$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39.cer File: edc5356b-bdd4-426e-b060-cd4202d71d39.cer (raw, json) Hash identifier: HYya06/KMwaD53FyBCKtSyDmklcDRZk2ik6mvHAKJF8= Subject key identifier: 30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DA80DDA33CB76BA03DDFE4600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 12:45:17 +0000 Certificate not after: Mon 31 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 204.135.0.0/16 IP: 206.223.30.0/24 IP: 2620:119:4000::/36 IP: 2620:1bc::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:0d:da:33:cb:76:ba:03:dd:fe:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 28 12:45:17 2026 GMT Not After : Jul 31 12:45:17 2028 GMT Subject: CN=edc5356b-bdd4-426e-b060-cd4202d71d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:5f:1d:3e:23:50:f7:ff:62:57:6b:fe:8c: 5c:45:2b:c9:01:8f:b1:eb:9e:10:d1:fb:f9:e0:1e: df:a2:31:69:16:fe:af:06:f2:c7:20:80:69:d7:34: 1c:af:a0:ad:51:d2:5e:5f:bd:17:90:e5:33:6d:e4: 3b:65:ed:15:fd:42:ed:45:0d:b5:7c:19:f4:1a:eb: fc:79:fb:95:d7:50:ed:df:87:4f:4f:00:62:dc:00: 30:f5:b9:e5:4b:71:e6:20:82:a3:e3:31:44:ef:fb: 1c:01:1d:17:d9:d3:17:bb:01:bc:d7:96:f2:63:e8: 28:a8:e8:b3:a5:4c:71:17:82:3c:24:3b:e3:22:fc: 96:02:55:b1:0b:3f:21:80:8d:cf:05:1c:1a:ad:b4: a9:8f:50:fe:b2:55:5a:70:08:2f:ec:9f:8f:58:7b: 1e:b7:61:b9:6d:88:b2:72:57:4c:b1:e1:c3:7c:bc: be:9f:64:23:87:2f:d3:65:6b:85:8d:a9:1b:47:33: ae:fe:95:a6:86:67:fd:e9:74:e3:91:e7:ff:51:5b: 7b:b6:aa:50:73:fb:a8:b7:c7:0b:f6:51:85:ba:2f: e4:d8:e4:aa:3e:52:fb:54:86:96:e0:00:c0:96:2b: f1:6d:a4:33:ae:f5:b0:79:68:99:6c:e5:2b:53:60: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.135.0.0/16 206.223.30.0/24 IPv6: 2620:119:4000::/36 2620:1bc::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:92:08:05:3d:27:16:c3:6b:f1:cc:9a:e1:8f:b9:30:17:a0: 75:49:4f:e9:bd:30:d8:53:6b:ab:38:b1:ca:26:89:26:d1:a0: 7f:9c:aa:65:9c:18:33:3b:1d:b7:51:d3:0d:b2:83:e5:54:ba: 7b:25:6c:31:6d:2f:c7:e2:e4:12:0a:58:6b:9d:fc:8a:6e:3f: 97:7f:7c:5f:54:3e:b4:ed:a8:f7:61:da:26:b2:9f:f4:fe:eb: 8f:a5:ed:66:1e:35:d0:29:a1:5b:e7:91:55:ee:67:92:41:11: 9f:d7:99:ce:65:44:37:6a:4f:76:c8:2c:e2:36:75:b8:94:0e: 41:78:4e:d3:61:b4:3b:f5:a3:a7:6a:08:e5:61:a8:15:69:7c: dd:c6:32:12:0c:97:86:7a:66:ed:65:d5:66:cf:43:41:34:56: 00:83:fa:25:07:28:11:d5:58:6b:31:3e:b8:d7:7f:60:bb:6d: bc:64:a2:6b:4e:cc:16:50:a7:77:cf:1f:7c:d8:e3:e5:ad:38: 8c:2d:95:18:63:dc:c7:47:ae:22:f3:2f:a1:3a:8b:12:8c:31: 85:52:b9:34:e2:15:5c:5b:16:79:62:4b:1f:ee:4d:62:b1:cc: e4:db:7b:a9:0c:cc:8d:88:5f:f1:3e:75:47:49:68:a6:63:cb: c2:70:42:66 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2oDdozy3a6A93+RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyODEyNDUxN1oXDTI4MDczMTEyNDUxN1owLzEtMCsGA1UEAxMk ZWRjNTM1NmItYmRkNC00MjZlLWIwNjAtY2Q0MjAyZDcxZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjVfHT4jUPf/Yldr/oxcRSvJAY+x654Q0fv5 4B7fojFpFv6vBvLHIIBp1zQcr6CtUdJeX70XkOUzbeQ7Ze0V/ULtRQ21fBn0Guv8 efuV11Dt34dPTwBi3AAw9bnlS3HmIIKj4zFE7/scAR0X2dMXuwG815byY+goqOiz pUxxF4I8JDvjIvyWAlWxCz8hgI3PBRwarbSpj1D+slVacAgv7J+PWHset2G5bYiy cldMseHDfLy+n2Qjhy/TZWuFjakbRzOu/pWmhmf96XTjkef/UVt7tqpQc/uot8cL 9lGFui/k2OSqPlL7VIaW4ADAlivxbaQzrvWweWiZbOUrU2AL0wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDCcOePUL2IhhbvFscKPYZRq3hcKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ZGM1MzU2Yi1iZGQ0LTQyNmUtYjA2MC1jZDQyMDJkNzFkMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2VkYzUzNTZiLWJkZDQtNDI2ZS1i MDYwLWNkNDIwMmQ3MWQzOS9lZGM1MzU2Yi1iZGQ0LTQyNmUtYjA2MC1jZDQyMDJk NzFkMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBEEAgABMAsDAwDMhwMEAM7fHjAVBAIAAjAPAwYEJiABGUADBQAm IAG8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD6SCAU9JxbDa/HMmuGPuTAXoHVJT+m9MNhTa6s4scomiSbR oH+cqmWcGDM7HbdR0w2yg+VUunslbDFtL8fi5BIKWGud/IpuP5d/fF9UPrTtqPdh 2iayn/T+64+l7WYeNdApoVvnkVXuZ5JBEZ/Xmc5lRDdqT3bILOI2dbiUDkF4TtNh tDv1o6dqCOVhqBVpfN3GMhIMl4Z6Zu1l1WbPQ0E0VgCD+iUHKBHVWGsxPrjXf2C7 bbxkomtOzBZQp3fPH3zY4+WtOIwtlRhj3MdHriLzL6E6ixKMMYVSuTTiFVxbFnli Sx/uTWKxzOTbe6kMzI2IX/E+dUdJaKZjy8JwQmY= -----END CERTIFICATE-----Generated at Wed May 13 04:36:13 2026 by rpki-client