$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer File: 8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer (raw, json) Hash identifier: s9javM+sc3DpP0Na14VZYp3j6fXBP/JAkiscSYEwOR8= Subject key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F Authority key identifier: 9A:5C:E6:A7:C6:76:3D:82:A2:EC:83:38:7F:24:C7:60:E2:BB:E2:45 Certificate issuer: /CN=946afd34-6971-423f-b22a-575e2c73ab27 Certificate serial: 010D0C9F4328584DDBB38288FB4CFBDA59218000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sun 17 May 2026 00:45:17 +0000 Certificate not after: Sat 19 Aug 2028 00:45:17 +0000 Subordinate resources: IP: 172.99.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:b3:82:88:fb:4c:fb:da:59:21:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946afd34-6971-423f-b22a-575e2c73ab27 Validity Not Before: May 17 00:45:17 2026 GMT Not After : Aug 19 00:45:17 2028 GMT Subject: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:62:f2:ea:66:de:0b:fc:66:a3:bc:97:c0:fa: b5:08:c3:c0:8e:cf:80:da:be:78:cd:13:7e:23:fc: 76:fd:f1:f9:b8:6b:5a:a3:34:ed:1b:03:61:f8:f6: 19:63:10:9f:2a:ff:3b:64:c6:95:bd:f5:24:db:c2: dd:a6:ba:ed:07:62:ec:44:eb:6f:a7:43:72:4c:7c: c1:fc:dd:e2:67:99:05:db:d9:66:a7:55:49:aa:81: 87:e9:9d:ab:91:d2:91:ad:78:fd:a6:84:76:4a:9e: de:47:3f:48:96:83:f6:74:1f:7d:29:ea:07:ff:90: 48:f7:39:85:fd:88:00:56:20:7d:85:86:95:94:fa: 8f:bc:c4:6b:c1:c4:13:44:88:b3:ad:2a:28:f3:c7: 9f:4e:c2:bb:7e:38:81:76:39:42:37:c4:cd:9b:a8: 8d:cc:95:b5:1e:2b:f7:0b:ad:01:c2:2c:8f:29:b8: 50:78:1a:5d:99:49:9e:0a:82:f8:5e:6c:9f:cd:d6: 6e:67:04:4a:58:93:0d:98:06:ed:7d:39:8e:aa:36: 7d:c3:6f:35:2e:99:fc:30:db:6b:14:02:7c:40:09: 15:d5:1b:78:e0:e5:50:12:cb:ec:17:3d:69:d8:10: 07:fb:8e:a3:f2:09:31:20:8c:4a:23:6a:fe:04:0d: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl X509v3 Authority Key Identifier: keyid:9A:5C:E6:A7:C6:76:3D:82:A2:EC:83:38:7F:24:C7:60:E2:BB:E2:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer sbgp-ipAddrBlock: critical IPv4: 172.99.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:2b:c3:d0:67:ad:a9:31:cc:53:b8:c9:92:f9:cf:80:c6:48: f7:cf:2d:a9:18:d8:aa:97:d7:10:1a:4c:48:b4:fc:12:51:c7: f2:b5:9b:3a:2a:88:46:6c:38:c9:bd:c8:26:87:55:14:39:ef: aa:ae:82:bd:e8:a2:31:2b:83:fb:db:51:13:7d:79:98:7f:b5: 6c:45:98:07:73:9c:cd:8f:0f:84:5f:fa:d3:1c:71:cb:0a:2e: 11:12:c1:3d:7e:f4:f2:88:cd:04:88:90:ed:dc:2c:a3:48:0c: 84:27:3a:b1:cd:dd:14:24:fd:3e:e5:9a:e1:95:aa:89:f0:99: 5a:8d:7f:b1:ca:54:7e:5b:ed:9f:2e:fd:21:9c:d5:24:12:ce: ae:e1:4e:30:af:50:95:76:6f:66:e0:ac:52:3f:5b:af:d3:10: e1:3a:3a:6b:6e:27:e3:7a:22:e8:bf:73:5f:56:71:17:a0:f0: 0c:a2:d1:91:b4:2d:58:37:f5:54:9b:48:bf:35:10:a5:d8:5c: 3f:f9:63:bc:63:74:67:3e:6f:d0:59:1c:eb:c0:e6:22:d7:1b: ad:cb:0d:4a:1d:e0:7c:59:97:f7:5c:7d:69:9b:57:d3:e0:69: 55:47:8b:c5:a1:49:ee:ad:b8:b2:07:e6:d4:02:f6:4d:c1:68: 14:4a:59:78 -----BEGIN CERTIFICATE----- MIIGoTCCBYmgAwIBAgIUAQ0Mn0MoWE3bs4KI+0z72lkhgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ2YWZkMzQtNjk3MS00MjNmLWIyMmEtNTc1ZTJjNzNh YjI3MB4XDTI2MDUxNzAwNDUxN1oXDTI4MDgxOTAwNDUxN1owPTE7MDkGA1UEAxMy OGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3MjlhNDhkMDc1YjA5NTJm YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkYvLqZt4L/GajvJfA +rUIw8COz4DavnjNE34j/Hb98fm4a1qjNO0bA2H49hljEJ8q/ztkxpW99STbwt2m uu0HYuxE62+nQ3JMfMH83eJnmQXb2WanVUmqgYfpnauR0pGteP2mhHZKnt5HP0iW g/Z0H30p6gf/kEj3OYX9iABWIH2FhpWU+o+8xGvBxBNEiLOtKijzx59Owrt+OIF2 OUI3xM2bqI3MlbUeK/cLrQHCLI8puFB4Gl2ZSZ4KgvhebJ/N1m5nBEpYkw2YBu19 OY6qNn3DbzUumfww22sUAnxACRXVG3jg5VASy+wXPWnYEAf7jqPyCTEgjEojav4E DTitAgMBAAGjggOlMIIDoTAdBgNVHQ4EFgQUSmWdK9INcG6J8OnIoegi8t2uvh8w ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4YmFhNjRhODAxOGJhZTA1 ODQwZDA0M2IvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4YmFhNjRhODAxOGJhZTA1ODQwZDA0M2Iv MC80QTY1OUQyQkQyMEQ3MDZFODlGMEU5QzhBMUU4MjJGMkREQUVCRTFGLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkz YS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJh LTU3NWUyYzczYWIyNy85NDZhZmQzNC02OTcxLTQyM2YtYjIyYS01NzVlMmM3M2Fi MjcuY3JsMB8GA1UdIwQYMBaAFJpc5qfGdj2CouyDOH8kx2Diu+JFMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03OTNhLTRhNDUt YTBhOS05NzgxNDgzMjFhMDcvOTQ2YWZkMzQtNjk3MS00MjNmLWIyMmEtNTc1ZTJj NzNhYjI3LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxjFDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQA1K8PQZ62pMcxTuMmS+c+Axkj3zy2pGNiql9cQGkxItPwSUcfytZs6KohG bDjJvcgmh1UUOe+qroK96KIxK4P721ETfXmYf7VsRZgHc5zNjw+EX/rTHHHLCi4R EsE9fvTyiM0EiJDt3CyjSAyEJzqxzd0UJP0+5ZrhlaqJ8JlajX+xylR+W+2fLv0h nNUkEs6u4U4wr1CVdm9m4KxSP1uv0xDhOjprbifjeiLov3NfVnEXoPAMotGRtC1Y N/VUm0i/NRCl2Fw/+WO8Y3RnPm/QWRzrwOYi1xutyw1KHeB8WZf3XH1pm1fT4GlV R4vFoUnurbiyB+bUAvZNwWgUSll4 -----END CERTIFICATE-----Generated at Sun May 31 09:45:53 2026 by rpki-client