$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05.cer File: fbdf8030-f526-45ac-a17d-e304c3d89f05.cer (raw, json) Hash identifier: tEz2aBSs2++dymFRzKmaMwlXz54u+vWQraFWy+jxpbc= Subject key identifier: 91:B4:F2:70:69:98:07:8E:00:C1:19:CF:93:55:11:0A:66:46:E8:38 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D974DC090D217F6C46104D780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 12:45:18 +0000 Certificate not after: Tue 25 Jul 2028 12:45:18 +0000 Subordinate resources: IP: 23.162.152.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:4d:c0:90:d2:17:f6:c4:61:04:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 22 12:45:18 2026 GMT Not After : Jul 25 12:45:18 2028 GMT Subject: CN=fbdf8030-f526-45ac-a17d-e304c3d89f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:e4:7d:d2:ea:f3:01:9f:e7:e3:eb:9e:f5: 85:df:ea:80:c8:c7:cc:74:2e:fa:07:9d:fe:bc:7a: b2:2f:7c:3e:f2:20:6a:31:56:a4:54:ca:19:70:17: aa:5b:de:62:aa:4e:c9:b1:80:eb:35:ba:b8:90:ce: 1f:4d:c5:af:74:82:40:4c:0d:63:95:5a:9e:8d:3e: 73:e9:8e:84:3f:ae:86:0a:74:b7:e4:87:32:f2:e2: 9f:fb:da:6e:09:63:f8:04:b3:98:da:18:a4:76:b1: 34:ff:0c:61:f5:6f:48:71:0a:d7:eb:a1:c8:bc:5c: 69:53:36:08:3a:4f:7a:fe:da:e1:af:6c:ea:45:6b: 95:be:ca:2b:a2:e7:b6:a1:49:0c:73:5a:53:8a:72: 85:16:f0:68:35:68:3e:ba:19:cf:fa:f0:ea:c4:c2: f3:63:99:45:90:e8:bd:b9:7c:c0:1e:03:44:a9:36: ed:75:09:a6:53:6e:fd:aa:cc:d9:7f:6d:fa:0a:01: 76:dd:2c:48:07:e0:3c:9b:42:4e:f8:c9:4c:a0:bc: 0a:a1:40:18:be:fe:d3:b7:b0:57:01:d2:fc:73:8e: 1e:6e:a1:6a:fe:61:5e:a7:5f:7f:c1:e7:e0:dd:79: 1e:fe:9b:b3:80:11:be:3f:7b:5a:b2:b1:39:6f:87: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B4:F2:70:69:98:07:8E:00:C1:19:CF:93:55:11:0A:66:46:E8:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.162.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cd:7f:1c:d8:dc:0b:9c:b7:5a:07:67:8c:10:11:4f:aa:d9: 88:1a:d9:cc:3b:6f:d6:12:af:09:b1:be:de:d6:f5:bd:b3:ae: 06:ed:13:bb:fa:24:72:03:82:ad:c5:0a:06:2d:8e:f0:9e:ee: d1:3d:bc:14:a8:b1:3a:0f:4d:5c:6f:59:c6:1f:c7:80:80:34: 46:48:3a:69:94:7a:25:b5:d3:f5:98:4c:54:0a:08:f8:38:af: d1:42:1e:85:f0:51:9d:89:5c:77:7a:b9:c0:bd:01:38:bb:e6: b7:e5:0c:ed:3c:d9:7d:3f:9c:11:c5:44:a8:26:4e:5d:e7:ab: 78:da:b5:2c:5b:0a:83:e8:02:9f:a0:4b:8d:46:a8:b8:f4:88: 67:cc:29:32:68:99:e0:fa:34:8a:ae:4e:0b:88:c7:44:e4:15: 45:f0:9b:43:2c:44:83:29:0e:09:1f:02:9e:b4:78:ef:2d:01: f3:2c:03:75:45:48:dc:02:4d:e1:ea:c6:3d:71:f8:ab:ec:39: 0b:67:d2:a2:fe:f1:b3:5e:53:52:c8:b6:53:6c:6d:6d:f6:68: 5a:de:c6:02:13:9c:2b:56:a9:2e:4c:2c:7a:0f:4f:de:9f:2a: bd:0c:64:35:64:5a:31:a1:3a:f7:b0:f1:87:67:19:3e:95:20: 26:96:6a:42 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2XTcCQ0hf2xGEE14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyMjEyNDUxOFoXDTI4MDcyNTEyNDUxOFowLzEtMCsGA1UEAxMk ZmJkZjgwMzAtZjUyNi00NWFjLWExN2QtZTMwNGMzZDg5ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DbkfdLq8wGf5+PrnvWF3+qAyMfMdC76B53+ vHqyL3w+8iBqMVakVMoZcBeqW95iqk7JsYDrNbq4kM4fTcWvdIJATA1jlVqejT5z 6Y6EP66GCnS35Icy8uKf+9puCWP4BLOY2hikdrE0/wxh9W9IcQrX66HIvFxpUzYI Ok96/trhr2zqRWuVvsoroue2oUkMc1pTinKFFvBoNWg+uhnP+vDqxMLzY5lFkOi9 uXzAHgNEqTbtdQmmU279qszZf236CgF23SxIB+A8m0JO+MlMoLwKoUAYvv7Tt7BX AdL8c44ebqFq/mFep19/wefg3Xke/puzgBG+P3tasrE5b4ec4QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJG08nBpmAeOAMEZz5NVEQpmRug4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YmRmODAzMC1mNTI2LTQ1YWMtYTE3ZC1lMzA0YzNkODlmMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZiZGY4MDMwLWY1MjYtNDVhYy1h MTdkLWUzMDRjM2Q4OWYwNS9mYmRmODAzMC1mNTI2LTQ1YWMtYTE3ZC1lMzA0YzNk ODlmMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXopgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALM1/HNjcC5y3WgdnjBAR T6rZiBrZzDtv1hKvCbG+3tb1vbOuBu0Tu/okcgOCrcUKBi2O8J7u0T28FKixOg9N XG9Zxh/HgIA0Rkg6aZR6JbXT9ZhMVAoI+Div0UIehfBRnYlcd3q5wL0BOLvmt+UM 7TzZfT+cEcVEqCZOXeereNq1LFsKg+gCn6BLjUaouPSIZ8wpMmiZ4Po0iq5OC4jH ROQVRfCbQyxEgykOCR8CnrR47y0B8ywDdUVI3AJN4erGPXH4q+w5C2fSov7xs15T Usi2U2xtbfZoWt7GAhOcK1apLkwseg9P3p8qvQxkNWRaMaE697Dxh2cZPpUgJpZq Qg== -----END CERTIFICATE-----Generated at Wed May 13 05:09:21 2026 by rpki-client