$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer File: fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer (raw, json) Hash identifier: DJpJrG3mKhVKi8bSZOdCcZ/rDYl5Q1prswyWwHZ6MXM= Subject key identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D9FADCD3CE50E32AF8D3FBA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Apr 2026 12:45:17 +0000 Certificate not after: Fri 28 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 192.245.136.0/24 IP: 198.91.32.0 -- 198.91.41.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:ad:cd:3c:e5:0e:32:af:8d:3f:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 25 12:45:17 2026 GMT Not After : Jul 28 12:45:17 2028 GMT Subject: CN=fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:09:b9:ba:b2:76:8b:6e:21:97:ec:28:5e: 50:f5:da:66:a4:f2:f0:87:10:20:31:1a:70:2e:be: e5:56:37:b7:13:93:1b:2f:26:b1:26:6b:02:64:b5: fe:bb:ec:38:f1:37:b9:fb:d1:4e:14:5d:2e:c8:d9: 70:15:a2:a6:a9:da:c8:e9:51:cc:74:03:26:79:ee: c9:8d:54:f1:24:22:a5:e2:1d:90:3e:ef:03:30:2a: 95:f3:74:e8:38:4f:31:51:cf:69:9c:f9:f2:5f:8b: 53:a7:bd:52:44:ba:cb:dd:95:c5:9b:8b:73:fd:77: 32:0a:4a:31:01:13:ec:12:84:40:96:62:6f:14:7f: ab:7b:f8:34:b3:a7:5e:db:fa:4f:ad:32:7d:bd:b4: 99:b9:cd:9c:d4:80:06:da:86:3b:de:64:d2:8c:bb: b2:a3:13:3a:c9:2a:8d:44:b5:61:83:8d:3b:03:57: 38:37:6b:08:64:07:12:81:91:a6:ba:05:85:1f:43: 50:e2:12:91:40:ae:8a:32:1d:b5:e7:e9:a2:b3:7c: 5b:10:ff:48:90:75:14:bd:1b:d7:b8:7f:7c:48:b0: 32:f7:cf:88:5d:e1:6c:54:55:7d:dc:7a:f6:3f:7a: d7:06:52:4e:f3:0d:33:23:57:90:e4:09:cc:9f:1b: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.245.136.0/24 198.91.32.0-198.91.41.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:63:80:15:63:b3:6a:eb:ad:bb:46:57:78:9e:15:72:1b:b3: 2c:44:6e:4f:ca:15:ff:a1:35:79:bb:5a:16:95:f4:c4:ea:f9: 9b:cb:1f:c8:7d:f8:64:9b:89:6a:91:74:69:ca:bf:ea:d6:14: 7c:43:a2:04:01:0f:d0:41:56:e3:cc:40:f7:9d:f7:b0:b0:a5: b8:c8:4b:b1:bd:08:82:a2:bb:53:ec:6a:0a:81:81:77:ca:f9: 7c:b1:e0:8c:d2:0e:d1:6c:c9:b3:25:7a:e4:d0:cb:98:a1:f1: ed:48:86:00:64:28:c5:20:e1:75:a7:ea:af:74:1a:ec:d4:30: 0e:5f:9b:61:65:61:2b:19:f7:99:f8:d6:a7:07:57:d8:41:e4: f3:69:24:b2:0e:a3:2f:b8:fa:6b:dd:b4:89:bf:a7:1d:e9:5f: 8e:f7:a4:3b:8f:76:ce:db:f4:49:23:02:c0:00:08:f5:6f:ac: 25:74:60:8b:c2:f0:db:60:12:19:8c:f4:81:67:94:33:ba:73: 1a:0f:7e:1f:50:a2:17:30:8b:7d:b0:3f:dc:40:69:0e:55:a3: d0:df:37:f5:42:81:47:1a:1a:5f:7a:1a:e8:be:e6:40:01:c0: c9:c7:c7:a7:ac:d2:23:01:6a:13:13:28:9e:e9:6e:e5:35:fc: 7a:0a:d9:c2 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWE2frc085Q4yr40/ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyNTEyNDUxN1oXDTI4MDcyODEyNDUxN1owLzEtMCsGA1UEAxMk ZmE5M2YxYTEtOTA5OC00Yzc5LTlmZmMtOWZhZmU2YTNkZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji4JubqydotuIZfsKF5Q9dpmpPLwhxAgMRpw Lr7lVje3E5MbLyaxJmsCZLX+u+w48Te5+9FOFF0uyNlwFaKmqdrI6VHMdAMmee7J jVTxJCKl4h2QPu8DMCqV83ToOE8xUc9pnPnyX4tTp71SRLrL3ZXFm4tz/XcyCkox ARPsEoRAlmJvFH+re/g0s6de2/pPrTJ9vbSZuc2c1IAG2oY73mTSjLuyoxM6ySqN RLVhg407A1c4N2sIZAcSgZGmugWFH0NQ4hKRQK6KMh215+mis3xbEP9IkHUUvRvX uH98SLAy98+IXeFsVFV93Hr2P3rXBlJO8w0zI1eQ5AnMnxuj2QIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFM0k/pPhIZkSq2/QCalFWeWXfR+3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZhM2RkYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZhOTNmMWExLTkwOTgtNGM3OS05 ZmZjLTlmYWZlNmEzZGRhZi9mYTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZh M2RkYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADA9YgwDAMEBcZbIAMEAcZbKDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd Y4AVY7Nq6627Rld4nhVyG7MsRG5PyhX/oTV5u1oWlfTE6vmbyx/Iffhkm4lqkXRp yr/q1hR8Q6IEAQ/QQVbjzED3nfewsKW4yEuxvQiCortT7GoKgYF3yvl8seCM0g7R bMmzJXrk0MuYofHtSIYAZCjFIOF1p+qvdBrs1DAOX5thZWErGfeZ+NanB1fYQeTz aSSyDqMvuPpr3bSJv6cd6V+O96Q7j3bO2/RJIwLAAAj1b6wldGCLwvDbYBIZjPSB Z5QzunMaD34fUKIXMIt9sD/cQGkOVaPQ3zf1QoFHGhpfehrovuZAAcDJx8enrNIj AWoTEyie6W7lNfx6CtnC -----END CERTIFICATE-----Generated at Wed May 13 06:43:54 2026 by rpki-client