$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer File: e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer (raw, json) Hash identifier: KEZqMAfHMYgG4YCxXVhJ9ozIModoweTcDMVaJl4uP4c= Subject key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DA80DD9EDDDE517610A1A1A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 12:45:17 +0000 Certificate not after: Mon 31 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 199.202.104.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:0d:d9:ed:dd:e5:17:61:0a:1a:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 28 12:45:17 2026 GMT Not After : Jul 31 12:45:17 2028 GMT Subject: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:57:56:5a:3a:78:08:2e:3d:d1:35:26:d4: e1:3d:ec:a4:82:00:42:1f:2e:3b:6c:f7:69:67:21: b6:51:ad:13:ae:f0:ad:7d:78:ab:3d:fc:d2:e4:7e: 63:6f:7c:62:95:82:7f:94:46:78:08:54:7e:14:37: 2e:f6:f2:19:c5:a9:fe:70:93:9e:38:3f:64:d7:ba: 1b:94:cd:87:61:fd:34:83:ef:fd:cb:62:55:f6:e2: d8:8d:9e:d2:6c:9d:96:28:9b:cc:cb:af:a4:2a:52: d1:87:8c:07:37:78:dc:20:2e:e8:be:05:f2:ec:ff: 53:17:7d:f5:b4:ac:31:f4:9d:3a:32:db:eb:7c:ee: c5:7e:5f:73:c1:15:ed:52:df:2c:c6:55:b9:45:05: 66:80:ab:a6:70:ed:8c:dd:47:33:68:55:11:2a:67: 93:64:85:19:c0:ea:e1:a7:9c:4a:fa:8e:41:a6:80: b5:69:b6:6f:50:a3:f6:18:1b:65:e3:34:a4:8e:31: ff:0f:24:3c:07:39:71:b9:24:7e:4d:15:3a:91:19: 33:8c:75:8f:98:53:73:d9:43:3e:bc:d0:94:47:0f: 58:9a:25:bf:c2:ca:cb:2a:d8:f1:dd:22:35:8f:82: 3f:0d:74:f3:47:32:ff:ae:de:5f:b9:2d:96:e5:a1: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.202.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c1:f5:d9:40:f2:cb:e5:cc:c6:31:d5:79:8f:e8:bf:81:92: 4a:ac:13:a2:6b:e1:fc:74:67:f9:43:27:df:30:0d:0d:ca:f7: a1:f6:8f:93:f3:98:17:ba:fa:b7:2b:f7:e2:2d:32:80:21:7b: 10:f1:36:cf:52:ad:ee:a8:e3:18:15:17:94:77:9e:d6:58:b1: 84:b0:46:37:7a:9a:f2:eb:6a:ab:cf:c5:19:de:5a:89:a2:70: 04:de:7c:82:18:3c:8b:7c:60:bf:16:fe:1d:a1:a9:b2:0d:74: 3a:86:ba:8f:b4:a2:d7:7a:eb:d9:52:91:88:3e:e0:93:13:97: d5:19:a3:1c:88:79:38:b0:1a:45:a0:91:3f:c8:ea:1e:4c:cf: 21:86:96:ab:61:f7:cd:42:33:2f:51:54:d6:b0:8f:7e:19:05: a5:c6:9d:69:0e:00:0a:fc:02:4b:a9:03:cc:c2:8b:a7:f5:62: b8:49:71:fe:d5:d8:2e:81:69:64:98:30:88:16:88:c5:14:07: ce:5a:b0:b0:55:51:33:1d:a6:26:a9:5a:1f:65:5c:0c:f2:0e: 4f:50:e1:81:f2:aa:41:38:2c:c5:de:7a:51:fa:06:c5:86:94: 70:cc:3c:23:5c:3b:95:58:f1:b0:24:0d:03:9d:54:69:c0:13: 94:06:25:52 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2oDdnt3eUXYQoaGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQyODEyNDUxN1oXDTI4MDczMTEyNDUxN1owLzEtMCsGA1UEAxMk ZTkwZjU0ZmQtMjAwYS00YjJmLTkxNGItMmJjODUzMGI1ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxpXVlo6eAguPdE1JtThPeykggBCHy47bPdp ZyG2Ua0TrvCtfXirPfzS5H5jb3xilYJ/lEZ4CFR+FDcu9vIZxan+cJOeOD9k17ob lM2HYf00g+/9y2JV9uLYjZ7SbJ2WKJvMy6+kKlLRh4wHN3jcIC7ovgXy7P9TF331 tKwx9J06MtvrfO7Ffl9zwRXtUt8sxlW5RQVmgKumcO2M3UczaFURKmeTZIUZwOrh p5xK+o5BpoC1abZvUKP2GBtl4zSkjjH/DyQ8BzlxuSR+TRU6kRkzjHWPmFNz2UM+ vNCURw9YmiW/wsrLKtjx3SI1j4I/DXTzRzL/rt5fuS2W5aG4cwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIhsUkrc+njnKEEUQGfUPS27x/VWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l OTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMwYjVkNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U5MGY1NGZkLTIwMGEtNGIyZi05 MTRiLTJiYzg1MzBiNWQ1MC9lOTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMw YjVkNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHymgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE8H12UDyy+XMxjHVeY/o v4GSSqwTomvh/HRn+UMn3zANDcr3ofaPk/OYF7r6tyv34i0ygCF7EPE2z1Kt7qjj GBUXlHee1lixhLBGN3qa8utqq8/FGd5aiaJwBN58ghg8i3xgvxb+HaGpsg10Ooa6 j7Si13rr2VKRiD7gkxOX1RmjHIh5OLAaRaCRP8jqHkzPIYaWq2H3zUIzL1FU1rCP fhkFpcadaQ4ACvwCS6kDzMKLp/ViuElx/tXYLoFpZJgwiBaIxRQHzlqwsFVRMx2m JqlaH2VcDPIOT1DhgfKqQTgsxd56UfoGxYaUcMw8I1w7lVjxsCQNA51UacATlAYl Ug== -----END CERTIFICATE-----Generated at Fri May 1 20:11:02 2026 by rpki-client