki-client