$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer File: 32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer (raw, json) Hash identifier: afCjvCCQ7n0myL9TohnK7cyuGXLHFDBY8L8kIASzR7c= Subject key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DEB0E45248D970DB4993B2B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 May 2026 12:45:17 +0000 Certificate not after: Thu 24 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 3555 IP: 192.31.9.0/24 IP: 198.17.99.0/24 IP: 198.22.152.0/24 IP: 198.137.234.0/23 IP: 199.74.244.0/24 IP: 199.79.216.0/24 IP: 199.89.132.0/23 IP: 199.89.158.0 -- 199.89.160.255 IP: 204.89.153.0 -- 204.89.154.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:0e:45:24:8d:97:0d:b4:99:3b:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 22 12:45:17 2026 GMT Not After : Aug 24 12:45:17 2028 GMT Subject: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:c0:e1:41:4d:b6:2f:b4:1c:62:dc:97:9a: b8:e4:4b:0f:66:bf:cc:47:ed:ea:3e:9f:66:5b:13: 71:38:98:51:99:48:b6:34:ab:49:41:c5:d5:22:f3: bc:3e:13:2f:22:3c:3a:5a:9f:d6:31:5f:b5:5f:f4: ba:e4:56:ff:0d:ea:d1:f5:14:3a:49:69:26:12:10: 3f:f5:c0:9a:64:3f:14:da:a5:06:ae:57:ed:42:e5: a0:ef:0c:0c:d7:87:1f:eb:1f:a5:0c:dd:57:df:0b: 86:24:dc:c3:bd:24:bd:ff:a4:4b:9b:77:7f:a6:c8: 8a:91:8a:da:97:d0:ab:0d:9c:55:b6:ba:1c:5c:9e: 70:e5:e4:0c:57:e7:36:35:5c:c8:3e:a8:c4:bb:0c: 82:e8:ed:1e:29:52:32:79:a3:c9:49:8a:0e:73:e0: 47:f6:8e:e9:c8:7f:fe:43:c4:e5:c1:8b:67:67:01: 69:cc:13:a6:a9:d7:db:ce:c0:8b:75:a1:e4:82:cb: 05:b0:a3:06:cd:fe:25:49:b1:d4:d7:88:57:85:56: cd:db:d2:cb:61:df:ba:20:ee:b1:21:d0:e7:79:a5: 9a:c8:2b:a8:92:45:74:4d:ba:79:9f:bd:24:74:7c: b1:f8:c0:6f:08:dd:78:62:f1:81:fb:d9:0f:e5:28: a9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3555 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2e:17:ce:64:ef:2d:11:02:87:d0:d5:8f:3c:62:d0:c4:00: 9d:fb:bc:5a:bb:b9:e2:95:26:1b:b1:a6:31:4b:22:aa:2c:02: 3f:b7:80:01:d6:18:76:66:97:a8:4f:56:30:b5:5f:d1:9f:dc: 08:5e:c8:e6:db:8f:97:03:7e:84:5c:35:28:e3:2c:1a:ca:61: bb:29:72:77:a1:15:13:68:c1:69:56:34:a7:9a:43:cb:60:23: 8f:ba:b0:72:58:5d:fe:c6:c8:9d:f8:0e:56:9a:57:54:4f:c0: 50:f4:f0:1a:cb:2a:c3:8c:e9:a4:d7:11:dd:4e:08:ab:58:db: 73:77:37:f2:6a:12:8a:b1:d0:cb:7f:10:c7:f8:b8:76:e8:d0: 4d:2a:fd:d3:fa:2d:5c:2a:2b:6b:e4:3e:79:75:57:a1:21:c6: aa:8c:a1:87:c8:80:a1:b5:dd:0e:8d:d9:94:90:15:c0:5c:ce: 99:49:a1:87:31:1f:e0:48:23:80:0e:6f:8d:41:ae:fe:76:82: 0b:81:0c:97:c8:05:c3:75:9f:34:ff:78:b8:1a:e3:90:46:58: 1f:a9:f1:c5:a5:11:24:c2:ef:31:b5:06:18:10:a0:36:d8:f0: c9:cc:03:80:20:06:ed:b4:ae:47:6b:3d:e3:8c:d8:a0:30:cb: e4:9f:e3:99 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWE3rDkUkjZcNtJk7K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyMjEyNDUxN1oXDTI4MDgyNDEyNDUxN1owLzEtMCsGA1UEAxMk MzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlhYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDfA4UFNti+0HGLcl5q45EsPZr/MR+3qPp9m WxNxOJhRmUi2NKtJQcXVIvO8PhMvIjw6Wp/WMV+1X/S65Fb/DerR9RQ6SWkmEhA/ 9cCaZD8U2qUGrlftQuWg7wwM14cf6x+lDN1X3wuGJNzDvSS9/6RLm3d/psiKkYra l9CrDZxVtrocXJ5w5eQMV+c2NVzIPqjEuwyC6O0eKVIyeaPJSYoOc+BH9o7pyH/+ Q8TlwYtnZwFpzBOmqdfbzsCLdaHkgssFsKMGzf4lSbHU14hXhVbN29LLYd+6IO6x IdDneaWayCuokkV0Tbp5n70kdHyx+MBvCN14YvGB+9kP5SipSwIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFGeJBF16P0Yxjhw8+BfDVvLjhvibMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z MmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzMyYmNmMzhiLWM0NmQtNGJmMS04 NzA1LTg4YWVlYzE5YWJmMS8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMx OWFiZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMEwEAgABMEYDBADAHwkDBADGEWMDBADGFpgDBAHGieoDBADHSvQD BADHT9gDBAHHWYQwDAMEAcdZngMEAMdZoDAMAwQAzFmZAwQAzFmaMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAg3jMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG8uF85k7y0RAofQ1Y88YtDEAJ37 vFq7ueKVJhuxpjFLIqosAj+3gAHWGHZml6hPVjC1X9Gf3AheyObbj5cDfoRcNSjj LBrKYbspcnehFRNowWlWNKeaQ8tgI4+6sHJYXf7GyJ34DlaaV1RPwFD08BrLKsOM 6aTXEd1OCKtY23N3N/JqEoqx0Mt/EMf4uHbo0E0q/dP6LVwqK2vkPnl1V6EhxqqM oYfIgKG13Q6N2ZSQFcBczplJoYcxH+BII4AOb41Brv52gguBDJfIBcN1nzT/eLga 45BGWB+p8cWlESTC7zG1BhgQoDbY8MnMA4AgBu20rkdrPeOM2KAwy+Sf45k= -----END CERTIFICATE-----Generated at Tue Jun 2 21:33:58 2026 by rpki-client