$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer File: 1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer (raw, json) Hash identifier: 8Ns9S150a76CXQUISchcx2VkIY3nfBTcSWiFJ2cZQRY= Subject key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DEB0E454371844FEF39B9A780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 May 2026 12:45:17 +0000 Certificate not after: Thu 24 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 36466 IP: 199.180.216.0/22 IP: 208.71.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:0e:45:43:71:84:4f:ef:39:b9:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 22 12:45:17 2026 GMT Not After : Aug 24 12:45:17 2028 GMT Subject: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:21:12:6e:23:ab:f7:a5:ed:e2:87:85:80: 90:b8:a8:a3:71:66:bb:47:d0:12:ec:b3:f4:83:aa: a8:4e:a6:e4:a4:73:ac:bb:5a:bc:66:ee:05:e9:cc: 30:c8:e6:c4:29:ec:1a:8c:c9:a8:1f:53:a2:ca:28: 7b:eb:ee:02:b3:1c:f6:25:26:39:ec:e9:28:65:4d: 11:8d:32:9e:d4:98:7f:18:17:28:d7:b6:a7:09:50: 80:e2:f3:15:fb:85:69:23:95:e7:53:89:3e:7b:09: 57:3d:5e:f4:9f:5b:04:0b:3c:cd:f9:d9:1d:69:cd: 47:63:62:71:bf:cb:2d:13:9e:01:a3:6f:df:b2:f3: 86:bf:57:ba:19:a7:d5:b2:1d:91:a6:54:87:ab:ce: d1:e3:b9:6f:56:6b:a2:42:45:1f:28:50:cb:54:d7: a9:1c:47:f7:c7:6f:b4:88:a2:82:08:47:59:3f:98: ea:fa:7f:4a:80:b6:48:39:19:92:86:ec:91:25:4a: 61:64:5b:63:87:62:c5:6b:58:66:06:55:fe:9c:10: be:f9:a2:e8:71:28:80:dd:d5:10:52:05:47:9c:72: 05:c0:7e:25:ac:2b:1d:73:85:00:b1:90:7f:f2:ea: 28:e5:38:89:ea:f3:78:59:1b:b3:bc:61:52:2e:97: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.180.216.0/22 208.71.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36466 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e9:83:ae:e8:ec:84:46:99:80:57:1a:16:20:6b:a1:d8:96: 77:10:a5:53:2a:cb:d8:e7:9d:08:a2:fd:83:0c:8a:8d:cf:04: f0:ee:c7:7c:23:68:37:33:7d:10:9e:09:d0:85:43:66:33:b9: 89:47:73:45:2d:b2:a0:87:da:a3:ed:f4:2c:5b:f2:ca:10:6b: 45:42:6b:55:b3:f8:a2:f5:3f:8e:90:16:96:4d:61:46:fb:7e: 3c:34:40:5a:d1:b3:2f:f8:13:7c:9c:8e:d5:06:bb:3d:41:d6: 28:0f:13:02:3b:27:fb:eb:d9:9e:61:60:85:e9:42:85:a1:03: ad:8e:26:98:f4:3c:b0:0e:5e:68:40:db:b3:2a:5a:34:bf:c4: 2c:02:d3:e0:c5:4e:3b:a5:70:73:b8:5b:23:6c:3f:76:c3:56: d9:4f:44:e5:24:90:d5:ab:c4:85:47:cd:23:cd:aa:51:ca:53: 42:68:86:5d:1a:f5:c3:c8:0e:85:d4:1d:b2:9e:64:a9:0d:bf: 03:fb:51:97:b3:80:31:d4:5e:a0:8a:bc:dd:42:c5:8d:22:a8: 77:3b:86:1b:c8:19:1a:ed:94:0a:4a:bb:79:13:59:fa:ef:33: 51:e3:51:34:bf:18:c9:2f:e8:00:34:c4:f7:e7:27:94:92:e2: fd:7c:1f:85 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE3rDkVDcYRP7zm5p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyMjEyNDUxN1oXDTI4MDgyNDEyNDUxN1owLzEtMCsGA1UEAxMk MWNmYWUzYmEtMGY1My00MjhhLTkzZDgtNjg4NWM2NGMxZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SshEm4jq/el7eKHhYCQuKijcWa7R9AS7LP0 g6qoTqbkpHOsu1q8Zu4F6cwwyObEKewajMmoH1Oiyih76+4Csxz2JSY57OkoZU0R jTKe1Jh/GBco17anCVCA4vMV+4VpI5XnU4k+ewlXPV70n1sECzzN+dkdac1HY2Jx v8stE54Bo2/fsvOGv1e6GafVsh2RplSHq87R47lvVmuiQkUfKFDLVNepHEf3x2+0 iKKCCEdZP5jq+n9KgLZIORmShuyRJUphZFtjh2LFa1hmBlX+nBC++aLocSiA3dUQ UgVHnHIFwH4lrCsdc4UAsZB/8uoo5TiJ6vN4WRuzvGFSLpf4+QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFEEeBGESltCtWtPz7J6RPOfzHSIZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x Y2ZhZTNiYS0wZjUzLTQyOGEtOTNkOC02ODg1YzY0YzFmZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFjZmFlM2JhLTBmNTMtNDI4YS05 M2Q4LTY4ODVjNjRjMWZkOC8xY2ZhZTNiYS0wZjUzLTQyOGEtOTNkOC02ODg1YzY0 YzFmZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHtNgDBALQR1wwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI5yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAzpg67o7IRGmYBXGhYga6HYlncQpVMqy9jnnQii /YMMio3PBPDux3wjaDczfRCeCdCFQ2YzuYlHc0UtsqCH2qPt9Cxb8soQa0VCa1Wz +KL1P46QFpZNYUb7fjw0QFrRsy/4E3ycjtUGuz1B1igPEwI7J/vr2Z5hYIXpQoWh A62OJpj0PLAOXmhA27MqWjS/xCwC0+DFTjulcHO4WyNsP3bDVtlPROUkkNWrxIVH zSPNqlHKU0Johl0a9cPIDoXUHbKeZKkNvwP7UZezgDHUXqCKvN1CxY0iqHc7hhvI GRrtlApKu3kTWfrvM1HjUTS/GMkv6AA0xPfnJ5SS4v18H4U= -----END CERTIFICATE-----Generated at Fri May 22 16:54:13 2026 by rpki-client