$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer File: ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer (raw, json) Hash identifier: 6LVyu0sU0iLItp4R743vVanJQeo0P0TvK3gU1xLDQHo= Subject key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DDD18DB8065540EDF5ED39580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 12:45:18 +0000 Certificate not after: Sat 19 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 32003 IP: 104.243.144.0/20 IP: 199.38.168.0/22 IP: 2606:780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:18:db:80:65:54:0e:df:5e:d3:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 17 12:45:18 2026 GMT Not After : Aug 19 12:45:18 2028 GMT Subject: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6a:fa:19:43:32:81:22:e0:e6:51:fb:fd:19: 6c:33:99:49:9d:bf:f6:0a:b6:4b:e6:d5:09:e8:e5: 28:cf:6e:0e:5e:37:3b:4a:51:ef:b9:f9:34:9a:52: 18:10:fc:ed:bf:45:b5:e5:e1:84:fb:96:ad:82:39: c1:22:89:c3:4c:cd:f7:c4:21:98:9f:65:73:55:85: e5:9f:77:9b:7d:16:ee:d8:3f:23:f2:45:29:d4:37: 1f:bb:75:4f:05:11:0d:a2:b8:94:55:65:cc:0d:87: dd:22:03:41:0e:76:f3:8a:8b:9f:e2:c0:c7:31:83: 29:29:c7:62:79:cd:e1:d7:33:8b:c9:51:64:99:db: 09:f4:5a:72:6d:7e:95:07:58:f9:84:db:49:66:47: 5d:eb:2f:6f:db:05:be:ef:42:b9:6a:da:35:8b:71: bd:7e:04:28:8c:5f:a5:a4:86:51:27:8d:37:71:c9: 1f:43:6b:78:e2:e3:f5:67:52:8b:ce:4e:0d:b5:af: be:29:79:69:3a:c5:1e:b0:be:e9:8e:02:d7:a1:9c: be:0e:ee:20:e0:b4:00:19:c3:e4:78:fe:52:71:e7: cc:db:78:a1:fd:33:ad:1a:d3:be:b1:12:10:62:81: b2:33:f8:2d:07:df:2a:9b:8f:ff:03:1e:d6:45:02: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.243.144.0/20 199.38.168.0/22 IPv6: 2606:780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32003 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:88:28:ad:f2:bd:70:08:8f:01:b7:dc:05:37:dd:06:b1:82: 25:45:75:bc:67:c0:2a:e4:41:7d:5c:3d:f8:2e:1f:da:94:25: ab:c8:58:56:2f:40:5c:91:b7:85:0d:8f:be:6c:36:02:44:1a: a9:20:1a:33:d8:7c:93:ba:27:87:6a:a1:f3:19:94:49:f8:4a: da:06:b8:5b:2f:14:cf:3e:b0:6b:93:44:14:a9:eb:eb:dc:30: d1:60:0a:d9:f9:97:24:84:ad:50:9c:1d:a0:4f:9c:7c:50:fb: 42:b4:bd:81:15:9b:ad:17:e7:6b:0d:25:7a:58:2b:25:a5:63: 84:c6:dc:41:a8:51:67:fa:37:2e:c9:9b:aa:a5:bf:60:75:a0: 51:3c:6a:fb:d8:aa:9c:46:ba:94:2b:ea:d6:a2:31:58:41:49: dc:d4:63:37:f3:78:4b:99:19:2e:99:c1:2a:13:7e:5d:b9:b1: 94:8a:aa:a5:f6:e4:c3:f3:51:70:b1:e1:f5:cb:13:d3:05:95: ef:17:de:79:8a:ae:a3:6d:31:8f:f5:40:77:ce:c9:51:c4:5e: 1d:c7:5a:c7:02:0e:00:92:23:7c:02:f6:7b:e6:e5:c6:e3:56: c4:8d:e6:a7:a1:70:a4:88:55:38:42:db:15:a7:7b:4e:eb:4c: 4f:57:16:92 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE3dGNuAZVQO317TlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxNzEyNDUxOFoXDTI4MDgxOTEyNDUxOFowLzEtMCsGA1UEAxMk Y2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIwMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmr6GUMygSLg5lH7/RlsM5lJnb/2CrZL5tUJ 6OUoz24OXjc7SlHvufk0mlIYEPztv0W15eGE+5atgjnBIonDTM33xCGYn2VzVYXl n3ebfRbu2D8j8kUp1Dcfu3VPBRENoriUVWXMDYfdIgNBDnbziouf4sDHMYMpKcdi ec3h1zOLyVFkmdsJ9FpybX6VB1j5hNtJZkdd6y9v2wW+70K5ato1i3G9fgQojF+l pIZRJ403cckfQ2t44uP1Z1KLzk4Nta++KXlpOsUesL7pjgLXoZy+Du4g4LQAGcPk eP5ScefM23ih/TOtGtO+sRIQYoGyM/gtB98qm4//Ax7WRQLtyQIDAQABo4IELzCC BCswHQYDVR0OBBYEFO6PiSaHL7M69fFGjxO28cYfElZEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NlNTc4NzdjLTg5YWQtNGQxNC05 YjJjLTNmYmQ0NDBiMDAzYi9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQw YjAwM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARo85ADBALHJqgwDQQCAAIwBwMFACYGB4AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICfQMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANIgorfK9cAiPAbfcBTfd BrGCJUV1vGfAKuRBfVw9+C4f2pQlq8hYVi9AXJG3hQ2Pvmw2AkQaqSAaM9h8k7on h2qh8xmUSfhK2ga4Wy8Uzz6wa5NEFKnr69ww0WAK2fmXJIStUJwdoE+cfFD7QrS9 gRWbrRfnaw0lelgrJaVjhMbcQahRZ/o3LsmbqqW/YHWgUTxq+9iqnEa6lCvq1qIx WEFJ3NRjN/N4S5kZLpnBKhN+XbmxlIqqpfbkw/NRcLHh9csT0wWV7xfeeYquo20x j/VAd87JUcReHcdaxwIOAJIjfAL2e+blxuNWxI3mp6FwpIhVOELbFad7TutMT1cW kg== -----END CERTIFICATE-----Generated at Fri May 22 17:37:54 2026 by rpki-client