$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.cer (raw, json) Hash identifier: i+Qm/CfAwAHZZMFtSazq5fjCnmPaIPeGGWwzY/NJgRE= Subject key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D60DD67F6DBC5772E52D416A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Apr 2026 00:45:17 +0000 Certificate not after: Thu 06 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 399521 IP: 142.249.64.0/22 IP: 172.98.8.0/22 IP: 2606:4640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:dd:67:f6:db:c5:77:2e:52:d4:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 3 00:45:17 2026 GMT Not After : Jul 6 00:45:17 2028 GMT Subject: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:13:70:80:0c:9e:f7:22:84:b6:0b:5f:2e: 55:c7:44:60:ed:87:3e:a0:7a:d8:54:0d:85:64:9e: b0:b6:94:ad:ae:92:7b:e0:14:8d:de:51:9a:ef:55: bb:c4:93:0e:c5:07:43:b3:f9:bb:b4:32:1d:9a:22: 0a:f8:68:d6:f7:94:b2:7e:b3:48:ad:81:32:d7:13: ea:d2:44:38:e5:ac:4c:21:06:e7:d7:3a:1e:bd:c7: b0:a5:60:33:8b:98:ae:e5:78:67:c9:32:ca:24:57: d1:1f:8e:fb:b2:85:c8:ca:03:01:b9:39:ea:b6:02: a5:a3:80:b2:93:4e:e4:f4:1a:17:2e:30:48:5f:1b: 5b:9e:90:ad:11:f6:e8:48:a1:39:e1:ff:b2:80:e3: ba:73:86:20:f3:d0:41:55:2a:e1:8f:a3:87:34:02: b3:45:be:3a:35:0b:ec:62:1e:2d:29:9c:d7:06:22: 4e:fb:bf:26:98:e0:96:b5:a9:b2:1e:7f:d9:bd:92: d5:52:4c:8b:10:91:2d:30:19:23:bf:1a:61:54:a4: 79:6b:dd:66:3e:0c:6c:63:14:c6:d1:5c:f1:c4:dd: b0:2b:7f:23:59:44:1c:cd:97:5d:6b:44:d1:37:9d: 36:8e:8f:9a:f5:b1:63:e0:db:10:ab:36:4d:d7:7c: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.249.64.0/22 172.98.8.0/22 IPv6: 2606:4640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399521 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a1:85:13:b1:ba:d9:66:fd:ba:77:4d:5d:1a:d5:95:c8:51: 2b:55:54:81:ce:bb:c4:06:e9:43:b8:74:1a:1c:93:90:b0:5a: 84:9a:f4:bd:d0:b3:1e:c0:f6:13:4a:17:1a:12:4a:11:df:2a: 8f:99:50:44:14:68:c9:53:9a:b3:b2:66:c9:da:03:bf:b0:e8: d7:17:c3:73:e1:3e:b3:9d:79:72:ba:6e:c0:d7:42:79:3b:57: 79:8b:1e:04:77:0d:e8:2d:51:ee:e5:12:16:03:e9:ee:f5:18: 02:09:9f:21:d3:d1:57:f1:36:74:f3:2d:a1:14:69:cf:10:eb: 86:1a:10:b7:94:ef:9f:f7:03:08:71:46:93:d9:5a:c5:82:85: 7a:8b:a6:3b:1f:b6:01:31:d7:44:37:48:a0:67:2a:d8:b4:64: a7:e7:0e:71:11:50:91:fe:0f:75:ea:5c:37:b6:09:0a:df:fc: 6b:d8:0f:e7:ab:3b:ed:0b:0f:d5:c3:13:42:3f:5f:e1:d5:ce: e7:7d:ac:7a:fe:77:ab:52:4e:67:e0:8d:09:af:e3:e4:3a:3f: cd:e0:14:49:f2:13:f3:8d:a5:cf:eb:5f:5b:19:1d:c5:99:b1: 1e:32:38:d7:db:da:98:7c:93:b3:e0:f1:96:cf:ea:b9:d9:a0: 83:99:32:15 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE1g3Wf228V3LlLUFqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwMzAwNDUxN1oXDTI4MDcwNjAwNDUxN1owLzEtMCsGA1UEAxMk M2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVcTcIAMnvcihLYLXy5Vx0Rg7Yc+oHrYVA2F ZJ6wtpStrpJ74BSN3lGa71W7xJMOxQdDs/m7tDIdmiIK+GjW95SyfrNIrYEy1xPq 0kQ45axMIQbn1zoevcewpWAzi5iu5XhnyTLKJFfRH477soXIygMBuTnqtgKlo4Cy k07k9BoXLjBIXxtbnpCtEfboSKE54f+ygOO6c4Yg89BBVSrhj6OHNAKzRb46NQvs Yh4tKZzXBiJO+78mmOCWtamyHn/ZvZLVUkyLEJEtMBkjvxphVKR5a91mPgxsYxTG 0VzxxN2wK38jWUQczZdda0TRN502jo+a9bFj4NsQqzZN13xttwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBvNBQMS6/zXktb+qrmWafoNbLDAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z YmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzNiZTcxMzNlLTdlNDYtNGZjNi05 NDEwLWUxOGJhZmI4ODVkOC8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZi ODg1ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKO+UADBAKsYggwDQQCAAIwBwMFACYGRkAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhihMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFehhROxutlm/bp3TV0a 1ZXIUStVVIHOu8QG6UO4dBock5CwWoSa9L3Qsx7A9hNKFxoSShHfKo+ZUEQUaMlT mrOyZsnaA7+w6NcXw3PhPrOdeXK6bsDXQnk7V3mLHgR3DegtUe7lEhYD6e71GAIJ nyHT0VfxNnTzLaEUac8Q64YaELeU75/3AwhxRpPZWsWChXqLpjsftgEx10Q3SKBn Kti0ZKfnDnERUJH+D3XqXDe2CQrf/GvYD+erO+0LD9XDE0I/X+HVzud9rHr+d6tS TmfgjQmv4+Q6P83gFEnyE/ONpc/rX1sZHcWZsR4yONfb2ph8k7Pg8ZbP6rnZoIOZ MhU= -----END CERTIFICATE-----Generated at Tue Apr 7 13:30:04 2026 by rpki-client