$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer File: 3e752e0d-0e22-47d1-a147-151d170def2d.cer (raw, json) Hash identifier: BJb/4Q8flTyhOvEobsLYqQ/jN8Qpb2m9UwHw0VyLLWU= Subject key identifier: 8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D438D4566B2EDCD21B58F25A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 12:45:22 +0000 Certificate not after: Sun 25 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 26995 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:8d:45:66:b2:ed:cd:21:b5:8f:25:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 23 12:45:22 2026 GMT Not After : Jun 25 12:45:22 2028 GMT Subject: CN=3e752e0d-0e22-47d1-a147-151d170def2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:08:f5:69:3f:ab:25:09:6e:ee:ff:46:90: d8:28:24:18:f7:09:91:28:d4:d1:f4:46:49:df:93: 5a:51:db:33:10:8e:42:3f:d1:62:f8:6d:81:bc:c0: 82:eb:89:b6:5d:2f:08:84:0a:db:cd:c9:f2:49:8a: 25:77:b0:0c:b2:a1:0d:75:f1:18:f3:2f:9e:db:87: dc:1a:f7:fe:01:3f:5d:a4:f7:de:b0:33:19:19:22: d1:cb:fb:67:92:62:e2:64:c0:3b:56:e6:f7:bb:8b: ee:08:8e:13:9e:1e:85:46:e0:a0:7b:b0:67:0e:1e: 63:c4:ed:96:4f:a6:3b:5b:a5:17:d0:cd:9b:a6:3f: 8e:60:63:b5:c7:fa:0f:1f:24:39:ac:15:99:7e:b5: 42:e6:e2:e2:b0:86:41:1b:c3:c7:d1:9b:24:5c:d9: 99:a6:29:0d:0b:2b:fe:ff:49:af:5e:32:5a:9f:49: ca:65:b1:52:ad:eb:96:32:7c:57:c0:7d:31:23:23: ac:26:69:22:ff:7d:82:32:aa:d8:f1:cb:e0:13:4c: d5:46:66:49:3d:df:7b:d4:4d:40:14:6e:47:e2:42: 39:9a:30:b4:c2:2f:24:36:21:5c:7d:68:69:00:1a: e2:75:d9:18:f1:dc:87:97:c1:a1:93:2a:b0:73:e6: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 26995 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:62:4d:5b:c1:33:c5:e4:d8:35:02:62:a4:eb:c9:4e:36:18: 0b:b0:9c:5c:c5:1d:83:10:91:76:ed:80:69:ef:7b:9e:c4:54: dd:a9:5b:20:11:ea:b1:af:13:00:72:1c:17:26:86:86:5c:5a: cc:4b:ee:1d:44:fe:63:aa:a6:14:27:f3:79:9f:5e:9d:ae:3d: 21:d5:0b:c3:fa:65:97:9a:0a:ff:7f:a0:5a:4f:d2:0b:41:13: 04:ae:05:d1:33:2f:1f:87:3c:8a:fa:b1:03:3f:ff:32:94:ad: c7:f7:7f:9e:32:8f:cc:8d:01:9d:f1:9e:9c:fc:51:87:16:25: 7d:42:2e:b0:c6:3f:39:ac:12:b3:44:0d:ef:3a:1e:3e:bd:6c: c9:c9:4e:f7:3a:9f:9d:e0:9b:98:50:12:64:62:db:54:17:7c: d7:65:96:f9:1d:3d:c7:cf:40:d5:a7:4e:51:3c:16:c4:d3:10: c6:23:34:18:49:f8:81:a5:21:b6:6f:59:c9:6c:4a:ca:25:86: 67:3a:44:6a:e4:88:53:3b:88:24:1f:09:57:fe:8d:19:0b:4d: dc:a3:28:78:d3:2a:64:3f:c4:24:01:ec:d6:9a:80:5e:31:1a: 1f:73:6e:16:46:3d:39:a1:8c:f3:57:76:db:b9:f6:43:08:6e: c2:e8:38:8f -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE1DjUVmsu3NIbWPJaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyMzEyNDUyMloXDTI4MDYyNTEyNDUyMlowLzEtMCsGA1UEAxMk M2U3NTJlMGQtMGUyMi00N2QxLWExNDctMTUxZDE3MGRlZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktwI9Wk/qyUJbu7/RpDYKCQY9wmRKNTR9EZJ 35NaUdszEI5CP9Fi+G2BvMCC64m2XS8IhArbzcnySYold7AMsqENdfEY8y+e24fc Gvf+AT9dpPfesDMZGSLRy/tnkmLiZMA7Vub3u4vuCI4Tnh6FRuCge7BnDh5jxO2W T6Y7W6UX0M2bpj+OYGO1x/oPHyQ5rBWZfrVC5uLisIZBG8PH0ZskXNmZpikNCyv+ /0mvXjJan0nKZbFSreuWMnxXwH0xIyOsJmki/32CMqrY8cvgE0zVRmZJPd971E1A FG5H4kI5mjC0wi8kNiFcfWhpABriddkY8dyHl8Ghkyqwc+bLDwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFIu0Uzb3N0LYUPIj3B9HG9mJzZqjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZTc1MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFkMTcwZGVmMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNlNzUyZTBkLTBlMjItNDdkMS1h MTQ3LTE1MWQxNzBkZWYyZC8zZTc1MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFkMTcw ZGVmMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICaXMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALmJNW8EzxeTYNQJipOvJTjYYC7Cc XMUdgxCRdu2Aae97nsRU3albIBHqsa8TAHIcFyaGhlxazEvuHUT+Y6qmFCfzeZ9e na49IdULw/pll5oK/3+gWk/SC0ETBK4F0TMvH4c8ivqxAz//MpStx/d/njKPzI0B nfGenPxRhxYlfUIusMY/OawSs0QN7zoePr1syclO9zqfneCbmFASZGLbVBd812WW +R09x89A1adOUTwWxNMQxiM0GEn4gaUhtm9ZyWxKyiWGZzpEauSIUzuIJB8JV/6N GQtN3KMoeNMqZD/EJAHs1pqAXjEaH3NuFkY9OaGM81d227n2Qwhuwug4jw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:59:06 2026 by rpki-client