$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer File: 9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer (raw, json) Hash identifier: GFdGlfNJM53liZX9BbX3sUPkYUttzlHTAG3CzQ7hIos= Subject key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D9FADCD320A4C9FDD28062940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Apr 2026 12:45:17 +0000 Certificate not after: Fri 28 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 11573 AS: 15043 IP: 66.181.96.0/20 IP: 69.4.32.0/20 IP: 2605:82c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:ad:cd:32:0a:4c:9f:dd:28:06:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 25 12:45:17 2026 GMT Not After : Jul 28 12:45:17 2028 GMT Subject: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:c6:3b:b9:4e:3f:d6:96:ce:8e:3e:8f:73: bc:2e:2c:cc:0d:70:1c:de:02:36:2b:f0:a4:17:1c: a8:22:10:a9:0c:ce:9a:ac:f5:0e:67:ec:17:25:67: 02:39:e5:de:f2:fa:69:f6:58:c4:59:11:3d:37:c9: 49:50:3d:c4:7a:d2:12:57:0c:be:1b:ad:5c:1f:82: 93:5c:7a:c9:55:09:75:2c:c5:91:82:4b:4d:df:36: 8a:7a:4c:d9:e4:e6:69:9c:f3:23:c9:c3:2a:35:cf: 12:a3:e2:b3:d6:8b:3c:da:12:68:7e:a8:44:52:db: 2e:c0:c1:4f:37:ff:68:c5:1e:25:04:04:18:06:98: 0e:8b:35:9b:88:56:aa:d3:68:3f:70:c6:0f:10:63: 62:d7:35:a7:a7:5d:a5:f3:d3:08:83:6f:d1:e3:80: 71:9a:c5:db:1e:e6:d7:d5:37:4b:c2:a6:bc:f3:74: 83:4c:49:e1:d9:7a:08:ab:af:cb:a6:cf:5f:07:58: bf:74:15:99:c2:fa:88:f0:4e:5d:4d:c3:c1:1f:69: 49:1d:0e:1b:a7:1b:54:80:00:31:4f:5a:7e:61:3e: 75:eb:49:b4:a5:89:36:fc:fd:1d:dc:c7:91:06:37: 41:cc:df:96:6c:36:0b:80:54:7d:9e:5f:f2:63:26: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.181.96.0/20 69.4.32.0/20 IPv6: 2605:82c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11573 15043 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:26:59:bc:ea:27:33:94:9a:7b:48:ef:e4:22:ff:6a:a9:7d: 3b:63:ad:00:ca:a2:a7:ab:1e:42:2c:6b:33:b5:cb:37:e5:2b: 87:a9:d1:b7:51:36:55:97:3c:92:11:51:e3:fd:44:34:d6:33: 86:d3:01:e8:9c:ad:f1:d7:eb:45:90:4f:9d:05:00:a9:04:d8: 50:6a:da:3a:ce:b6:47:97:ef:ed:4b:57:38:cc:4e:ab:d9:74: ba:f4:e8:19:f5:b2:9e:ce:5b:fb:8a:14:a3:c9:1a:6a:8d:9f: 42:01:f0:f4:83:93:3c:74:7b:dd:1c:a4:3b:df:be:96:4a:f1: 18:db:c7:0d:74:4d:6d:07:ec:fa:98:ff:d8:79:35:32:f1:91: 80:86:a1:8c:48:96:a5:46:fa:8f:b5:b5:aa:5f:71:c0:8f:b1: 0f:e0:ea:bf:1f:c8:67:2a:d0:16:41:50:8f:63:58:82:9e:d0: c2:12:d1:12:4e:c0:57:05:b8:23:fa:d7:e1:56:04:1c:da:ac: d8:e5:72:b5:68:cf:b2:4b:23:42:07:cb:cf:81:34:8d:e1:a0: 93:5b:f7:2a:db:68:b6:1b:21:70:f9:68:ed:f3:18:30:b5:e2: 38:ca:6a:4e:14:bb:0d:ac:70:ad:ef:a7:8d:30:eb:7b:71:4d: 53:d2:c0:5b -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWE2frc0yCkyf3SgGKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyNTEyNDUxN1oXDTI4MDcyODEyNDUxN1owLzEtMCsGA1UEAxMk OWY5ZjUwMjEtZDc4MC00NzU5LWFjMGYtMTg2NWFiOGQ1YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr93GO7lOP9aWzo4+j3O8LizMDXAc3gI2K/Ck FxyoIhCpDM6arPUOZ+wXJWcCOeXe8vpp9ljEWRE9N8lJUD3EetISVwy+G61cH4KT XHrJVQl1LMWRgktN3zaKekzZ5OZpnPMjycMqNc8So+Kz1os82hJofqhEUtsuwMFP N/9oxR4lBAQYBpgOizWbiFaq02g/cMYPEGNi1zWnp12l89MIg2/R44BxmsXbHubX 1TdLwqa883SDTEnh2XoIq6/Lps9fB1i/dBWZwvqI8E5dTcPBH2lJHQ4bpxtUgAAx T1p+YT5160m0pYk2/P0d3MeRBjdBzN+WbDYLgFR9nl/yYyYi6wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFKf1YMGA7CWKj/miqE3t0bvVxwdfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 ZjlmNTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1YWI4ZDVhNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzlmOWY1MDIxLWQ3ODAtNDc1OS1h YzBmLTE4NjVhYjhkNWE2MS85ZjlmNTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1YWI4 ZDVhNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARCtWADBARFBCAwDQQCAAIwBwMFACYFgsAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICLTUCAjrDMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE0mWbzqJzOUmntI 7+Qi/2qpfTtjrQDKoqerHkIsazO1yzflK4ep0bdRNlWXPJIRUeP9RDTWM4bTAeic rfHX60WQT50FAKkE2FBq2jrOtkeX7+1LVzjMTqvZdLr06Bn1sp7OW/uKFKPJGmqN n0IB8PSDkzx0e90cpDvfvpZK8Rjbxw10TW0H7PqY/9h5NTLxkYCGoYxIlqVG+o+1 tapfccCPsQ/g6r8fyGcq0BZBUI9jWIKe0MIS0RJOwFcFuCP61+FWBBzarNjlcrVo z7JLI0IHy8+BNI3hoJNb9yrbaLYbIXD5aO3zGDC14jjKak4Uuw2scK3vp40w63tx TVPSwFs= -----END CERTIFICATE-----Generated at Sun May 3 23:43:31 2026 by rpki-client