$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer File: a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer (raw, json) Hash identifier: OaFlJwuKxUfeIM4sRzHAjqcwLwERHw8oy4KIGUXMs24= Subject key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D6AA2CC3BA7D06632012B3F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Apr 2026 12:45:16 +0000 Certificate not after: Sun 09 Jul 2028 12:45:16 +0000 Subordinate resources: IP: 216.205.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:a2:cc:3b:a7:d0:66:32:01:2b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 6 12:45:16 2026 GMT Not After : Jul 9 12:45:16 2028 GMT Subject: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:ff:45:c5:6c:ac:58:52:7d:8d:ca:c8:8c: d5:d4:67:b0:a7:a5:96:dd:bb:41:f2:16:99:5f:aa: 0c:e1:b7:76:f0:45:7e:a4:47:cd:5e:9e:56:2f:8a: eb:fc:29:e6:d0:a5:44:c6:e2:2f:a3:8a:05:50:1b: 55:3b:23:e6:79:9d:4a:0a:2c:58:30:62:d6:64:f1: f2:89:9e:5f:0c:57:f0:4e:d6:7f:a4:28:4a:99:4f: 64:53:4d:03:1a:6d:26:6d:00:cf:c8:fc:3c:51:e0: 1f:0d:95:40:d5:6d:f0:c1:8f:cc:f2:d4:13:f2:2b: 69:59:86:c0:31:44:8c:9c:83:51:2f:aa:b3:98:ed: 8b:4d:a6:30:29:6c:9c:ab:9b:35:f0:49:79:4b:ba: a5:bb:07:68:36:67:c1:04:00:d9:2e:37:6e:df:a5: b8:68:6f:93:b9:d1:a8:d8:4f:06:6b:a4:40:2d:79: 4d:31:61:05:49:fa:42:3e:05:7a:a1:82:d5:b6:60: fc:71:53:4f:b1:a1:39:93:fd:49:c7:7f:0f:5b:f2: 41:e9:89:be:08:52:34:98:01:88:52:1f:1e:e8:f5: 89:8c:59:09:ff:6e:68:ea:56:d6:58:e9:57:11:e3: e9:33:b2:f9:e7:bb:67:d4:b8:b0:26:c1:ea:23:9a: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 216.205.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7a:9e:4c:15:e2:05:16:4f:a7:36:fb:b2:e3:ec:65:fa:62: 75:3b:e2:36:b2:c1:ce:05:88:24:b7:7b:0e:4a:d4:85:d6:d3: 46:97:3a:95:d2:55:a2:ca:32:ea:56:d6:09:0a:2e:ba:29:05: e5:f5:f7:7d:e0:c5:70:6c:57:75:1e:15:95:0d:c4:33:cb:94: 2d:a1:fa:4f:64:df:6a:03:f7:65:f4:23:5d:37:33:87:73:91: f6:9a:00:cb:04:4b:85:b6:da:b9:05:e6:1e:27:06:d5:39:ae: c2:e7:f8:c8:4a:38:f5:65:8a:2b:41:8f:ec:5e:5d:3f:7f:1b: 24:ce:a1:2e:78:0a:8f:9d:68:1a:98:c6:42:2f:47:f7:9c:b9: 58:50:c1:44:fe:4d:5c:f2:93:1a:e2:9b:1d:83:26:3a:4a:1d: 0e:13:33:81:b5:1a:b7:3d:8d:d0:c0:86:28:bc:46:ac:c7:bc: fb:9f:a5:67:ab:1d:21:f1:a2:3a:73:9f:ba:b1:f9:fa:5e:4d: 90:4e:81:8f:24:65:a0:ea:b2:ff:a1:fb:fc:c9:9e:9f:a5:c3: d5:71:72:74:0c:ae:51:c6:be:6c:19:eb:7d:67:04:0f:4d:2d: b0:20:78:72:f1:eb:2d:f7:d5:20:13:44:30:b9:ac:6c:37:78: f1:a3:92:c1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1qosw7p9BmMgErP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwNjEyNDUxNloXDTI4MDcwOTEyNDUxNlowLzEtMCsGA1UEAxMk YTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJlYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR//RcVsrFhSfY3KyIzV1Gewp6WW3btB8haZ X6oM4bd28EV+pEfNXp5WL4rr/Cnm0KVExuIvo4oFUBtVOyPmeZ1KCixYMGLWZPHy iZ5fDFfwTtZ/pChKmU9kU00DGm0mbQDPyPw8UeAfDZVA1W3wwY/M8tQT8itpWYbA MUSMnINRL6qzmO2LTaYwKWycq5s18El5S7qluwdoNmfBBADZLjdu36W4aG+TudGo 2E8Ga6RALXlNMWEFSfpCPgV6oYLVtmD8cVNPsaE5k/1Jx38PW/JB6Ym+CFI0mAGI Uh8e6PWJjFkJ/25o6lbWWOlXEePpM7L557tn1LiwJsHqI5rb+QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJCNbj2oPOXna9U9aJIPZ1um1j5KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h M2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EzYjY5NDhkLTNlZTEtNDE1My05 YzQwLTFjZDc0NjViZWEyYi9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1 YmVhMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALYzTQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT3qeTBXiBRZPpzb7suPs ZfpidTviNrLBzgWIJLd7DkrUhdbTRpc6ldJVosoy6lbWCQouuikF5fX3feDFcGxX dR4VlQ3EM8uULaH6T2TfagP3ZfQjXTczh3OR9poAywRLhbbauQXmHicG1Tmuwuf4 yEo49WWKK0GP7F5dP38bJM6hLngKj51oGpjGQi9H95y5WFDBRP5NXPKTGuKbHYMm OkodDhMzgbUatz2N0MCGKLxGrMe8+5+lZ6sdIfGiOnOfurH5+l5NkE6BjyRloOqy /6H7/Mmen6XD1XFydAyuUca+bBnrfWcED00tsCB4cvHrLffVIBNEMLmsbDd48aOS wQ== -----END CERTIFICATE-----Generated at Tue Apr 7 12:06:26 2026 by rpki-client