$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer File: 8c36215c-1577-42c1-a44f-f836bc4d03b3.cer (raw, json) Hash identifier: i8AlcQKlLOGqEq3nR1+u1m39uXGNVOUwPNWJa46/H7w= Subject key identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D974DC08347BCBBAB29D40580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 12:45:18 +0000 Certificate not after: Tue 25 Jul 2028 12:45:18 +0000 Subordinate resources: IP: 23.162.56.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:4d:c0:83:47:bc:bb:ab:29:d4:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 22 12:45:18 2026 GMT Not After : Jul 25 12:45:18 2028 GMT Subject: CN=8c36215c-1577-42c1-a44f-f836bc4d03b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:ec:3c:08:a3:5e:54:d6:d5:7b:14:f3:e0: 63:9e:0d:be:07:fa:ab:55:47:15:30:eb:28:c1:d6: 4f:5f:ab:ce:2a:d4:14:a5:a9:01:82:a6:7d:a2:d6: 79:ff:8a:b2:99:d5:8c:a2:e2:75:a9:fa:0c:a5:38: 89:17:4b:3d:87:fd:bc:fa:86:85:2d:2c:c0:e9:2f: 24:74:dd:58:2d:5e:19:de:7a:54:f5:01:fa:a2:88: 9a:47:44:d2:0b:70:59:66:99:13:ba:56:6f:2f:c8: 46:11:73:90:4d:fe:6a:a7:00:4d:27:38:69:af:99: 7c:ce:8f:8c:0d:75:84:89:66:5b:d2:34:34:47:32: 24:0c:4f:c1:d8:9b:6d:f4:03:92:6d:9d:e6:3c:74: d0:22:4a:7d:18:bd:07:6c:35:0b:fa:7e:60:4f:47: be:6e:f6:85:4c:81:97:b9:44:c9:4e:36:df:f3:71: c6:a4:df:6c:f4:c8:1e:e4:1f:33:a6:9f:c9:34:91: 30:da:30:57:8e:d6:ca:9c:e6:48:b0:3a:7d:ed:db: ce:bc:50:8d:07:92:f0:f3:d6:14:27:2d:d7:7b:24: 3e:ae:be:32:42:4f:e1:95:ee:48:fc:a4:34:35:a0: 7b:8a:82:55:b0:da:2e:df:f9:d4:b1:1b:cf:f1:bd: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.162.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1a:2c:b5:ae:50:e2:59:a9:a8:93:5d:79:99:2f:e4:fe:8e: 07:04:39:e2:4e:75:f8:16:af:4b:f4:a3:ff:21:c9:50:0a:1f: b6:9a:72:03:13:3a:68:fb:97:b4:da:e3:cd:28:2f:4b:be:2b: f1:4f:62:e9:7b:7b:5d:7f:6f:ba:d9:5d:32:23:cc:60:ce:6f: b4:78:d2:d8:38:09:82:9c:9c:42:28:25:a2:33:11:71:5b:93: 26:c1:b0:28:86:82:e7:37:82:9f:5e:54:bb:cc:68:a1:bd:9a: ea:61:16:69:1e:73:1d:ca:d1:a9:2e:ce:47:1e:ec:05:52:83: 59:a3:01:32:51:6f:84:8f:4c:06:32:2b:4b:59:af:38:9b:7a: 78:91:e3:74:8f:de:14:6f:79:5f:8a:06:10:c8:27:33:ee:eb: ff:4c:59:fd:4e:00:75:da:b4:a3:c0:a4:c5:52:ab:b3:49:84: bf:d5:36:d6:c6:96:85:10:17:5c:af:80:4f:d0:b1:75:23:22: b9:80:52:ef:3e:30:d4:6c:61:6b:ee:2b:a4:f9:9c:05:72:15: d4:90:67:69:f9:fa:a5:93:28:3d:ab:52:f5:7c:61:ad:32:45: fd:7a:e0:12:7f:43:90:d3:fe:28:98:04:77:44:d9:9b:4b:7c: f4:b4:9b:20 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2XTcCDR7y7qynUBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyMjEyNDUxOFoXDTI4MDcyNTEyNDUxOFowLzEtMCsGA1UEAxMk OGMzNjIxNWMtMTU3Ny00MmMxLWE0NGYtZjgzNmJjNGQwM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQrsPAijXlTW1XsU8+Bjng2+B/qrVUcVMOso wdZPX6vOKtQUpakBgqZ9otZ5/4qymdWMouJ1qfoMpTiJF0s9h/28+oaFLSzA6S8k dN1YLV4Z3npU9QH6ooiaR0TSC3BZZpkTulZvL8hGEXOQTf5qpwBNJzhpr5l8zo+M DXWEiWZb0jQ0RzIkDE/B2Jtt9AOSbZ3mPHTQIkp9GL0HbDUL+n5gT0e+bvaFTIGX uUTJTjbf83HGpN9s9Mge5B8zpp/JNJEw2jBXjtbKnOZIsDp97dvOvFCNB5Lw89YU Jy3XeyQ+rr4yQk/hle5I/KQ0NaB7ioJVsNou3/nUsRvP8b3fmQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEwreeSDjT98E8YiIHGqcYmXrX/AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 YzM2MjE1Yy0xNTc3LTQyYzEtYTQ0Zi1mODM2YmM0ZDAzYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhjMzYyMTVjLTE1NzctNDJjMS1h NDRmLWY4MzZiYzRkMDNiMy84YzM2MjE1Yy0xNTc3LTQyYzEtYTQ0Zi1mODM2YmM0 ZDAzYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXojgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADRosta5Q4lmpqJNdeZkv 5P6OBwQ54k51+BavS/Sj/yHJUAoftppyAxM6aPuXtNrjzSgvS74r8U9i6Xt7XX9v utldMiPMYM5vtHjS2DgJgpycQiglojMRcVuTJsGwKIaC5zeCn15Uu8xoob2a6mEW aR5zHcrRqS7ORx7sBVKDWaMBMlFvhI9MBjIrS1mvOJt6eJHjdI/eFG95X4oGEMgn M+7r/0xZ/U4Addq0o8CkxVKrs0mEv9U21saWhRAXXK+AT9CxdSMiuYBS7z4w1Gxh a+4rpPmcBXIV1JBnafn6pZMoPatS9XxhrTJF/XrgEn9DkNP+KJgEd0TZm0t89LSb IA== -----END CERTIFICATE-----Generated at Mon Apr 27 12:40:47 2026 by rpki-client