$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer File: 81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer (raw, json) Hash identifier: O1R/LiBkl5lJJVJLKhw66x5o8SvZbttmVQuppMm+UdQ= Subject key identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D59E2AE46C6131A733A68EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Mar 2026 12:45:15 +0000 Certificate not after: Mon 03 Jul 2028 12:45:15 +0000 Subordinate resources: AS: 27602 IP: 23.249.171.0/24 IP: 63.246.134.0/24 IP: 209.209.96.0/22 IP: 2604:f3c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:e2:ae:46:c6:13:1a:73:3a:68:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 31 12:45:15 2026 GMT Not After : Jul 3 12:45:15 2028 GMT Subject: CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:2b:5b:dd:c1:f9:2a:db:b3:f1:27:b6:a6: 37:bd:61:3b:1e:c1:4e:3b:b6:ae:ca:08:72:21:2c: d7:12:7a:71:17:4e:d4:18:cf:5c:f4:bb:2d:eb:e8: 54:95:62:ba:8d:c7:88:67:c4:83:89:f5:d3:84:90: a2:e9:f2:91:0f:7c:ae:3d:22:e2:07:a1:b6:d4:c1: 8e:dd:d1:c4:23:74:03:9b:a2:37:c7:1b:51:11:87: 23:a9:ad:e8:78:42:e1:b4:02:dc:76:e8:67:a5:e8: 01:75:8c:26:76:ef:f8:e0:c1:b3:b0:e9:fe:9e:de: 16:82:8a:b6:47:f3:68:f0:54:21:7b:fd:22:08:8d: 4c:3a:13:90:fe:c7:2a:5e:3a:c5:50:00:3d:0d:5b: 0a:59:be:d2:58:82:47:f6:2e:c0:42:ea:f4:da:73: 57:fc:67:02:04:d0:37:e5:c0:88:95:5f:7d:78:ae: 5c:c9:40:bd:1c:34:91:27:21:3b:86:49:43:45:7c: 6d:67:c4:98:13:46:01:f8:5f:56:04:b5:6a:ad:b2: c8:aa:8d:e9:82:fa:f4:dc:25:d4:27:e2:f9:de:63: ea:6c:c1:27:d8:2c:80:a0:81:c8:32:4b:4d:8b:fb: 7d:72:1e:85:5d:36:2c:d8:85:40:4f:bb:2a:a3:b5: 5b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.249.171.0/24 63.246.134.0/24 209.209.96.0/22 IPv6: 2604:f3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27602 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:71:aa:73:ba:35:85:fa:44:82:17:c7:d6:0d:a4:b7:bb:ee: dc:47:70:43:57:fd:bf:b6:92:2c:10:1c:9b:8d:b6:c9:a1:1a: 22:84:24:33:16:82:3a:e4:49:16:23:75:ce:74:2c:ae:54:be: 82:5d:be:ff:36:53:81:0b:0b:ff:22:bc:7f:c8:5e:65:e5:68: e0:40:a5:ca:a2:95:c5:e5:52:81:6f:0b:90:1e:2a:21:c8:b3: 6f:ef:08:97:90:e3:8f:96:24:09:80:a1:fc:4d:ee:b5:ee:ab: 64:7f:f6:d7:aa:97:83:c8:ce:46:46:8a:ae:ff:b3:34:36:43: 71:47:36:dd:a2:5f:cc:be:71:6d:06:7e:e1:68:cb:67:13:ad: c5:5a:00:bd:d4:ba:e3:24:30:4d:a6:44:4f:9b:6c:71:36:fe: 8f:db:62:6a:ba:bf:a9:e2:4d:7b:9f:90:b8:cc:0d:88:f3:8d: 24:ca:ed:d2:7a:8b:b4:b8:c3:35:41:06:f3:d5:11:ee:1a:84: 79:20:2a:32:74:29:d7:0b:74:61:77:d8:d4:d4:20:26:12:8a: 89:fe:75:ef:9b:d7:80:ef:5b:c5:80:f3:2f:05:5b:f8:43:0f: 45:40:99:36:4f:7e:6d:b0:ce:2e:fc:01:7c:67:3a:eb:3a:ef: 5e:81:01:ac -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE1Z4q5GxhMaczpo6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDMzMTEyNDUxNVoXDTI4MDcwMzEyNDUxNVowLzEtMCsGA1UEAxMk ODFjZDljOTctNWIwOC00ZTdkLWFlZDYtMWY1OTlhMzViZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivQrW93B+Srbs/EntqY3vWE7HsFOO7auyghy ISzXEnpxF07UGM9c9Lst6+hUlWK6jceIZ8SDifXThJCi6fKRD3yuPSLiB6G21MGO 3dHEI3QDm6I3xxtREYcjqa3oeELhtALcduhnpegBdYwmdu/44MGzsOn+nt4Wgoq2 R/No8FQhe/0iCI1MOhOQ/scqXjrFUAA9DVsKWb7SWIJH9i7AQur02nNX/GcCBNA3 5cCIlV99eK5cyUC9HDSRJyE7hklDRXxtZ8SYE0YB+F9WBLVqrbLIqo3pgvr03CXU J+L53mPqbMEn2CyAoIHIMktNi/t9ch6FXTYs2IVAT7sqo7VbEQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFD/EthIRFBPICHEiiq5xGFaSnNtDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 MWNkOWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5OWEzNWJkNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzgxY2Q5Yzk3LTViMDgtNGU3ZC1h ZWQ2LTFmNTk5YTM1YmQ0YS84MWNkOWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5OWEz NWJkNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAX+asDBAA/9oYDBALR0WAwDQQCAAIwBwMFACYE 88AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICa9IwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdnGqc7o1hfpE ghfH1g2kt7vu3EdwQ1f9v7aSLBAcm422yaEaIoQkMxaCOuRJFiN1znQsrlS+gl2+ /zZTgQsL/yK8f8heZeVo4EClyqKVxeVSgW8LkB4qIcizb+8Il5Djj5YkCYCh/E3u te6rZH/216qXg8jORkaKrv+zNDZDcUc23aJfzL5xbQZ+4WjLZxOtxVoAvdS64yQw TaZET5tscTb+j9tiarq/qeJNe5+QuMwNiPONJMrt0nqLtLjDNUEG89UR7hqEeSAq MnQp1wt0YXfY1NQgJhKKif5175vXgO9bxYDzLwVb+EMPRUCZNk9+bbDOLvwBfGc6 6zrvXoEBrA== -----END CERTIFICATE-----Generated at Sat Apr 18 12:14:10 2026 by rpki-client