$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer File: b5280624-435b-4568-8d14-dbdda87b17c2.cer (raw, json) Hash identifier: eyz05FOa/Md4CLfZBXapPU5kaFAhVNbmGa1CgbSHUi4= Subject key identifier: 40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DEB0E4507CF45224B85448D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 May 2026 12:45:17 +0000 Certificate not after: Thu 24 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 396441 IP: 192.101.98.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:0e:45:07:cf:45:22:4b:85:44:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 22 12:45:17 2026 GMT Not After : Aug 24 12:45:17 2028 GMT Subject: CN=b5280624-435b-4568-8d14-dbdda87b17c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:e2:a4:5e:79:fb:f8:57:43:2c:4a:ba:7c: bb:12:4b:98:07:94:c7:4e:af:13:24:dc:a0:9b:28: c1:1d:ca:45:88:7f:5d:55:c3:ae:92:51:6a:d1:40: f2:4f:b9:62:1f:d8:5b:bd:36:83:8d:de:7f:c7:1b: 46:65:3b:76:68:a0:91:11:6e:c2:5c:25:84:4b:6a: c9:42:a9:f2:03:d9:cf:98:63:c7:30:56:ed:ab:91: 2e:e8:e4:18:0e:0a:a1:0f:9e:28:ca:72:45:5b:a3: 78:cb:17:87:94:40:58:a7:51:fa:3c:f9:96:61:f4: a3:35:c9:53:ce:8b:cf:fa:23:54:5d:5c:37:e7:f7: 13:3a:1e:80:78:6d:0e:21:40:12:e5:e3:ae:ee:e0: e7:16:7a:ee:3b:77:99:c6:b1:61:61:5d:6a:18:91: 2e:a3:3d:5b:da:60:c8:45:5f:b1:8a:b9:0b:bf:b2: 85:d7:e4:2c:b1:6d:1e:7a:de:a8:83:12:93:7f:31: 9b:6a:8a:aa:a3:71:6d:a2:20:2b:c7:ff:25:c1:d6: df:93:01:02:08:59:10:d4:1e:09:dd:5e:4a:00:c4: 65:61:63:36:08:8d:7e:fb:21:de:dd:db:c8:df:c8: 01:a3:b5:49:c4:dc:6c:8a:2f:79:ef:66:e1:a4:04: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.101.98.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2e:5e:c1:02:19:53:fb:ba:4c:eb:e9:42:04:9c:20:32:79: 92:55:74:8e:43:af:64:57:8d:fe:8a:a2:6c:87:1a:2d:1d:50: d2:4e:96:d6:ec:da:d3:8a:19:01:9e:13:46:f8:39:52:3d:b7: 81:1f:43:64:76:ed:12:fd:3a:27:69:02:3c:5f:bf:72:50:52: a1:0a:b9:18:6c:cf:b8:b1:78:c5:92:a1:17:b7:5c:4a:90:10: 71:f3:c0:1f:66:d2:9a:47:d5:71:9b:39:b8:50:1d:1a:71:1e: 72:3e:3c:2a:82:58:bc:fe:14:c4:e9:ad:e5:88:ea:9d:cb:41: 9e:36:98:0e:09:95:18:65:1d:e8:d0:14:cc:07:b0:79:2c:8d: 89:c2:b7:01:56:29:1a:29:13:12:9b:1d:7b:a7:c4:14:62:a7: 4a:f6:91:36:96:3b:7a:67:7a:85:7f:18:34:b9:ea:4f:ed:17: a9:ef:1c:83:2d:3d:f7:ce:59:1f:04:3d:5e:37:30:7a:19:b0: 5b:95:f5:ac:fd:6f:31:96:70:0f:a1:30:ba:3b:df:53:56:32: 20:65:26:5e:0c:61:c2:3f:21:c5:a0:7d:85:17:17:9e:7c:f6: ac:58:af:9f:89:cf:ea:ed:4e:b4:cb:4b:6e:9e:ab:4a:da:af: 9b:e6:00:d1 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3rDkUHz0UiS4VEjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyMjEyNDUxN1oXDTI4MDgyNDEyNDUxN1owLzEtMCsGA1UEAxMk YjUyODA2MjQtNDM1Yi00NTY4LThkMTQtZGJkZGE4N2IxN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHPipF55+/hXQyxKuny7EkuYB5THTq8TJNyg myjBHcpFiH9dVcOuklFq0UDyT7liH9hbvTaDjd5/xxtGZTt2aKCREW7CXCWES2rJ QqnyA9nPmGPHMFbtq5Eu6OQYDgqhD54oynJFW6N4yxeHlEBYp1H6PPmWYfSjNclT zovP+iNUXVw35/cTOh6AeG0OIUAS5eOu7uDnFnruO3eZxrFhYV1qGJEuoz1b2mDI RV+xirkLv7KF1+QssW0eet6ogxKTfzGbaoqqo3FtoiArx/8lwdbfkwECCFkQ1B4J 3V5KAMRlYWM2CI1++yHe3dvI38gBo7VJxNxsii9572bhpATmRwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEAs9OznnqU8PPylH9fAragIkNoaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i NTI4MDYyNC00MzViLTQ1NjgtOGQxNC1kYmRkYTg3YjE3YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I1MjgwNjI0LTQzNWItNDU2OC04 ZDE0LWRiZGRhODdiMTdjMi9iNTI4MDYyNC00MzViLTQ1NjgtOGQxNC1kYmRkYTg3 YjE3YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAZWIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgyZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACcuXsECGVP7ukzr6UIEnCAyeZJVdI5Dr2RXjf6KomyHGi0d UNJOltbs2tOKGQGeE0b4OVI9t4EfQ2R27RL9OidpAjxfv3JQUqEKuRhsz7ixeMWS oRe3XEqQEHHzwB9m0ppH1XGbObhQHRpxHnI+PCqCWLz+FMTpreWI6p3LQZ42mA4J lRhlHejQFMwHsHksjYnCtwFWKRopExKbHXunxBRip0r2kTaWO3pneoV/GDS56k/t F6nvHIMtPffOWR8EPV43MHoZsFuV9az9bzGWcA+hMLo731NWMiBlJl4MYcI/IcWg fYUXF5589qxYr5+Jz+rtTrTLS26eq0rar5vmANE= -----END CERTIFICATE-----Generated at Fri May 22 16:04:46 2026 by rpki-client