$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972.cer File: b58669a5-66da-44e2-ac3e-90a9397af972.cer (raw, json) Hash identifier: mFqjBqlGNojGEdIzxfWbiKhjz18RlnA5v0yB4L6wxF8= Subject key identifier: E1:04:1F:7E:72:7C:19:4A:04:55:DC:00:26:41:8A:DA:F7:17:11:2D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E4C4D0BD1E4A053CCEBB44D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/b58669a5-66da-44e2-ac3e-90a9397af972.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 08:45:11 +0000 Certificate not after: Thu 28 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 11507 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:4d:0b:d1:e4:a0:53:cc:eb:b4:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jun 26 08:45:11 2026 GMT Not After : Sep 28 08:45:11 2028 GMT Subject: CN=b58669a5-66da-44e2-ac3e-90a9397af972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:44:a0:b0:d9:c7:c0:68:97:12:f1:d1:e6: b3:e9:7e:f4:22:c8:b4:16:4a:47:92:c7:6e:5b:e0: 0d:c8:d0:34:93:bb:50:42:70:b7:5d:2f:8a:21:d4: 09:cb:98:c4:1f:d9:3d:5b:88:4f:ad:ed:36:ad:76: 11:c4:74:a8:31:90:89:8e:1d:db:ed:fb:ef:68:08: 80:90:be:1c:3c:25:e8:3a:30:51:60:a0:9d:16:82: 48:59:2c:05:f7:d7:fc:84:87:b7:04:f9:6f:b3:dc: 65:ce:b1:a3:b9:9e:3a:78:30:72:49:6c:3f:49:34: 0e:f8:83:8f:d8:7f:29:83:b5:2d:bb:78:45:77:c6: 60:63:59:c2:07:94:37:48:37:48:70:97:aa:32:ff: 39:b4:0c:e7:9a:1b:32:b3:25:32:2f:ad:b5:70:b1: 41:bf:ac:a5:72:39:34:10:3e:42:56:8b:89:67:68: d8:51:ac:06:59:fd:8d:91:7e:af:07:32:63:97:e2: 12:9f:a2:8e:b2:be:3d:86:35:44:df:f3:08:63:6d: 2b:2f:a0:9f:46:9f:37:b7:e1:db:92:17:c2:d7:94: a0:58:8b:53:41:25:f6:73:98:28:b5:94:c3:de:2a: bd:0d:3b:be:33:94:d0:56:64:03:35:d0:6f:1f:ff: 0e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:04:1F:7E:72:7C:19:4A:04:55:DC:00:26:41:8A:DA:F7:17:11:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/b58669a5-66da-44e2-ac3e-90a9397af972.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:49:12:99:1d:66:ae:95:53:86:61:4f:1e:94:63:b0:16:6e: f0:87:9d:80:2c:83:b7:38:34:e7:96:81:8b:88:7e:74:fc:36: de:b8:df:0c:ef:a0:d3:55:67:9a:a9:c8:7d:e1:b8:c9:67:8e: d0:5d:1f:d4:55:3a:fb:d3:a1:07:2e:06:3d:fa:94:47:fe:d6: 76:f5:cf:4e:88:8c:42:4d:c0:52:0e:3e:d1:b8:83:55:40:e3: e8:40:05:43:b1:8c:73:20:ab:51:74:f3:2e:a0:03:4e:a8:d2: 23:76:3a:eb:5a:7d:ef:37:81:ee:86:ea:f1:46:97:ae:a4:75: ce:74:f4:01:5d:0a:bf:50:c7:c9:d6:03:bb:9b:87:2f:71:b0: e3:b1:6f:22:55:e8:6d:ec:9e:32:ce:3c:84:43:e3:6c:7c:e1: d3:9a:af:57:8b:f5:e2:d4:22:49:d4:41:d6:4e:49:99:42:c8: 1f:35:29:59:58:4c:84:14:8c:6d:fe:1f:59:f4:43:44:1a:87: 5e:23:3d:d0:af:64:83:66:b2:bc:82:cf:b9:73:08:b3:47:53: 2a:db:e7:ed:80:fa:ed:10:e4:27:fd:88:93:e8:6e:be:56:59: 3c:a2:cf:81:9e:2f:5a:44:b6:4e:2a:e2:66:8a:b7:20:c9:69: 1b:43:a7:5c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE5MTQvR5KBTzOu0TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDYyNjA4NDUxMVoXDTI4MDkyODA4NDUxMVowLzEtMCsGA1UEAxMk YjU4NjY5YTUtNjZkYS00NGUyLWFjM2UtOTBhOTM5N2FmOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xEoLDZx8BolxLx0eaz6X70Isi0FkpHksdu W+ANyNA0k7tQQnC3XS+KIdQJy5jEH9k9W4hPre02rXYRxHSoMZCJjh3b7fvvaAiA kL4cPCXoOjBRYKCdFoJIWSwF99f8hIe3BPlvs9xlzrGjuZ46eDBySWw/STQO+IOP 2H8pg7Utu3hFd8ZgY1nCB5Q3SDdIcJeqMv85tAznmhsysyUyL621cLFBv6ylcjk0 ED5CVouJZ2jYUawGWf2NkX6vBzJjl+ISn6KOsr49hjVE3/MIY20rL6CfRp83t+Hb khfC15SgWItTQSX2c5gotZTD3iq9DTu+M5TQVmQDNdBvH/8ONwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFOEEH35yfBlKBFXcACZBitr3FxEtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i NTg2NjlhNS02NmRhLTQ0ZTItYWMzZS05MGE5Mzk3YWY5NzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I1ODY2OWE1LTY2ZGEtNDRlMi1h YzNlLTkwYTkzOTdhZjk3Mi9iNTg2NjlhNS02NmRhLTQ0ZTItYWMzZS05MGE5Mzk3 YWY5NzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLPMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE0kSmR1mrpVThmFPHpRjsBZu8Ied gCyDtzg055aBi4h+dPw23rjfDO+g01VnmqnIfeG4yWeO0F0f1FU6+9OhBy4GPfqU R/7WdvXPToiMQk3AUg4+0biDVUDj6EAFQ7GMcyCrUXTzLqADTqjSI3Y661p97zeB 7obq8UaXrqR1znT0AV0Kv1DHydYDu5uHL3Gw47FvIlXobeyeMs48hEPjbHzh05qv V4v14tQiSdRB1k5JmULIHzUpWVhMhBSMbf4fWfRDRBqHXiM90K9kg2ayvILPuXMI s0dTKtvn7YD67RDkJ/2Ik+huvlZZPKLPgZ4vWkS2TiriZoq3IMlpG0OnXA== -----END CERTIFICATE-----Generated at Mon Jul 6 20:11:27 2026 by rpki-client