$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer File: 7486d668-0b59-485d-a30a-dbd53fab21fd.cer (raw, json) Hash identifier: VBnF96iDt6NFeVrX4+idVIT+O6whwU0BBaqg3IV9vFY= Subject key identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DE578E5C309C3503065567F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 12:45:17 +0000 Certificate not after: Tue 22 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 198.202.148.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:78:e5:c3:09:c3:50:30:65:56:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 20 12:45:17 2026 GMT Not After : Aug 22 12:45:17 2028 GMT Subject: CN=7486d668-0b59-485d-a30a-dbd53fab21fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:d4:c8:cf:74:63:b6:3e:aa:0d:91:eb:1f: 13:e5:20:7e:af:4c:c2:08:53:93:f8:a0:0a:c4:53: 54:70:17:21:ba:e3:1e:b0:16:11:b7:58:99:8f:52: 42:ce:4c:13:fd:07:8a:11:9d:9e:ae:f9:f6:e2:a3: 0e:35:55:4a:16:1d:0a:3a:fb:a7:1d:b5:3b:62:29: 44:53:f8:be:b2:a1:90:5c:9a:be:09:15:23:33:91: 1a:96:95:36:63:16:9b:d6:c4:2e:42:35:18:a9:c9: b2:80:62:ba:2f:c5:e1:37:4b:4e:18:d1:1f:71:10: 01:bb:48:51:5b:ec:da:63:e0:bf:6e:d3:fd:2e:dc: 4f:9d:0e:20:2d:42:1b:28:d0:3a:b1:14:46:17:fb: 9a:c2:bb:e5:a0:54:9c:c4:52:34:96:ba:51:26:f6: d2:f6:7a:70:3e:76:d5:36:1b:6b:b2:08:a4:c9:45: 4d:ba:a0:be:38:07:4c:46:37:ef:36:d9:64:d0:99: 12:51:00:f7:91:62:c7:79:27:06:da:7f:98:a8:61: ba:6e:7a:74:d3:b9:77:dd:dd:69:78:67:a7:14:b7: 62:94:2c:09:db:fa:83:64:0a:64:63:76:01:b0:86: 12:97:16:d7:33:89:59:8c:a8:c4:74:4d:de:6f:02: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.202.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:22:59:e3:60:ad:46:a3:ba:4c:cd:a0:b4:bd:9d:12:78:e0: 93:24:1a:bd:39:a4:c7:83:31:de:f8:14:b5:f0:4f:f4:96:5c: 14:5a:7b:a7:6c:18:c2:39:59:ba:db:fb:10:78:77:81:b6:d1: e9:06:e3:d9:3b:48:8d:24:fe:60:23:7b:6e:bd:0d:21:bf:22: 70:c5:7f:47:5c:57:f4:45:20:ba:e5:77:e8:ae:8e:29:e8:7f: 3f:60:ce:15:7b:e6:5b:a2:8c:04:5e:09:22:76:dc:39:6f:eb: c5:ab:27:8a:47:96:d5:b2:cb:4f:7f:c9:c8:f8:f7:8d:c0:07: f7:62:4d:a2:04:2c:8e:97:8d:d7:6c:99:19:20:fb:8a:eb:d2: 3b:1c:a3:2c:86:25:6b:c3:9f:42:a3:c4:12:33:26:bb:de:6e: f7:b4:9c:3a:c1:3f:8c:28:49:f8:01:31:aa:07:51:44:45:60: 7d:be:ff:3a:27:30:83:40:1d:e1:95:ad:b0:96:fc:ec:9a:6c: 4b:b8:29:27:e6:8e:1f:49:d1:94:8d:b2:40:3c:43:09:52:ba: 18:02:b3:3c:31:74:88:f3:21:f8:46:23:8f:e3:71:37:e0:25: 27:2a:a6:be:61:07:07:c7:46:10:17:19:d3:55:78:23:fa:f6: a3:bc:8f:3e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3leOXDCcNQMGVWfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyMDEyNDUxN1oXDTI4MDgyMjEyNDUxN1owLzEtMCsGA1UEAxMk NzQ4NmQ2NjgtMGI1OS00ODVkLWEzMGEtZGJkNTNmYWIyMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDvUyM90Y7Y+qg2R6x8T5SB+r0zCCFOT+KAK xFNUcBchuuMesBYRt1iZj1JCzkwT/QeKEZ2ervn24qMONVVKFh0KOvunHbU7YilE U/i+sqGQXJq+CRUjM5EalpU2Yxab1sQuQjUYqcmygGK6L8XhN0tOGNEfcRABu0hR W+zaY+C/btP9LtxPnQ4gLUIbKNA6sRRGF/uawrvloFScxFI0lrpRJvbS9npwPnbV NhtrsgikyUVNuqC+OAdMRjfvNtlk0JkSUQD3kWLHeScG2n+YqGG6bnp007l33d1p eGenFLdilCwJ2/qDZApkY3YBsIYSlxbXM4lZjKjEdE3ebwJNfQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG3fhsttzu66Ey4Daad6Xqb1AkHcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 NDg2ZDY2OC0wYjU5LTQ4NWQtYTMwYS1kYmQ1M2ZhYjIxZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc0ODZkNjY4LTBiNTktNDg1ZC1h MzBhLWRiZDUzZmFiMjFmZC83NDg2ZDY2OC0wYjU5LTQ4NWQtYTMwYS1kYmQ1M2Zh YjIxZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGypQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhSJZ42CtRqO6TM2gtL2d EnjgkyQavTmkx4Mx3vgUtfBP9JZcFFp7p2wYwjlZutv7EHh3gbbR6Qbj2TtIjST+ YCN7br0NIb8icMV/R1xX9EUguuV36K6OKeh/P2DOFXvmW6KMBF4JInbcOW/rxasn ikeW1bLLT3/JyPj3jcAH92JNogQsjpeN12yZGSD7iuvSOxyjLIYla8OfQqPEEjMm u95u97ScOsE/jChJ+AExqgdRREVgfb7/Oicwg0Ad4ZWtsJb87JpsS7gpJ+aOH0nR lI2yQDxDCVK6GAKzPDF0iPMh+EYjj+NxN+AlJyqmvmEHB8dGEBcZ01V4I/r2o7yP Pg== -----END CERTIFICATE-----Generated at Fri May 22 16:53:51 2026 by rpki-client