$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer File: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer (raw, json) Hash identifier: YXn+//KHYnMBv8Lu3yJGXdNYldQD2IG7HS8XZ/ICiEc= Subject key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E3062358DC13B54D7B0F94D70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jun 2026 08:45:11 +0000 Certificate not after: Mon 18 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 137.82.0.0/16 IP: 142.103.0.0/16 IP: 192.5.96.0/24 IP: 192.73.5.0/24 IP: 198.162.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:62:35:8d:c1:3b:54:d7:b0:f9:4d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 16 08:45:11 2026 GMT Not After : Sep 18 08:45:11 2028 GMT Subject: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:7d:cf:5d:f0:b4:4a:7a:03:03:fd:5f:b9: ee:8e:67:18:6e:00:7a:cf:ad:75:46:6b:aa:4b:74: 0d:22:44:9a:67:67:fe:71:74:d3:4b:49:50:63:c9: f8:59:f1:3b:da:f4:68:db:07:04:c7:d8:1d:0b:ac: 40:19:e8:3a:0b:f6:95:65:d5:fc:6b:e0:1d:4d:84: 4c:f5:94:2d:e0:7b:fd:e5:e0:03:b3:dd:b8:11:03: c0:2e:58:15:1a:fc:27:3b:61:72:4e:3d:f3:0a:26: 8f:fe:55:10:ba:a1:70:cc:7a:fd:a7:cf:59:32:5a: 75:af:65:22:d1:77:c3:cd:ce:60:24:a5:8d:57:ce: 3a:a5:65:0b:f1:eb:a9:1e:8b:1d:4f:67:d3:37:91: 57:e7:3c:ff:29:22:15:56:54:21:b7:41:8f:c5:4c: a5:50:b8:55:42:54:3a:6a:14:f3:ec:31:6e:af:f1: 5c:f5:81:fe:02:94:93:76:c8:15:2f:7f:39:a6:4f: ca:20:93:aa:0d:78:2e:97:a3:b7:9c:84:20:d6:56: 64:d3:7e:05:b2:48:0a:ce:b4:0e:1d:8b:c7:a7:10: 0e:22:cc:b9:94:eb:32:e0:82:a6:75:5c:f4:52:a5: d4:03:b3:3e:5c:56:b1:8f:46:15:22:b8:b2:ff:e9: 3f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 137.82.0.0/16 142.103.0.0/16 192.5.96.0/24 192.73.5.0/24 198.162.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ea:46:e4:6e:ed:6b:23:fd:89:d6:65:36:8e:66:8d:16:4b: 73:3b:13:1a:1c:20:9d:f7:dc:8a:e6:ec:c5:a2:bb:0c:40:d4: b3:92:b1:96:89:6d:53:ef:c1:cb:07:0a:b6:04:90:ac:41:3c: e2:85:8a:36:13:30:a6:d8:55:07:8e:90:62:99:82:c5:80:a4: d7:aa:88:35:fe:67:69:92:57:38:d7:34:71:49:96:80:82:20: bc:33:04:02:6d:ea:6c:bf:3d:ef:c1:b1:36:32:c1:a7:0d:e5: ac:a9:18:6a:62:52:62:38:35:75:38:bf:05:cd:69:b9:60:b2: f6:17:76:ad:bf:eb:13:cc:c2:df:fa:d2:8d:2d:01:0c:06:35: 86:7b:bf:54:b3:cb:c8:88:19:ba:6f:3c:c8:6f:13:2f:91:d5: 49:59:69:ab:c2:b4:17:59:11:f7:b5:1d:39:e7:27:d1:98:ff: 48:05:f5:40:2a:19:c1:74:55:20:42:4e:ae:13:0e:b8:9d:67: c6:93:f2:c1:14:2b:e0:bc:7e:f8:63:7a:94:d7:80:1b:cd:b0: b2:bb:c0:e6:da:cd:87:91:d7:fd:38:c7:e4:22:2e:6f:26:44: 53:c9:e7:c3:d6:47:0c:6d:36:b8:65:da:ea:be:44:95:a4:cc: c5:f2:8d:44 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE4wYjWNwTtU17D5TXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYxNjA4NDUxMVoXDTI4MDkxODA4NDUxMVowLzEtMCsGA1UEAxMk MjhiMGUyZTQtNWYyYS00ZWNkLWFkNmItOTc0MTY5NTFmMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQR9z13wtEp6AwP9X7nujmcYbgB6z611Rmuq S3QNIkSaZ2f+cXTTS0lQY8n4WfE72vRo2wcEx9gdC6xAGeg6C/aVZdX8a+AdTYRM 9ZQt4Hv95eADs924EQPALlgVGvwnO2FyTj3zCiaP/lUQuqFwzHr9p89ZMlp1r2Ui 0XfDzc5gJKWNV846pWUL8eupHosdT2fTN5FX5zz/KSIVVlQht0GPxUylULhVQlQ6 ahTz7DFur/Fc9YH+ApSTdsgVL385pk/KIJOqDXgul6O3nIQg1lZk034FskgKzrQO HYvHpxAOIsy5lOsy4IKmdVz0UqXUA7M+XFaxj0YVIriy/+k/DQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFHjghTZ4cD/Ja855/J8yWPT/MgJVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y OGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1MWYwMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI4YjBlMmU0LTVmMmEtNGVjZC1h ZDZiLTk3NDE2OTUxZjAxNy8yOGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1 MWYwMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMCIEAgABMBwDAwCJUgMDAI5nAwQAwAVgAwQAwEkFAwQFxqIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfqRuRu7Wsj/YnWZTaOZo0WS3M7ExocIJ333Irm7MWiuwxA1LOSsZaJ bVPvwcsHCrYEkKxBPOKFijYTMKbYVQeOkGKZgsWApNeqiDX+Z2mSVzjXNHFJloCC ILwzBAJt6my/Pe/BsTYywacN5aypGGpiUmI4NXU4vwXNablgsvYXdq2/6xPMwt/6 0o0tAQwGNYZ7v1Szy8iIGbpvPMhvEy+R1UlZaavCtBdZEfe1HTnnJ9GY/0gF9UAq GcF0VSBCTq4TDridZ8aT8sEUK+C8fvhjepTXgBvNsLK7wObazYeR1/04x+QiLm8m RFPJ58PWRwxtNrhl2uq+RJWkzMXyjUQ= -----END CERTIFICATE-----Generated at Fri Jun 19 03:21:01 2026 by rpki-client