$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer File: 6458e920-a559-49b5-bb6e-4c2bb89943a3.cer (raw, json) Hash identifier: iPI9QgNnT2Znl6gquHYkb/K36+jtK7Nu1mjnnn8FU88= Subject key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DDBB3826A96486A7538141C20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 00:45:17 +0000 Certificate not after: Sat 19 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 53855 IP: 185.224.64.0/22 IP: 199.34.110.0 -- 199.34.113.255 IP: 204.57.208.0/21 IP: 2602:814:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:b3:82:6a:96:48:6a:75:38:14:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 17 00:45:17 2026 GMT Not After : Aug 19 00:45:17 2028 GMT Subject: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:52:ff:a2:f5:39:3f:45:ec:b1:4e:98:88: 2d:4a:2c:97:69:55:85:c5:bf:cd:c6:e6:96:47:a8: c8:73:47:83:aa:34:27:21:3d:fb:d8:16:0a:db:a3: 0e:d6:36:78:60:f7:41:63:65:cb:02:ef:c4:e2:51: 51:47:26:d6:f4:21:43:ca:f8:0c:66:5d:91:41:ba: da:e5:0f:4a:f3:39:0d:4e:2b:85:6d:25:2b:58:d3: de:ba:54:a1:de:17:30:c6:83:00:35:f2:38:35:80: 7f:3d:08:70:07:ac:ae:4c:d4:c0:47:5c:9f:08:24: 59:4f:4a:ea:ec:5a:ca:0d:4d:e0:f5:5b:7f:f0:3d: f3:6c:46:25:69:4b:28:bf:a3:9b:df:7a:57:60:7b: 6d:a8:38:4d:14:c9:7a:0c:fd:91:0f:4d:4b:b6:1d: 22:74:19:3a:e5:c5:7e:c7:75:9d:c1:f5:18:25:80: 27:c8:97:1f:11:0b:3c:50:99:12:73:ad:ab:52:f3: a9:ea:fa:09:c6:80:8d:1a:cb:f1:e6:50:65:89:7d: b9:1f:fb:84:1b:24:cb:43:0f:49:fd:21:e5:3a:b0: 1b:35:ce:5b:37:02:53:95:8e:a5:9c:d0:bf:2e:61: 2e:4d:4a:9f:74:c0:44:be:e2:d1:12:fa:13:8f:6b: 06:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 185.224.64.0/22 199.34.110.0-199.34.113.255 204.57.208.0/21 IPv6: 2602:814:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53855 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9d:c4:5e:b7:67:c1:37:fc:ba:aa:9f:03:a6:03:76:6e:d2: a1:d5:06:58:05:c3:f6:e0:cb:48:8f:2a:05:67:9f:57:0d:2a: 3b:8e:4b:93:57:a1:28:0a:d8:5e:da:f4:64:9f:48:33:4d:89: 2d:22:fc:6a:b9:1e:ed:f9:20:cd:e9:1d:3f:c6:63:97:99:90: f8:8b:12:72:63:9d:43:6b:82:21:ce:37:cb:f3:e6:e8:48:4e: ce:ac:a6:fe:9f:7f:f5:66:47:e3:b4:d5:0a:5b:36:7b:fd:2b: c0:39:ae:c1:02:52:7a:0d:9a:b5:a0:75:0d:cd:10:3e:02:98: b3:c0:cd:77:a9:aa:f2:ff:17:e3:41:a6:49:a6:b2:0a:d1:e2: f0:b2:85:f7:5a:3d:6b:d5:3a:82:cd:b3:26:84:97:d3:6c:61: 8a:46:09:8d:7b:bb:4d:56:1c:50:ad:0d:d0:49:2a:8e:4b:cc: 0d:8b:18:21:66:f6:a4:9e:b9:e8:e2:61:ca:05:a3:eb:c2:3a: 41:7f:ff:a1:b7:b8:c0:77:6d:6f:9a:2a:40:55:f0:72:48:41: 2c:0a:4e:cf:fa:87:53:e5:23:f3:2d:14:34:9b:65:58:60:a1: e2:b5:50:3a:a2:45:41:b3:43:6f:20:41:17:1b:a2:93:d0:24: 93:49:b2:81 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWE3bs4JqlkhqdTgUHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxNzAwNDUxN1oXDTI4MDgxOTAwNDUxN1owLzEtMCsGA1UEAxMk NjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAhS/6L1OT9F7LFOmIgtSiyXaVWFxb/NxuaW R6jIc0eDqjQnIT372BYK26MO1jZ4YPdBY2XLAu/E4lFRRybW9CFDyvgMZl2RQbra 5Q9K8zkNTiuFbSUrWNPeulSh3hcwxoMANfI4NYB/PQhwB6yuTNTAR1yfCCRZT0rq 7FrKDU3g9Vt/8D3zbEYlaUsov6Ob33pXYHttqDhNFMl6DP2RD01Lth0idBk65cV+ x3WdwfUYJYAnyJcfEQs8UJkSc62rUvOp6voJxoCNGsvx5lBliX25H/uEGyTLQw9J /SHlOrAbNc5bNwJTlY6lnNC/LmEuTUqfdMBEvuLREvoTj2sGrQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFNeSxKmKcYqqTmxb8oHIYksR3gQ+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY0NThlOTIwLWE1NTktNDliNS1i YjZlLTRjMmJiODk5NDNhMy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5 OTQzYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwRAYIKwYBBQUH AQcBAf8ENTAzMCAEAgABMBoDBAK54EAwDAMEAccibgMEAccicAMEA8w50DAPBAIA AjAJAwcEJgIIFKAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDSXzBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAXncRet2fBN/y6qp8DpgN2btKh1QZYBcP24MtIjyoFZ59XDSo7jkuTV6EoCthe 2vRkn0gzTYktIvxquR7t+SDN6R0/xmOXmZD4ixJyY51Da4IhzjfL8+boSE7OrKb+ n3/1ZkfjtNUKWzZ7/SvAOa7BAlJ6DZq1oHUNzRA+ApizwM13qary/xfjQaZJprIK 0eLwsoX3Wj1r1TqCzbMmhJfTbGGKRgmNe7tNVhxQrQ3QSSqOS8wNixghZvaknrno 4mHKBaPrwjpBf/+ht7jAd21vmipAVfBySEEsCk7P+odT5SPzLRQ0m2VYYKHitVA6 okVBs0NvIEEXG6KT0CSTSbKB -----END CERTIFICATE-----Generated at Fri May 22 15:11:18 2026 by rpki-client