$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d5a7a56-a1fb-4ccc-bb83-1973074dcfef.cer File: 1d5a7a56-a1fb-4ccc-bb83-1973074dcfef.cer (raw, json) Hash identifier: qp7LabqrJ2Ps5Zq/syI9hteRLXpyONLlVNUHt722ZvE= Subject key identifier: B7:D1:F9:5D:C8:6B:7F:09:AE:78:00:EE:0C:C9:B8:F9:8D:72:7A:66 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584F67591B085FDCF6C65E2CBB20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d5a7a56-a1fb-4ccc-bb83-1973074dcfef/1d5a7a56-a1fb-4ccc-bb83-1973074dcfef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d5a7a56-a1fb-4ccc-bb83-1973074dcfef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 18:03:15 +0000 Certificate not after: Mon 10 Jul 2028 21:33:03 +0000 Subordinate resources: AS: 402367 IP: 198.136.216.0/24 IP: 2602:f403::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:59:1b:08:5f:dc:f6:c6:5e:2c:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 5 18:03:15 2026 GMT Not After : Jul 10 21:33:03 2028 GMT Subject: CN=1d5a7a56-a1fb-4ccc-bb83-1973074dcfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:2e:a5:5c:c9:2b:19:31:58:bd:b2:41:b6: eb:e9:a4:64:cb:1d:41:bc:fa:a5:d9:ab:90:e7:97: f0:02:13:7f:82:43:22:69:40:fa:f0:16:d5:28:79: 10:18:2c:da:58:16:5c:b0:72:5a:c8:4c:0e:33:9f: 6e:ed:9b:23:c1:26:54:8a:4c:57:2b:66:6a:c2:9f: 6e:53:f6:97:8a:7c:09:53:89:03:cb:98:16:59:a0: 37:16:41:5f:fb:7e:1e:21:a0:37:8c:ca:41:99:d0: bf:f3:44:9b:9e:98:7e:28:2e:a6:82:93:07:ca:b8: 86:1a:eb:40:67:a9:bb:e5:4b:8d:3b:ed:b9:de:58: ff:1d:50:0d:a9:d8:1c:2d:b3:f6:0a:38:3e:59:cd: 04:6e:a7:df:dd:d0:55:33:64:d2:fa:5b:8d:51:a5: 73:45:de:9e:7f:d6:5c:01:7f:9c:69:54:04:75:d9: 4e:ff:4e:3c:39:78:48:ce:65:c0:72:1b:43:b0:ce: 0f:81:7b:d0:c2:46:01:f0:f3:68:5e:b9:f7:82:2b: c5:70:c6:aa:39:33:ce:ec:23:36:ec:78:fd:e4:e5: 2e:c7:ab:75:72:38:31:95:b6:c5:a9:d7:4f:84:c2: 5f:d8:7d:23:2b:37:81:aa:91:8c:aa:dc:d4:f4:cb: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:F9:5D:C8:6B:7F:09:AE:78:00:EE:0C:C9:B8:F9:8D:72:7A:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d5a7a56-a1fb-4ccc-bb83-1973074dcfef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d5a7a56-a1fb-4ccc-bb83-1973074dcfef/1d5a7a56-a1fb-4ccc-bb83-1973074dcfef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.136.216.0/24 IPv6: 2602:f403::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402367 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:12:99:8b:92:d9:8d:e0:49:31:e9:b7:89:6b:7f:fd:58:30: b4:c3:b7:d7:3e:75:ec:24:bb:29:81:14:c3:68:f4:77:24:47: 44:9d:85:01:ba:07:03:a0:9b:11:40:53:6e:94:18:98:8a:d7: 38:1c:bb:23:da:aa:07:62:a5:02:5b:d2:41:ce:2e:e3:2c:13: 1f:25:dd:d6:29:55:64:be:47:bd:c5:9f:e4:ac:f9:09:25:ed: 04:46:6d:e0:f2:74:62:1a:2f:39:d3:3e:dd:26:45:65:d0:7c: f5:f0:f7:b0:b0:81:41:dc:7a:58:88:21:47:ae:04:04:ab:fc: 21:01:4e:3b:b5:a1:a8:61:ad:77:cf:a4:40:25:34:a3:ab:5e: 0a:cb:93:30:e5:45:28:eb:2a:6f:34:f3:4e:5b:7f:89:43:c0: 2c:95:5f:94:2c:11:f8:d0:9e:d8:6f:e9:72:7c:40:f5:12:08: 54:46:dd:54:2c:2a:27:66:82:ab:dd:d7:86:5a:cb:6a:3c:18: 92:d3:7a:c1:6d:1d:bc:70:45:f9:9e:af:f6:41:8b:14:20:45: fa:12:57:cf:82:55:c5:99:72:4b:54:64:25:21:62:fa:61:16: 5e:8f:4f:39:b3:74:a2:26:c6:83:62:69:4a:6f:45:bb:cb:49: ce:59:67:03 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9nWRsIX9z2xl4suyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MTAwNTE4MDMxNVoXDTI4MDcxMDIxMzMwM1owLzEtMCsGA1UEAxMk MWQ1YTdhNTYtYTFmYi00Y2NjLWJiODMtMTk3MzA3NGRjZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpkupVzJKxkxWL2yQbbr6aRkyx1BvPql2auQ 55fwAhN/gkMiaUD68BbVKHkQGCzaWBZcsHJayEwOM59u7ZsjwSZUikxXK2Zqwp9u U/aXinwJU4kDy5gWWaA3FkFf+34eIaA3jMpBmdC/80Sbnph+KC6mgpMHyriGGutA Z6m75UuNO+253lj/HVANqdgcLbP2Cjg+Wc0Ebqff3dBVM2TS+luNUaVzRd6ef9Zc AX+caVQEddlO/048OXhIzmXAchtDsM4PgXvQwkYB8PNoXrn3givFcMaqOTPO7CM2 7Hj95OUux6t1cjgxlbbFqddPhMJf2H0jKzeBqpGMqtzU9MtNfwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLfR+V3Ia38JrngA7gzJuPmNcnpmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x ZDVhN2E1Ni1hMWZiLTRjY2MtYmI4My0xOTczMDc0ZGNmZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFkNWE3YTU2LWExZmItNGNjYy1i YjgzLTE5NzMwNzRkY2ZlZi8xZDVhN2E1Ni1hMWZiLTRjY2MtYmI4My0xOTczMDc0 ZGNmZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGiNgwDgQCAAIwCAMGBCYC9AMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjvzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPEpmLktmN4Ekx6beJa3/9WDC0 w7fXPnXsJLspgRTDaPR3JEdEnYUBugcDoJsRQFNulBiYitc4HLsj2qoHYqUCW9JB zi7jLBMfJd3WKVVkvke9xZ/krPkJJe0ERm3g8nRiGi850z7dJkVl0Hz18PewsIFB 3HpYiCFHrgQEq/whAU47taGoYa13z6RAJTSjq14Ky5Mw5UUo6ypvNPNOW3+JQ8As lV+ULBH40J7Yb+lyfED1EghURt1ULConZoKr3deGWstqPBiS03rBbR28cEX5nq/2 QYsUIEX6ElfPglXFmXJLVGQlIWL6YRZej085s3SiJsaDYmlKb0W7y0nOWWcD -----END CERTIFICATE-----Generated at Sat Oct 10 19:15:20 2026 by rpki-client