$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer File: f8920ef3-7d53-43c3-8266-318adf8495b4.cer (raw, json) Hash identifier: i+5U/3/xyZFmBUVlt2Gp1CYjvOKhXgrFMzdaqy1Tfjs= Subject key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D8C23032687E33A16C732EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Apr 2026 12:45:17 +0000 Certificate not after: Fri 21 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 46869 IP: 199.7.208.0/22 IP: 2604:1400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:23:03:26:87:e3:3a:16:c7:32:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 18 12:45:17 2026 GMT Not After : Jul 21 12:45:17 2028 GMT Subject: CN=f8920ef3-7d53-43c3-8266-318adf8495b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:39:8e:e3:73:fd:bb:8e:63:42:14:34:4f: 5d:70:8a:f7:b1:12:56:23:3c:45:ea:db:f0:03:a7: ed:18:e7:12:f1:18:b2:80:dd:cf:38:88:2d:95:da: 69:3a:b7:29:b7:f6:57:cb:16:1a:74:df:b0:b7:68: a0:81:03:fc:74:12:17:90:76:2e:44:88:d1:bf:6c: c2:b2:58:84:56:f4:cb:c9:7e:eb:c0:6a:70:b0:9f: d1:bd:2c:b4:36:66:6e:16:bb:42:97:fd:f8:db:88: 80:d3:8e:a1:01:71:49:20:30:c9:c6:13:fc:b2:5e: fc:d7:30:b4:eb:96:8c:70:5f:f8:3b:fd:b8:14:59: bd:d4:8b:79:eb:f0:69:39:81:e5:c2:38:25:d1:0d: 89:22:ed:04:5c:ef:2b:00:b2:fe:a6:6f:ad:c4:d3: 15:0d:2e:e4:be:52:a4:45:6e:67:90:a1:14:ec:b7: f6:9d:ca:44:df:2b:e5:bb:51:38:c8:ec:f7:37:63: cc:85:a7:85:65:2c:80:e4:5e:45:b8:f1:44:95:8d: b2:2d:b0:ca:c9:25:bb:11:13:e8:2a:af:74:3b:92: 31:d6:00:e4:cb:b4:0b:c2:6f:c9:d9:a0:90:7b:45: 77:d5:ea:6d:2b:38:a1:d5:62:ca:0e:a8:6a:0d:eb: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.7.208.0/22 IPv6: 2604:1400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46869 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:07:27:fa:d0:35:16:97:29:d8:32:8d:23:51:64:c1:e4:34: eb:09:2f:48:fc:84:94:d9:c1:17:b0:72:ed:5c:ee:ee:67:41: d6:94:06:a2:98:6e:13:e1:7c:6b:b4:fc:a0:07:bf:6f:ce:df: 5e:98:6b:d6:a2:2c:b2:fb:ec:41:41:0d:c3:52:58:5a:ce:05: 9d:60:bc:cc:4b:19:13:ef:78:db:45:cc:53:a9:52:67:c6:24: 85:c8:28:a8:40:4c:e4:0d:5d:db:2a:45:39:71:65:42:ec:99: 94:5b:d3:ec:37:f8:25:2f:e6:3f:0e:86:53:18:f1:94:06:d3: 4a:a8:f3:e9:1f:d8:2d:5e:53:d8:45:21:81:b2:24:42:4d:17: 77:dc:89:70:be:f1:52:70:bb:be:d9:a0:1a:5d:c0:ce:ea:dc: 57:d1:6b:7f:c2:8f:dc:d2:a1:8a:c8:2d:58:8f:27:a5:50:18: 8a:f8:0b:ab:36:2e:08:8f:a2:63:50:57:74:27:99:52:6a:79: 22:34:23:08:47:75:59:a9:ab:1f:3f:ff:98:ba:b1:f2:4b:3f: d8:cc:2f:7e:ea:ed:b5:31:f6:45:dc:97:bd:2f:a6:a1:dd:33: 5a:0c:5c:7a:16:6f:dc:ca:b2:78:08:2a:51:50:b1:50:99:89: 48:e9:21:ff -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2MIwMmh+M6Fscy6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxODEyNDUxN1oXDTI4MDcyMTEyNDUxN1owLzEtMCsGA1UEAxMk Zjg5MjBlZjMtN2Q1My00M2MzLTgyNjYtMzE4YWRmODQ5NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm405juNz/buOY0IUNE9dcIr3sRJWIzxF6tvw A6ftGOcS8RiygN3POIgtldppOrcpt/ZXyxYadN+wt2iggQP8dBIXkHYuRIjRv2zC sliEVvTLyX7rwGpwsJ/RvSy0NmZuFrtCl/3424iA046hAXFJIDDJxhP8sl781zC0 65aMcF/4O/24FFm91It56/BpOYHlwjgl0Q2JIu0EXO8rALL+pm+txNMVDS7kvlKk RW5nkKEU7Lf2ncpE3yvlu1E4yOz3N2PMhaeFZSyA5F5FuPFElY2yLbDKySW7ERPo Kq90O5Ix1gDky7QLwm/J2aCQe0V31eptKzih1WLKDqhqDeszIQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFOCUEsCL7UT43ayj3i/DiQJoINT7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m ODkyMGVmMy03ZDUzLTQzYzMtODI2Ni0zMThhZGY4NDk1YjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y4OTIwZWYzLTdkNTMtNDNjMy04 MjY2LTMxOGFkZjg0OTViNC9mODkyMGVmMy03ZDUzLTQzYzMtODI2Ni0zMThhZGY4 NDk1YjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALHB9AwDQQCAAIwBwMFACYEFAAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALcVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHYHJ/rQNRaXKdgyjSNRZMHkNOsJ L0j8hJTZwRewcu1c7u5nQdaUBqKYbhPhfGu0/KAHv2/O316Ya9aiLLL77EFBDcNS WFrOBZ1gvMxLGRPveNtFzFOpUmfGJIXIKKhATOQNXdsqRTlxZULsmZRb0+w3+CUv 5j8OhlMY8ZQG00qo8+kf2C1eU9hFIYGyJEJNF3fciXC+8VJwu77ZoBpdwM7q3FfR a3/Cj9zSoYrILViPJ6VQGIr4C6s2LgiPomNQV3QnmVJqeSI0IwhHdVmpqx8//5i6 sfJLP9jML37q7bUx9kXcl70vpqHdM1oMXHoWb9zKsngIKlFQsVCZiUjpIf8= -----END CERTIFICATE-----Generated at Wed May 13 12:35:54 2026 by rpki-client